Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/8dd28c05-4117-3fd1-8821-8081d349d8d6.roa
File:                     8dd28c05-4117-3fd1-8821-8081d349d8d6.roa (raw, json)
Hash identifier:          YXESh89OMUABrts3wHT5kL3LNtZxT8uxY0oZ5IfGmWI=
Subject key identifier:   CE:1A:8F:8B:81:BC:96:C4:57:10:A9:3B:05:77:C1:C0:E3:3D:65:96
Certificate issuer:       /CN=a6de61ac-9f9a-4bc7-884b-62b3c2848a5e
Certificate serial:       010D0C9F432858490B4C1AAEA4F8D9D9A4E31AC0
Authority key identifier: 72:EB:B7:4E:24:B9:99:5B:0D:41:BD:EF:ED:CF:0D:BA:63:C5:2A:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/8dd28c05-4117-3fd1-8821-8081d349d8d6.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     32148
IP address blocks:        206.188.60.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:1a:ae:a4:f8:d9:d9:a4:e3:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6de61ac-9f9a-4bc7-884b-62b3c2848a5e
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=39ac281e-35e6-4765-9046-7fd7d5d96f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c4:fc:d7:32:4e:30:ae:31:f3:f3:4c:ea:5f:
                    93:e6:13:4b:11:6f:93:c1:2a:68:01:4c:98:01:5d:
                    57:23:e6:19:d3:65:e0:4b:6d:af:b5:ab:d9:30:8e:
                    72:d8:3b:69:f1:d9:ce:d2:3e:27:76:84:2d:d4:ba:
                    80:da:62:b5:88:68:bc:0e:c4:2f:63:9d:eb:39:ca:
                    d4:d4:f5:ad:79:0b:8a:bb:e7:76:a8:4d:72:e2:76:
                    ef:61:67:14:b5:ec:6f:d0:0e:fb:07:f7:28:af:c3:
                    09:d9:79:f9:3e:d9:3a:d3:cb:37:c2:7e:1f:fb:31:
                    ab:32:0d:5b:d2:ac:68:2e:9a:bd:01:b0:32:07:fe:
                    56:dd:08:6b:16:1e:1f:cc:c2:5c:46:92:ca:61:d5:
                    a2:6a:36:02:57:33:19:e1:93:b9:3d:7b:35:d1:39:
                    79:46:9c:c8:4a:a3:91:ce:df:d8:17:22:ff:f9:c9:
                    9d:da:3b:dc:03:92:e5:22:e2:b2:7d:76:4b:b4:ee:
                    7b:b0:71:e7:58:f1:c8:34:dd:98:42:30:13:ed:ee:
                    97:b1:f0:75:21:60:8c:e2:12:9e:9f:7b:d9:27:e2:
                    28:81:22:75:d8:2c:51:9c:8e:da:03:05:42:68:f3:
                    ed:df:fc:ab:d7:30:b3:5e:e8:37:15:00:7e:6a:fd:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1A:8F:8B:81:BC:96:C4:57:10:A9:3B:05:77:C1:C0:E3:3D:65:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/8dd28c05-4117-3fd1-8821-8081d349d8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.crl

            X509v3 Authority Key Identifier:
                keyid:72:EB:B7:4E:24:B9:99:5B:0D:41:BD:EF:ED:CF:0D:BA:63:C5:2A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6de61ac-9f9a-4bc7-884b-62b3c2848a5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:00:7c:14:00:25:ad:c2:43:25:83:5c:49:36:5f:92:f8:76:
