Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/402d792e-55f9-359b-9600-499299195f62.roa
File:                     402d792e-55f9-359b-9600-499299195f62.roa (raw, json)
Hash identifier:          xrvG1eN+xmG3Xnx13GfW3JdCPJ5XctZW0y6lMpGwG9U=
Subject key identifier:   C1:8F:3D:AE:95:1E:28:E9:3E:C6:51:12:47:BF:FB:43:D1:A4:BD:32
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584AF95142908993C65720496B80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/402d792e-55f9-359b-9600-499299195f62.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     16696
IP address blocks:        216.120.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:42:90:89:93:c6:57:20:49:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=cf15192c-673a-4602-96f8-30edc53ca9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:71:51:91:82:1f:50:23:48:d0:bc:97:f7:
                    c7:19:ea:47:a8:2c:68:71:00:e3:d0:63:40:e6:11:
                    d4:c2:c6:e6:be:d3:e4:ec:7b:ee:7a:dc:25:78:0f:
                    b2:1a:a9:61:1f:df:e8:46:ed:c9:b8:b1:4a:82:4d:
                    dd:5c:c5:d6:b6:53:4a:00:c8:a1:92:fd:95:d1:b6:
                    a7:06:35:f7:d0:3d:6b:bd:52:dc:fa:94:c6:42:70:
                    b6:ce:98:e4:66:83:f0:41:ae:fb:e3:75:9e:ba:59:
                    c0:8c:18:95:63:c1:2d:c6:45:c9:11:4f:da:c5:18:
                    12:29:31:33:02:68:14:e6:dd:61:7b:0d:2e:5b:c8:
                    b9:bf:61:d6:33:5f:9e:0d:91:0e:68:12:63:14:a9:
                    b9:5d:55:80:40:dc:32:ad:f0:74:6e:aa:00:b4:78:
                    bb:35:02:d0:31:91:33:79:ba:2f:dd:21:b9:ff:7c:
                    d2:e1:d5:d9:af:72:c0:95:e1:4c:82:bb:4b:6d:81:
                    61:25:5f:ce:cc:79:3a:10:e5:d9:2e:77:ef:ca:eb:
                    e7:e9:81:51:ea:3a:c7:31:42:c3:11:9c:83:20:79:
                    89:5a:31:a1:dc:2c:11:88:6b:f5:5c:53:5f:09:e1:
                    89:7e:92:23:f3:1d:35:35:bd:2f:59:f8:fb:b7:61:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8F:3D:AE:95:1E:28:E9:3E:C6:51:12:47:BF:FB:43:D1:A4:BD:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/402d792e-55f9-359b-9600-499299195f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1a:b3:5e:51:c7:83:a2:25:b9:c8:a1:b1:92:30:2a:cb:3f:
         67:31:c6:af:26:61:88:62:5b:b1:86:fd:e1:1b:9e:c3:1e:bf:
         6c:fc:3c:16:89:8d:f2:76:cd:1e:cb:78:3e:4f:64:e2:7a:60:
         70:55:1c:9e:a0:8c:49:2d:73:75:ee:c8:ac:23:6d:bd:31:f3:
         b7:82:f6:94:38:1a:81:66:3c:c4:7b:e8:8a:5c:f7:66:dd:93:
         a8:6e:1b:eb:b7:ca:8a:2b:44:84:27:47:c2:07:4a:17:f9:b0:
         f1:43:ed:a2:97:ad:d0:bd:3a:d7:e2:da:19:a9:e8:bb:3c:36:
         3b:66:32:39:b9:7b:e7:58:d4:d8:a2:cd:dd:39:b7:ae:0e:83:
         9d:16:5c:15:b4:1d:ba:8d:80:db:43:7a:8b:db:f0:13:be:0a:
         2b:a3:cf:8b:42:cb:4b:c0:44:6b:fd:04:da:e2:a5:4c:07:53:
         33:b8:e3:9c:67:a5:7d:28:9e:ea:8e:e2:b1:8e:58:25:38:bc:
         76:be:4a:19:2d:3d:8e:49:d2:b9:b2:6b:7e:51:90:29:76:de:
         55:7f:83:5d:df:90:49:f4:5d:74:f2:2b:02:09:87:1f:23:48:
         42:b5:21:d2:fd:6d:53:f6:d4:5b:62:5e:fd:bf:6b:67:fd:3b:
         8f:1c:97:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUKQiZPGVyBJa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
Y2YxNTE5MmMtNjczYS00NjAyLTk2ZjgtMzBlZGM1M2NhOWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IVxUZGCH1AjSNC8l/fHGepHqCxocQDj0GNA
5hHUwsbmvtPk7HvuetwleA+yGqlhH9/oRu3JuLFKgk3dXMXWtlNKAMihkv2V0ban
BjX30D1rvVLc+pTGQnC2zpjkZoPwQa7743WeulnAjBiVY8EtxkXJEU/axRgSKTEz
AmgU5t1hew0uW8i5v2HWM1+eDZEOaBJjFKm5XVWAQNwyrfB0bqoAtHi7NQLQMZEz
ebov3SG5/3zS4dXZr3LAleFMgrtLbYFhJV/OzHk6EOXZLnfvyuvn6YFR6jrHMULD
EZyDIHmJWjGh3CwRiGv1XFNfCeGJfpIj8x01Nb0vWfj7t2FsiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGPPa6VHijpPsZREke/+0PRpL0yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNDAyZDc5MmUtNTVmOS0z
NTliLTk2MDAtNDk5Mjk5MTk1ZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HjMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0as15Rx4OiJbnIobGSMCrLP2cxxq8mYYhiW7GG/eEbnsMev2z8PBaJ
jfJ2zR7LeD5PZOJ6YHBVHJ6gjEktc3XuyKwjbb0x87eC9pQ4GoFmPMR76Ipc92bd
k6huG+u3yoorRIQnR8IHShf5sPFD7aKXrdC9Otfi2hmp6Ls8NjtmMjm5e+dY1Nii
zd05t64Og50WXBW0HbqNgNtDeovb8BO+Ciujz4tCy0vARGv9BNripUwHUzO445xn
pX0onuqO4rGOWCU4vHa+ShktPY5J0rmya35RkCl23lV/g13fkEn0XXTyKwIJhx8j
SEK1IdL9bVP21FtiXv2/a2f9O48clwI=
-----END CERTIFICATE-----
Generated at Wed Sep 17 20:26:22 2025 by rpki-client