Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6dc340e1-65f9-3dcc-9972-56de0cf03fcd.roa
File:                     6dc340e1-65f9-3dcc-9972-56de0cf03fcd.roa (raw, json)
Hash identifier:          ZUNoS/rU/AUG1jz1BBnxYrRELx1l5d5mwuAWmIw1nZ0=
Subject key identifier:   2E:B8:AC:47:59:08:C5:76:0E:6A:32:F5:F1:93:1E:5D:3D:61:AF:F1
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AF8C509CD39F2BE7793BF7680
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6dc340e1-65f9-3dcc-9972-56de0cf03fcd.roa
Signing time:             Mon 25 Aug 2025 08:18:14 +0000
ROA not before:           Mon 25 Aug 2025 08:18:14 +0000
ROA not after:            Sun 23 Nov 2025 09:18:14 +0000
asID:                     31898
IP address blocks:        193.123.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f8:c5:09:cd:39:f2:be:77:93:bf:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 25 08:18:14 2025 GMT
            Not After : Nov 23 09:18:14 2025 GMT
        Subject: CN=ac750baa-d8f7-4bde-9895-3ad88de50cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:20:77:59:67:dd:12:73:66:b2:a5:c7:c4:
                    75:79:1b:f1:e5:f5:99:19:da:49:e6:5d:22:b6:a7:
                    bc:c0:ef:3e:12:dc:03:50:1f:68:75:b5:da:8c:37:
                    a6:1c:fa:3b:67:d4:f0:a7:b7:b6:22:98:71:bd:b3:
                    5a:48:e3:c7:c8:6d:4f:f0:09:7c:4a:7f:0b:d3:7b:
                    a0:06:66:75:90:59:7e:b6:f1:fb:b8:52:63:e1:c4:
                    7f:f8:86:71:43:b2:33:b0:3c:c6:89:11:01:f2:21:
                    d5:85:12:25:01:5f:bf:0f:4f:57:72:34:06:67:61:
                    92:47:2b:68:22:4a:e5:b1:90:fe:0d:a0:8e:ee:ec:
                    84:8e:b4:25:b5:c9:17:0e:d3:3c:d0:cd:d5:40:7b:
                    36:f1:a9:71:1a:b9:8a:1d:b5:4c:8a:cf:ec:39:36:
                    fe:7b:02:53:20:df:62:a2:55:21:1a:02:70:11:ef:
                    77:b2:fd:e0:eb:57:c0:4f:01:6d:3c:d5:ae:b1:63:
                    22:e0:f0:25:d0:05:36:20:f2:69:67:22:ba:90:51:
                    ea:bd:35:b8:9b:51:c7:1b:2a:08:35:2d:44:45:db:
                    72:18:ff:35:b5:e1:1e:f7:72:42:5f:2a:25:8d:85:
                    91:f6:90:11:39:a9:ff:5f:32:85:d4:c3:52:eb:b7:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B8:AC:47:59:08:C5:76:0E:6A:32:F5:F1:93:1E:5D:3D:61:AF:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6dc340e1-65f9-3dcc-9972-56de0cf03fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.123.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:d1:c6:35:d1:0b:3f:48:e5:65:76:ef:4b:4c:2d:c5:d4:
         be:0a:42:d3:59:d0:b7:98:17:8a:5a:d6:ab:87:1b:fb:40:9a:
         b4:6e:66:ca:7d:e3:bd:0d:85:d4:3a:3f:05:0b:86:d3:60:f2:
         43:e9:01:a1:3e:a9:f9:36:b9:12:54:2f:71:37:69:db:29:51:
         8c:b3:a7:44:06:93:16:49:00:8e:0d:65:dd:c0:cb:c7:c4:11:
         b9:9d:82:6c:04:72:69:80:40:4e:b1:e3:46:d9:3d:c0:37:ad:
         95:d6:97:b5:29:29:4f:b8:81:5d:1d:09:5d:06:89:c5:45:12:
         3b:52:da:ae:ac:0e:bc:3f:cc:b7:cc:45:7e:a1:1c:0c:6d:4c:
         aa:56:c4:69:3f:d6:f9:b6:27:e7:d9:cb:6a:a9:ee:41:3c:19:
         77:94:48:e3:9c:a5:f0:01:04:73:07:a5:16:05:d0:b9:40:cc:
         2d:9e:0c:85:66:35:05:ec:bb:24:c4:34:1a:87:32:f9:1c:d7:
         27:43:44:52:f2:c5:18:db:91:84:c1:96:a8:a8:5b:86:73:91:
         34:85:d8:82:ed:41:c3:56:5c:25:de:42:56:c9:da:1a:36:63:
         23:14:46:83:50:5f:62:1e:7c:8f:f6:6c:34:72:2e:0d:5d:ea:
         44:07:08:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4xQnNOfK+d5O/doAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgyNTA4MTgxNFoXDTI1MTEyMzA5MTgxNFowLzEtMCsGA1UEAxMk
YWM3NTBiYWEtZDhmNy00YmRlLTk4OTUtM2FkODhkZTUwY2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQYgd1ln3RJzZrKlx8R1eRvx5fWZGdpJ5l0i
tqe8wO8+EtwDUB9odbXajDemHPo7Z9Twp7e2IphxvbNaSOPHyG1P8Al8Sn8L03ug
BmZ1kFl+tvH7uFJj4cR/+IZxQ7IzsDzGiREB8iHVhRIlAV+/D09XcjQGZ2GSRyto
IkrlsZD+DaCO7uyEjrQltckXDtM80M3VQHs28alxGrmKHbVMis/sOTb+ewJTIN9i
olUhGgJwEe93sv3g61fATwFtPNWusWMi4PAl0AU2IPJpZyK6kFHqvTW4m1HHGyoI
NS1ERdtyGP81teEe93JCXyoljYWR9pAROan/XzKF1MNS67f6lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC64rEdZCMV2Dmoy9fGTHl09Ya/xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmRjMzQwZTEtNjVmOS0z
ZGNjLTk5NzItNTZkZTBjZjAzZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwXuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0p0cY10Qs/SOVldu9LTC3F1L4KQtNZ0LeYF4pa1quHG/tAmrRuZsp9
470NhdQ6PwULhtNg8kPpAaE+qfk2uRJUL3E3adspUYyzp0QGkxZJAI4NZd3Ay8fE
EbmdgmwEcmmAQE6x40bZPcA3rZXWl7UpKU+4gV0dCV0GicVFEjtS2q6sDrw/zLfM
RX6hHAxtTKpWxGk/1vm2J+fZy2qp7kE8GXeUSOOcpfABBHMHpRYF0LlAzC2eDIVm
NQXsuyTENBqHMvkc1ydDRFLyxRjbkYTBlqioW4ZzkTSF2ILtQcNWXCXeQlbJ2ho2
YyMURoNQX2IefI/2bDRyLg1d6kQHCP4=
-----END CERTIFICATE-----
Generated at Thu Oct 9 00:58:35 2025 by rpki-client