Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa
File:                     1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa (raw, json)
Hash identifier:          8NUontku80yZKkQ6KtLYAK7BWIKORomhNfQodasWKUA=
Subject key identifier:   FC:1E:FA:48:2D:A9:1F:4B:8F:58:91:4E:15:BA:A9:CD:EA:8D:20:36
Certificate issuer:       /CN=cb079463-85da-4da7-b699-7f92f9faff04
Certificate serial:       010D0C9F4328584AF256834C03CB6FE61345C900
Authority key identifier: 90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     25956
IP address blocks:        205.166.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:83:4c:03:cb:6f:e6:13:45:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb079463-85da-4da7-b699-7f92f9faff04
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=495e959c-92d6-4a15-923e-ffbedc1bc71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:ff:0b:0d:90:4f:84:ba:d2:47:b7:6f:68:
                    18:6c:d6:ab:bc:16:72:9f:fa:e3:d1:53:15:d1:23:
                    31:c8:b5:eb:0c:94:4c:e4:65:f4:91:08:29:6e:10:
                    6e:2b:52:b7:9f:e4:c6:46:fe:42:37:0d:70:08:63:
                    4a:0f:fb:a2:63:e6:d3:78:90:aa:b2:85:c7:a6:f1:
                    56:51:88:e1:3c:3a:64:23:31:21:56:8e:9b:cd:51:
                    2e:43:d9:59:5e:30:c7:d1:04:61:63:c7:ad:00:68:
                    67:40:b3:79:7d:7c:ae:ce:a4:a7:0c:37:ee:a7:82:
                    a2:fc:a9:de:22:87:dc:ea:8c:ee:fe:cd:fe:8f:93:
                    a1:33:ef:ea:be:3c:82:d2:33:bd:d1:89:06:de:9f:
                    93:c1:e2:f6:5b:3a:d6:8e:bf:75:a3:aa:82:0d:d2:
                    3b:4e:2c:1f:2a:12:33:ab:6a:2d:74:4d:19:78:c7:
                    bf:0d:b4:e4:5a:f8:99:b2:27:8a:c8:dd:82:7e:24:
                    34:ea:59:1a:f4:dc:4b:75:d8:fc:f8:41:e6:3f:29:
                    49:19:14:86:0c:d0:28:30:37:24:4d:6a:98:d6:c4:
                    af:35:73:c4:db:29:e3:ff:6f:87:61:93:93:e6:35:
                    b4:21:77:f4:87:e5:a2:13:10:f8:7b:0f:45:3a:3e:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1E:FA:48:2D:A9:1F:4B:8F:58:91:4E:15:BA:A9:CD:EA:8D:20:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.crl

            X509v3 Authority Key Identifier:
                keyid:90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:12:87:e2:b6:69:1a:6c:7b:fe:89:d0:db:fe:c6:59:90:5b:
         73:6e:8f:8b:20:2f:fd:2a:a4:94:9f:ce:e9:86:95:50:8c:e2:
         57:d9:6c:4b:f6:06:be:00:36:40:ee:e1:c6:52:bf:62:7a:c7:
         8c:18:8f:69:c1:31:26:c4:b0:5c:25:e3:2d:09:e3:0c:d9:77:
         a6:20:a0:7a:3c:36:15:fc:4d:0c:37:60:8c:21:ab:60:41:cc:
         9b:41:66:82:73:d0:61:1a:ef:dd:ab:67:85:e8:94:1b:96:38:
         50:9f:2d:b5:2d:5e:31:ee:1a:cb:fd:ba:7c:67:cd:e9:23:d8:
         46:08:d4:4c:6e:55:33:7d:24:95:39:34:89:33:e9:f3:53:e2:
         92:b2:f0:e7:98:aa:9e:5d:e1:b3:65:66:d2:ea:2c:59:f1:b4:
         90:5d:23:fd:7d:5b:bb:e3:d3:7b:15:96:f9:d2:ef:e2:11:d0:
         a6:d2:47:0f:0b:82:47:29:6a:95:8d:7d:3c:04:ac:9f:71:83:
         7f:0c:2f:6e:c3:dd:d1:a6:c5:ea:c7:7f:d5:90:da:3f:44:86:
         30:ee:fc:5c:a1:45:72:83:87:bc:f9:a3:d9:35:af:d7:15:ca:
         c4:22:3b:bb:18:fa:0e:97:f7:b4:48:f9:3a:71:4c:ab:d6:b0:
         7e:50:a5:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVoNMA8tv5hNFyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IwNzk0NjMtODVkYS00ZGE3LWI2OTktN2Y5MmY5ZmFm
ZjA0MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk
NDk1ZTk1OWMtOTJkNi00YTE1LTkyM2UtZmZiZWRjMWJjNzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LP/Cw2QT4S60ke3b2gYbNarvBZyn/rj0VMV
0SMxyLXrDJRM5GX0kQgpbhBuK1K3n+TGRv5CNw1wCGNKD/uiY+bTeJCqsoXHpvFW
UYjhPDpkIzEhVo6bzVEuQ9lZXjDH0QRhY8etAGhnQLN5fXyuzqSnDDfup4Ki/Kne
Iofc6ozu/s3+j5OhM+/qvjyC0jO90YkG3p+TweL2WzrWjr91o6qCDdI7TiwfKhIz
q2otdE0ZeMe/DbTkWviZsieKyN2CfiQ06lka9NxLddj8+EHmPylJGRSGDNAoMDck
TWqY1sSvNXPE2ynj/2+HYZOT5jW0IXf0h+WiExD4ew9FOj4lcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwe+kgtqR9Lj1iRThW6qc3qjSA2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jYjA3
OTQ2My04NWRhLTRkYTctYjY5OS03ZjkyZjlmYWZmMDQvMWFjMzNmMWEtNzVmYy0z
NDY3LThmMzYtMTA2NGUzZTIwOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2IwNzk0NjMtODVkYS00ZGE3LWI2
OTktN2Y5MmY5ZmFmZjA0L2NiMDc5NDYzLTg1ZGEtNGRhNy1iNjk5LTdmOTJmOWZh
ZmYwNC5jcmwwHwYDVR0jBBgwFoAUkBnxIZUCbKErkv8cSVGs0vh9l5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jYjA3OTQ2My04NWRhLTRkYTctYjY5OS03Zjky
ZjlmYWZmMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzabrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQSh+K2aRpse/6J0Nv+xlmQW3Nuj4sgL/0qpJSfzumGlVCM4lfZbEv2
Br4ANkDu4cZSv2J6x4wYj2nBMSbEsFwl4y0J4wzZd6YgoHo8NhX8TQw3YIwhq2BB
zJtBZoJz0GEa792rZ4XolBuWOFCfLbUtXjHuGsv9unxnzekj2EYI1ExuVTN9JJU5
NIkz6fNT4pKy8OeYqp5d4bNlZtLqLFnxtJBdI/19W7vj03sVlvnS7+IR0KbSRw8L
gkcpapWNfTwErJ9xg38ML27D3dGmxerHf9WQ2j9EhjDu/FyhRXKDh7z5o9k1r9cV
ysQiO7sY+g6X97RI+TpxTKvWsH5Qpbo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:15:41 2025 by rpki-client