Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/30bcef46-bd9c-38ea-a2f5-2884ca6f3415.roa
File:                     30bcef46-bd9c-38ea-a2f5-2884ca6f3415.roa (raw, json)
Hash identifier:          2gf6b8b31irb3ZaZ7DVeI9rnK4ihphdwp+tMKZ7F+G0=
Subject key identifier:   F9:93:F6:22:2B:C8:BD:2A:D1:CE:29:79:4A:1C:6F:72:34:AB:85:7A
Certificate issuer:       /CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d
Certificate serial:       010D0C9F4328584AAC25E7960C69BB68A3C344F0
Authority key identifier: 28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/30bcef46-bd9c-38ea-a2f5-2884ca6f3415.roa
Signing time:             Mon 28 Jul 2025 21:36:10 +0000
ROA not before:           Mon 28 Jul 2025 21:36:10 +0000
ROA not after:            Sun 26 Oct 2025 21:36:10 +0000
asID:                     206216
IP address blocks:        208.84.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:25:e7:96:0c:69:bb:68:a3:c3:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d
        Validity
            Not Before: Jul 28 21:36:10 2025 GMT
            Not After : Oct 26 21:36:10 2025 GMT
        Subject: CN=871856c6-1978-43b7-988f-f6a2b0412544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:a5:1a:b6:c3:d5:80:e1:f9:9d:05:81:5d:
                    0f:1d:6a:11:a3:61:db:44:c8:32:4f:79:8b:12:26:
                    90:51:0e:1e:c2:ac:7f:f4:59:4c:84:ac:0d:4e:b2:
                    02:41:4f:ac:4b:65:94:15:1d:9c:1e:ca:91:d4:8f:
                    5b:7c:ba:fa:96:a6:14:dd:75:82:cd:07:c7:4f:1b:
                    89:49:52:b9:f5:74:39:e8:16:ae:ef:13:83:e1:44:
                    36:0f:64:4b:3a:09:9d:88:9b:09:30:85:1e:cd:ae:
                    0a:80:89:c4:45:a2:d5:c2:de:fa:9f:f1:cd:1f:af:
                    ef:3b:e8:43:30:41:a2:ca:b7:23:75:68:7b:35:a0:
                    06:5c:6e:35:9b:5f:7b:10:bd:b3:07:ab:4e:ec:f9:
                    f9:f6:ef:7b:bd:72:73:6c:0d:80:0a:c8:ad:95:47:
                    95:15:8d:d6:6e:85:59:c4:b5:d2:ee:23:47:8b:56:
                    4b:52:43:99:6b:e2:a7:89:62:36:02:e3:c4:73:36:
                    5d:12:a2:2e:6d:a3:3e:1d:58:8d:8a:fb:4f:1d:ec:
                    68:a5:2d:5f:49:57:e7:c6:36:30:b4:7d:01:59:6c:
                    5b:af:92:63:7a:eb:63:02:f4:68:89:d4:e3:60:42:
                    f3:20:61:60:12:88:ee:99:11:cc:3b:d3:9d:d0:71:
                    ad:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:93:F6:22:2B:C8:BD:2A:D1:CE:29:79:4A:1C:6F:72:34:AB:85:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/30bcef46-bd9c-38ea-a2f5-2884ca6f3415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl

            X509v3 Authority Key Identifier:
