Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71b0a985-cfa8-3cc6-8490-d1e65ae67d71.roa
File:                     71b0a985-cfa8-3cc6-8490-d1e65ae67d71.roa (raw, json)
Hash identifier:          IyIpcQS7TcsV22Uhg9Fd7JTqDbZJAUeauFNCFQasVvc=
Subject key identifier:   FB:25:5B:C7:27:9B:8B:25:8B:0F:62:15:BB:F9:D2:C7:09:0F:3A:B4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A74B5D79FCCCD5E02DAC87B00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71b0a985-cfa8-3cc6-8490-d1e65ae67d71.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     852
IP address blocks:        207.102.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d7:9f:cc:cd:5e:02:da:c8:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=ec4ed17c-a0fd-4863-af09-9fb4e8d4d011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:89:36:3e:ff:34:f8:08:44:8e:cb:8d:f3:
                    b1:95:56:5d:60:1d:46:99:30:21:d1:7d:05:e4:b9:
                    3c:2b:4b:eb:42:92:0b:9d:8d:6b:cc:03:b6:ea:eb:
                    5f:e9:78:70:2f:94:52:bd:66:9e:e0:c7:69:e3:f0:
                    d6:cc:69:82:54:7a:1f:eb:62:e4:40:a7:b6:e9:5f:
                    e4:bc:35:8a:74:8a:e5:c2:8d:e2:4c:b7:32:6e:08:
                    2a:00:8b:b1:02:cd:04:d2:cd:5b:3f:63:33:ad:ad:
                    22:18:65:97:78:4a:b3:a0:76:f9:c1:4d:6d:6c:6e:
                    e9:d5:21:e5:a7:d2:13:fc:55:27:70:91:e0:08:c1:
                    74:1c:8f:16:d5:dc:c4:db:13:cf:4a:d3:57:13:4c:
                    c0:25:b3:99:f5:15:6c:1c:bc:cb:aa:f5:16:97:e3:
                    1e:b6:de:7b:25:8f:c9:f3:bd:36:f0:99:31:1d:19:
                    c2:78:de:d3:e5:fb:c1:9f:8e:f6:99:13:5d:4e:d4:
                    58:6c:7b:0c:0b:2c:89:c0:92:31:26:34:89:06:ad:
                    64:dd:1c:b3:41:3e:c1:a9:f2:f6:dd:ff:f9:a0:8c:
                    9e:12:43:64:a0:dc:09:e3:77:f3:2d:85:30:7c:5b:
                    d8:d5:ee:6f:47:58:42:89:02:6b:56:5f:1b:4d:32:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:25:5B:C7:27:9B:8B:25:8B:0F:62:15:BB:F9:D2:C7:09:0F:3A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/71b0a985-cfa8-3cc6-8490-d1e65ae67d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8f:b2:35:b8:cd:a3:e0:c5:55:eb:1f:10:cf:53:04:eb:ff:
         09:c1:cc:61:de:a5:fe:21:0e:d1:5f:6a:b6:f5:77:f3:0d:e8:
         18:bc:19:9d:8a:78:92:71:ee:a8:71:4d:cd:a1:f4:51:55:a1:
         68:ad:77:bb:1b:fd:73:f1:ea:d3:3d:fe:af:06:cb:5c:dc:31:
         5c:cc:de:5f:79:18:d2:48:d2:1d:59:45:a2:d1:93:6f:2f:81:
         fd:77:34:d0:b0:7a:b8:c3:c5:20:28:1c:7b:b5:b9:58:7b:6e:
         1e:10:09:5e:a7:77:f0:13:7b:53:78:a5:a1:e7:15:9e:a8:74:
         33:7a:c0:56:68:13:99:de:82:5c:94:f7:b5:f9:65:38:3f:5f:
         d9:8c:80:0d:f2:bc:87:e4:8c:82:e8:5b:49:b4:b3:30:2e:24:
         22:68:bf:d0:3e:c5:85:c6:86:cb:2f:75:b2:2e:00:bb:ee:d1:
         47:56:40:a2:22:e7:eb:19:16:c4:b4:18:85:ee:4c:ea:6e:aa:
         d7:9b:84:d0:a2:1e:42:c1:c8:9b:d9:f7:da:38:2a:4d:3b:50:
         08:a1:96:7e:b7:2a:0c:c0:5c:52:66:15:b0:aa:f8:0e:6f:c8:
         bf:6a:63:d7:e4:53:d2:84:2d:c7:63:89:0f:a5:ec:33:4c:db:
         c4:b5:b4:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdefzM1eAtrIewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
ZWM0ZWQxN2MtYTBmZC00ODYzLWFmMDktOWZiNGU4ZDRkMDExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEeJNj7/NPgIRI7LjfOxlVZdYB1GmTAh0X0F
5Lk8K0vrQpILnY1rzAO26utf6XhwL5RSvWae4Mdp4/DWzGmCVHof62LkQKe26V/k
vDWKdIrlwo3iTLcybggqAIuxAs0E0s1bP2Mzra0iGGWXeEqzoHb5wU1tbG7p1SHl
p9IT/FUncJHgCMF0HI8W1dzE2xPPStNXE0zAJbOZ9RVsHLzLqvUWl+Mett57JY/J
87028JkxHRnCeN7T5fvBn472mRNdTtRYbHsMCyyJwJIxJjSJBq1k3RyzQT7BqfL2
3f/5oIyeEkNkoNwJ43fzLYUwfFvY1e5vR1hCiQJrVl8bTTLYrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPslW8cnm4sliw9iFbv50scJDzq0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzFiMGE5ODUtY2ZhOC0z
Y2M2LTg0OTAtZDFlNjVhZTY3ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2b/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmPsjW4zaPgxVXrHxDPUwTr/wnBzGHepf4hDtFfarb1d/MN6Bi8GZ2K
eJJx7qhxTc2h9FFVoWitd7sb/XPx6tM9/q8Gy1zcMVzM3l95GNJI0h1ZRaLRk28v
gf13NNCwerjDxSAoHHu1uVh7bh4QCV6nd/ATe1N4paHnFZ6odDN6wFZoE5neglyU
97X5ZTg/X9mMgA3yvIfkjILoW0m0szAuJCJov9A+xYXGhssvdbIuALvu0UdWQKIi
5+sZFsS0GIXuTOpuqtebhNCiHkLByJvZ99o4Kk07UAihln63KgzAXFJmFbCq+A5v
yL9qY9fkU9KELcdjiQ+l7DNM28S1tKg=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:19:44 2025 by rpki-client