Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/d12f724d-1d73-3b19-aab4-6b67d3b7ef7a.roa
File:                     d12f724d-1d73-3b19-aab4-6b67d3b7ef7a.roa (raw, json)
Hash identifier:          PcTPc8E2PAtX6/BQ27Pktu3u1JifT0G10OFsFsdrchY=
Subject key identifier:   0D:88:39:1C:58:97:14:4A:3C:E2:F8:52:D9:54:A3:D3:04:03:25:DA
Certificate issuer:       /CN=e1fca709-9829-483c-a335-41bcfa34ee4e
Certificate serial:       010D0C9F43285849CE9A64AEFA274E52A9AEDA00
Authority key identifier: 6D:D1:1A:73:4B:14:07:01:55:9D:F0:29:6D:F6:5F:6E:BA:0F:27:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/d12f724d-1d73-3b19-aab4-6b67d3b7ef7a.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     62989
IP address blocks:        204.108.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:64:ae:fa:27:4e:52:a9:ae:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1fca709-9829-483c-a335-41bcfa34ee4e
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=60ab6449-3498-4e51-a691-4148e357d8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:f3:b9:e7:17:ca:fe:1b:4c:07:6b:a0:80:
                    74:ee:7b:0b:c2:de:55:b6:08:30:22:2d:b6:54:6c:
                    64:74:65:e4:26:22:47:6b:53:4e:a5:81:66:09:a6:
                    b8:51:3a:1e:8c:a6:74:78:66:fc:05:8f:6b:14:a6:
                    21:67:a6:fb:f6:cc:93:92:bd:fe:a9:0f:77:4f:1f:
                    0b:bf:db:46:c1:28:cc:60:aa:e3:91:19:1e:ab:8d:
                    11:1b:bd:2e:1e:90:c6:b2:e9:47:e9:03:09:8e:18:
                    9b:67:04:1b:84:dd:c3:35:31:c6:c1:15:50:01:94:
                    ae:25:76:a0:10:f9:7e:09:fe:36:44:50:9d:b0:2a:
                    ab:1d:c7:de:8b:ca:f4:e0:47:dd:5d:51:10:99:b1:
                    4c:d9:70:5a:d7:7f:c0:b6:6f:e0:d8:91:12:03:3a:
                    5e:2c:df:a3:42:d4:c5:ab:e3:92:e7:34:cf:aa:7d:
                    79:b8:0b:d4:56:ce:27:21:03:dc:6d:c5:e4:e1:53:
                    e6:43:c5:24:95:e3:76:ef:34:a7:8d:e4:60:48:ec:
                    35:0f:aa:55:98:00:ae:97:24:6f:23:1a:94:c7:15:
                    c6:3b:ee:85:85:cc:dc:9e:c7:f4:2b:77:bf:18:8b:
                    ed:a9:c8:f0:3c:a4:3a:3a:97:72:e1:9d:e5:65:9d:
                    71:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:88:39:1C:58:97:14:4A:3C:E2:F8:52:D9:54:A3:D3:04:03:25:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/d12f724d-1d73-3b19-aab4-6b67d3b7ef7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.crl

            X509v3 Authority Key Identifier:
                keyid:6D:D1:1A:73:4B:14:07:01:55:9D:F0:29:6D:F6:5F:6E:BA:0F:27:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b8:48:13:8c:94:9c:79:c8:b9:f3:2e:77:43:04:11:f8:4f:
         67:91:7c:60:dd:f3:56:5c:dd:22:9c:a2:57:b4:4b:90:b7:3c:
         59:fc:30:cf:91:0e:03:d8:0b:7b:06:8e:e5:0e:c3:0e:90:33:
         72:35:ca:7e:93:74:99:27:3e:9d:af:5b:b0:28:f6:0d:a5:b8:
         48:89:27:77:f1:53:e0:19:85:82:de:94:c6:89:01:96:d8:4d:
         0b:d0:c6:4f:b5:05:90:f2:2a:a7:80:c2:67:ed:2d:4c:f6:f2:
         ee:98:be:2c:1a:03:08:1c:53:bf:7a:a8:3b:a5:71:3e:0c:97:
         ec:42:19:b9:ef:f1:d2:39:fa:29:01:76:e1:04:dc:ba:28:f6:
         ca:4d:1c:67:1c:8b:2b:82:80:05:8d:ed:80:47:1d:bc:02:5c:
         0c:30:55:bd:cd:49:1e:1c:e2:57:7c:58:9c:9e:76:7b:62:e8:
         93:a9:b0:17:fe:ea:26:30:db:a3:ba:3e:1b:58:de:b6:cb:10:
         a2:ae:2c:be:e1:28:87:c1:1d:14:33:be:e1:46:76:97:c7:cc:
         c4:d3:13:93:aa:9a:a4:b0:fe:16:48:fd:91:37:59:81:af:78:
         bd:1f:a1:80:4b:a2:3b:34:b4:de:7b:47:f2:cb:c8:cf:77:d1:
         12:b5:8a:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmSu+idOUqmu2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTFmY2E3MDktOTgyOS00ODNjLWEzMzUtNDFiY2ZhMzRl
ZTRlMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
NjBhYjY0NDktMzQ5OC00ZTUxLWE2OTEtNDE0OGUzNTdkOGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3DzuecXyv4bTAdroIB07nsLwt5VtggwIi22
VGxkdGXkJiJHa1NOpYFmCaa4UToejKZ0eGb8BY9rFKYhZ6b79syTkr3+qQ93Tx8L
v9tGwSjMYKrjkRkeq40RG70uHpDGsulH6QMJjhibZwQbhN3DNTHGwRVQAZSuJXag
EPl+Cf42RFCdsCqrHcfei8r04EfdXVEQmbFM2XBa13/Atm/g2JESAzpeLN+jQtTF
q+OS5zTPqn15uAvUVs4nIQPcbcXk4VPmQ8UkleN27zSnjeRgSOw1D6pVmACulyRv
IxqUxxXGO+6Fhczcnsf0K3e/GIvtqcjwPKQ6Opdy4Z3lZZ1x5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2IORxYlxRKPOL4UtlUo9MEAyXaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMWZj
YTcwOS05ODI5LTQ4M2MtYTMzNS00MWJjZmEzNGVlNGUvZDEyZjcyNGQtMWQ3My0z
YjE5LWFhYjQtNmI2N2QzYjdlZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTFmY2E3MDktOTgyOS00ODNjLWEz
MzUtNDFiY2ZhMzRlZTRlL2UxZmNhNzA5LTk4MjktNDgzYy1hMzM1LTQxYmNmYTM0
ZWU0ZS5jcmwwHwYDVR0jBBgwFoAUbdEac0sUBwFVnfApbfZfbroPJ78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMWZjYTcwOS05ODI5LTQ4M2MtYTMzNS00MWJj
ZmEzNGVlNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGywMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEa4SBOMlJx5yLnzLndDBBH4T2eRfGDd81Zc3SKcole0S5C3PFn8MM+R
DgPYC3sGjuUOww6QM3I1yn6TdJknPp2vW7Ao9g2luEiJJ3fxU+AZhYLelMaJAZbY
TQvQxk+1BZDyKqeAwmftLUz28u6YviwaAwgcU796qDulcT4Ml+xCGbnv8dI5+ikB
duEE3Loo9spNHGcciyuCgAWN7YBHHbwCXAwwVb3NSR4c4ld8WJyednti6JOpsBf+
6iYw26O6PhtY3rbLEKKuLL7hKIfBHRQzvuFGdpfHzMTTE5OqmqSw/hZI/ZE3WYGv
eL0foYBLojs0tN57R/LLyM930RK1ivg=
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:35:52 2025 by rpki-client