Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa
File:                     c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa (raw, json)
Hash identifier:          p4nX6TSewMXujFCvNpb9FwSqhYNorg6QlrrGRXXPxoU=
Subject key identifier:   6F:EB:63:62:C0:CA:40:E0:75:81:00:35:64:3F:3E:25:E0:D9:AB:20
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584AFEE6A7386DFA60C9E97FF0C0
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     21559
IP address blocks:        72.46.158.0/23 maxlen: 23
                          199.116.62.0/24 maxlen: 24
                          208.81.58.0/23 maxlen: 23
                          208.81.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a7:38:6d:fa:60:c9:e9:7f:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=66a99736-1c64-4785-b921-28f2addf7b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:ed:45:e9:28:f1:19:92:56:c7:cd:13:9f:
                    22:77:0b:19:a8:e1:49:b5:a2:06:02:95:2b:f9:21:
                    33:43:c5:8c:2e:68:49:d8:a1:21:b3:17:b0:52:c0:
                    1a:7e:51:cc:47:bf:cf:ea:ba:49:82:26:36:62:0e:
                    92:89:d6:98:ce:32:9b:a3:d6:7f:da:87:c3:8a:68:
                    cd:9f:83:2a:90:f7:76:eb:55:3a:d6:e4:47:61:ea:
                    1f:7c:99:b3:f2:3d:73:87:24:61:e4:80:60:3b:27:
                    1a:c6:c8:07:ce:19:a7:81:9e:fc:07:6a:63:67:1d:
                    32:f4:c7:88:97:a9:b2:ad:75:b3:32:77:86:c3:4a:
                    ed:7d:02:15:ca:77:9c:06:4f:d5:67:ee:bb:fc:83:
                    16:a9:0f:22:b2:39:54:58:a5:e9:8b:b5:9c:61:d0:
                    a1:6a:83:e5:bd:b3:f5:5d:85:b4:1d:81:9c:dc:15:
                    44:87:d5:12:02:d1:38:6e:03:96:18:c1:d4:5d:54:
                    01:9b:26:a6:67:5b:d1:da:db:0a:45:07:aa:c9:2b:
                    2c:d7:27:16:5f:a8:49:ae:01:51:16:7c:85:a7:b9:
                    07:6e:b9:44:77:a1:83:04:1e:46:36:f3:33:6f:6c:
                    fc:1d:30:12:b5:63:e7:bb:42:af:02:26:98:5f:31:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EB:63:62:C0:CA:40:E0:75:81:00:35:64:3F:3E:25:E0:D9:AB:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.158.0/23
                  199.116.62.0/24
                  208.81.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:78:87:1d:6a:18:f6:80:0b:31:7e:66:d5:1b:a3:70:39:50:
         79:f3:f5:e0:57:67:97:16:f8:11:cf:90:84:e4:7d:c9:90:22:
         f4:34:5a:d0:b5:8f:ab:78:77:66:f5:ae:cf:27:d9:23:b2:11:
         66:28:9d:a3:2b:b2:26:c2:93:33:31:e9:e2:b2:48:0b:78:bf:
         7b:03:2b:63:64:02:47:48:7a:9c:33:c6:60:e7:0e:4d:f4:02:
         b1:dd:02:1a:99:80:6d:32:1c:00:d1:ad:0e:9d:45:fc:76:d8:
         6b:a5:e7:35:f4:6a:53:38:77:8a:dd:20:23:49:e2:5e:dd:5c:
         93:a3:81:4e:f3:83:ca:ed:55:77:e8:bd:3e:01:2d:12:a5:40:
         c1:7b:d4:f5:26:2c:63:1d:54:b0:77:aa:a8:3a:e6:f7:b2:58:
         58:4a:98:51:61:07:4b:36:85:dc:f8:a7:ae:0d:c7:fa:a7:71:
         1c:11:03:ad:84:39:9b:22:99:bb:21:0c:0e:f7:84:fc:29:cc:
         4b:27:87:dc:ce:f1:47:ce:44:b9:48:3c:c3:b0:fd:ff:05:75:
         92:34:21:4a:f4:6c:a3:af:9f:25:42:48:48:c2:9a:f9:41:fe:
         7f:50:a2:b1:2e:84:f0:59:ca:38:f3:c2:85:bf:c9:16:c6:d1:
         72:97:a1:d0
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEr+5qc4bfpgyel/8MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh
YTNjMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
NjZhOTk3MzYtMWM2NC00Nzg1LWI5MjEtMjhmMmFkZGY3YjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9ftReko8RmSVsfNE58idwsZqOFJtaIGApUr
+SEzQ8WMLmhJ2KEhsxewUsAaflHMR7/P6rpJgiY2Yg6SidaYzjKbo9Z/2ofDimjN
n4MqkPd261U61uRHYeoffJmz8j1zhyRh5IBgOycaxsgHzhmngZ78B2pjZx0y9MeI
l6myrXWzMneGw0rtfQIVynecBk/VZ+67/IMWqQ8isjlUWKXpi7WcYdChaoPlvbP1
XYW0HYGc3BVEh9USAtE4bgOWGMHUXVQBmyamZ1vR2tsKRQeqySss1ycWX6hJrgFR
FnyFp7kHbrlEd6GDBB5GNvMzb2z8HTAStWPnu0KvAiaYXzFiDwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFG/rY2LAykDgdYEANWQ/PiXg2asgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx
YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvYzhiYzBiYjgtYjliZS0z
ODQ0LWEwNmItMWJlMjc5MWIzYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh
ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw
YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2
YmFlMGFhM2MuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBSC6eAwQA
x3Q+AwQB0FE6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAG14hx1qGPaACzF+ZtUbo3A5UHnz9eBXZ5cW+BHP
kITkfcmQIvQ0WtC1j6t4d2b1rs8n2SOyEWYonaMrsibCkzMx6eKySAt4v3sDK2Nk
AkdIepwzxmDnDk30ArHdAhqZgG0yHADRrQ6dRfx22Gul5zX0alM4d4rdICNJ4l7d
XJOjgU7zg8rtVXfovT4BLRKlQMF71PUmLGMdVLB3qqg65veyWFhKmFFhB0s2hdz4
p64Nx/qncRwRA62EOZsimbshDA73hPwpzEsnh9zO8UfORLlIPMOw/f8FdZI0IUr0
bKOvnyVCSEjCmvlB/n9QorEuhPBZyjjzwoW/yRbG0XKXodA=
-----END CERTIFICATE-----
Generated at Tue Oct 21 17:59:02 2025 by rpki-client