Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/869dc589-2ba1-3cb1-83c5-a394b639843e.roa
File:                     869dc589-2ba1-3cb1-83c5-a394b639843e.roa (raw, json)
Hash identifier:          /B/1RQHrbmRgA8TrWAyuBbABrNFWICf0mcoHqSo/380=
Subject key identifier:   C7:D7:D0:BD:FD:C9:61:F8:CF:2A:4E:FB:57:44:7B:22:0E:26:77:51
Certificate issuer:       /CN=b5df7c19-240b-4a12-a886-6df8618d66ad
Certificate serial:       010D0C9F4328584B28C6E105D8579DCFECCF0880
Authority key identifier: 60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/869dc589-2ba1-3cb1-83c5-a394b639843e.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     20073
IP address blocks:        206.168.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:e1:05:d8:57:9d:cf:ec:cf:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5df7c19-240b-4a12-a886-6df8618d66ad
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=270b6813-e7e0-4899-9008-17e97aba35de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:4b:5c:60:fe:4f:fb:72:16:f1:50:b7:02:
                    d3:2b:6e:0e:38:0c:56:31:7d:4b:ba:00:70:ed:38:
                    74:69:cb:dd:63:4c:66:58:3f:2f:e8:5c:17:fb:19:
                    ce:8e:5c:fd:f9:4f:e8:9c:e0:b3:0b:8c:52:f5:4d:
                    9c:e3:45:8e:31:93:92:d0:35:71:7a:2a:dd:bf:14:
                    19:0e:3c:db:f2:6d:9d:9d:22:fa:8f:15:c9:fa:01:
                    d4:38:54:ff:c7:8b:2e:dd:f0:8f:81:99:f7:2d:49:
                    43:be:70:2c:3e:c9:cb:de:6c:6f:51:09:84:75:03:
                    0e:47:4a:d7:68:f4:58:65:eb:d7:5f:e7:f5:2f:51:
                    0e:ad:27:69:a2:a1:52:f3:04:54:35:29:8f:4f:a0:
                    8a:77:dd:c7:a2:95:c8:2b:f7:6b:6a:6a:95:ef:ac:
                    ec:21:20:b3:fb:a7:5c:64:2f:04:07:d4:6b:42:25:
                    c7:27:52:1e:2e:11:80:45:56:60:29:a4:24:fc:4f:
                    ed:ec:c7:a2:6b:07:44:6e:57:a8:7f:8c:e5:96:69:
                    ae:f2:64:d5:b1:1d:c9:9c:ab:d9:61:1c:e9:dd:53:
                    f3:f7:8a:b7:e1:d7:37:42:cd:e2:49:1b:15:47:8f:
                    02:33:a2:c6:a2:5a:a4:5f:fd:8f:42:fd:ce:74:86:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D7:D0:BD:FD:C9:61:F8:CF:2A:4E:FB:57:44:7B:22:0E:26:77:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/869dc589-2ba1-3cb1-83c5-a394b639843e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.crl

            X509v3 Authority Key Identifier:
                keyid:60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:10:81:bb:8c:7f:12:58:11:84:a1:a7:01:a9:b0:8f:f2:93:
         f7:38:f1:9b:1f:cf:b1:0f:d5:8d:c6:6f:3e:a5:30:36:77:23:
         9b:5a:2b:d8:41:b5:99:aa:91:9f:4c:d5:aa:01:32:d4:d6:0c:
         4b:08:9a:ba:d7:9a:09:34:e7:33:51:eb:d9:4b:f0:a5:cb:e6:
         a7:1e:fa:ad:3a:69:d4:23:78:93:d2:49:48:c3:35:9d:9a:de:
         ac:a0:c0:b4:55:bf:32:4d:e8:c4:16:bb:23:12:53:43:5d:b5:
         d2:78:1f:b8:b8:dc:3c:67:da:53:9a:67:3c:1e:5b:6b:ef:0e:
         e1:0d:ac:df:ea:27:0d:47:38:b6:34:6c:76:2f:54:ff:2a:61:
         f0:7e:58:a7:ce:93:e7:14:a3:f2:12:c6:65:93:fc:50:fb:58:
         3b:09:de:91:e0:ec:08:18:91:f0:9e:c4:78:e4:8e:21:e3:f3:
         f5:fd:e5:48:3b:d4:a4:c6:07:19:c8:3e:da:c5:e1:f0:d9:02:
         12:2b:76:4e:83:78:93:5e:58:ce:35:48:95:13:21:31:bd:e7:
         5d:36:4d:2c:0c:e0:8e:f2:31:f6:62:58:3d:b4:53:28:f7:9e:
         83:31:2e:e1:1c:f8:29:d6:db:b1:4f:bf:a8:6e:d1:ff:b8:49:
         f4:f9:de:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuEF2Fedz+zPCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVkZjdjMTktMjQwYi00YTEyLWE4ODYtNmRmODYxOGQ2
NmFkMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk
MjcwYjY4MTMtZTdlMC00ODk5LTkwMDgtMTdlOTdhYmEzNWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprpLXGD+T/tyFvFQtwLTK24OOAxWMX1LugBw
7Th0acvdY0xmWD8v6FwX+xnOjlz9+U/onOCzC4xS9U2c40WOMZOS0DVxeirdvxQZ
Djzb8m2dnSL6jxXJ+gHUOFT/x4su3fCPgZn3LUlDvnAsPsnL3mxvUQmEdQMOR0rX
aPRYZevXX+f1L1EOrSdpoqFS8wRUNSmPT6CKd93HopXIK/dramqV76zsISCz+6dc
ZC8EB9RrQiXHJ1IeLhGARVZgKaQk/E/t7MeiawdEbleof4zllmmu8mTVsR3JnKvZ
YRzp3VPz94q34dc3Qs3iSRsVR48CM6LGolqkX/2PQv3OdIb4ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfX0L39yWH4zypO+1dEeyIOJndRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNWRm
N2MxOS0yNDBiLTRhMTItYTg4Ni02ZGY4NjE4ZDY2YWQvODY5ZGM1ODktMmJhMS0z
Y2IxLTgzYzUtYTM5NGI2Mzk4NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjVkZjdjMTktMjQwYi00YTEyLWE4
ODYtNmRmODYxOGQ2NmFkL2I1ZGY3YzE5LTI0MGItNGExMi1hODg2LTZkZjg2MThk
NjZhZC5jcmwwHwYDVR0jBBgwFoAUYAwhAbnonfgipB8MKkG+avA2plwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNWRmN2MxOS0yNDBiLTRhMTItYTg4Ni02ZGY4
NjE4ZDY2YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqioMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0QgbuMfxJYEYShpwGpsI/yk/c48Zsfz7EP1Y3Gbz6lMDZ3I5taK9hB
tZmqkZ9M1aoBMtTWDEsImrrXmgk05zNR69lL8KXL5qce+q06adQjeJPSSUjDNZ2a
3qygwLRVvzJN6MQWuyMSU0NdtdJ4H7i43Dxn2lOaZzweW2vvDuENrN/qJw1HOLY0
bHYvVP8qYfB+WKfOk+cUo/ISxmWT/FD7WDsJ3pHg7AgYkfCexHjkjiHj8/X95Ug7
1KTGBxnIPtrF4fDZAhIrdk6DeJNeWM41SJUTITG95102TSwM4I7yMfZiWD20Uyj3
noMxLuEc+CnW27FPv6hu0f+4SfT53k8=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:12:11 2025 by rpki-client