Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa
File:                     c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa (raw, json)
Hash identifier:          xk+X+PSUBlm5N1CKj4VZ7v/ZLAt7nU4sLpY7at677T0=
Subject key identifier:   67:1C:18:2A:11:8F:25:52:A6:1D:FC:A1:FC:E9:DC:E5:42:25:3C:36
Certificate issuer:       /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial:       010D0C9F4328584B1AD1896A357E45406C771480
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        216.250.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:89:6a:35:7e:45:40:6c:77:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=a371e01a-ae4b-4a3f-9ee6-079f576f1f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:e9:b6:f4:25:a1:c1:df:c8:9f:d1:5e:9d:
                    37:dc:1e:6e:cb:59:31:ef:2b:47:ae:b3:41:94:e7:
                    a3:19:e5:dc:28:77:f1:39:0c:ae:fc:f9:54:fa:9c:
                    04:bc:ad:3b:cf:b3:9b:92:09:00:6c:f0:0d:24:96:
                    2c:61:bf:8a:c2:76:a0:23:04:65:3b:c1:73:ce:31:
                    22:d0:35:5d:ed:7a:e5:42:e6:e7:79:64:49:a1:2d:
                    63:e4:1b:2d:36:47:cc:c5:8a:c6:3b:ae:c8:67:4d:
                    72:3c:c3:70:c2:92:dc:8d:2f:f3:23:de:fe:36:c3:
                    8b:db:fe:ed:ab:60:fd:94:7b:9e:55:7b:5f:f4:6d:
                    d6:45:d0:6b:b4:d2:e8:19:23:68:61:4a:25:f1:91:
                    60:e8:07:08:c0:94:d7:22:3a:fd:f6:cb:16:fb:1e:
                    96:62:fd:26:0a:a3:02:ac:df:c6:60:e4:92:a0:ae:
                    2f:54:99:a2:b2:60:bb:cb:85:59:99:4d:08:c4:ca:
                    b3:1c:41:2b:59:f7:37:95:9b:46:8e:d4:d6:9a:70:
                    9c:c3:16:82:5a:1c:48:9d:38:97:3c:d3:37:c2:37:
                    94:a6:b7:c3:44:44:34:b8:2d:e3:93:87:b3:d2:36:
                    94:44:9d:25:ce:7b:d4:46:22:72:9f:fa:05:7f:ef:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1C:18:2A:11:8F:25:52:A6:1D:FC:A1:FC:E9:DC:E5:42:25:3C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl

            X509v3 Authority Key Identifier:
                keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4f:fa:18:3b:f6:04:8f:b7:cd:53:d6:27:5c:37:90:75:0f:
         b7:28:99:68:d9:25:e9:3e:86:9e:0a:f2:b4:1f:12:c9:70:f4:
         26:55:b7:d9:cf:4e:7f:82:f8:8d:50:95:97:16:5a:ba:32:47:
         7e:59:7f:ef:82:29:64:f5:b6:6d:03:f4:c2:d7:42:2b:ad:e1:
         d1:74:0b:b4:3d:5e:b3:87:e6:4d:e3:51:d6:b7:2b:bf:57:af:
         91:32:7f:bd:22:01:8d:40:51:fc:e2:59:d6:1b:8f:ec:f7:18:
         0a:62:51:31:f5:c1:bd:bb:a5:03:37:54:c0:39:c0:d3:ff:0e:
         3e:e7:d1:18:31:26:d7:dc:1b:2a:b8:78:e7:fc:2f:e0:d6:33:
         6a:f0:cd:95:37:c5:3b:c4:6c:e0:08:91:45:c1:da:cd:62:e6:
         f2:d6:75:1f:38:c0:82:0a:0a:c9:f9:5b:0c:75:0e:4d:01:c2:
         02:56:a7:46:1b:44:69:ea:f5:51:2d:23:b9:3c:20:26:4b:7d:
         e4:42:5f:7c:c7:ad:56:48:f8:81:1e:92:6e:04:4b:2f:8a:7f:
         a8:f7:f0:a9:52:31:d3:49:56:61:14:de:52:c1:40:bf:28:c0:
         db:f2:8c:6e:29:5d:e9:9a:78:7d:cf:7f:c6:c2:64:60:8b:09:
         b9:06:f7:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0YlqNX5FQGx3FIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVlNTJiMGQtYjE1Yy00YjljLWFhM2EtM2Q0YTRkMzZh
ZDIxMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
YTM3MWUwMWEtYWU0Yi00YTNmLTllZTYtMDc5ZjU3NmYxZjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiDptvQlocHfyJ/RXp033B5uy1kx7ytHrrNB
lOejGeXcKHfxOQyu/PlU+pwEvK07z7ObkgkAbPANJJYsYb+KwnagIwRlO8FzzjEi
0DVd7XrlQubneWRJoS1j5BstNkfMxYrGO67IZ01yPMNwwpLcjS/zI97+NsOL2/7t
q2D9lHueVXtf9G3WRdBrtNLoGSNoYUol8ZFg6AcIwJTXIjr99ssW+x6WYv0mCqMC
rN/GYOSSoK4vVJmismC7y4VZmU0IxMqzHEErWfc3lZtGjtTWmnCcwxaCWhxInTiX
PNM3wjeUprfDREQ0uC3jk4ez0jaURJ0lznvURiJyn/oFf+8evQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGccGCoRjyVSph38ofzp3OVCJTw2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1
MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRhNGQzNmFkMjEvYzY5MWNmYTEtZmZmNy0z
MWFiLTgxZTAtNDljNDg1YjNiODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGVlNTJiMGQtYjE1Yy00YjljLWFh
M2EtM2Q0YTRkMzZhZDIxLzhlZTUyYjBkLWIxNWMtNGI5Yy1hYTNhLTNkNGE0ZDM2
YWQyMS5jcmwwHwYDVR0jBBgwFoAU4HQ5KtuU5tQjNF2pYbsPKOSydtgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRh
NGQzNmFkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdP+hg79gSPt81T1idcN5B1D7comWjZJek+hp4K8rQfEslw9CZVt9nP
Tn+C+I1QlZcWWroyR35Zf++CKWT1tm0D9MLXQiut4dF0C7Q9XrOH5k3jUda3K79X
r5Eyf70iAY1AUfziWdYbj+z3GApiUTH1wb27pQM3VMA5wNP/Dj7n0RgxJtfcGyq4
eOf8L+DWM2rwzZU3xTvEbOAIkUXB2s1i5vLWdR84wIIKCsn5Wwx1Dk0BwgJWp0Yb
RGnq9VEtI7k8ICZLfeRCX3zHrVZI+IEekm4ESy+Kf6j38KlSMdNJVmEU3lLBQL8o
wNvyjG4pXemaeH3Pf8bCZGCLCbkG98E=
-----END CERTIFICATE-----
Generated at Thu Oct 9 03:18:57 2025 by rpki-client