         5e:13:da:19:ba:b9:4e:42:80:86:4e:59:9a:44:25:c9:d9:ee:
         df:fa:42:b1:1a:44:c4:0c:bc:e1:ce:ee:e8:cd:d0:9d:0a:b3:
         f2:f0:40:3d:1a:e8:32:9b:9a:2b:6e:ff:28:1f:c6:1a:3e:d5:
         f1:23:d7:57:38:3f:d8:4a:78:83:d8:82:48:07:28:da:a4:a0:
         2a:71:ac:97:d2:c2:b2:5c:ae:d4:aa:23:3a:95:29:53:3a:1b:
         16:4d:65:e3:6c:62:1b:45:bc:10:19:63:32:4c:64:bb:92:8b:
         70:e0:63:a9:29:e1:2e:80:d7:3d:79:39:17:05:3b:ce:81:07:
         82:7b:a1:e7:eb:0b:47:f0:38:5a:32:5a:60:22:ad:27:96:6f:
         6a:06:41:81:ed:5d:72:c0:36:4d:17:8b:f4:6d:81:a0:91:ff:
         bb:5d:9b:f5:4e:09:6e:b4:dd:27:b9:04:b7:d7:a5:6d:2a:10:
         e9:6c:3b:0f:31:fc:fd:25:c5:4d:4e:d0:48:c9:1a:bd:fe:d9:
         0a:e2:40:02:d0:57:b7:0d:e5:fc:c3:fb:a2:b7:48:9f:b2:89:
         00:04:c7:62:8a:e5:95:99:29:71:15:f2:ab:3c:dc:d3:dc:94:
         b0:db:c4:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBqupPjZ2aTjGsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTZkZTYxYWMtOWY5YS00YmM3LTg4NGItNjJiM2MyODQ4
YTVlMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
MzlhYzI4MWUtMzVlNi00NzY1LTkwNDYtN2ZkN2Q1ZDk2ZjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMT81zJOMK4x8/NM6l+T5hNLEW+TwSpoAUyY
AV1XI+YZ02XgS22vtavZMI5y2Dtp8dnO0j4ndoQt1LqA2mK1iGi8DsQvY53rOcrU
1PWteQuKu+d2qE1y4nbvYWcUtexv0A77B/cor8MJ2Xn5Ptk608s3wn4f+zGrMg1b
0qxoLpq9AbAyB/5W3QhrFh4fzMJcRpLKYdWiajYCVzMZ4ZO5PXs10Tl5RpzISqOR
zt/YFyL/+cmd2jvcA5LlIuKyfXZLtO57sHHnWPHINN2YQjAT7e6XsfB1IWCM4hKe
n3vZJ+IogSJ12CxRnI7aAwVCaPPt3/yr1zCzXug3FQB+av0wGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4aj4uBvJbEVxCpOwV3wcDjPWWWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmRl
NjFhYy05ZjlhLTRiYzctODg0Yi02MmIzYzI4NDhhNWUvOGRkMjhjMDUtNDExNy0z
ZmQxLTg4MjEtODA4MWQzNDlkOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTZkZTYxYWMtOWY5YS00YmM3LTg4
NGItNjJiM2MyODQ4YTVlL2E2ZGU2MWFjLTlmOWEtNGJjNy04ODRiLTYyYjNjMjg0
OGE1ZS5jcmwwHwYDVR0jBBgwFoAUcuu3TiS5mVsNQb3v7c8NumPFKsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNmRlNjFhYy05ZjlhLTRiYzctODg0Yi02MmIz
YzI4NDhhNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzrw8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGcAfBQAJa3CQyWDXEk2X5L4dl4T2hm6uU5CgIZOWZpEJcnZ7t/6QrEa
RMQMvOHO7ujN0J0Ks/LwQD0a6DKbmitu/ygfxho+1fEj11c4P9hKeIPYgkgHKNqk
oCpxrJfSwrJcrtSqIzqVKVM6GxZNZeNsYhtFvBAZYzJMZLuSi3DgY6kp4S6A1z15
ORcFO86BB4J7oefrC0fwOFoyWmAirSeWb2oGQYHtXXLANk0Xi/RtgaCR/7tdm/VO
CW603Se5BLfXpW0qEOlsOw8x/P0lxU1O0EjJGr3+2QriQALQV7cN5fzD+6K3SJ+y
iQAEx2KK5ZWZKXEV8qs83NPclLDbxBQ=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:12:30 2025 by rpki-client