Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/71207802-4ab1-3d66-b7de-d38f3b20bea3.roa
File:                     71207802-4ab1-3d66-b7de-d38f3b20bea3.roa (raw, json)
Hash identifier:          ICOaBIEWrzmTMDaUI1uqOE8qjx9fhQD4VbtegGOnxRE=
Subject key identifier:   20:58:73:48:A7:70:54:C5:A4:73:AF:EC:05:70:28:10:5D:CC:17:ED
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584B0E415242704ED79C029B6600
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/71207802-4ab1-3d66-b7de-d38f3b20bea3.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     394437
IP address blocks:        206.198.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:52:42:70:4e:d7:9c:02:9b:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=9656db00-d14a-4098-9537-48e98fedb936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:af:c9:7a:89:a5:1e:b4:c7:b5:cd:cf:ec:e1:
                    fe:56:13:58:ec:0b:31:9c:cb:7b:2a:3b:4d:7f:b2:
                    c8:49:bf:f1:92:90:91:ad:f2:4a:c6:67:6e:8c:6a:
                    bb:ae:30:bf:3f:75:d9:0c:8c:34:43:b6:9f:49:30:
                    1a:d9:a0:0b:43:87:63:af:f1:01:d6:c0:20:77:5b:
                    1d:65:77:b8:64:d7:13:eb:83:e0:44:41:ab:d9:cd:
                    d4:3f:e9:f9:74:59:d2:f2:69:2b:f7:14:79:bb:ef:
                    d0:87:ce:41:74:d2:fe:01:ac:95:a7:64:68:d8:b6:
                    b3:77:ba:02:cf:ce:9a:4c:a0:c6:f0:02:a8:ae:7f:
                    97:1e:aa:e4:5f:ea:0b:ba:ce:b3:e5:05:b0:1b:aa:
                    27:60:c6:01:ee:f1:1a:a9:bd:74:be:2f:1a:bc:49:
                    17:15:10:3a:75:45:54:d9:9f:d7:a2:4a:78:ba:b4:
                    e6:af:70:fa:71:4f:b4:0b:31:1b:bf:75:23:cf:0d:
                    cb:44:2b:72:1d:dd:09:14:33:28:0c:16:0d:70:32:
                    78:4c:39:a7:f5:bc:f4:36:90:17:b0:05:00:05:ac:
                    30:4d:23:c2:51:91:f1:90:50:e4:ab:d7:94:f0:08:
                    89:53:b5:eb:57:f9:31:6d:90:3a:36:7c:4d:c1:30:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:58:73:48:A7:70:54:C5:A4:73:AF:EC:05:70:28:10:5D:CC:17:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/71207802-4ab1-3d66-b7de-d38f3b20bea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ad:82:55:b5:b5:b4:3b:d5:24:95:13:f1:d1:7b:7b:c1:49:
         91:55:9c:63:7e:5d:c5:3b:7d:e9:1e:4f:8d:d9:01:c0:9f:51:
         9a:fc:5f:54:da:d0:84:c3:e5:40:14:16:a5:ad:4c:05:a4:03:
         0e:ad:f2:f4:64:8e:93:61:16:36:32:07:63:75:6d:39:d5:31:
         7e:4d:5d:02:75:05:7d:cf:44:84:dd:bb:1b:74:98:3e:a5:27:
         64:2d:8b:4f:48:a8:bf:2f:b7:d8:af:d3:e7:c2:b9:b9:bf:20:
         be:ec:19:66:a9:26:c5:6a:a9:3e:03:f5:f7:39:74:4e:26:42:
         49:73:af:0a:54:e4:ea:47:cb:a5:e8:7c:8e:55:a2:48:b1:a2:
         f2:fb:0c:b4:77:b0:dd:0b:d9:a2:21:3d:cc:63:d4:49:9e:e9:
         2a:b8:df:33:ac:4d:22:65:38:af:02:ef:22:1a:8a:28:d1:52:
         d8:9b:d7:cf:4d:b9:d3:16:07:f8:9b:66:9a:18:88:94:49:3c:
         ee:8a:88:25:ad:1e:ec:f1:17:3a:f7:ec:99:39:c1:76:90:35:
         ae:5d:32:61:70:98:c0:5b:01:40:23:ca:68:25:2c:e7:cd:ea:
         d2:6b:5f:42:2d:3f:cf:6e:27:09:3e:02:e9:9b:fc:3b:92:61:
         40:70:ea:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVJCcE7XnAKbZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk
OTY1NmRiMDAtZDE0YS00MDk4LTk1MzctNDhlOThmZWRiOTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq/JeomlHrTHtc3P7OH+VhNY7AsxnMt7KjtN
f7LISb/xkpCRrfJKxmdujGq7rjC/P3XZDIw0Q7afSTAa2aALQ4djr/EB1sAgd1sd
ZXe4ZNcT64PgREGr2c3UP+n5dFnS8mkr9xR5u+/Qh85BdNL+AayVp2Ro2Lazd7oC
z86aTKDG8AKorn+XHqrkX+oLus6z5QWwG6onYMYB7vEaqb10vi8avEkXFRA6dUVU
2Z/Xokp4urTmr3D6cU+0CzEbv3Ujzw3LRCtyHd0JFDMoDBYNcDJ4TDmn9bz0NpAX
sAUABawwTSPCUZHxkFDkq9eU8AiJU7XrV/kxbZA6NnxNwTDH2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBYc0incFTFpHOv7AVwKBBdzBftMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvNzEyMDc4MDItNGFiMS0z
ZDY2LWI3ZGUtZDM4ZjNiMjBiZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsbUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWtglW1tbQ71SSVE/HRe3vBSZFVnGN+XcU7fekeT43ZAcCfUZr8X1Ta
0ITD5UAUFqWtTAWkAw6t8vRkjpNhFjYyB2N1bTnVMX5NXQJ1BX3PRITduxt0mD6l
J2Qti09IqL8vt9iv0+fCubm/IL7sGWapJsVqqT4D9fc5dE4mQklzrwpU5OpHy6Xo
fI5VokixovL7DLR3sN0L2aIhPcxj1Eme6Sq43zOsTSJlOK8C7yIaiijRUtib189N
udMWB/ibZpoYiJRJPO6KiCWtHuzxFzr37Jk5wXaQNa5dMmFwmMBbAUAjymglLOfN
6tJrX0ItP89uJwk+Aumb/DuSYUBw6oY=
-----END CERTIFICATE-----
Generated at Sat Oct 11 05:07:10 2025 by rpki-client