Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/43cb95bf-32bb-367f-b969-2f91bc5ab261.roa
File:                     43cb95bf-32bb-367f-b969-2f91bc5ab261.roa (raw, json)
Hash identifier:          +Ye5dp6zyI0N8gNPt4R9tFf8bJyjJUicRkm9qwHqCik=
Subject key identifier:   A6:5E:CA:C3:D3:EF:1C:9B:C7:A5:D5:C4:06:E3:F7:F0:2A:10:2E:BF
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A03A5459ADD09D4ED637F2A80
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/43cb95bf-32bb-367f-b969-2f91bc5ab261.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14061
IP address blocks:        68.183.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:45:9a:dd:09:d4:ed:63:7f:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=1d04233b-33b4-4b8c-9902-46515f950550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:18:20:5b:1d:48:5c:cf:e4:a2:ca:8c:05:
                    47:6b:1d:68:d6:15:8f:60:b3:45:c9:14:4e:31:42:
                    87:ed:61:11:e4:7b:e4:35:ed:83:fd:b1:96:b5:fb:
                    06:31:6f:f5:b6:c8:c7:ea:47:4d:ca:86:be:51:d3:
                    82:4b:74:da:f6:b4:05:13:fa:2c:12:e8:0e:a1:e9:
                    d5:80:2d:4f:ed:49:73:94:e8:60:f3:09:37:b7:a4:
                    e4:f9:d3:22:d9:d3:c8:dc:48:80:5c:ad:7a:e0:f4:
                    84:5b:8a:be:22:e4:a1:3f:59:32:78:b0:24:be:19:
                    29:d1:51:8e:90:59:be:54:4f:a3:6d:41:73:8d:f0:
                    db:5b:a2:8b:8c:90:63:80:63:5d:9d:08:af:fe:8a:
                    7a:0f:86:5c:fd:a3:bc:78:f2:cb:55:da:c8:e2:76:
                    42:6d:71:57:fa:62:5b:12:45:5e:f7:e2:e3:05:08:
                    1e:75:68:91:20:c4:20:6f:a8:9a:03:1a:8d:75:79:
                    28:1a:9f:92:9b:c7:35:ea:ae:04:a7:5d:d1:65:b8:
                    16:37:43:20:36:9e:76:4f:df:41:8c:53:7a:e4:66:
                    ac:fe:d9:8d:7f:fc:16:da:86:b5:45:62:ea:d0:0e:
                    24:ee:98:7c:45:5d:90:86:96:fa:a1:6f:ef:bc:1d:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5E:CA:C3:D3:EF:1C:9B:C7:A5:D5:C4:06:E3:F7:F0:2A:10:2E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/43cb95bf-32bb-367f-b969-2f91bc5ab261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.183.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:70:cc:65:4a:17:7d:c6:87:f0:c7:67:cf:4f:f1:6a:0d:2e:
         19:6e:be:c9:87:21:df:48:81:f2:9c:50:8f:bf:bd:e0:6e:28:
         63:f2:a7:59:b6:a0:a2:39:f3:6a:ef:a3:6c:15:8b:2f:34:2f:
         1f:e5:44:7f:c7:af:46:bf:b5:e3:83:b6:cd:30:4b:d2:f2:df:
         18:1d:cd:b5:3e:1e:6b:ae:e3:39:20:8d:bf:53:fb:3d:08:09:
         27:13:c7:32:25:57:ed:2d:ac:45:30:af:d5:4e:07:c1:3c:2a:
         8a:1f:cb:53:51:c7:ef:c1:59:b5:7c:a7:87:45:f8:af:18:21:
         84:14:4d:b2:eb:dc:dc:35:24:08:3b:78:07:fb:0a:ab:0d:56:
         62:7f:99:3f:77:96:a7:5c:f4:7f:0b:70:4c:30:e7:09:31:97:
         d4:21:a2:0f:c4:16:d5:c5:3c:36:b4:f0:e0:3f:c5:60:81:c5:
         e0:27:07:c6:6b:9e:ea:29:65:86:cc:b9:06:3e:61:1d:65:21:
         aa:25:45:be:51:9d:3b:23:d7:11:5e:18:97:21:3a:c3:87:ae:
         af:0b:07:b3:8f:c0:c0:6f:bd:73:9a:bb:46:f8:43:83:51:8d:
         64:b4:81:9c:cd:66:50:85:76:2b:f4:aa:58:44:49:4c:db:39:
         c8:e5:1c:85
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoDpUWa3QnU7WN/KoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
MWQwNDIzM2ItMzNiNC00YjhjLTk5MDItNDY1MTVmOTUwNTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTgYIFsdSFzP5KLKjAVHax1o1hWPYLNFyRRO
MUKH7WER5HvkNe2D/bGWtfsGMW/1tsjH6kdNyoa+UdOCS3Ta9rQFE/osEugOoenV
gC1P7UlzlOhg8wk3t6Tk+dMi2dPI3EiAXK164PSEW4q+IuShP1kyeLAkvhkp0VGO
kFm+VE+jbUFzjfDbW6KLjJBjgGNdnQiv/op6D4Zc/aO8ePLLVdrI4nZCbXFX+mJb
EkVe9+LjBQgedWiRIMQgb6iaAxqNdXkoGp+Sm8c16q4Ep13RZbgWN0MgNp52T99B
jFN65Gas/tmNf/wW2oa1RWLq0A4k7ph8RV2Qhpb6oW/vvB0HTwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKZeysPT7xybx6XVxAbj9/AqEC6/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNDNjYjk1YmYtMzJiYi0z
NjdmLWI5NjktMmY5MWJjNWFiMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARLcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYHDMZUoXfcaH8Mdnz0/xag0uGW6+yYch30iB8pxQj7+94G4oY/KnWbag
ojnzau+jbBWLLzQvH+VEf8evRr+144O2zTBL0vLfGB3NtT4ea67jOSCNv1P7PQgJ
JxPHMiVX7S2sRTCv1U4HwTwqih/LU1HH78FZtXynh0X4rxghhBRNsuvc3DUkCDt4
B/sKqw1WYn+ZP3eWp1z0fwtwTDDnCTGX1CGiD8QW1cU8NrTw4D/FYIHF4CcHxmue
6illhsy5Bj5hHWUhqiVFvlGdOyPXEV4YlyE6w4eurwsHs4/AwG+9c5q7RvhDg1GN
ZLSBnM1mUIV2K/SqWERJTNs5yOUchQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:38 2025 by rpki-client