Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e4c912e9-eb26-3e14-9517-4d02c07e315f.roa
File:                     e4c912e9-eb26-3e14-9517-4d02c07e315f.roa (raw, json)
Hash identifier:          uqyq39MWt3cx/yDQ7oV/+DiI4YuaTRQuKz8F9SKwrTk=
Subject key identifier:   AA:C1:8F:A2:30:E0:6C:1C:43:3C:4E:8A:21:2B:3B:C4:CA:F9:9A:DF
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A03A54600392D37E20F76ED00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e4c912e9-eb26-3e14-9517-4d02c07e315f.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14061
IP address blocks:        198.199.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:46:00:39:2d:37:e2:0f:76:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=955c3c8f-feb4-4030-8896-e211f89fabc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:fa:aa:b7:fa:40:6f:eb:f3:64:ee:20:05:
                    c3:24:aa:e1:03:d5:5b:45:5d:11:00:6a:70:58:1f:
                    1d:d2:d1:ec:49:ae:bb:45:01:59:d4:9d:b0:d6:c7:
                    5a:28:e8:5a:54:4b:87:6a:2e:1e:07:84:1f:cd:f2:
                    86:32:09:64:c0:93:50:b0:30:5f:3d:36:b6:4c:46:
                    ff:9a:b8:f4:5c:a9:8e:fa:65:4c:e2:74:0a:b8:8e:
                    94:ee:29:43:38:74:b4:57:11:89:5d:1f:85:59:98:
                    09:1b:92:24:47:fa:94:a0:af:65:fd:67:f3:55:89:
                    53:aa:ad:f2:e8:44:db:3f:a7:c5:7c:09:c4:9b:d9:
                    f9:77:d7:75:32:e6:d3:21:88:78:44:fb:2c:bd:30:
                    ba:04:3c:1b:49:c5:9e:18:9a:e7:dc:b2:90:d0:a9:
                    60:bc:45:e7:a5:d1:0a:f2:d5:a7:bd:f7:2a:75:f0:
                    73:fc:87:c0:68:7a:3a:38:35:cb:40:02:7a:20:8b:
                    86:2e:e3:1f:4a:d0:82:0a:70:3e:39:ab:7c:91:e8:
                    91:b3:41:00:8a:34:16:ee:11:11:98:e7:7b:4b:d0:
                    df:f3:c5:58:7f:bf:57:67:ca:f6:eb:ad:1a:d1:62:
                    07:c7:7b:11:00:68:93:5d:f1:e1:04:00:20:f8:63:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C1:8F:A2:30:E0:6C:1C:43:3C:4E:8A:21:2B:3B:C4:CA:F9:9A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e4c912e9-eb26-3e14-9517-4d02c07e315f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.199.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:78:88:f2:91:71:8d:01:ce:b0:79:e0:7b:44:2d:0e:e3:ee:
         8f:44:e2:e6:f0:fd:f0:8c:b6:95:f2:fc:7a:b1:67:d4:db:9c:
         57:85:ae:51:d2:41:c2:26:23:89:b9:f0:df:6e:6f:1a:68:37:
         bc:a3:ea:8c:24:01:d6:df:1c:ce:59:f0:a1:09:6d:39:67:3a:
         16:ef:c4:59:ac:94:fa:28:9a:4c:ab:df:8a:ce:ca:e6:6a:f4:
         41:5d:d8:1c:ca:08:43:22:36:b0:9c:35:65:98:bd:63:cb:5a:
         e6:72:e4:73:35:3d:0e:fb:88:f0:6d:2d:ee:67:fb:78:95:1e:
         db:08:4c:d0:21:24:58:99:2a:1c:3b:6c:a1:f9:7d:75:87:8b:
         d3:15:c2:39:66:ab:9e:cc:89:74:3b:b8:5f:87:30:0f:c6:d0:
         41:ff:22:6f:e8:60:65:52:04:67:b9:c1:5a:ea:16:45:6b:8b:
         58:15:62:5b:e4:05:64:f2:d0:76:90:e5:79:45:53:09:6d:26:
         88:00:91:b8:c7:c1:e3:77:38:aa:66:17:33:bd:46:16:98:72:
         a5:9c:49:6d:02:a2:3a:12:90:05:ca:be:cb:98:71:b9:be:f7:
         33:d4:d9:20:25:8c:eb:08:dc:20:22:54:ab:9d:9a:02:af:a7:
         fa:40:70:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUYAOS034g927QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
OTU1YzNjOGYtZmViNC00MDMwLTg4OTYtZTIxMWY4OWZhYmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJr6qrf6QG/r82TuIAXDJKrhA9VbRV0RAGpw
WB8d0tHsSa67RQFZ1J2w1sdaKOhaVEuHai4eB4QfzfKGMglkwJNQsDBfPTa2TEb/
mrj0XKmO+mVM4nQKuI6U7ilDOHS0VxGJXR+FWZgJG5IkR/qUoK9l/WfzVYlTqq3y
6ETbP6fFfAnEm9n5d9d1MubTIYh4RPssvTC6BDwbScWeGJrn3LKQ0KlgvEXnpdEK
8tWnvfcqdfBz/IfAaHo6ODXLQAJ6IIuGLuMfStCCCnA+Oat8keiRs0EAijQW7hER
mOd7S9Df88VYf79XZ8r2660a0WIHx3sRAGiTXfHhBAAg+GP1sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKrBj6Iw4GwcQzxOiiErO8TK+ZrfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZTRjOTEyZTktZWIyNi0z
ZTE0LTk1MTctNGQwMmMwN2UzMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxsdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALt4iPKRcY0BzrB54HtELQ7j7o9E4ubw/fCMtpXy/HqxZ9TbnFeFrlHS
QcImI4m58N9ubxpoN7yj6owkAdbfHM5Z8KEJbTlnOhbvxFmslPoomkyr34rOyuZq
9EFd2BzKCEMiNrCcNWWYvWPLWuZy5HM1PQ77iPBtLe5n+3iVHtsITNAhJFiZKhw7
bKH5fXWHi9MVwjlmq57MiXQ7uF+HMA/G0EH/Im/oYGVSBGe5wVrqFkVri1gVYlvk
BWTy0HaQ5XlFUwltJogAkbjHweN3OKpmFzO9RhaYcqWcSW0CojoSkAXKvsuYcbm+
9zPU2SAljOsI3CAiVKudmgKvp/pAcCA=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:44:32 2025 by rpki-client