Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/6ff3c7e7-10b6-392b-9c99-f13c36d8e4db.roa
File:                     6ff3c7e7-10b6-392b-9c99-f13c36d8e4db.roa (raw, json)
Hash identifier:          bmwcqvRZPMg0aLyYxDmUDETbE5BgX6/uNxuw0kiO7qc=
Subject key identifier:   67:4A:8D:4B:74:E3:15:B5:18:2F:B9:6B:7B:F9:E0:14:37:7A:3E:75
Certificate issuer:       /CN=adff0409-d8b3-46fb-a7e7-b062e9eb9abc
Certificate serial:       010D0C9F4328584AC87632F58FA3AA8F4D138798
Authority key identifier: 61:5A:FA:16:90:2D:E0:2A:46:B6:5B:C2:47:D3:18:35:58:11:B0:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/6ff3c7e7-10b6-392b-9c99-f13c36d8e4db.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     32478
IP address blocks:        199.19.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:32:f5:8f:a3:aa:8f:4d:13:87:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adff0409-d8b3-46fb-a7e7-b062e9eb9abc
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=87cdcbf0-6a62-4b44-b524-6d7c6cca7f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:37:9c:00:01:c2:b0:63:70:01:f0:d6:43:
                    12:19:61:0c:14:f0:75:6f:62:48:50:7c:d2:42:ea:
                    25:2a:a9:e0:0f:f8:c5:e8:b2:12:62:02:2e:4c:dc:
                    54:be:4e:6b:6f:88:9e:24:38:db:29:e2:10:9a:51:
                    5b:d9:9a:3e:5d:60:22:fe:c9:ff:cb:2e:be:b2:3b:
                    1b:a8:b4:0d:54:b7:78:82:0a:74:80:2c:7c:a1:e8:
                    10:2d:2c:16:d2:3a:f0:a8:37:57:2d:55:59:e5:a3:
                    a1:ad:c8:9e:62:45:c2:2b:43:96:76:1d:9d:29:07:
                    12:4a:03:74:f6:8f:27:d9:81:14:39:8a:d6:e4:bd:
                    67:76:20:1c:ec:ce:1f:ef:40:bb:02:00:a5:3b:5c:
                    21:1b:1e:9f:67:d8:c2:a2:b0:d7:0d:4c:a7:45:5a:
                    72:5f:c0:5d:b3:0a:0f:c9:10:73:2c:bf:01:f5:0a:
                    9e:7a:56:cd:91:ae:69:25:2d:55:58:9b:ff:91:96:
                    49:60:a4:e4:2c:b4:39:57:0f:a8:20:56:47:50:35:
                    62:90:66:b4:2c:48:e2:aa:a2:5d:2a:52:a7:c8:ea:
                    b5:59:16:55:41:c5:93:37:35:7c:b8:6d:1f:3f:6a:
                    bd:b0:15:d5:dc:3c:fe:6d:54:ae:3f:f1:d1:d0:df:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4A:8D:4B:74:E3:15:B5:18:2F:B9:6B:7B:F9:E0:14:37:7A:3E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/6ff3c7e7-10b6-392b-9c99-f13c36d8e4db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.crl

            X509v3 Authority Key Identifier:
                keyid:61:5A:FA:16:90:2D:E0:2A:46:B6:5B:C2:47:D3:18:35:58:11:B0:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:76:03:16:a8:98:30:f4:31:f5:92:da:82:30:c2:e8:1f:9c:
