Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/695cc9ad-ea16-3016-9092-aebefbc6c450.roa
File:                     695cc9ad-ea16-3016-9092-aebefbc6c450.roa (raw, json)
Hash identifier:          RU2pYESWMHsOYTBQNOew7nwYhxFlhQR42OQPIqq/9M4=
Subject key identifier:   4F:3A:71:2A:A3:34:49:3A:90:75:56:38:24:E9:F5:05:FB:62:4E:C6
Certificate issuer:       /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
Certificate serial:       010D0C9F4328584A2955659C459A339DDF141744
Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/695cc9ad-ea16-3016-9092-aebefbc6c450.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     399331
IP address blocks:        206.223.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:65:9c:45:9a:33:9d:df:14:17:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=92b2d647-8014-4d26-a356-e2743bd43fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:84:18:8b:63:bc:08:a4:07:d9:40:85:41:
                    30:14:93:ef:4f:c4:76:d3:54:b3:00:f7:d1:4b:ce:
                    d4:10:c9:f4:61:42:dc:6d:f3:0a:cc:90:ad:88:8a:
                    81:b8:4e:bc:1b:d5:a5:f1:a1:9d:7a:65:17:e7:19:
                    b0:c3:e9:a0:2a:89:3b:5d:24:1f:12:b4:ed:e7:f9:
                    e9:98:56:41:d2:b1:6d:b0:a4:d0:27:59:61:17:82:
                    e1:36:9d:99:6f:f6:72:1c:ff:a5:e2:65:8d:27:5f:
                    fc:da:ad:c7:40:0d:93:f0:77:43:40:1d:82:aa:79:
                    67:59:56:52:10:01:a2:0c:e8:17:ca:9f:65:f4:51:
                    3f:31:2d:23:b9:ba:98:7c:47:5d:dd:3c:e2:bd:dc:
                    0e:0e:63:2c:50:03:69:f6:59:98:8a:4f:63:7d:ee:
                    6f:ed:cd:0f:ed:69:0e:62:33:fe:cf:9f:bc:fa:4d:
                    3f:a8:31:e0:54:d4:f5:3a:4c:6d:88:1f:4f:5f:1e:
                    f2:6a:c9:0a:3f:14:39:fd:81:07:bc:28:74:b9:73:
                    09:30:7c:72:b2:28:f4:26:76:23:d6:4b:d0:b6:b8:
                    26:5e:87:51:93:47:93:2d:08:a1:78:a7:62:f1:03:
                    9a:94:80:12:ab:54:30:58:1f:fa:cd:6e:7b:3c:94:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3A:71:2A:A3:34:49:3A:90:75:56:38:24:E9:F5:05:FB:62:4E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/695cc9ad-ea16-3016-9092-aebefbc6c450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl

            X509v3 Authority Key Identifier:
                keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:51:5d:ab:c9:ff:ca:8f:a4:45:84:0e:3f:eb:55:e3:47:
         5e:ea:03:ee:af:40:c3:99:9b:f5:28:6e:a8:96:33:a9:5e:43:
         58:2e:5e:5e:d7:52:2a:16:d6:d8:aa:a7:8e:80:27:66:95:96:
         ff:b5:7a:ca:9e:da:41:d5:82:00:e2:79:fa:63:64:0a:cc:29:
         3e:57:c6:bb:4a:6c:fe:31:20:41:71:87:f9:64:b1:ed:b3:cc:
         a5:2b:86:5f:d7:1e:12:ec:43:e4:69:55:67:bf:eb:9f:5b:85:
         2b:96:1f:a2:df:72:d9:52:00:89:70:55:fd:b6:f0:6e:b7:34:
         00:56:f2:a6:fa:98:61:6c:eb:f6:e6:59:1d:59:e3:c4:4e:b2:
         3f:2a:00:38:7a:e2:47:1f:43:fd:77:d1:20:05:69:b5:e8:94:
         4f:26:a3:37:43:81:c9:31:f7:0f:af:81:e7:c3:86:05:ec:88:
         ee:80:45:4b:6c:74:28:72:5b:24:bf:bc:5e:6c:a1:40:3e:01:
         e1:a9:ec:0e:4f:36:2b:89:17:05:42:29:ec:da:e1:ff:16:24:
         2c:e3:33:16:ca:43:3a:d8:32:b7:53:58:a6:b3:bc:86:e9:88:
         ab:77:7e:32:51:c1:77:32:5a:01:9f:ea:70:11:d1:a1:98:a7:
         f1:9e:31:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVWWcRZoznd8UF0QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDczYWJhNDgtZTU3Zi00MGQ0LWIyNWUtOGU1OWExMTcx
YWU4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk
OTJiMmQ2NDctODAxNC00ZDI2LWEzNTYtZTI3NDNiZDQzZmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEqEGItjvAikB9lAhUEwFJPvT8R201SzAPfR
S87UEMn0YULcbfMKzJCtiIqBuE68G9Wl8aGdemUX5xmww+mgKok7XSQfErTt5/np
mFZB0rFtsKTQJ1lhF4LhNp2Zb/ZyHP+l4mWNJ1/82q3HQA2T8HdDQB2CqnlnWVZS
EAGiDOgXyp9l9FE/MS0jubqYfEdd3TzivdwODmMsUANp9lmYik9jfe5v7c0P7WkO
YjP+z5+8+k0/qDHgVNT1OkxtiB9PXx7yaskKPxQ5/YEHvCh0uXMJMHxysij0JnYj
1kvQtrgmXodRk0eTLQiheKdi8QOalIASq1QwWB/6zW57PJRIVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE86cSqjNEk6kHVWOCTp9QX7Yk7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NzNh
YmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5YTExNzFhZTgvNjk1Y2M5YWQtZWExNi0z
MDE2LTkwOTItYWViZWZiYzZjNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDczYWJhNDgtZTU3Zi00MGQ0LWIy
NWUtOGU1OWExMTcxYWU4LzQ3M2FiYTQ4LWU1N2YtNDBkNC1iMjVlLThlNTlhMTE3
MWFlOC5jcmwwHwYDVR0jBBgwFoAUMdjkie+CWnvpNwSr5rNg8TySHUowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NzNhYmE0OC1lNTdmLTQwZDQtYjI1ZS04ZTU5
YTExNzFhZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzt+UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPHUV2ryf/Kj6RFhA4/61XjR17qA+6vQMOZm/UobqiWM6leQ1guXl7X
UioW1tiqp46AJ2aVlv+1esqe2kHVggDiefpjZArMKT5XxrtKbP4xIEFxh/lkse2z
zKUrhl/XHhLsQ+RpVWe/659bhSuWH6LfctlSAIlwVf228G63NABW8qb6mGFs6/bm
WR1Z48ROsj8qADh64kcfQ/130SAFabXolE8mozdDgckx9w+vgefDhgXsiO6ARUts
dChyWyS/vF5soUA+AeGp7A5PNiuJFwVCKeza4f8WJCzjMxbKQzrYMrdTWKazvIbp
iKt3fjJRwXcyWgGf6nAR0aGYp/GeMXM=
-----END CERTIFICATE-----
Generated at Mon Jun 30 05:25:13 2025 by rpki-client