Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b43a615b-8d02-37e9-b7c9-aaabface0caf.roa
File:                     b43a615b-8d02-37e9-b7c9-aaabface0caf.roa (raw, json)
Hash identifier:          0yLhsX0Ce3YPl/2iv02LExQ6YqcPqfNxclq9hdEM/DM=
Subject key identifier:   C4:42:05:F2:2A:51:38:33:25:8B:13:FF:BD:1A:30:D1:D9:32:0D:E4
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584AECC14756C5A9F1921158A780
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b43a615b-8d02-37e9-b7c9-aaabface0caf.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        69.48.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:47:56:c5:a9:f1:92:11:58:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=67704e2d-e04e-4ae8-a86b-d2b20fbfa078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:0f:91:de:d5:f2:c0:e6:53:89:d0:ac:bf:
                    21:c6:b9:2c:68:4c:30:7e:45:be:d8:42:03:70:03:
                    9c:1e:8a:10:82:03:34:e6:0c:90:cb:e4:e7:af:d2:
                    91:92:09:7f:ba:42:79:81:80:f1:f2:7d:3a:5b:56:
                    ab:4a:0f:00:d1:ed:5e:3e:bc:ed:59:21:d7:7d:85:
                    63:4d:65:25:5d:b6:96:2c:f8:59:0e:e2:b5:f3:9c:
                    c4:6c:a2:2b:cf:ac:92:b3:38:c1:03:2e:55:99:d1:
                    f5:9f:8e:7f:3a:25:0e:89:9f:bf:ee:b2:d6:7a:6a:
                    b1:75:df:90:42:1e:e4:58:69:94:71:cb:35:ef:57:
                    00:28:6b:b6:8f:2e:ff:a5:a4:f6:30:9c:3f:e3:bb:
                    7d:71:32:57:2a:0b:51:12:b8:c6:dd:3b:a4:8f:f3:
                    5e:35:7a:87:65:32:6f:08:f6:c0:9a:97:d9:d3:98:
                    66:95:9e:4f:4d:26:fd:85:6a:13:65:c3:20:99:67:
                    75:64:cc:84:55:48:0d:e9:3c:a9:06:d4:99:db:2c:
                    50:f5:3e:ca:1f:8e:03:fd:9c:1d:eb:cf:6a:16:0b:
                    26:37:4f:6c:be:5d:25:72:dc:7d:43:e7:cf:9e:12:
                    e4:6f:d8:5e:d2:61:c1:74:f4:e3:3c:19:b0:4b:78:
                    96:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:42:05:F2:2A:51:38:33:25:8B:13:FF:BD:1A:30:D1:D9:32:0D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/b43a615b-8d02-37e9-b7c9-aaabface0caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c1:6e:cf:7e:f5:c6:f4:5b:92:a5:39:97:cf:5a:f9:c8:33:
         35:a5:9f:81:6b:db:45:45:22:e2:f0:0c:b1:d3:65:3c:bc:2d:
         01:fc:b0:27:63:66:f9:6d:46:00:7e:66:7f:06:5c:e0:e2:f9:
         07:64:ef:f2:a4:ec:8d:c5:4d:6d:8d:22:81:1d:ff:8c:87:2e:
         26:eb:47:c3:a5:75:7d:8e:b3:6a:74:bf:16:87:a7:10:5c:fe:
         74:1a:7d:18:e3:2b:47:d2:b6:95:3c:16:7e:4f:33:94:91:d2:
         03:f3:13:34:9b:73:6e:56:32:88:cc:c8:81:f8:91:5a:84:97:
         72:b5:b8:77:a5:85:eb:f7:d6:14:a9:2f:04:f4:52:41:f8:c0:
         a4:f0:49:2e:c4:30:2a:9c:ea:43:70:cd:d4:bb:02:6e:cf:9c:
         7b:bb:35:7c:99:ca:64:28:9e:52:79:2f:ac:82:a3:92:3d:62:
         8a:0b:ab:4f:46:d5:5a:01:89:91:c7:19:ee:aa:40:79:6d:a1:
         81:7e:76:80:f5:f4:7d:5c:c8:98:ea:0c:87:cc:e6:56:e8:b7:
         90:6c:6a:14:06:9f:5a:ad:1b:00:e6:91:28:91:00:d3:12:b8:
         57:76:8e:aa:ae:09:73:a2:f3:4c:be:73:30:db:eb:79:df:30:
         10:0a:58:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswUdWxanxkhFYp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy
MDBmMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
Njc3MDRlMmQtZTA0ZS00YWU4LWE4NmItZDJiMjBmYmZhMDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqIPkd7V8sDmU4nQrL8hxrksaEwwfkW+2EID
cAOcHooQggM05gyQy+Tnr9KRkgl/ukJ5gYDx8n06W1arSg8A0e1ePrztWSHXfYVj
TWUlXbaWLPhZDuK185zEbKIrz6ySszjBAy5VmdH1n45/OiUOiZ+/7rLWemqxdd+Q
Qh7kWGmUccs171cAKGu2jy7/paT2MJw/47t9cTJXKgtRErjG3Tukj/NeNXqHZTJv
CPbAmpfZ05hmlZ5PTSb9hWoTZcMgmWd1ZMyEVUgN6TypBtSZ2yxQ9T7KH44D/Zwd
689qFgsmN09svl0lctx9Q+fPnhLkb9he0mHBdPTjPBmwS3iWNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRCBfIqUTgzJYsT/70aMNHZMg3kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw
ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvYjQzYTYxNWItOGQwMi0z
N2U5LWI3YzktYWFhYmZhY2UwY2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw
OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk
MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi
MzFlZDIwMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTDYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzBbs9+9cb0W5KlOZfPWvnIMzWln4Fr20VFIuLwDLHTZTy8LQH8sCdj
ZvltRgB+Zn8GXODi+Qdk7/Kk7I3FTW2NIoEd/4yHLibrR8OldX2Os2p0vxaHpxBc
/nQafRjjK0fStpU8Fn5PM5SR0gPzEzSbc25WMojMyIH4kVqEl3K1uHelhev31hSp
LwT0UkH4wKTwSS7EMCqc6kNwzdS7Am7PnHu7NXyZymQonlJ5L6yCo5I9YooLq09G
1VoBiZHHGe6qQHltoYF+doD19H1cyJjqDIfM5lbot5BsahQGn1qtGwDmkSiRANMS
uFd2jqquCXOi80y+czDb63nfMBAKWO4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:53:44 2025 by rpki-client