Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/758894de-e0ed-3eee-9383-f458b435492a.roa
File:                     758894de-e0ed-3eee-9383-f458b435492a.roa (raw, json)
Hash identifier:          hnwG0PGwABdi2bhGy2uSWP1h3S7Pm8a22EJ6yVZTTxU=
Subject key identifier:   43:62:B5:85:40:F7:73:63:1D:8B:9C:31:F5:A3:83:ED:2E:48:FD:FA
Certificate issuer:       /CN=1278dcae-79cc-43c4-b974-7a8df750630c
Certificate serial:       010D0C9F4328584ADECBB5B6AD9A702AA51B5580
Authority key identifier: AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/758894de-e0ed-3eee-9383-f458b435492a.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     54850
IP address blocks:        208.91.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:b5:b6:ad:9a:70:2a:a5:1b:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1278dcae-79cc-43c4-b974-7a8df750630c
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=6111f8da-eaec-4c12-8cbe-ebabdc4678e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c9:75:70:83:b4:54:fa:39:75:a2:a9:d9:d2:
                    c5:e7:75:5d:21:fe:d4:29:22:e1:bb:80:d5:b3:06:
                    dc:00:01:17:45:31:1d:90:9c:b1:d0:01:26:2e:ff:
                    9e:4a:6d:7a:7d:3f:a6:6e:0b:63:29:13:7d:36:a9:
                    04:5d:68:d5:9f:a6:46:4c:32:3c:85:76:eb:fc:1e:
                    6a:f4:77:0e:b4:b2:7a:a8:e7:9b:db:e4:8d:10:15:
                    5c:ee:e8:8a:47:6c:30:1b:7c:66:5b:bc:b9:8f:a1:
                    38:38:b3:6b:5b:ab:71:55:07:3c:b8:73:07:82:eb:
                    f2:43:26:64:65:c1:03:d7:c4:e7:ff:77:d3:3c:b8:
                    e8:b6:4c:d6:21:47:e8:f3:f6:0c:c2:a4:9b:95:72:
                    c5:19:2f:df:79:39:ce:36:d1:97:e7:91:f7:63:f8:
                    76:4a:c7:c8:25:ad:e2:cf:f9:78:fa:a1:b5:72:d9:
                    a9:d9:89:83:4b:c8:bf:42:7c:cc:70:4d:b0:db:9b:
                    9a:f8:88:13:fe:55:fa:1b:7e:31:f9:96:22:87:d5:
                    a1:1c:de:ab:b1:5f:d0:3f:6e:b5:75:e3:d7:7d:d9:
                    6e:11:b2:84:fa:88:13:16:c8:39:fb:18:70:48:b9:
                    fb:a1:d2:69:43:31:33:44:c5:79:00:e4:81:fd:a6:
                    7f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:62:B5:85:40:F7:73:63:1D:8B:9C:31:F5:A3:83:ED:2E:48:FD:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/758894de-e0ed-3eee-9383-f458b435492a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl

            X509v3 Authority Key Identifier:
                keyid:AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:76:82:34:92:18:9d:4f:51:00:46:e9:ed:a5:db:3f:7b:7c:
         a4:47:89:73:9c:5e:f2:cd:0a:f9:26:62:7a:bc:18:85:4f:69:
         08:c1:a4:12:1e:71:23:dc:67:4f:a2:02:67:56:d2:12:9f:f2:
         a9:0f:b6:0c:16:e6:54:e0:ac:61:21:45:34:0f:63:c7:3e:27:
         b1:5e:16:69:05:51:95:fd:44:2a:86:c9:fb:42:82:66:6f:e7:
         a5:52:8c:c8:10:c4:fd:c6:1b:1f:03:e7:57:90:73:57:bf:e6:
         af:64:8d:73:9a:52:cc:d9:67:da:2b:09:d7:67:8c:8d:8e:3a:
         a9:a5:bf:3d:8f:44:8d:80:10:a5:ee:99:a4:bd:0a:dc:91:53:
         2c:11:9d:f8:e8:a7:62:47:9d:cc:a2:cf:c2:19:0b:e2:50:62:
         b5:ef:b5:e6:11:a4:ee:ae:e9:ea:3c:06:f3:44:76:20:83:89:
         21:7d:14:11:3d:39:d8:26:36:93:fe:10:f8:37:c3:3a:5a:3b:
         da:23:e8:66:f0:e1:50:fe:53:1e:60:55:de:de:07:24:ea:17:
         46:f7:95:ec:28:9d:26:cf:6a:9e:c8:f3:b7:20:fc:6a:2a:b6:
         11:07:45:ee:f4:78:08:90:ba:8a:08:7f:87:c5:b0:a8:d1:09:
         63:e3:61:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7W2rZpwKqUbVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI3OGRjYWUtNzljYy00M2M0LWI5NzQtN2E4ZGY3NTA2
MzBjMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk
NjExMWY4ZGEtZWFlYy00YzEyLThjYmUtZWJhYmRjNDY3OGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsl1cIO0VPo5daKp2dLF53VdIf7UKSLhu4DV
swbcAAEXRTEdkJyx0AEmLv+eSm16fT+mbgtjKRN9NqkEXWjVn6ZGTDI8hXbr/B5q
9HcOtLJ6qOeb2+SNEBVc7uiKR2wwG3xmW7y5j6E4OLNrW6txVQc8uHMHguvyQyZk
ZcED18Tn/3fTPLjotkzWIUfo8/YMwqSblXLFGS/feTnONtGX55H3Y/h2SsfIJa3i
z/l4+qG1ctmp2YmDS8i/QnzMcE2w25ua+IgT/lX6G34x+ZYih9WhHN6rsV/QP261
dePXfdluEbKE+ogTFsg5+xhwSLn7odJpQzEzRMV5AOSB/aZ/9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFENitYVA93NjHYucMfWjg+0uSP36MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjc4
ZGNhZS03OWNjLTQzYzQtYjk3NC03YThkZjc1MDYzMGMvNzU4ODk0ZGUtZTBlZC0z
ZWVlLTkzODMtZjQ1OGI0MzU0OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI3OGRjYWUtNzljYy00M2M0LWI5
NzQtN2E4ZGY3NTA2MzBjLzEyNzhkY2FlLTc5Y2MtNDNjNC1iOTc0LTdhOGRmNzUw
NjMwYy5jcmwwHwYDVR0jBBgwFoAUqh4vs7pUdgbjFYK+JtSg46Bv9yYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjc4ZGNhZS03OWNjLTQzYzQtYjk3NC03YThk
Zjc1MDYzMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fs8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGd2gjSSGJ1PUQBG6e2l2z97fKRHiXOcXvLNCvkmYnq8GIVPaQjBpBIe
cSPcZ0+iAmdW0hKf8qkPtgwW5lTgrGEhRTQPY8c+J7FeFmkFUZX9RCqGyftCgmZv
56VSjMgQxP3GGx8D51eQc1e/5q9kjXOaUszZZ9orCddnjI2OOqmlvz2PRI2AEKXu
maS9CtyRUywRnfjop2JHncyiz8IZC+JQYrXvteYRpO6u6eo8BvNEdiCDiSF9FBE9
OdgmNpP+EPg3wzpaO9oj6Gbw4VD+Ux5gVd7eByTqF0b3lewonSbPap7I87cg/Goq
thEHRe70eAiQuooIf4fFsKjRCWPjYSU=
-----END CERTIFICATE-----
Generated at Thu Aug 21 01:47:33 2025 by rpki-client