Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/2d640c3c-898a-3d27-8c4b-b665382a49aa.roa
File:                     2d640c3c-898a-3d27-8c4b-b665382a49aa.roa (raw, json)
Hash identifier:          NFRXyXAiz6YNyZYNvIUU9YCN8aecUQCnPLBm7peN1NA=
Subject key identifier:   CB:05:5A:23:63:68:31:3B:C7:7B:35:17:B9:E6:58:52:9B:79:31:62
Certificate issuer:       /CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
Certificate serial:       010D0C9F4328584A761B5F491816E80287BF62E0
Authority key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/2d640c3c-898a-3d27-8c4b-b665382a49aa.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        206.15.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:5f:49:18:16:e8:02:87:bf:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=f2692aac-e584-4199-bb60-12462f2cec5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ed:01:96:3a:b1:00:5d:96:2c:d4:15:a7:a2:
                    59:63:81:59:e9:89:52:71:1f:09:3a:10:07:ca:ec:
                    20:b5:48:1f:56:2f:2b:04:51:6d:66:e9:c0:42:8b:
                    f0:81:88:d3:9c:27:47:40:24:2b:8b:9e:3f:d5:bf:
                    e1:39:99:58:c0:3f:ad:f8:75:33:a3:d1:6e:84:9c:
                    3b:f9:ca:20:b1:2c:e0:cc:1b:de:aa:cf:ea:72:fd:
                    07:53:c9:93:7a:9a:5e:33:17:b8:e4:d9:d2:90:2e:
                    7d:5a:ea:ed:28:1a:2e:af:97:0a:8b:c2:16:e4:e4:
                    ca:1c:26:4e:3a:e0:38:48:aa:06:e5:68:88:84:70:
                    08:44:f6:66:91:27:f8:f8:55:36:6c:81:ac:29:ff:
                    b0:ea:9e:7f:55:4d:ce:89:71:a2:92:83:44:c8:94:
                    5f:cd:f4:ef:9d:ef:a8:73:19:8f:6d:7c:ae:7b:94:
                    1a:68:66:5e:22:d2:f4:d2:04:db:02:71:74:7e:0c:
                    14:fd:0a:05:8b:6b:5e:c4:3d:f6:cc:78:fa:02:43:
                    ea:a7:f0:a3:44:e8:fe:a9:7d:f7:94:ab:80:10:4a:
                    fe:b2:60:ae:26:5c:c4:b1:fa:0f:62:be:a4:f3:93:
                    2a:47:fd:17:33:b0:a7:0b:7b:1f:77:82:2d:67:4d:
                    77:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:05:5A:23:63:68:31:3B:C7:7B:35:17:B9:E6:58:52:9B:79:31:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/2d640c3c-898a-3d27-8c4b-b665382a49aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e7:58:46:3f:79:a3:c2:68:10:1e:f8:4c:bf:a1:ab:47:25:
         76:82:ea:83:41:f0:e6:eb:d3:84:b2:75:df:e6:7b:db:db:4b:
         67:ba:db:eb:6e:18:b5:19:9d:cf:b6:1b:c4:6b:ae:5a:31:94:
         ea:22:ba:76:52:ba:db:13:84:54:db:f8:9e:92:b6:ce:6f:65:
         d7:8d:65:65:c2:f1:e7:b0:7d:b0:0d:dd:04:73:7a:f1:bc:5d:
         73:61:00:41:87:37:c0:03:7d:da:0a:ae:9f:af:16:19:aa:aa:
         9a:0a:1b:68:3f:95:46:4b:15:e4:ea:28:47:ac:e8:35:a8:6a:
         30:1a:48:c9:fd:b9:23:a0:22:b4:a1:6a:7c:47:27:6b:40:fd:
         43:54:2d:10:13:51:ce:22:6c:5f:91:44:8f:fe:0c:27:1f:08:
         e2:ae:66:23:a7:cf:a1:65:71:82:60:f6:15:b0:51:1c:3f:08:
         47:74:17:50:cb:cb:5d:e3:16:f3:10:46:21:9e:70:6e:0a:8d:
         a6:4b:54:12:07:12:df:d9:29:54:fe:f3:da:7f:9b:1a:3e:5f:
         dc:3a:57:bf:e6:65:17:cf:9f:2b:6b:1b:d1:33:19:d5:ef:06:
         4d:b6:94:91:b6:ec:88:ae:c7:cb:d2:83:3d:4e:05:b4:a1:66:
         40:77:0e:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G19JGBboAoe/YuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0MWVkNGYtMjhiYS00Y2JmLWE0YTYtMzg0MDU3NTY3
ZDA1MB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk
ZjI2OTJhYWMtZTU4NC00MTk5LWJiNjAtMTI0NjJmMmNlYzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu0BljqxAF2WLNQVp6JZY4FZ6YlScR8JOhAH
yuwgtUgfVi8rBFFtZunAQovwgYjTnCdHQCQri54/1b/hOZlYwD+t+HUzo9FuhJw7
+cogsSzgzBveqs/qcv0HU8mTeppeMxe45NnSkC59WurtKBour5cKi8IW5OTKHCZO
OuA4SKoG5WiIhHAIRPZmkSf4+FU2bIGsKf+w6p5/VU3OiXGikoNEyJRfzfTvne+o
cxmPbXyue5QaaGZeItL00gTbAnF0fgwU/QoFi2texD32zHj6AkPqp/CjROj+qX33
lKuAEEr+smCuJlzEsfoPYr6k85MqR/0XM7CnC3sfd4ItZ013zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsFWiNjaDE7x3s1F7nmWFKbeTFiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84NzQx
ZWQ0Zi0yOGJhLTRjYmYtYTRhNi0zODQwNTc1NjdkMDUvMmQ2NDBjM2MtODk4YS0z
ZDI3LThjNGItYjY2NTM4MmE0OWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODc0MWVkNGYtMjhiYS00Y2JmLWE0
YTYtMzg0MDU3NTY3ZDA1Lzg3NDFlZDRmLTI4YmEtNGNiZi1hNGE2LTM4NDA1NzU2
N2QwNS5jcmwwHwYDVR0jBBgwFoAUsE/SHEM4BtAnjr2YE/VDw7NIiSAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84NzQxZWQ0Zi0yOGJhLTRjYmYtYTRhNi0zODQw
NTc1NjdkMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzg+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbnWEY/eaPCaBAe+Ey/oatHJXaC6oNB8Obr04Sydd/me9vbS2e62+tu
GLUZnc+2G8RrrloxlOoiunZSutsThFTb+J6Sts5vZdeNZWXC8eewfbAN3QRzevG8
XXNhAEGHN8ADfdoKrp+vFhmqqpoKG2g/lUZLFeTqKEes6DWoajAaSMn9uSOgIrSh
anxHJ2tA/UNULRATUc4ibF+RRI/+DCcfCOKuZiOnz6FlcYJg9hWwURw/CEd0F1DL
y13jFvMQRiGecG4KjaZLVBIHEt/ZKVT+89p/mxo+X9w6V7/mZRfPnytrG9EzGdXv
Bk22lJG27Iiux8vSgz1OBbShZkB3Dso=
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:35:00 2025 by rpki-client