Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa
File:                     603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa (raw, json)
Hash identifier:          ZKfnObKPKX0XH/aYKCnkXMT15NNI/5aksVJQM6WzLek=
Subject key identifier:   96:D8:5D:02:7E:C7:C7:CA:4A:FE:73:14:71:E6:70:B5:F5:1A:D7:D3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC9DB9DD3606FFC494402F400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     12222
IP address blocks:        72.246.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9d:d3:60:6f:fc:49:44:02:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=90df7491-4f14-4805-aac9-910b28d16722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:c0:31:99:21:78:49:dc:a1:9b:88:78:cf:
                    95:57:e5:53:40:28:a7:8f:0d:aa:eb:6d:13:cf:be:
                    d6:c0:fd:6b:72:6f:c5:a6:16:8a:a3:6b:4c:be:26:
                    ce:d7:30:90:ed:3d:b2:72:9d:eb:20:46:5c:df:65:
                    f2:48:b0:fa:d5:8b:70:f2:d8:61:84:8b:21:81:66:
                    00:59:6e:c3:47:9e:f5:4f:6a:b9:c7:8b:69:ba:b0:
                    3d:87:6e:c1:bc:16:cb:d8:51:ee:08:dd:13:c3:b8:
                    3a:b1:bb:2f:0c:0f:15:27:57:f2:da:21:d2:90:17:
                    f7:ad:77:7b:2d:fc:62:6d:fb:4a:4c:ee:8d:c9:97:
                    21:a4:e3:24:42:8d:61:0a:f4:a1:8c:b2:3d:64:cf:
                    2d:26:54:61:5f:7f:4b:95:c1:e8:c8:82:eb:e3:37:
                    1c:93:9e:0c:c5:f8:fd:ff:01:4d:bb:a5:75:a8:e7:
                    cc:30:72:4a:8b:9d:42:94:db:dd:ff:21:02:be:d3:
                    69:93:56:38:d1:f4:8e:65:4d:15:e8:f6:0f:2c:f3:
                    e9:08:69:b6:3c:1f:9f:2f:31:8f:4d:49:58:92:dc:
                    13:ce:6f:4a:81:9e:b6:4d:48:e4:9d:2c:66:3a:e1:
                    45:a5:74:e7:28:7a:92:87:7f:b5:80:e8:c3:2c:eb:
                    f5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D8:5D:02:7E:C7:C7:CA:4A:FE:73:14:71:E6:70:B5:F5:1A:D7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:63:01:20:1f:36:9b:ba:6c:11:55:ab:a6:df:77:1b:7f:b9:
         6a:44:37:a9:8d:12:6b:97:5c:16:a4:60:27:2b:f0:94:29:aa:
         d9:52:b3:ff:bd:34:d4:8f:9a:a5:4a:26:72:ea:cf:2a:7c:09:
         ef:1d:a5:36:99:f7:d0:33:8f:33:73:8a:bb:12:75:48:79:b6:
         3d:8f:89:97:76:0c:fb:64:56:d4:33:e4:b9:d6:cc:b8:75:a1:
         74:13:41:79:46:98:85:93:6a:e0:dc:8a:a1:3b:7e:e8:60:63:
         ad:08:ec:eb:aa:aa:13:85:ff:5d:bc:72:3b:80:54:53:b8:7f:
         1b:aa:b6:3f:ea:87:2b:5f:a4:53:9f:b3:9b:ba:b5:3a:09:79:
         71:9f:d3:c4:cb:c3:21:c9:b8:5f:1a:ac:57:4e:84:81:24:5d:
         56:89:13:c1:46:85:d4:a5:75:3e:58:81:a6:82:8e:2a:5f:82:
         2a:61:8b:c9:cb:73:60:f0:99:57:24:94:61:9a:16:93:67:d7:
         b0:c4:3d:8a:b2:eb:e1:5e:f3:33:9b:3e:2e:d8:6b:40:d4:a9:
         74:07:ea:e7:b6:a2:1f:f5:a8:45:44:35:ac:bd:13:54:cb:06:
         58:b4:b2:0d:22:a8:23:16:69:a5:03:1a:45:16:81:ae:78:0d:
         23:6e:f1:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ253TYG/8SUQC9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
OTBkZjc0OTEtNGYxNC00ODA1LWFhYzktOTEwYjI4ZDE2NzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH7AMZkheEncoZuIeM+VV+VTQCinjw2q620T
z77WwP1rcm/FphaKo2tMvibO1zCQ7T2ycp3rIEZc32XySLD61Ytw8thhhIshgWYA
WW7DR571T2q5x4tpurA9h27BvBbL2FHuCN0Tw7g6sbsvDA8VJ1fy2iHSkBf3rXd7
LfxibftKTO6NyZchpOMkQo1hCvShjLI9ZM8tJlRhX39LlcHoyILr4zcck54Mxfj9
/wFNu6V1qOfMMHJKi51ClNvd/yECvtNpk1Y40fSOZU0V6PYPLPPpCGm2PB+fLzGP
TUlYktwTzm9KgZ62TUjknSxmOuFFpXTnKHqSh3+1gOjDLOv1oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbYXQJ+x8fKSv5zFHHmcLX1GtfTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjAzZTZiYjItNTJiNy0z
MWEwLWFjYjctZmQ4ZWNkNWQyYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPbHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5jASAfNpu6bBFVq6bfdxt/uWpEN6mNEmuXXBakYCcr8JQpqtlSs/+9
NNSPmqVKJnLqzyp8Ce8dpTaZ99AzjzNzirsSdUh5tj2PiZd2DPtkVtQz5LnWzLh1
oXQTQXlGmIWTauDciqE7fuhgY60I7OuqqhOF/128cjuAVFO4fxuqtj/qhytfpFOf
s5u6tToJeXGf08TLwyHJuF8arFdOhIEkXVaJE8FGhdSldT5YgaaCjipfgiphi8nL
c2DwmVcklGGaFpNn17DEPYqy6+Fe8zObPi7Ya0DUqXQH6ue2oh/1qEVENay9E1TL
Bli0sg0iqCMWaaUDGkUWga54DSNu8UE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:44:08 2025 by rpki-client