Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/9c01c117-732b-3301-9abb-519c8b0e92df.roa
File:                     9c01c117-732b-3301-9abb-519c8b0e92df.roa (raw, json)
Hash identifier:          nlgqV1+y6HuMMyMr6/cxBqaGNK6GYgLuoQPh169wEa8=
Subject key identifier:   F9:65:C3:B9:DC:24:F2:A9:65:81:3C:2C:76:EF:37:A5:BF:BD:1B:A3
Certificate issuer:       /CN=d8b8c303-7bcf-45f4-a693-24fb9d54010c
Certificate serial:       010D0C9F4328584AD82C8652A5492DF79A259BA0
Authority key identifier: 30:6B:01:F4:84:22:E5:CD:24:F0:A0:E9:A5:35:43:98:91:55:CD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/9c01c117-732b-3301-9abb-519c8b0e92df.roa
Signing time:             Wed 13 Aug 2025 16:05:05 +0000
ROA not before:           Wed 13 Aug 2025 16:05:05 +0000
ROA not after:            Tue 11 Nov 2025 17:05:05 +0000
asID:                     8075
IP address blocks:        208.87.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d8:2c:86:52:a5:49:2d:f7:9a:25:9b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b8c303-7bcf-45f4-a693-24fb9d54010c
        Validity
            Not Before: Aug 13 16:05:05 2025 GMT
            Not After : Nov 11 17:05:05 2025 GMT
        Subject: CN=1c35af0d-4557-4882-b9ac-e2e1bd55eef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:79:4f:7c:dc:a6:68:84:a5:b9:c1:03:b3:
                    df:1b:88:b1:fa:1a:7a:54:f3:16:e3:2e:ef:b9:a6:
                    07:90:96:38:ac:ac:8b:fa:ca:86:ac:a4:96:d7:7e:
                    4e:16:fa:2f:23:26:4d:68:fe:73:f9:1e:33:4e:35:
                    d5:f0:c1:48:c9:98:ed:36:ab:a2:11:e4:45:f5:19:
                    a7:dc:b1:55:83:9c:0f:f9:d5:33:1a:b8:a5:96:59:
                    9a:98:a7:3f:e1:a1:a5:fe:4a:45:6b:3c:ca:32:82:
                    8b:02:2f:fa:78:5d:7c:86:49:3e:87:70:9f:26:74:
                    35:49:dc:65:ac:58:66:8f:43:f7:26:6f:53:44:1e:
                    38:5d:cc:e6:61:f8:da:5d:c3:44:96:22:a3:2d:82:
                    df:aa:00:69:56:fa:d7:97:ff:19:8b:95:3e:3b:df:
                    9e:a7:02:7a:4f:fc:90:e6:05:3b:c7:5a:a2:58:e4:
                    95:cd:21:4c:a6:28:2c:c0:bb:e4:33:75:25:31:2d:
                    5a:13:f2:f5:f6:04:f9:0b:33:f1:ff:d7:4a:b6:57:
                    a6:f6:c2:d4:e9:53:b8:07:cc:af:30:06:c6:4c:06:
                    f5:f7:22:10:f9:0f:fd:da:c3:d5:53:43:2b:b7:e6:
                    22:05:83:91:e8:c2:4f:c4:ee:03:db:3f:2b:93:2f:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:65:C3:B9:DC:24:F2:A9:65:81:3C:2C:76:EF:37:A5:BF:BD:1B:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/9c01c117-732b-3301-9abb-519c8b0e92df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.crl

            X509v3 Authority Key Identifier:
