Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ab5ad124-c1af-36b0-b848-92deba0cf07c.roa
File:                     ab5ad124-c1af-36b0-b848-92deba0cf07c.roa (raw, json)
Hash identifier:          kW53RB+ne4NKFyumMd/BraSI+3Rogd1JfYkc1H59OrE=
Subject key identifier:   EB:39:90:9D:71:15:19:8D:63:02:4E:3C:37:2A:72:C8:4D:95:B0:16
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F4328584A4F05C344FE74EF22BC624D90
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ab5ad124-c1af-36b0-b848-92deba0cf07c.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        208.71.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c3:44:fe:74:ef:22:bc:62:4d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=6c803392-c6e3-4dbe-831d-b6fe3de8aed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:b5:96:47:15:54:41:5a:a7:70:bc:ae:e5:
                    d2:14:76:c1:ce:b7:62:ab:9f:c6:26:e7:18:93:e5:
                    d8:ba:e2:d6:ae:d8:50:db:7f:1e:93:00:5a:b9:4e:
                    bc:7b:93:29:98:bd:99:9a:22:1c:90:b5:25:4b:cb:
                    4f:b3:98:83:35:e4:9a:23:33:5a:bb:a6:26:aa:81:
                    da:ec:8e:9b:fd:70:35:38:71:52:1b:fd:7c:b9:09:
                    50:4c:06:da:6a:24:f6:3c:54:ec:94:ec:eb:ad:1a:
                    c3:5d:0e:cd:a0:bf:33:62:93:b2:b2:c8:bd:03:61:
                    6f:f5:54:e8:72:7f:af:b5:18:07:0d:f8:51:ea:8b:
                    63:03:b5:ec:91:35:40:b1:91:42:26:30:f8:14:ae:
                    37:85:10:7f:a5:c5:0c:44:e6:6d:cc:d8:df:8c:f6:
                    14:e4:ae:60:c6:6b:ab:35:c9:ea:6c:2d:df:f0:bf:
                    3b:6a:76:36:08:85:40:de:73:b6:ae:8a:86:90:0e:
                    34:70:e9:8b:05:19:1b:ee:97:b0:b5:85:02:3f:8d:
                    be:b6:10:cc:aa:cc:a8:9d:16:1b:3d:dd:18:1d:72:
                    e6:04:82:57:18:e7:e2:52:1f:f0:5e:72:bb:78:b8:
                    2e:bb:5a:1f:b5:8c:51:d2:11:eb:b1:c0:ce:0e:73:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:39:90:9D:71:15:19:8D:63:02:4E:3C:37:2A:72:C8:4D:95:B0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ab5ad124-c1af-36b0-b848-92deba0cf07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:d4:1a:f1:5e:86:20:66:c2:20:8c:fb:63:71:16:85:b4:2d:
         12:5e:38:6d:d0:d3:b3:02:0e:ee:da:c2:68:b2:9f:0b:d0:c7:
         fd:4f:42:52:ed:e5:70:92:e1:7c:9f:71:ef:35:18:76:95:13:
         4d:3c:3d:0a:1c:55:46:42:c2:7e:de:26:c6:ab:fe:c4:de:cf:
         b6:67:d8:04:d6:39:4d:c1:0f:37:d4:e9:1a:49:46:fd:2f:b1:
         7b:38:7b:46:11:3a:6d:d1:78:9f:fb:1c:b0:1a:d1:6f:1b:9d:
         0e:09:a0:32:50:69:d7:25:5d:cb:9f:b3:91:a9:07:aa:1a:a2:
         53:d7:11:ba:26:44:01:4f:fc:7f:05:50:e5:d5:1a:54:54:b3:
         0a:82:86:f1:ce:f8:0d:9c:94:05:1e:f8:e8:75:64:67:40:ff:
         62:7d:5f:00:3a:98:d7:46:47:0c:1d:58:94:90:b5:2c:17:a0:
         63:da:fd:72:95:64:ce:bc:c7:21:7e:de:71:4c:66:03:12:65:
         92:26:41:51:5a:33:ff:4b:5b:2a:c9:72:85:fa:60:04:a1:44:
         05:39:6b:39:5f:cc:cf:49:2c:c5:6b:40:79:3c:a6:b1:24:12:
         56:87:de:1c:23:98:b4:17:16:18:cf:1d:11:4b:d4:1e:48:6a:
         a9:7f:fb:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBcNE/nTvIrxiTZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVk
YzZjMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk
NmM4MDMzOTItYzZlMy00ZGJlLTgzMWQtYjZmZTNkZThhZWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv161lkcVVEFap3C8ruXSFHbBzrdiq5/GJucY
k+XYuuLWrthQ238ekwBauU68e5MpmL2ZmiIckLUlS8tPs5iDNeSaIzNau6YmqoHa
7I6b/XA1OHFSG/18uQlQTAbaaiT2PFTslOzrrRrDXQ7NoL8zYpOyssi9A2Fv9VTo
cn+vtRgHDfhR6otjA7XskTVAsZFCJjD4FK43hRB/pcUMROZtzNjfjPYU5K5gxmur
NcnqbC3f8L87anY2CIVA3nO2roqGkA40cOmLBRkb7pewtYUCP42+thDMqsyonRYb
Pd0YHXLmBIJXGOfiUh/wXnK7eLguu1oftYxR0hHrscDODnP3SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOs5kJ1xFRmNYwJOPDcqcshNlbAWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJi
MmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvYWI1YWQxMjQtYzFhZi0z
NmIwLWI4NDgtOTJkZWJhMGNmMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjAyYjJhMjctNjNkMi00MzVmLTgx
MTQtZDk4ZTI4OWVkYzZjL2IwMmIyYTI3LTYzZDItNDM1Zi04MTE0LWQ5OGUyODll
ZGM2Yy5jcmwwHwYDVR0jBBgwFoAUaP0QqXb6CaxECs/rlUyyMr81kckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThl
Mjg5ZWRjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMLUGvFehiBmwiCM+2NxFoW0LRJeOG3Q07MCDu7awmiynwvQx/1PQlLt
5XCS4Xyfce81GHaVE008PQocVUZCwn7eJsar/sTez7Zn2ATWOU3BDzfU6RpJRv0v
sXs4e0YROm3ReJ/7HLAa0W8bnQ4JoDJQadclXcufs5GpB6oaolPXEbomRAFP/H8F
UOXVGlRUswqChvHO+A2clAUe+Oh1ZGdA/2J9XwA6mNdGRwwdWJSQtSwXoGPa/XKV
ZM68xyF+3nFMZgMSZZImQVFaM/9LWyrJcoX6YAShRAU5azlfzM9JLMVrQHk8prEk
ElaH3hwjmLQXFhjPHRFL1B5Iaql/++I=
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:19:57 2025 by rpki-client