Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/6dcdb1bd-1d19-3bdb-9ca8-48f4126965b8.roa
File:                     6dcdb1bd-1d19-3bdb-9ca8-48f4126965b8.roa (raw, json)
Hash identifier:          yXFORzaPW6INgh0iIoBG6XCrgg4Oo199Tp6KDuf+XHc=
Subject key identifier:   27:48:7E:B0:EB:CE:27:DF:01:4F:32:C5:E8:AF:37:9C:B8:9E:8F:F2
Certificate issuer:       /CN=c186a276-9141-41da-babe-4559d2c6d734
Certificate serial:       010D0C9F4328584A94D0D882DD28D6CE87AB1EA0
Authority key identifier: 6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/6dcdb1bd-1d19-3bdb-9ca8-48f4126965b8.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     44592
IP address blocks:        206.168.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:d8:82:dd:28:d6:ce:87:ab:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c186a276-9141-41da-babe-4559d2c6d734
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=9b3287f0-e33d-4902-a2b6-5bdafd974e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:87:c2:d1:89:16:08:00:77:e9:80:e6:df:
                    00:8c:f1:76:7a:e0:6b:8c:57:f7:30:f6:3a:33:6d:
                    0b:bd:f6:13:6e:ac:63:bc:af:62:02:63:ac:ed:7a:
                    b7:63:54:83:6f:74:bf:57:cf:64:20:c4:b9:3f:9e:
                    21:22:d7:8b:aa:c5:da:62:6f:0f:95:02:76:05:c7:
                    b1:45:24:34:16:6c:e8:8f:87:6b:0e:d6:ce:92:3b:
                    10:19:53:11:b8:fa:a5:27:5c:7b:92:bc:25:4d:4e:
                    66:fb:1b:cc:32:ee:78:c9:5e:f2:80:58:32:e8:85:
                    f1:b8:1a:0a:20:fe:64:e4:e5:89:85:30:be:d9:7e:
                    33:71:92:6d:35:84:c1:70:dd:20:3f:41:74:ef:21:
                    b3:54:7b:cd:7c:6f:59:b2:72:61:a5:81:bb:6a:40:
                    b5:1c:49:f4:f6:82:a9:97:8f:08:2b:92:94:05:8f:
                    6a:86:4a:7d:c7:fe:03:e7:f3:ce:5d:82:86:c8:24:
                    24:ce:f0:38:1e:b8:13:37:02:8b:79:40:c4:fd:87:
                    8d:2d:8e:a7:00:e5:48:85:dd:a8:be:bd:91:ec:a5:
                    70:f8:92:e6:b3:ff:77:81:9f:44:61:c7:2d:3d:60:
                    9c:d3:c3:3c:08:e9:df:a6:6a:7d:65:72:5b:89:26:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:48:7E:B0:EB:CE:27:DF:01:4F:32:C5:E8:AF:37:9C:B8:9E:8F:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/6dcdb1bd-1d19-3bdb-9ca8-48f4126965b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.crl

            X509v3 Authority Key Identifier:
                keyid:6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3b:56:d5:42:51:2e:20:fe:d7:0e:fd:ec:8c:53:fa:fc:08:
         04:a5:a1:fd:99:0e:bb:ed:da:f5:1f:99:cb:07:25:5b:19:89:
         5f:81:4c:97:f0:a4:0e:8d:51:f1:8c:13:e3:a1:e4:7e:32:2b:
         49:a2:f5:04:82:5c:7f:83:62:e0:3e:7e:0f:4e:de:e7:ad:4e:
         1c:fe:b1:05:2b:42:83:ef:07:47:ab:8f:98:b9:bc:1e:c6:d4:
         d0:6d:d6:84:16:33:a4:f8:5e:98:d2:88:bb:6c:d1:f5:06:38:
         86:ed:75:5c:90:71:de:0b:c7:57:e2:80:83:d0:16:8b:7f:50:
         db:93:ef:97:54:d6:51:4d:04:df:17:44:04:22:e7:18:01:06:
         c0:c9:07:e9:26:be:36:cd:3c:28:f8:65:da:9d:a9:c9:0d:81:
         de:42:7a:c6:f9:f4:c4:49:9e:5f:63:69:5f:94:85:fc:e9:eb:
         55:aa:69:e9:c5:c0:fe:45:0b:8a:77:f5:e6:78:07:32:b3:a0:
         f0:f0:11:1e:9b:42:fe:99:fd:82:96:fd:d8:70:50:70:0d:53:
         57:50:1f:fc:81:5a:78:da:f1:07:81:71:c6:a0:ff:e6:2e:03:
         44:bc:6d:40:b4:18:f7:ba:1e:a2:d4:20:5e:09:c9:9e:d6:d8:
         0a:57:6b:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NiC3SjWzoerHqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzE4NmEyNzYtOTE0MS00MWRhLWJhYmUtNDU1OWQyYzZk
NzM0MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk
OWIzMjg3ZjAtZTMzZC00OTAyLWEyYjYtNWJkYWZkOTc0ZTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/2HwtGJFggAd+mA5t8AjPF2euBrjFf3MPY6
M20LvfYTbqxjvK9iAmOs7Xq3Y1SDb3S/V89kIMS5P54hIteLqsXaYm8PlQJ2Bcex
RSQ0Fmzoj4drDtbOkjsQGVMRuPqlJ1x7krwlTU5m+xvMMu54yV7ygFgy6IXxuBoK
IP5k5OWJhTC+2X4zcZJtNYTBcN0gP0F07yGzVHvNfG9ZsnJhpYG7akC1HEn09oKp
l48IK5KUBY9qhkp9x/4D5/POXYKGyCQkzvA4HrgTNwKLeUDE/YeNLY6nAOVIhd2o
vr2R7KVw+JLms/93gZ9EYcctPWCc08M8COnfpmp9ZXJbiSZsNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdIfrDrziffAU8yxeivN5y4no/yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMTg2
YTI3Ni05MTQxLTQxZGEtYmFiZS00NTU5ZDJjNmQ3MzQvNmRjZGIxYmQtMWQxOS0z
YmRiLTljYTgtNDhmNDEyNjk2NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzE4NmEyNzYtOTE0MS00MWRhLWJh
YmUtNDU1OWQyYzZkNzM0L2MxODZhMjc2LTkxNDEtNDFkYS1iYWJlLTQ1NTlkMmM2
ZDczNC5jcmwwHwYDVR0jBBgwFoAUbP4r9dM2rlLxk8bM9YbQThMXbiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jMTg2YTI3Ni05MTQxLTQxZGEtYmFiZS00NTU5
ZDJjNmQ3MzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqhSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABE7VtVCUS4g/tcO/eyMU/r8CASlof2ZDrvt2vUfmcsHJVsZiV+BTJfw
pA6NUfGME+Oh5H4yK0mi9QSCXH+DYuA+fg9O3uetThz+sQUrQoPvB0erj5i5vB7G
1NBt1oQWM6T4XpjSiLts0fUGOIbtdVyQcd4Lx1figIPQFot/UNuT75dU1lFNBN8X
RAQi5xgBBsDJB+kmvjbNPCj4ZdqdqckNgd5Cesb59MRJnl9jaV+Uhfzp61WqaenF
wP5FC4p39eZ4BzKzoPDwER6bQv6Z/YKW/dhwUHANU1dQH/yBWnja8QeBccag/+Yu
A0S8bUC0GPe6HqLUIF4JyZ7W2ApXa6I=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:12 2025 by rpki-client