Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/bb88d4c5-2fab-32c1-9888-97139a28e76b.roa
File:                     bb88d4c5-2fab-32c1-9888-97139a28e76b.roa (raw, json)
Hash identifier:          npEdoFZv+mZoUvC0T6V3sLt3q+7SiDFkMF1VyjMu1CM=
Subject key identifier:   F2:BE:26:48:C4:A4:C9:64:5B:B8:84:D5:32:65:BE:33:B7:FF:20:8E
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584AE671CAADC022F42828E9B380
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/bb88d4c5-2fab-32c1-9888-97139a28e76b.roa
Signing time:             Mon 18 Aug 2025 18:39:41 +0000
ROA not before:           Mon 18 Aug 2025 18:39:41 +0000
ROA not after:            Sun 16 Nov 2025 19:39:41 +0000
asID:                     40266
IP address blocks:        204.228.198.0/23 maxlen: 24
                          204.228.226.0/24 maxlen: 24
                          206.207.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:71:ca:ad:c0:22:f4:28:28:e9:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Aug 18 18:39:41 2025 GMT
            Not After : Nov 16 19:39:41 2025 GMT
        Subject: CN=43ed09d8-4150-4ca0-9c39-14908851b886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:42:04:8c:1b:35:0c:e9:6a:70:e6:44:5f:
                    c7:39:a5:f7:b9:8d:24:9e:46:25:69:f8:6b:34:14:
                    3b:78:05:48:0d:40:59:1c:9d:04:a1:0b:ef:0f:f6:
                    ad:d3:96:3a:c0:4a:a9:75:26:80:2d:7f:4f:97:b9:
                    8a:7e:55:62:ff:4c:fb:61:f7:b7:b0:2b:bf:85:52:
                    17:fc:a9:4e:c7:24:d9:44:bc:9d:7c:e5:c7:d5:d7:
                    93:28:13:4d:86:80:78:99:26:d0:78:72:cd:66:1f:
                    ee:e9:32:f5:a1:28:63:66:b5:dd:a8:07:fb:79:fb:
                    5b:6f:47:e2:d2:46:e3:2b:36:ca:d5:06:15:82:e9:
                    67:ee:a0:cd:36:2c:f1:ea:93:f9:a0:0a:e5:b9:01:
                    8a:5b:49:5c:89:b6:ab:6e:91:f8:21:18:ee:a2:61:
                    ce:e4:eb:a8:74:b1:17:74:ff:9a:1e:a3:01:72:18:
                    52:df:1e:c8:74:77:95:02:4c:46:42:14:fc:c0:92:
                    b2:9b:3a:4d:d5:31:dd:47:3e:e6:3f:a9:14:66:7d:
                    4a:ee:5b:a7:0b:dc:b6:68:ca:fb:89:e4:9f:ab:df:
                    1f:e2:62:bb:f0:ba:1a:c2:98:d2:a9:76:be:c1:33:
                    ab:9e:b5:35:dc:59:22:cf:e5:70:3c:b0:94:19:de:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BE:26:48:C4:A4:C9:64:5B:B8:84:D5:32:65:BE:33:B7:FF:20:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/bb88d4c5-2fab-32c1-9888-97139a28e76b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.228.198.0/23
                  204.228.226.0/24
                  206.207.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:bf:a9:42:5f:1f:ac:d6:e4:c6:14:0d:a1:f9:7f:44:7b:
         2f:d5:86:e7:cd:10:22:86:96:f9:3c:90:6e:c5:78:fe:a0:a3:
         d7:9e:ab:1a:19:ec:f0:ee:4c:ba:ae:97:71:92:80:61:98:4d:
         82:c7:d0:76:33:db:91:5c:68:94:9d:fc:0f:cc:5a:ce:6f:11:
         b9:bd:c5:69:89:ba:8f:b6:f3:57:ca:19:22:ae:9f:5b:79:f6:
         e5:04:e5:22:b8:a2:aa:ce:2f:8d:43:7b:20:00:f9:33:4c:e8:
         ba:7a:de:e1:03:3f:15:8a:44:e4:2c:28:71:8f:8a:c4:f6:c4:
         b2:f6:10:87:c6:b0:ba:d1:f6:8d:c9:b5:36:6d:62:55:35:61:
         f4:f5:f5:22:21:f6:94:db:92:88:eb:61:3f:76:f8:61:3e:6f:
         b5:8d:81:82:19:28:98:e8:de:ce:fc:b6:78:dc:1e:6e:62:de:
         f8:ab:37:eb:b6:3f:3e:53:5f:a6:2a:94:ba:16:09:c8:29:af:
         f8:0d:27:61:23:76:ab:e9:bd:c6:65:ed:06:d1:19:58:6e:0c:
         34:ef:cf:6e:47:3b:89:e9:63:f4:0e:7e:87:14:4b:f4:09:9e:
         6a:b3:c3:82:7e:ee:79:57:54:27:a9:b7:a7:e6:40:c7:08:7c:
         df:f7:20:15
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErmccqtwCL0KCjps4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk
Y2IzMB4XDTI1MDgxODE4Mzk0MVoXDTI1MTExNjE5Mzk0MVowLzEtMCsGA1UEAxMk
NDNlZDA5ZDgtNDE1MC00Y2EwLTljMzktMTQ5MDg4NTFiODg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXlCBIwbNQzpanDmRF/HOaX3uY0knkYlafhr
NBQ7eAVIDUBZHJ0EoQvvD/at05Y6wEqpdSaALX9Pl7mKflVi/0z7Yfe3sCu/hVIX
/KlOxyTZRLydfOXH1deTKBNNhoB4mSbQeHLNZh/u6TL1oShjZrXdqAf7eftbb0fi
0kbjKzbK1QYVguln7qDNNizx6pP5oArluQGKW0lcibarbpH4IRjuomHO5OuodLEX
dP+aHqMBchhS3x7IdHeVAkxGQhT8wJKymzpN1THdRz7mP6kUZn1K7lunC9y2aMr7
ieSfq98f4mK78LoawpjSqXa+wTOrnrU13Fkiz+VwPLCUGd6hFwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFPK+JkjEpMlkW7iE1TJlvjO3/yCOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm
MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvYmI4OGQ0YzUtMmZhYi0z
MmMxLTk4ODgtOTcxMzlhMjhlNzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy
YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm
ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0
NTBlZmRjYjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBzOTGAwQA
zOTiAwQAzs9eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAC66v6lCXx+s1uTGFA2h+X9Eey/VhufNECKGlvk8
kG7FeP6go9eeqxoZ7PDuTLqul3GSgGGYTYLH0HYz25FcaJSd/A/MWs5vEbm9xWmJ
uo+281fKGSKun1t59uUE5SK4oqrOL41DeyAA+TNM6Lp63uEDPxWKROQsKHGPisT2
xLL2EIfGsLrR9o3JtTZtYlU1YfT19SIh9pTbkojrYT92+GE+b7WNgYIZKJjo3s78
tnjcHm5i3virN+u2Pz5TX6YqlLoWCcgpr/gNJ2EjdqvpvcZl7QbRGVhuDDTvz25H
O4npY/QOfocUS/QJnmqzw4J+7nlXVCept6fmQMcIfN/3IBU=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:29:08 2025 by rpki-client