Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5c0b9ef8-ab97-3734-aeef-2057f84b6262.roa
File:                     5c0b9ef8-ab97-3734-aeef-2057f84b6262.roa (raw, json)
Hash identifier:          GWitwt7Y5y1yTUmd0Aq4x43Vb9ckjHblZYYOYx8PGCU=
Subject key identifier:   F7:91:36:DA:97:1C:08:27:22:21:15:76:AE:BE:D1:DC:1C:C3:30:BD
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584A3A157A06FD30A62045DAA800
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5c0b9ef8-ab97-3734-aeef-2057f84b6262.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        208.95.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:7a:06:fd:30:a6:20:45:da:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=5e03ac6e-674b-4c2a-8c12-faf19acaff29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:a9:2f:97:bc:1b:2e:b6:a0:db:6e:eb:ec:
                    fc:8a:02:4f:68:01:69:0c:78:aa:f1:28:91:c1:fa:
                    61:a7:4b:39:c7:be:a0:3b:11:0e:37:e6:88:e7:3f:
                    8b:f1:33:b9:fa:6c:cb:de:51:1f:03:52:4b:6f:9b:
                    1c:c3:20:c4:a7:6a:89:97:01:4d:11:4e:65:82:5b:
                    4a:35:7f:66:bf:35:58:fe:f4:d1:38:3d:7c:c6:4b:
                    b3:91:46:1d:48:70:70:6a:cb:cb:10:d6:f9:ed:a7:
                    4c:fe:53:20:42:f2:6e:73:b6:b4:d8:1e:ac:fe:36:
                    14:bc:18:1c:e9:97:0a:8d:c3:64:0a:d7:e1:b9:71:
                    13:2c:ff:4b:42:c1:5c:ed:28:9d:58:27:78:26:3a:
                    27:9b:f2:fe:d9:44:87:64:ea:0a:1d:cd:40:3a:03:
                    90:4e:c9:6d:b2:43:ea:b1:0e:cf:58:cb:f3:1c:0f:
                    77:16:3c:0e:ce:1d:fd:b8:f3:d6:42:2d:14:00:39:
                    bc:a8:cf:af:aa:84:3d:61:c5:14:e8:98:54:8c:3e:
                    1f:03:34:49:f4:a2:26:86:58:7b:4e:a7:d8:43:8e:
                    4a:ca:13:fc:f4:83:90:fd:b4:5a:b8:b7:d8:dd:4f:
                    cf:8e:f8:ee:0d:84:3a:76:c8:c3:14:1f:7f:0c:89:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:91:36:DA:97:1C:08:27:22:21:15:76:AE:BE:D1:DC:1C:C3:30:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5c0b9ef8-ab97-3734-aeef-2057f84b6262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0f:64:8c:47:32:7a:68:3f:bd:0a:da:df:30:23:88:36:f0:
         6f:22:f6:b0:5c:2b:2f:6a:6e:a4:c7:b4:c9:2d:c6:6b:9c:12:
         4a:d3:ad:02:6a:fb:a2:80:78:e2:7a:7d:31:91:75:25:3c:84:
         ca:a8:5c:71:4d:57:19:9a:11:0e:e0:a7:f7:10:f9:af:8d:c9:
         3e:fa:57:31:73:6c:0a:b6:f9:d4:6c:24:79:b8:ff:12:db:33:
         8c:51:62:33:0d:03:93:a5:e7:01:5d:01:ff:6d:c8:54:00:d4:
         18:24:4d:21:7f:b9:9e:3f:25:7b:5c:1c:04:9c:95:47:56:70:
         74:12:1d:d7:62:d2:ac:c2:d5:8f:7d:10:c5:55:fd:de:83:f1:
         1c:56:02:be:77:38:5d:b5:a5:0f:20:c5:2d:cb:37:f0:84:05:
         2b:9a:5d:0e:e1:2e:32:bf:30:02:ff:c5:8d:d5:e9:ad:b7:04:
         4a:5a:b4:e1:7a:44:ba:bf:ce:6f:d6:16:f0:5c:48:73:85:89:
         64:3c:a9:63:92:5d:a6:0f:1f:75:8e:6b:3d:a1:39:74:f0:f0:
         3d:91:40:5b:79:c8:63:2a:96:2a:80:c4:87:ba:59:b9:1f:44:
         23:87:4b:85:8f:43:6f:31:f4:c2:01:1f:98:49:8b:6d:17:8a:
         cd:a2:cf:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXoG/TCmIEXaqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
NWUwM2FjNmUtNjc0Yi00YzJhLThjMTItZmFmMTlhY2FmZjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4qpL5e8Gy62oNtu6+z8igJPaAFpDHiq8SiR
wfphp0s5x76gOxEON+aI5z+L8TO5+mzL3lEfA1JLb5scwyDEp2qJlwFNEU5lgltK
NX9mvzVY/vTROD18xkuzkUYdSHBwasvLENb57adM/lMgQvJuc7a02B6s/jYUvBgc
6ZcKjcNkCtfhuXETLP9LQsFc7SidWCd4Jjonm/L+2USHZOoKHc1AOgOQTsltskPq
sQ7PWMvzHA93FjwOzh39uPPWQi0UADm8qM+vqoQ9YcUU6JhUjD4fAzRJ9KImhlh7
TqfYQ45KyhP89IOQ/bRauLfY3U/PjvjuDYQ6dsjDFB9/DIkJgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPeRNtqXHAgnIiEVdq6+0dwcwzC9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNWMwYjllZjgtYWI5Ny0z
NzM0LWFlZWYtMjA1N2Y4NGI2MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcPZIxHMnpoP70K2t8wI4g28G8i9rBcKy9qbqTHtMktxmucEkrTrQJq
+6KAeOJ6fTGRdSU8hMqoXHFNVxmaEQ7gp/cQ+a+NyT76VzFzbAq2+dRsJHm4/xLb
M4xRYjMNA5Ol5wFdAf9tyFQA1BgkTSF/uZ4/JXtcHASclUdWcHQSHddi0qzC1Y99
EMVV/d6D8RxWAr53OF21pQ8gxS3LN/CEBSuaXQ7hLjK/MAL/xY3V6a23BEpatOF6
RLq/zm/WFvBcSHOFiWQ8qWOSXaYPH3WOaz2hOXTw8D2RQFt5yGMqliqAxIe6Wbkf
RCOHS4WPQ28x9MIBH5hJi20Xis2iz+E=
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:13:21 2025 by rpki-client