         ac:80:90:77:5d:4e:9b:d8:73:fb:15:1f:df:45:64:1f:1e:93:
         50:aa:66:08:08:e3:8b:bc:f8:ce:56:b0:a2:1b:7f:e4:5f:45:
         23:81:a5:bd:ce:46:52:e9:2f:45:79:55:77:df:db:61:26:e6:
         f7:14:04:ce:fe:91:ef:3d:9f:3d:92:73:26:60:19:d8:b2:bb:
         2a:b9:f2:56:7c:cb:1c:2e:21:95:6a:ab:07:4b:27:9a:9c:ef:
         2f:58:33:72:17:48:8e:2d:8b:e0:c0:dc:78:8f:d7:96:8c:45:
         39:ec:e7:a9:28:66:cb:f7:55:51:52:2e:a5:aa:03:63:24:e2:
         41:92:cc:88:ac:e4:2d:fa:cb:3c:47:32:64:5f:89:f9:27:5a:
         d6:0f:9e:e1:9b:bd:42:8d:1b:9c:2e:59:a8:ce:64:e1:dd:1c:
         e8:24:c8:6f:2d:c5:0d:2c:43:d5:f4:a7:f7:61:03:35:51:68:
         27:d4:c2:a9:82:af:07:a4:1d:4f:8d:fd:dd:a2:04:77:6a:ad:
         76:82:d0:b4:5f:55:9e:0a:55:f6:f9:b8:c1:0a:59:95:52:5e:
         53:fe:e4:64:2e:44:a7:10:bf:ad:a0:19:41:ab:20:9d:78:b0:
         2a:b4:87:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdjL1j6Oqj00Th5gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRmZjA0MDktZDhiMy00NmZiLWE3ZTctYjA2MmU5ZWI5
YWJjMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
ODdjZGNiZjAtNmE2Mi00YjQ0LWI1MjQtNmQ3YzZjY2E3ZjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll43nAABwrBjcAHw1kMSGWEMFPB1b2JIUHzS
QuolKqngD/jF6LISYgIuTNxUvk5rb4ieJDjbKeIQmlFb2Zo+XWAi/sn/yy6+sjsb
qLQNVLd4ggp0gCx8oegQLSwW0jrwqDdXLVVZ5aOhrcieYkXCK0OWdh2dKQcSSgN0
9o8n2YEUOYrW5L1ndiAc7M4f70C7AgClO1whGx6fZ9jCorDXDUynRVpyX8BdswoP
yRBzLL8B9QqeelbNka5pJS1VWJv/kZZJYKTkLLQ5Vw+oIFZHUDVikGa0LEjiqqJd
KlKnyOq1WRZVQcWTNzV8uG0fP2q9sBXV3Dz+bVSuP/HR0N+mpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGdKjUt04xW1GC+5a3v54BQ3ej51MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZGZm
MDQwOS1kOGIzLTQ2ZmItYTdlNy1iMDYyZTllYjlhYmMvNmZmM2M3ZTctMTBiNi0z
OTJiLTljOTktZjEzYzM2ZDhlNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWRmZjA0MDktZDhiMy00NmZiLWE3
ZTctYjA2MmU5ZWI5YWJjL2FkZmYwNDA5LWQ4YjMtNDZmYi1hN2U3LWIwNjJlOWVi
OWFiYy5jcmwwHwYDVR0jBBgwFoAUYVr6FpAt4CpGtlvCR9MYNVgRsMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hZGZmMDQwOS1kOGIzLTQ2ZmItYTdlNy1iMDYy
ZTllYjlhYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALR2AxaomDD0MfWS2oIwwugfnKyAkHddTpvYc/sVH99FZB8ek1CqZggI
44u8+M5WsKIbf+RfRSOBpb3ORlLpL0V5VXff22Em5vcUBM7+ke89nz2ScyZgGdiy
uyq58lZ8yxwuIZVqqwdLJ5qc7y9YM3IXSI4ti+DA3HiP15aMRTns56koZsv3VVFS
LqWqA2Mk4kGSzIis5C36yzxHMmRfifknWtYPnuGbvUKNG5wuWajOZOHdHOgkyG8t
xQ0sQ9X0p/dhAzVRaCfUwqmCrwekHU+N/d2iBHdqrXaC0LRfVZ4KVfb5uMEKWZVS
XlP+5GQuRKcQv62gGUGrIJ14sCq0h+E=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:45:10 2025 by rpki-client