Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6f0b9ebb-6311-329f-9e88-fd2394ef43aa.roa
File:                     6f0b9ebb-6311-329f-9e88-fd2394ef43aa.roa (raw, json)
Hash identifier:          7O1xle3azNPmKwyvCbpnEkq05YmPTOveeLy7xBonbgs=
Subject key identifier:   6C:3B:E6:08:9A:96:6A:02:4B:92:D1:4C:27:DF:9C:A8:E5:3C:4A:EE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEEA02C076CBA6B3212421280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6f0b9ebb-6311-329f-9e88-fd2394ef43aa.roa
Signing time:             Thu 21 Aug 2025 17:05:53 +0000
ROA not before:           Thu 21 Aug 2025 17:05:53 +0000
ROA not after:            Wed 19 Nov 2025 18:05:53 +0000
asID:                     31898
IP address blocks:        132.145.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:a0:2c:07:6c:ba:6b:32:12:42:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 17:05:53 2025 GMT
            Not After : Nov 19 18:05:53 2025 GMT
        Subject: CN=df2aa216-e32d-4121-a5d8-78d25d781758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:ad:1d:4b:75:37:1e:4f:a1:7f:fe:a4:f8:
                    7e:2f:6c:4a:76:a0:eb:3e:37:7a:01:c8:65:93:c5:
                    2f:78:b9:79:93:cd:82:19:41:ca:cd:ad:74:3e:f3:
                    c4:c7:96:f3:85:27:f3:f2:53:c6:5d:da:69:82:46:
                    b3:86:8c:05:51:0f:9e:3c:04:c0:bc:9b:6f:55:ca:
                    9e:4a:23:81:5a:34:f0:32:49:7b:79:78:0b:ae:12:
                    fc:80:99:16:eb:f1:e4:a3:3e:3d:4a:f9:c2:b6:72:
                    80:f3:65:cc:dd:dc:09:e9:fe:6b:4f:47:b0:a4:74:
                    30:1f:60:f9:d6:cd:cd:51:5f:c3:dc:72:86:02:7b:
                    3e:8b:52:33:80:39:b0:29:59:49:0d:ef:cf:62:ff:
                    85:1b:ba:63:70:41:c7:76:16:0b:eb:63:58:4b:6d:
                    13:f9:c7:a5:b3:e4:c1:e1:05:c2:1c:fe:21:4a:17:
                    50:64:27:35:b4:25:e1:1f:9a:f2:6e:fd:c3:9c:dc:
                    68:0f:ef:42:bb:4f:c2:a6:fb:1a:9b:07:59:1b:c5:
                    a0:11:98:b1:4f:4b:fd:5a:d1:a4:60:01:7d:eb:01:
                    d8:dd:d9:50:5b:52:b9:f3:1c:6c:2b:2d:18:63:95:
                    2b:db:44:d3:38:13:03:fb:3b:10:79:f9:b3:f9:34:
                    ce:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3B:E6:08:9A:96:6A:02:4B:92:D1:4C:27:DF:9C:A8:E5:3C:4A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6f0b9ebb-6311-329f-9e88-fd2394ef43aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.145.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:df:82:00:c0:25:2a:32:26:ef:d7:e0:4e:41:a6:cf:7d:aa:
         18:5a:f4:97:38:7b:52:62:fd:7e:ae:98:dc:7b:70:1b:91:38:
         eb:b0:fe:63:6d:04:64:b6:9f:69:e1:ce:f9:32:f7:aa:0a:12:
         2f:6b:67:6e:03:62:6c:19:61:1e:d0:5c:19:1a:dc:4b:89:1f:
         43:a3:c1:11:5a:7d:83:15:85:b9:fe:e6:9e:c9:af:da:1d:90:
         d8:8c:dc:58:98:f9:a0:36:0d:33:d0:34:7e:9e:9b:08:f2:a7:
         92:8c:5a:b9:67:42:c7:be:2a:42:5b:39:a3:d3:99:82:db:99:
         90:0c:24:22:e4:1a:cb:25:e2:5a:f0:81:06:6d:c8:b7:6b:00:
         57:2f:f7:08:53:8f:a6:e2:2d:71:54:cb:5b:50:f8:71:f4:d3:
         4a:6d:21:b1:ec:03:66:b7:3b:7d:e9:ee:f2:08:2f:d0:34:eb:
         25:ad:cd:fc:38:19:36:df:ed:f1:35:00:f6:cc:43:18:0a:27:
         bb:98:c8:8e:3d:d4:6d:f0:c4:2a:6e:0d:91:82:f9:03:a5:74:
         3b:02:45:2b:c9:28:0b:2d:85:1d:32:b7:88:0f:3c:d9:7a:87:
         52:fe:6b:56:63:b9:b7:43:bb:a7:5e:c1:5f:2c:5b:90:80:91:
         4a:83:32:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruoCwHbLprMhJCEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgyMTE3MDU1M1oXDTI1MTExOTE4MDU1M1owLzEtMCsGA1UEAxMk
ZGYyYWEyMTYtZTMyZC00MTIxLWE1ZDgtNzhkMjVkNzgxNzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIytHUt1Nx5PoX/+pPh+L2xKdqDrPjd6Achl
k8UveLl5k82CGUHKza10PvPEx5bzhSfz8lPGXdppgkazhowFUQ+ePATAvJtvVcqe
SiOBWjTwMkl7eXgLrhL8gJkW6/Hkoz49SvnCtnKA82XM3dwJ6f5rT0ewpHQwH2D5
1s3NUV/D3HKGAns+i1IzgDmwKVlJDe/PYv+FG7pjcEHHdhYL62NYS20T+cels+TB
4QXCHP4hShdQZCc1tCXhH5rybv3DnNxoD+9Cu0/CpvsamwdZG8WgEZixT0v9WtGk
YAF96wHY3dlQW1K58xxsKy0YY5Ur20TTOBMD+zsQefmz+TTOZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGw75gialmoCS5LRTCffnKjlPEruMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmYwYjllYmItNjMxMS0z
MjlmLTllODgtZmQyMzk0ZWY0M2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChJFsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELfggDAJSoyJu/X4E5Bps99qhha9Jc4e1Ji/X6umNx7cBuROOuw/mNt
BGS2n2nhzvky96oKEi9rZ24DYmwZYR7QXBka3EuJH0OjwRFafYMVhbn+5p7Jr9od
kNiM3FiY+aA2DTPQNH6emwjyp5KMWrlnQse+KkJbOaPTmYLbmZAMJCLkGssl4lrw
gQZtyLdrAFcv9whTj6biLXFUy1tQ+HH000ptIbHsA2a3O33p7vIIL9A06yWtzfw4
GTbf7fE1APbMQxgKJ7uYyI491G3wxCpuDZGC+QOldDsCRSvJKAsthR0yt4gPPNl6
h1L+a1ZjubdDu6dewV8sW5CAkUqDMkY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:26 2025 by rpki-client