Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/081434ec-db05-34a7-8947-1ea9ac8b36b2.roa
File:                     081434ec-db05-34a7-8947-1ea9ac8b36b2.roa (raw, json)
Hash identifier:          HdXoAbSZxAZWFHxWM9KoiRjrxEXU0TLiI8eegntKFDE=
Subject key identifier:   5B:5B:55:D4:48:6E:15:B7:D1:DD:8E:19:7F:2B:AD:ED:24:1F:A6:CB
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584A3A1573A489D37B59BF79E0C0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/081434ec-db05-34a7-8947-1ea9ac8b36b2.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     19795
IP address blocks:        208.95.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:73:a4:89:d3:7b:59:bf:79:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=5ae6bc4f-477c-4704-a0a1-d7bc229f2352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:e0:1c:a6:26:a7:15:95:a6:c8:5c:38:02:
                    a9:18:9e:6e:5f:34:67:49:1b:f9:aa:44:47:79:ad:
                    bf:90:09:71:b2:87:10:7c:12:2c:b4:02:fd:e1:59:
                    af:e6:d9:dc:09:4d:5f:55:d2:06:b1:c7:4b:9e:45:
                    32:db:80:95:bd:27:61:7e:03:68:38:3b:1f:de:5f:
                    7f:2f:f2:de:88:62:8f:40:bb:a2:d4:76:81:4b:82:
                    b0:70:74:9b:9a:13:af:41:3d:b7:fe:3a:37:32:b6:
                    93:b4:ef:2d:6e:65:d9:9b:a5:8a:fa:ef:cd:62:a9:
                    a5:62:ed:88:d5:14:59:dd:ba:79:f0:fe:c4:a3:17:
                    dc:30:e7:d3:58:40:f2:76:51:2d:01:37:51:da:65:
                    68:25:d2:54:c8:48:d1:5f:68:cc:4a:42:bb:d6:89:
                    5a:47:e4:b4:65:46:91:d5:26:41:8e:b3:27:c1:53:
                    b6:83:e4:3d:34:c0:d1:fe:77:8f:06:5a:8f:8f:7f:
                    17:a6:a5:0d:8c:8d:16:62:15:0d:9e:a3:4d:cb:78:
                    aa:7e:ab:50:ba:59:fc:01:fe:d8:4d:fa:eb:5d:c0:
                    c6:14:4d:11:38:17:49:88:ff:95:06:e8:58:dc:8f:
                    57:0d:82:2c:10:b5:54:29:86:25:71:53:8e:36:7d:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5B:55:D4:48:6E:15:B7:D1:DD:8E:19:7F:2B:AD:ED:24:1F:A6:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/081434ec-db05-34a7-8947-1ea9ac8b36b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:83:d0:fc:c1:55:c2:10:98:89:17:d5:65:5b:2e:d3:43:ea:
         d0:94:26:22:e2:7b:78:36:3e:48:b5:7d:a0:de:74:ff:d0:e4:
         98:a9:59:23:c3:1a:ac:f9:e2:6b:2e:ca:9a:df:13:a2:13:b0:
         8e:c6:6b:28:e5:3b:94:c5:0d:66:7a:fd:52:d2:07:f8:d8:b4:
         09:bf:28:89:34:ad:53:7c:a4:49:39:39:cf:e4:65:82:5f:84:
         e3:a0:f2:5d:3a:cb:06:60:c5:f4:a6:23:ae:e9:a3:ad:eb:f9:
         ab:f3:91:b0:b8:5f:c1:47:6e:f0:3a:d4:1c:a2:d6:c5:b5:11:
         dc:5c:de:12:17:6f:3b:df:d3:05:27:ac:b6:0b:a5:af:04:ea:
         6e:e6:30:3a:1e:52:96:dd:d0:f7:7c:6d:dc:27:b7:b4:6e:8a:
         2e:5b:e7:32:1d:c4:eb:2b:b8:15:e5:49:61:06:4d:5a:d1:a5:
         57:f9:3e:8f:80:3d:8d:6c:1a:38:1e:5d:a1:9c:ed:6a:8f:37:
         8a:74:31:ce:d8:5c:09:bc:1b:34:c0:81:42:53:ce:b5:40:17:
         27:a5:21:3b:9b:f6:23:4a:4c:2f:db:b0:19:8c:d1:76:89:1a:
         90:ee:81:a3:c7:b1:0c:ce:08:77:de:3c:b7:4a:b6:3f:a5:3b:
         b5:2f:ae:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXOkidN7Wb954MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
NWFlNmJjNGYtNDc3Yy00NzA0LWEwYTEtZDdiYzIyOWYyMzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaDgHKYmpxWVpshcOAKpGJ5uXzRnSRv5qkRH
ea2/kAlxsocQfBIstAL94Vmv5tncCU1fVdIGscdLnkUy24CVvSdhfgNoODsf3l9/
L/LeiGKPQLui1HaBS4KwcHSbmhOvQT23/jo3MraTtO8tbmXZm6WK+u/NYqmlYu2I
1RRZ3bp58P7EoxfcMOfTWEDydlEtATdR2mVoJdJUyEjRX2jMSkK71olaR+S0ZUaR
1SZBjrMnwVO2g+Q9NMDR/nePBlqPj38XpqUNjI0WYhUNnqNNy3iqfqtQuln8Af7Y
TfrrXcDGFE0ROBdJiP+VBuhY3I9XDYIsELVUKYYlcVOONn0bAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtbVdRIbhW30d2OGX8rre0kH6bLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMDgxNDM0ZWMtZGIwNS0z
NGE3LTg5NDctMWVhOWFjOGIzNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmD0PzBVcIQmIkX1WVbLtND6tCUJiLie3g2Pki1faDedP/Q5JipWSPD
Gqz54msuyprfE6ITsI7GayjlO5TFDWZ6/VLSB/jYtAm/KIk0rVN8pEk5Oc/kZYJf
hOOg8l06ywZgxfSmI67po63r+avzkbC4X8FHbvA61Byi1sW1Edxc3hIXbzvf0wUn
rLYLpa8E6m7mMDoeUpbd0Pd8bdwnt7Ruii5b5zIdxOsruBXlSWEGTVrRpVf5Po+A
PY1sGjgeXaGc7WqPN4p0Mc7YXAm8GzTAgUJTzrVAFyelITub9iNKTC/bsBmM0XaJ
GpDugaPHsQzOCHfePLdKtj+lO7Uvrjs=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:25:25 2025 by rpki-client