Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/003e0607-ecb4-3428-b394-2929e48d5659.roa
File:                     003e0607-ecb4-3428-b394-2929e48d5659.roa (raw, json)
Hash identifier:          yfhmZmKT5qrkNcPxc7avjWucufMRtEfvFExM8EfpMkQ=
Subject key identifier:   78:EE:56:CA:EA:27:99:59:11:31:8F:7E:D3:1E:9C:19:57:CE:18:E1
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584B3C51A798D2AB357F9FDFE240
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/003e0607-ecb4-3428-b394-2929e48d5659.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     23280
IP address blocks:        208.83.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:a7:98:d2:ab:35:7f:9f:df:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=d8eaebd0-9dd9-4d45-9b55-8fe9b101eff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:3b:31:38:bb:64:34:7e:89:d9:f2:db:b5:
                    35:7c:d6:66:01:87:b7:43:03:02:61:a2:67:77:2d:
                    1e:1f:04:5a:8c:e8:ef:09:96:b1:62:73:8a:0e:bb:
                    78:7b:01:de:fa:be:97:c8:15:6b:86:4b:e0:36:ff:
                    01:d1:70:e8:c7:31:ad:1e:cc:73:7e:bb:b9:54:7f:
                    67:4c:d2:22:27:64:cc:a3:83:5d:8f:02:ae:97:36:
                    a6:5a:0d:05:a3:c2:ff:ba:21:0d:8f:5c:0c:65:23:
                    ec:63:ce:b9:d9:3b:b9:55:ec:ff:fd:9d:d3:d1:0d:
                    22:be:29:86:85:cc:1a:eb:37:3f:de:b3:88:9f:17:
                    59:c9:d1:cd:2d:eb:f5:11:73:58:d9:0e:16:60:70:
                    5a:61:86:f9:ae:ea:67:65:64:57:37:ef:e9:e9:c2:
                    20:0e:36:ff:f2:99:03:2a:54:65:1e:c9:e5:9b:b6:
                    3c:ab:04:f7:a5:78:87:f1:24:48:f1:e5:79:e1:0c:
                    35:43:dc:95:78:03:41:86:7c:38:d9:e2:61:e5:2e:
                    ea:c9:92:5e:b1:f7:08:88:57:61:18:02:34:e0:32:
                    f9:92:66:28:67:50:cb:07:b5:e5:6e:f1:2e:b1:01:
                    7f:88:4b:6f:5f:c8:0c:7b:f3:21:9f:dc:79:3f:1e:
                    23:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EE:56:CA:EA:27:99:59:11:31:8F:7E:D3:1E:9C:19:57:CE:18:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/003e0607-ecb4-3428-b394-2929e48d5659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ac:f5:80:65:07:98:79:a0:36:b2:d2:a2:d3:95:86:7d:34:
         47:f3:d5:0c:fa:09:41:02:bc:79:49:87:2c:11:11:b1:6e:e6:
         46:bc:24:e1:f5:b5:19:93:10:66:32:bc:8f:44:2f:57:d4:79:
         45:44:e6:8e:48:ef:32:aa:49:b1:38:f9:48:bf:54:15:c0:36:
         8e:d4:d8:0e:6a:f6:06:04:8f:ba:f8:77:fa:02:e2:a7:91:f5:
         4c:cf:64:a2:ad:50:e5:85:c6:4f:cc:3a:45:c8:c8:fe:04:b9:
         3b:73:12:a0:09:03:ab:6d:13:fe:92:c3:c3:65:e1:04:2c:54:
         1c:f5:07:dc:9a:16:ff:bb:52:70:53:2a:87:cd:3f:c2:1b:5e:
         83:43:86:ba:9d:ec:b5:2a:04:6c:91:12:d3:a9:44:ed:d7:f3:
         f4:2b:f9:64:9f:c5:7f:8a:fc:04:ac:e1:42:0a:62:07:db:18:
         f7:54:db:42:db:46:2a:be:43:9b:68:c3:03:dc:ab:4a:f6:ec:
         26:99:2e:1e:b5:22:39:dc:8a:b4:6e:d3:51:68:13:f6:ba:7d:
         23:0c:d2:ef:09:a1:52:96:09:8a:a5:30:f4:09:59:da:03:ad:
         fc:ac:a7:da:e8:7b:d2:f8:72:55:6f:92:99:65:99:ce:d4:27:
         e5:76:7d:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UaeY0qs1f5/f4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk
ZDhlYWViZDAtOWRkOS00ZDQ1LTliNTUtOGZlOWIxMDFlZmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs147MTi7ZDR+idny27U1fNZmAYe3QwMCYaJn
dy0eHwRajOjvCZaxYnOKDrt4ewHe+r6XyBVrhkvgNv8B0XDoxzGtHsxzfru5VH9n
TNIiJ2TMo4NdjwKulzamWg0Fo8L/uiENj1wMZSPsY8652Tu5Vez//Z3T0Q0ivimG
hcwa6zc/3rOInxdZydHNLev1EXNY2Q4WYHBaYYb5rupnZWRXN+/p6cIgDjb/8pkD
KlRlHsnlm7Y8qwT3pXiH8SRI8eV54Qw1Q9yVeANBhnw42eJh5S7qyZJesfcIiFdh
GAI04DL5kmYoZ1DLB7XlbvEusQF/iEtvX8gMe/Mhn9x5Px4juwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjuVsrqJ5lZETGPftMenBlXzhjhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMDAzZTA2MDctZWNiNC0z
NDI4LWIzOTQtMjkyOWU0OGQ1NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FM9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABis9YBlB5h5oDay0qLTlYZ9NEfz1Qz6CUECvHlJhywREbFu5ka8JOH1
tRmTEGYyvI9EL1fUeUVE5o5I7zKqSbE4+Ui/VBXANo7U2A5q9gYEj7r4d/oC4qeR
9UzPZKKtUOWFxk/MOkXIyP4EuTtzEqAJA6ttE/6Sw8Nl4QQsVBz1B9yaFv+7UnBT
KofNP8IbXoNDhrqd7LUqBGyREtOpRO3X8/Qr+WSfxX+K/ASs4UIKYgfbGPdU20Lb
Riq+Q5towwPcq0r27CaZLh61IjncirRu01FoE/a6fSMM0u8JoVKWCYqlMPQJWdoD
rfysp9roe9L4clVvkpllmc7UJ+V2fVg=
-----END CERTIFICATE-----
Generated at Sat Oct 11 00:10:24 2025 by rpki-client