Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/06d4b122-7a26-3109-a4c6-1f7987347027.roa
File:                     06d4b122-7a26-3109-a4c6-1f7987347027.roa (raw, json)
Hash identifier:          t4BJI930eFwpslYIoJiTeFiOAXAhRCD8MQXGBYnVJd0=
Subject key identifier:   59:F9:C0:6F:9E:9B:D9:2D:A3:5B:55:C8:1D:CE:1B:0D:EA:0B:ED:3E
Certificate issuer:       /CN=c634bf2d-3875-4079-9788-431e36d8743a
Certificate serial:       010D0C9F43285849E7BA7CBC10AF136B46FC4D00
Authority key identifier: 8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/06d4b122-7a26-3109-a4c6-1f7987347027.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     400718
IP address blocks:        168.102.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7c:bc:10:af:13:6b:46:fc:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c634bf2d-3875-4079-9788-431e36d8743a
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=5809ee08-d100-43df-979f-224c36b251ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:48:81:fb:7c:73:44:02:e5:12:d9:25:3e:91:
                    be:0c:c1:6f:43:7f:fd:f8:d7:57:c6:9a:56:37:0a:
                    88:af:e2:f4:1d:4c:8c:ee:a8:c9:cb:cf:08:58:15:
                    5d:dc:f1:9a:c8:79:b5:51:af:1e:06:ac:fd:75:02:
                    2c:42:08:34:ec:a0:fc:19:ef:68:53:d7:f8:ac:b5:
                    a1:0e:59:da:57:c0:69:bb:51:15:85:cd:22:2a:61:
                    f5:68:62:34:a7:3e:aa:6a:c4:39:46:25:43:3d:63:
                    76:ec:62:cb:22:86:80:c4:8f:2d:ed:fa:83:41:e9:
                    61:1c:39:a2:ee:6f:ca:7c:e5:45:c8:0a:8f:50:b1:
                    fa:b7:51:f9:9e:12:bb:fd:18:8d:0e:96:50:c1:6f:
                    35:95:a7:db:0b:12:5a:31:04:c8:ce:05:b8:ee:04:
                    15:4b:6c:a6:62:42:b7:85:22:3a:e4:09:69:82:b6:
                    dd:ed:73:c1:58:a6:64:9c:90:96:22:2e:02:3c:57:
                    48:13:5b:e9:f2:9c:0a:2d:0c:8e:9e:84:b8:3a:76:
                    a6:55:1c:8d:a7:0d:8f:c5:fc:c8:c7:4c:fc:10:e6:
                    a7:50:ed:19:f1:bd:db:87:35:27:8b:11:74:96:49:
                    fd:77:38:b9:41:f7:cf:d9:14:83:6b:bd:2b:08:90:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F9:C0:6F:9E:9B:D9:2D:A3:5B:55:C8:1D:CE:1B:0D:EA:0B:ED:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/06d4b122-7a26-3109-a4c6-1f7987347027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl

            X509v3 Authority Key Identifier:
                keyid:8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.102.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d1:a8:c6:cb:66:ab:20:28:27:eb:9a:62:fc:8a:a4:ed:09:
         a7:fd:5c:4b:1b:b3:84:ce:d1:68:fd:a5:da:35:40:e3:8f:41:
         00:68:da:c4:9a:4e:85:11:3b:ca:ea:ee:9f:f6:e2:18:1e:e9:
         44:a1:1c:d9:c6:78:bb:0c:92:05:44:3d:de:75:13:86:8d:98:
         18:5e:94:29:54:33:7e:25:42:b7:01:7f:bf:0a:68:45:83:f2:
         15:df:ba:ca:2a:80:08:3f:7a:6e:60:48:67:12:93:d8:3f:14:
         4a:25:f8:01:5b:be:34:19:89:8f:97:e9:ff:ee:cc:8a:9e:c9:
         fe:e3:70:61:f6:90:4b:66:b8:6e:77:f4:27:f3:0e:34:85:fb:
         f3:3a:bf:df:a2:60:ab:22:57:04:66:ff:1b:95:15:5a:8a:f3:
         b3:d2:79:58:0b:23:5c:6e:7a:ec:db:dd:2b:17:c7:0e:3f:32:
         7f:bd:0a:b9:d1:e8:ad:06:34:cf:92:99:73:59:cd:db:b6:54:
         17:39:9d:e2:11:6f:ee:63:36:ff:ec:77:08:92:bc:1d:06:bc:
         c5:14:32:34:44:dd:d6:28:7f:d3:e5:d4:56:3e:af:cc:8d:9c:
         1c:35:66:92:3a:78:c4:52:40:d3:0c:91:dd:1e:43:4c:e4:26:
         8c:95:fd:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuny8EK8Ta0b8TQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYzNGJmMmQtMzg3NS00MDc5LTk3ODgtNDMxZTM2ZDg3
NDNhMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
NTgwOWVlMDgtZDEwMC00M2RmLTk3OWYtMjI0YzM2YjI1MWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0iB+3xzRALlEtklPpG+DMFvQ3/9+NdXxppW
NwqIr+L0HUyM7qjJy88IWBVd3PGayHm1Ua8eBqz9dQIsQgg07KD8Ge9oU9f4rLWh
DlnaV8Bpu1EVhc0iKmH1aGI0pz6qasQ5RiVDPWN27GLLIoaAxI8t7fqDQelhHDmi
7m/KfOVFyAqPULH6t1H5nhK7/RiNDpZQwW81lafbCxJaMQTIzgW47gQVS2ymYkK3
hSI65Alpgrbd7XPBWKZknJCWIi4CPFdIE1vp8pwKLQyOnoS4OnamVRyNpw2PxfzI
x0z8EOanUO0Z8b3bhzUnixF0lkn9dzi5QffP2RSDa70rCJBIZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFn5wG+em9kto1tVyB3OGw3qC+0+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNjM0
YmYyZC0zODc1LTQwNzktOTc4OC00MzFlMzZkODc0M2EvMDZkNGIxMjItN2EyNi0z
MTA5LWE0YzYtMWY3OTg3MzQ3MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzYzNGJmMmQtMzg3NS00MDc5LTk3
ODgtNDMxZTM2ZDg3NDNhL2M2MzRiZjJkLTM4NzUtNDA3OS05Nzg4LTQzMWUzNmQ4
NzQzYS5jcmwwHwYDVR0jBBgwFoAUjznnANhpkhCHgv+7RhaeZJqG1cIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNjM0YmYyZC0zODc1LTQwNzktOTc4OC00MzFl
MzZkODc0M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqGYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPRqMbLZqsgKCfrmmL8iqTtCaf9XEsbs4TO0Wj9pdo1QOOPQQBo2sSa
ToURO8rq7p/24hge6UShHNnGeLsMkgVEPd51E4aNmBhelClUM34lQrcBf78KaEWD
8hXfusoqgAg/em5gSGcSk9g/FEol+AFbvjQZiY+X6f/uzIqeyf7jcGH2kEtmuG53
9CfzDjSF+/M6v9+iYKsiVwRm/xuVFVqK87PSeVgLI1xueuzb3SsXxw4/Mn+9CrnR
6K0GNM+SmXNZzdu2VBc5neIRb+5jNv/sdwiSvB0GvMUUMjRE3dYof9Pl1FY+r8yN
nBw1ZpI6eMRSQNMMkd0eQ0zkJoyV/R0=
-----END CERTIFICATE-----
Generated at Fri Jun 6 13:54:18 2025 by rpki-client