                keyid:28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:92:bb:0f:bc:f0:66:97:ff:6d:7e:ee:48:da:1b:76:ab:
         7c:27:7d:75:a2:e9:04:91:83:95:7c:6f:11:47:f4:5a:53:25:
         c8:bc:de:5f:c0:ad:d9:c5:85:53:52:95:11:5c:66:ba:f7:27:
         70:cb:3a:65:48:bc:aa:b7:8d:ca:93:6d:bd:c4:2f:0e:97:d1:
         b6:f1:84:9c:1b:46:53:62:25:05:0c:6d:b3:45:e7:95:07:34:
         34:29:b6:49:18:fe:ad:91:14:80:b3:07:b3:e0:4c:f7:32:97:
         8b:73:09:8b:55:17:9f:c4:f6:aa:76:af:26:ef:89:88:04:0b:
         c4:98:98:c8:3f:dc:bc:b2:17:f2:90:c7:a4:c3:c5:e9:2e:d5:
         a9:97:21:92:69:0b:58:c3:38:35:03:4b:94:7c:bb:d6:90:50:
         cf:7e:60:20:b2:1c:e0:db:4b:27:94:88:f2:42:e1:81:93:9d:
         a0:0b:05:24:c0:4d:82:83:fb:42:ec:00:42:e7:a6:db:dd:e2:
         d1:72:b3:ef:d7:3a:82:31:74:db:bd:c5:40:39:f2:2c:2a:92:
         88:06:4c:7a:9e:49:97:ca:7c:09:3f:0e:16:08:26:1f:dc:df:
         3e:cf:5a:03:89:c4:a8:c6:eb:9f:a2:89:d0:1e:57:11:11:a1:
         74:90:fe:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqsJeeWDGm7aKPDRPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzN2JmNjgtNjdlNy00ZTY3LWEwOTMtYzg4YTNkN2Zl
MDRkMB4XDTI1MDcyODIxMzYxMFoXDTI1MTAyNjIxMzYxMFowLzEtMCsGA1UEAxMk
ODcxODU2YzYtMTk3OC00M2I3LTk4OGYtZjZhMmIwNDEyNTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMalGrbD1YDh+Z0FgV0PHWoRo2HbRMgyT3mL
EiaQUQ4ewqx/9FlMhKwNTrICQU+sS2WUFR2cHsqR1I9bfLr6lqYU3XWCzQfHTxuJ
SVK59XQ56Bau7xOD4UQ2D2RLOgmdiJsJMIUeza4KgInERaLVwt76n/HNH6/vO+hD
MEGiyrcjdWh7NaAGXG41m197EL2zB6tO7Pn59u97vXJzbA2ACsitlUeVFY3WboVZ
xLXS7iNHi1ZLUkOZa+KniWI2AuPEczZdEqIubaM+HViNivtPHexopS1fSVfnxjYw
tH0BWWxbr5JjeutjAvRoidTjYELzIGFgEojumRHMO9Od0HGt3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmT9iIryL0q0c4peUocb3I0q4V6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3
YmY2OC02N2U3LTRlNjctYTA5My1jODhhM2Q3ZmUwNGQvMzBiY2VmNDYtYmQ5Yy0z
OGVhLWEyZjUtMjg4NGNhNmYzNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmYzN2JmNjgtNjdlNy00ZTY3LWEw
OTMtYzg4YTNkN2ZlMDRkLzZmMzdiZjY4LTY3ZTctNGU2Ny1hMDkzLWM4OGEzZDdm
ZTA0ZC5jcmwwHwYDVR0jBBgwFoAUKE/PkpbIsL6mmdN/BrN+mjnqi7EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3YmY2OC02N2U3LTRlNjctYTA5My1jODhh
M2Q3ZmUwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FRkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/XkrsPvPBml/9tfu5I2ht2q3wnfXWi6QSRg5V8bxFH9FpTJci83l/A
rdnFhVNSlRFcZrr3J3DLOmVIvKq3jcqTbb3ELw6X0bbxhJwbRlNiJQUMbbNF55UH
NDQptkkY/q2RFICzB7PgTPcyl4tzCYtVF5/E9qp2rybviYgEC8SYmMg/3LyyF/KQ
x6TDxeku1amXIZJpC1jDODUDS5R8u9aQUM9+YCCyHODbSyeUiPJC4YGTnaALBSTA
TYKD+0LsAELnptvd4tFys+/XOoIxdNu9xUA58iwqkogGTHqeSZfKfAk/DhYIJh/c
3z7PWgOJxKjG65+iidAeVxERoXSQ/o4=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:11:10 2025 by rpki-client