Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/402b48b1-35e0-389c-9259-f540014ea3b1.roa
File:                     402b48b1-35e0-389c-9259-f540014ea3b1.roa (raw, json)
Hash identifier:          fey+Lifd+w+vQ731aLc+hupQcqDGPOPdKqqtdJy4IO4=
Subject key identifier:   57:58:1D:D4:AD:4C:C9:98:4B:18:E6:F8:73:22:35:1C:63:BA:91:E7
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584A374ADDC973B7C3EB4320B580
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/402b48b1-35e0-389c-9259-f540014ea3b1.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     209242
IP address blocks:        69.48.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:dd:c9:73:b7:c3:eb:43:20:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=5d13b903-2281-45ed-aac7-e72829bea830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:dd:9d:25:29:c9:02:54:69:9d:83:5e:ea:
                    e4:61:fa:3a:88:f1:0a:a7:ce:b4:25:cc:ca:4e:8d:
                    ce:38:4c:88:10:79:23:53:b5:95:9c:cd:3c:25:b0:
                    22:d9:f3:3e:77:09:63:f2:3c:04:88:3e:1c:36:0b:
                    9e:58:aa:c9:e9:16:5c:dd:60:52:81:2a:ee:04:42:
                    d1:0e:fd:59:ba:5c:3e:e8:f0:87:6b:4d:f5:7f:59:
                    40:b3:12:79:02:3a:73:2b:87:d6:92:ce:ce:38:f3:
                    54:fb:3f:70:e1:0d:16:5c:0f:49:0e:ea:d6:ab:d5:
                    4f:ea:eb:20:66:b2:3c:e5:a3:42:ec:4f:43:61:a7:
                    af:75:1f:ec:a6:f3:1e:a3:34:0f:76:6d:68:b0:ef:
                    09:b2:d5:51:8c:7f:a2:4b:50:66:e6:5d:df:ae:2f:
                    08:22:29:a4:02:12:b9:51:42:14:48:16:fe:f7:4a:
                    6d:62:91:9a:ad:1f:c7:c0:30:60:de:12:b9:31:e9:
                    92:7b:85:fc:49:24:28:10:74:1e:f3:e4:ac:91:98:
                    d0:ec:04:de:7f:81:4d:a5:cb:25:8d:d8:dc:f3:53:
                    aa:cd:8b:75:9c:fc:60:67:2c:55:01:ef:b1:12:75:
                    da:b4:a6:88:9a:08:c4:04:f5:5b:3c:5b:e2:ec:66:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:58:1D:D4:AD:4C:C9:98:4B:18:E6:F8:73:22:35:1C:63:BA:91:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/402b48b1-35e0-389c-9259-f540014ea3b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:5a:37:55:49:ea:e3:3a:99:e2:74:c0:b9:b9:c5:56:33:
         4b:3c:18:6b:28:33:6d:6c:9d:e8:12:69:46:79:82:8e:cf:f1:
         21:7b:ac:41:55:d6:fc:08:1b:1d:1f:28:39:18:a2:d6:2b:7e:
         48:b5:da:b1:8f:07:43:21:c9:bc:e1:68:8e:6d:37:2f:b5:c2:
         6c:19:e6:2c:10:69:22:a5:d5:12:ae:5b:04:db:72:29:fb:68:
         96:6a:a7:f1:4d:9b:92:04:1a:bb:9f:29:c3:d1:b6:d7:aa:9f:
         55:25:28:55:33:62:05:39:09:55:c5:04:1c:56:66:0b:66:f1:
         61:97:6c:4d:a7:c6:3d:83:6d:53:5f:bd:0d:6c:96:81:cd:d0:
         61:bc:57:ad:79:1c:c6:e8:3e:78:2c:51:d3:e9:29:34:93:7f:
         b6:1b:3a:d8:0c:40:dd:c3:33:c1:5b:11:46:af:a2:f0:d9:0c:
         4d:7d:67:8d:7a:79:b8:82:3b:f1:e1:17:e3:3f:57:9e:82:4f:
         02:38:6c:37:a9:e8:0f:df:ed:1c:7a:4f:4c:f3:5e:16:e2:70:
         07:6c:b4:10:c0:ca:27:b2:c8:76:a9:c9:af:c8:51:ce:6b:37:
         05:f4:c5:f4:fb:4e:08:f2:f9:55:0e:4e:cb:da:97:63:77:65:
         16:e3:43:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3St3Jc7fD60MgtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy
MDBmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
NWQxM2I5MDMtMjI4MS00NWVkLWFhYzctZTcyODI5YmVhODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhvdnSUpyQJUaZ2DXurkYfo6iPEKp860JczK
To3OOEyIEHkjU7WVnM08JbAi2fM+dwlj8jwEiD4cNgueWKrJ6RZc3WBSgSruBELR
Dv1Zulw+6PCHa031f1lAsxJ5AjpzK4fWks7OOPNU+z9w4Q0WXA9JDurWq9VP6usg
ZrI85aNC7E9DYaevdR/spvMeozQPdm1osO8JstVRjH+iS1Bm5l3fri8IIimkAhK5
UUIUSBb+90ptYpGarR/HwDBg3hK5MemSe4X8SSQoEHQe8+SskZjQ7ATef4FNpcsl
jdjc81OqzYt1nPxgZyxVAe+xEnXatKaImgjEBPVbPFvi7GaV8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdYHdStTMmYSxjm+HMiNRxjupHnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw
ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvNDAyYjQ4YjEtMzVlMC0z
ODljLTkyNTktZjU0MDAxNGVhM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw
OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk
MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi
MzFlZDIwMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTDaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLdWjdVSerjOpnidMC5ucVWM0s8GGsoM21snegSaUZ5go7P8SF7rEFV
1vwIGx0fKDkYotYrfki12rGPB0MhybzhaI5tNy+1wmwZ5iwQaSKl1RKuWwTbcin7
aJZqp/FNm5IEGrufKcPRtteqn1UlKFUzYgU5CVXFBBxWZgtm8WGXbE2nxj2DbVNf
vQ1sloHN0GG8V615HMboPngsUdPpKTSTf7YbOtgMQN3DM8FbEUavovDZDE19Z416
ebiCO/HhF+M/V56CTwI4bDep6A/f7Rx6T0zzXhbicAdstBDAyieyyHapya/IUc5r
NwX0xfT7Tgjy+VUOTsval2N3ZRbjQxI=
-----END CERTIFICATE-----
Generated at Sun Jun 29 23:34:40 2025 by rpki-client