Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/ac764abe-8849-3f0d-8819-cde43865a65e.roa
File:                     ac764abe-8849-3f0d-8819-cde43865a65e.roa (raw, json)
Hash identifier:          yapA4i6sWMViT/dJOImGo7Wa2tnKRIAkf4qms0yVKzo=
Subject key identifier:   FE:B0:76:02:D3:6E:BA:35:58:27:F5:BB:A5:8C:65:43:68:0D:44:9C
Certificate issuer:       /CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
Certificate serial:       010D0C9F4328584A7A4B3320C4CC290DE1900800
Authority key identifier: C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/ac764abe-8849-3f0d-8819-cde43865a65e.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     208287
IP address blocks:        216.9.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:33:20:c4:cc:29:0d:e1:90:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=f456f19f-5388-435a-88f9-3242bf3301b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:0d:a9:5a:5b:5f:a2:d9:49:98:db:a7:35:
                    d1:9d:a3:9c:45:ad:0e:7b:6a:26:9f:51:0e:11:20:
                    6a:ad:64:4f:0e:43:13:c6:1c:aa:13:21:8d:0a:50:
                    ae:46:28:8a:30:e1:e1:45:c6:1d:f7:40:1c:db:a4:
                    06:3c:51:90:60:6c:89:d5:ca:38:e6:8d:60:3f:22:
                    b9:4c:1d:87:c9:5e:a9:dc:60:c3:55:aa:03:74:0f:
                    a3:9a:ed:a4:ca:de:6d:15:eb:f7:a5:95:d0:38:b6:
                    28:01:1b:92:5e:04:8b:f5:01:72:08:81:af:64:3e:
                    0d:53:c0:2d:22:e5:2e:4e:1a:1d:1f:6a:ab:10:0c:
                    88:84:5b:ff:c0:bf:a4:bf:7d:96:cd:7d:13:4d:bd:
                    74:ad:6a:4b:7d:05:0f:5d:ef:76:2c:a7:86:d8:b8:
                    10:bf:da:6d:fa:b8:77:9c:ac:05:0e:b5:7d:88:fe:
                    1c:98:79:e3:b7:c8:2a:b4:cf:4b:22:a4:88:cb:a7:
                    9b:50:6b:1b:f0:08:34:7e:74:62:31:93:30:a0:a2:
                    94:d2:c4:87:53:ed:d9:1d:64:3f:c6:ca:d6:17:86:
                    ef:3a:9a:2f:99:10:bc:e6:f2:54:43:f8:8c:69:cd:
                    7f:d1:8e:d6:87:9b:12:7f:c3:34:2a:37:ac:30:11:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:76:02:D3:6E:BA:35:58:27:F5:BB:A5:8C:65:43:68:0D:44:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/ac764abe-8849-3f0d-8819-cde43865a65e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.crl

            X509v3 Authority Key Identifier:
                keyid:C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.9.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:14:a3:9a:93:b7:62:19:04:00:a1:17:21:95:52:8d:88:00:
         fd:95:52:43:d2:73:52:4e:f3:78:77:26:ae:7f:0d:38:27:24:
         02:46:ca:f7:0f:86:2c:f1:35:a2:78:05:0b:d4:0c:87:a0:99:
         a0:67:77:44:aa:d7:83:41:d6:ab:ce:37:ae:69:98:0e:ed:33:
         1e:ae:ef:35:36:fc:48:39:84:2d:07:81:11:77:cd:75:3c:6b:
         18:e5:b6:cd:56:f1:ff:39:9c:62:82:70:78:29:9a:28:23:e9:
         fe:0a:0d:01:8d:40:cd:eb:c4:86:96:80:eb:80:94:84:c8:ed:
         ee:6b:ee:7a:d6:7c:97:ae:d0:c9:7c:3a:7c:80:1d:ea:33:47:
         52:05:11:9a:37:c3:e6:5c:e0:8e:52:48:81:0b:bd:ca:6c:26:
         33:06:fb:1d:13:2b:d5:04:51:bf:79:dc:4a:09:3e:a2:43:1e:
         b0:15:24:03:d0:3b:9c:7c:2e:76:be:58:ee:e7:c9:af:7f:cd:
         b9:26:e3:61:8b:28:70:1b:85:d8:e6:fa:31:ae:ce:e5:7d:58:
         a6:a0:bc:6b:e4:e1:af:ca:72:fd:22:8a:6f:99:4a:7d:65:27:
         0e:58:53:6e:57:57:c5:59:a7:7d:3e:54:9f:92:8f:b4:38:79:
         3b:3b:23:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6SzMgxMwpDeGQCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTExZWYyMTMtMTRmOS00ODM2LThkMTUtNWRlNWMwNGY0
M2VkMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
ZjQ1NmYxOWYtNTM4OC00MzVhLTg4ZjktMzI0MmJmMzMwMWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW8NqVpbX6LZSZjbpzXRnaOcRa0Oe2omn1EO
ESBqrWRPDkMTxhyqEyGNClCuRiiKMOHhRcYd90Ac26QGPFGQYGyJ1co45o1gPyK5
TB2HyV6p3GDDVaoDdA+jmu2kyt5tFev3pZXQOLYoARuSXgSL9QFyCIGvZD4NU8At
IuUuThodH2qrEAyIhFv/wL+kv32WzX0TTb10rWpLfQUPXe92LKeG2LgQv9pt+rh3
nKwFDrV9iP4cmHnjt8gqtM9LIqSIy6ebUGsb8Ag0fnRiMZMwoKKU0sSHU+3ZHWQ/
xsrWF4bvOpovmRC85vJUQ/iMac1/0Y7Wh5sSf8M0KjesMBGy/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP6wdgLTbro1WCf1u6WMZUNoDUScMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTFl
ZjIxMy0xNGY5LTQ4MzYtOGQxNS01ZGU1YzA0ZjQzZWQvYWM3NjRhYmUtODg0OS0z
ZjBkLTg4MTktY2RlNDM4NjVhNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTExZWYyMTMtMTRmOS00ODM2LThk
MTUtNWRlNWMwNGY0M2VkL2UxMWVmMjEzLTE0ZjktNDgzNi04ZDE1LTVkZTVjMDRm
NDNlZC5jcmwwHwYDVR0jBBgwFoAUwZ4s3Z+4SZpXizr1v+NeVCxJSh0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTFlZjIxMy0xNGY5LTQ4MzYtOGQxNS01ZGU1
YzA0ZjQzZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AnjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAUo5qTt2IZBAChFyGVUo2IAP2VUkPSc1JO83h3Jq5/DTgnJAJGyvcP
hizxNaJ4BQvUDIegmaBnd0Sq14NB1qvON65pmA7tMx6u7zU2/Eg5hC0HgRF3zXU8
axjlts1W8f85nGKCcHgpmigj6f4KDQGNQM3rxIaWgOuAlITI7e5r7nrWfJeu0Ml8
OnyAHeozR1IFEZo3w+Zc4I5SSIELvcpsJjMG+x0TK9UEUb953EoJPqJDHrAVJAPQ
O5x8Lna+WO7nya9/zbkm42GLKHAbhdjm+jGuzuV9WKagvGvk4a/Kcv0iim+ZSn1l
Jw5YU25XV8VZp30+VJ+Sj7Q4eTs7I/4=
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:26 2025 by rpki-client