Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e5f38049-5768-3461-b639-174ebc10ea6c.roa
File:                     e5f38049-5768-3461-b639-174ebc10ea6c.roa (raw, json)
Hash identifier:          YBRxVwpyDzi3h4SDUuDfvvSkxS+amnwR45gV6IBr37k=
Subject key identifier:   FE:08:11:E4:1A:E3:D7:3A:04:A6:91:7E:D8:32:8B:DD:88:2C:8D:75
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D73D8573F86385F8F500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e5f38049-5768-3461-b639-174ebc10ea6c.roa
Signing time:             Fri 30 May 2025 19:11:42 +0000
ROA not before:           Fri 30 May 2025 19:11:42 +0000
ROA not after:            Thu 28 Aug 2025 19:11:42 +0000
asID:                     36850
IP address blocks:        204.85.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d7:3d:85:73:f8:63:85:f8:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:42 2025 GMT
            Not After : Aug 28 19:11:42 2025 GMT
        Subject: CN=a85a92e8-d3e8-4dab-b4a1-15b414f31f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:86:9d:cb:8d:f7:0b:52:e4:c7:5b:85:ca:85:
                    e6:3b:5a:1e:6c:a0:1b:5c:9d:9f:0f:79:02:a6:fe:
                    39:13:3c:31:77:9b:23:1b:2e:ad:aa:68:c1:09:67:
                    79:3e:a4:31:84:31:5e:54:2c:ec:20:9f:e7:51:9b:
                    91:50:66:79:73:3a:19:15:bf:44:67:b2:50:b6:31:
                    69:76:25:23:fe:c6:b2:c5:99:5f:2d:b6:72:3a:cf:
                    18:64:9c:fa:9d:f6:f3:a1:c0:58:92:52:57:80:44:
                    be:52:0f:cd:d3:65:53:31:44:e8:f2:88:e2:8e:f0:
                    ea:ae:14:7e:cf:70:df:53:c0:96:fc:10:e1:92:d2:
                    4e:91:96:17:16:e1:05:38:f7:ba:b8:ad:1a:27:fe:
                    c0:28:36:55:47:f2:71:1f:8b:41:20:8c:6b:84:fb:
                    59:62:a6:f8:05:a4:54:04:98:8c:92:46:d7:11:96:
                    3c:37:73:c4:ba:5b:c9:7c:87:07:49:d8:b6:c5:74:
                    ca:34:cf:00:2c:19:9c:0f:9c:82:af:fd:bf:b8:f3:
                    54:4f:b1:7a:28:33:24:58:22:ae:71:be:b0:97:fc:
                    1e:57:e7:84:7b:ad:d1:6c:31:2d:14:01:0d:62:05:
                    80:ac:70:ed:50:cf:f2:ae:44:23:14:fa:cb:2f:49:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:08:11:E4:1A:E3:D7:3A:04:A6:91:7E:D8:32:8B:DD:88:2C:8D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e5f38049-5768-3461-b639-174ebc10ea6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.85.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:69:07:5e:06:ff:43:5f:ad:4d:91:b3:43:de:e7:44:62:8a:
         db:de:97:70:73:36:e1:08:0a:f6:88:40:b8:48:15:2e:55:02:
         26:1a:75:f4:dd:ca:5f:2d:73:cb:45:aa:5e:a1:a6:21:6b:4a:
         4d:bf:e3:b3:d8:5f:38:71:e5:ac:b4:40:b9:32:f6:25:7f:e2:
         1d:83:90:8a:95:93:de:01:26:35:86:e9:6e:67:be:12:10:e2:
         a8:fa:47:ef:ab:dd:f6:7d:a7:d0:e8:a6:ce:c3:20:a4:bc:fa:
         6b:ac:ef:1b:18:fe:3e:69:b7:20:24:18:9b:bd:86:6e:56:39:
         8f:73:0a:33:4a:de:8f:a1:29:bb:8d:d4:43:14:94:80:6f:e1:
         63:0f:14:8c:bd:3f:70:31:5c:b4:85:b4:95:14:77:2d:09:a6:
         1f:ed:7d:c8:b6:6a:2d:aa:5d:88:c6:35:a9:98:bc:21:59:08:
         2f:05:57:81:8e:9d:27:89:71:7f:eb:29:67:bb:cc:78:04:64:
         2f:20:74:72:66:51:dd:f2:e4:ff:0c:59:bf:6f:25:92:63:c9:
         15:65:2c:eb:c7:55:0c:2b:2b:3d:8f:83:10:ff:14:a3:86:9c:
         ae:ba:9b:ef:97:89:e0:56:70:1e:bd:d8:67:98:e9:2e:66:f3:
         d9:28:01:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ9c9hXP4Y4X49QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTE0MloXDTI1MDgyODE5MTE0MlowLzEtMCsGA1UEAxMk
YTg1YTkyZTgtZDNlOC00ZGFiLWI0YTEtMTViNDE0ZjMxZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4ady433C1Lkx1uFyoXmO1oebKAbXJ2fD3kC
pv45Ezwxd5sjGy6tqmjBCWd5PqQxhDFeVCzsIJ/nUZuRUGZ5czoZFb9EZ7JQtjFp
diUj/sayxZlfLbZyOs8YZJz6nfbzocBYklJXgES+Ug/N02VTMUTo8ojijvDqrhR+
z3DfU8CW/BDhktJOkZYXFuEFOPe6uK0aJ/7AKDZVR/JxH4tBIIxrhPtZYqb4BaRU
BJiMkkbXEZY8N3PEulvJfIcHSdi2xXTKNM8ALBmcD5yCr/2/uPNUT7F6KDMkWCKu
cb6wl/weV+eEe63RbDEtFAENYgWArHDtUM/yrkQjFPrLL0nN+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4IEeQa49c6BKaRftgyi92ILI11MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZTVmMzgwNDktNTc2OC0z
NDYxLWI2MzktMTc0ZWJjMTBlYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzFWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1pB14G/0NfrU2Rs0Pe50Riitvel3BzNuEICvaIQLhIFS5VAiYadfTd
yl8tc8tFql6hpiFrSk2/47PYXzhx5ay0QLky9iV/4h2DkIqVk94BJjWG6W5nvhIQ
4qj6R++r3fZ9p9Dops7DIKS8+mus7xsY/j5ptyAkGJu9hm5WOY9zCjNK3o+hKbuN
1EMUlIBv4WMPFIy9P3AxXLSFtJUUdy0Jph/tfci2ai2qXYjGNamYvCFZCC8FV4GO
nSeJcX/rKWe7zHgEZC8gdHJmUd3y5P8MWb9vJZJjyRVlLOvHVQwrKz2PgxD/FKOG
nK66m++XieBWcB692GeY6S5m89koAf0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:23:35 2025 by rpki-client