                keyid:30:6B:01:F4:84:22:E5:CD:24:F0:A0:E9:A5:35:43:98:91:55:CD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a5:c0:4d:41:86:7a:f7:71:42:82:46:21:e5:14:f2:d6:3f:
         40:fb:69:11:7b:fb:ed:e9:ae:fa:40:74:39:d0:78:c0:b2:08:
         a2:b6:14:51:c6:8c:da:a0:bc:bf:6b:a1:50:68:0d:cd:00:ae:
         e1:6c:b3:d7:bb:61:7d:f5:c1:28:7d:71:dd:3b:c3:ca:78:0f:
         52:be:eb:5a:d0:d4:ca:66:50:a4:6b:9f:6e:16:65:8c:10:d0:
         f0:ec:57:2c:72:d8:b7:4c:47:ac:da:e7:c9:9f:de:b3:8e:b8:
         30:8e:bc:86:49:d1:bb:9f:86:e3:85:e0:b7:6f:32:d9:e2:f9:
         19:7c:0a:ba:54:52:ca:82:d7:e1:a1:45:a7:e0:ad:6b:aa:bd:
         4c:6d:0f:31:d6:e1:04:74:ba:f0:0f:09:7e:ce:2a:e5:96:89:
         20:02:95:27:e4:cb:07:0c:32:cc:ae:c9:1e:7d:6e:d9:46:cf:
         4c:79:66:66:ee:ee:e7:b6:b4:0b:42:57:5d:67:31:05:da:3c:
         e3:11:9b:a6:62:f2:0c:48:ed:f1:98:4d:1a:17:22:4f:ea:67:
         ad:4e:0a:0c:1b:a0:1b:56:9c:b3:66:07:09:4c:ad:07:40:d7:
         11:99:67:b5:07:7c:c5:9f:6d:42:71:4d:b8:ee:a1:a7:f4:47:
         b9:2f:ff:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErYLIZSpUkt95olm6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDhiOGMzMDMtN2JjZi00NWY0LWE2OTMtMjRmYjlkNTQw
MTBjMB4XDTI1MDgxMzE2MDUwNVoXDTI1MTExMTE3MDUwNVowLzEtMCsGA1UEAxMk
MWMzNWFmMGQtNDU1Ny00ODgyLWI5YWMtZTJlMWJkNTVlZWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yp5T3zcpmiEpbnBA7PfG4ix+hp6VPMW4y7v
uaYHkJY4rKyL+sqGrKSW135OFvovIyZNaP5z+R4zTjXV8MFIyZjtNquiEeRF9Rmn
3LFVg5wP+dUzGrilllmamKc/4aGl/kpFazzKMoKLAi/6eF18hkk+h3CfJnQ1Sdxl
rFhmj0P3Jm9TRB44XczmYfjaXcNEliKjLYLfqgBpVvrXl/8Zi5U+O9+epwJ6T/yQ
5gU7x1qiWOSVzSFMpigswLvkM3UlMS1aE/L19gT5CzPx/9dKtlem9sLU6VO4B8yv
MAbGTAb19yIQ+Q/92sPVU0Mrt+YiBYOR6MJPxO4D2z8rky+awQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPllw7ncJPKpZYE8LHbvN6W/vRujMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOGI4
YzMwMy03YmNmLTQ1ZjQtYTY5My0yNGZiOWQ1NDAxMGMvOWMwMWMxMTctNzMyYi0z
MzAxLTlhYmItNTE5YzhiMGU5MmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDhiOGMzMDMtN2JjZi00NWY0LWE2
OTMtMjRmYjlkNTQwMTBjL2Q4YjhjMzAzLTdiY2YtNDVmNC1hNjkzLTI0ZmI5ZDU0
MDEwYy5jcmwwHwYDVR0jBBgwFoAUMGsB9IQi5c0k8KDppTVDmJFVzfYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOGI4YzMwMy03YmNmLTQ1ZjQtYTY5My0yNGZi
OWQ1NDAxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FeXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAImlwE1Bhnr3cUKCRiHlFPLWP0D7aRF7++3prvpAdDnQeMCyCKK2FFHG
jNqgvL9roVBoDc0AruFss9e7YX31wSh9cd07w8p4D1K+61rQ1MpmUKRrn24WZYwQ
0PDsVyxy2LdMR6za58mf3rOOuDCOvIZJ0bufhuOF4LdvMtni+Rl8CrpUUsqC1+Gh
RafgrWuqvUxtDzHW4QR0uvAPCX7OKuWWiSAClSfkywcMMsyuyR59btlGz0x5Zmbu
7ue2tAtCV11nMQXaPOMRm6Zi8gxI7fGYTRoXIk/qZ61OCgwboBtWnLNmBwlMrQdA
1xGZZ7UHfMWfbUJxTbjuoaf0R7kv/0U=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:51:33 2025 by rpki-client