Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/eca7232d-7a20-3978-b1ca-25de49ecce91.roa
File:                     eca7232d-7a20-3978-b1ca-25de49ecce91.roa (raw, json)
Hash identifier:          iJ960A00+UnCgC1IA94fIFUJ4s2l6RzZdHqdO6Z55eg=
Subject key identifier:   62:03:51:7F:92:B5:BF:88:25:91:17:1D:77:C6:4C:E6:1B:6C:A9:33
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584A07D530E2FEE17E0C4DC66560
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/eca7232d-7a20-3978-b1ca-25de49ecce91.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     13984
IP address blocks:        209.151.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:30:e2:fe:e1:7e:0c:4d:c6:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=8b2ce6ac-cecb-4d6a-8b24-a2bc59560340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:05:e4:4a:b7:53:dd:2d:61:0a:36:05:db:d1:
                    70:90:f1:98:42:ff:eb:55:2d:07:86:53:c7:55:46:
                    a2:c9:92:67:60:47:5b:e1:26:20:5a:09:55:33:ef:
                    55:9e:7d:2f:2c:2e:7b:71:5c:68:1f:95:df:b8:4f:
                    c7:fb:63:73:36:64:ab:6b:a5:8b:12:d1:96:69:28:
                    b2:99:1e:70:e1:a0:d9:d0:7a:d4:7e:75:21:a2:11:
                    f8:44:cf:1f:d4:89:84:82:fe:c7:88:ff:ad:46:7a:
                    2e:e5:3e:58:40:30:e5:eb:ed:c7:33:07:a6:ec:5d:
                    6c:6c:6f:fd:a0:a2:c9:bf:13:0e:93:1e:10:e8:67:
                    a0:bf:38:22:c5:3c:33:3c:c8:6b:3f:b2:c8:aa:ed:
                    13:ed:68:a1:03:a8:2c:fa:25:4b:df:90:32:c4:4e:
                    9a:88:c0:0c:5c:73:6e:f4:78:18:52:11:ae:b6:7d:
                    e7:cd:29:3e:67:31:54:1d:58:aa:b7:fe:cf:b2:eb:
                    99:3b:9e:d5:21:ae:d6:9e:d9:50:c6:16:72:1f:1d:
                    a2:68:d2:39:5f:f1:bb:52:11:e9:b7:bf:d3:81:7e:
                    12:75:fc:8f:46:95:1d:ac:36:7c:30:0d:9e:66:30:
                    9d:e8:63:d5:be:0c:85:05:d0:93:a6:5b:90:4f:2e:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:03:51:7F:92:B5:BF:88:25:91:17:1D:77:C6:4C:E6:1B:6C:A9:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/eca7232d-7a20-3978-b1ca-25de49ecce91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:86:34:84:bd:b0:3b:c7:ea:c8:77:8b:54:b2:35:30:73:17:
         68:f9:aa:14:ba:1b:31:94:45:f7:6f:f0:97:cb:e6:67:4f:e7:
         50:23:72:24:76:90:22:cb:b0:e6:fa:bb:a0:a7:9f:e1:0e:e8:
         58:2b:81:1a:87:d3:68:b4:45:5d:d6:9a:fc:4d:94:5c:e1:fb:
         3d:a1:e5:42:8e:b1:4c:4f:21:f5:28:e6:87:39:a8:67:a8:c9:
         5e:f2:ef:69:34:92:af:85:6b:17:5e:e5:02:b8:99:95:58:3b:
         80:48:00:cf:fa:ce:a3:27:17:3e:14:c9:5c:f1:12:ff:e8:de:
         e8:a8:6a:1c:fc:a2:8f:49:48:23:df:ac:97:b0:f7:95:1e:d5:
         2e:c1:0c:d3:0d:b3:e8:3b:0b:d4:83:95:34:47:38:f0:11:47:
         74:cf:e0:52:8f:c4:9e:05:f3:e8:d1:12:27:f0:5b:7b:57:84:
         f1:e0:9b:54:eb:0f:22:a3:35:f0:c1:41:d1:a7:42:f5:8e:10:
         66:4a:41:7e:68:c2:3f:31:60:ce:b9:58:4f:b0:d2:06:81:f0:
         95:1f:47:20:fc:87:92:45:53:9e:df:bf:fb:1d:c5:bd:0c:83:
         3a:e7:7b:da:73:5b:d7:a4:7e:3c:8b:0f:e6:0b:4a:a1:a6:2e:
         ea:f0:bc:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TDi/uF+DE3GZWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2
NGMzMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk
OGIyY2U2YWMtY2VjYi00ZDZhLThiMjQtYTJiYzU5NTYwMzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AXkSrdT3S1hCjYF29FwkPGYQv/rVS0HhlPH
VUaiyZJnYEdb4SYgWglVM+9Vnn0vLC57cVxoH5XfuE/H+2NzNmSra6WLEtGWaSiy
mR5w4aDZ0HrUfnUhohH4RM8f1ImEgv7HiP+tRnou5T5YQDDl6+3HMwem7F1sbG/9
oKLJvxMOkx4Q6GegvzgixTwzPMhrP7LIqu0T7WihA6gs+iVL35AyxE6aiMAMXHNu
9HgYUhGutn3nzSk+ZzFUHViqt/7PsuuZO57VIa7WntlQxhZyHx2iaNI5X/G7UhHp
t7/TgX4SdfyPRpUdrDZ8MA2eZjCd6GPVvgyFBdCTpluQTy6ZJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIDUX+Stb+IJZEXHXfGTOYbbKkzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh
ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvZWNhNzIzMmQtN2EyMC0z
OTc4LWIxY2EtMjVkZTQ5ZWNjZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk
MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1
NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj
OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZfIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiGNIS9sDvH6sh3i1SyNTBzF2j5qhS6GzGURfdv8JfL5mdP51AjciR2
kCLLsOb6u6Cnn+EO6FgrgRqH02i0RV3WmvxNlFzh+z2h5UKOsUxPIfUo5oc5qGeo
yV7y72k0kq+Faxde5QK4mZVYO4BIAM/6zqMnFz4UyVzxEv/o3uioahz8oo9JSCPf
rJew95Ue1S7BDNMNs+g7C9SDlTRHOPARR3TP4FKPxJ4F8+jREifwW3tXhPHgm1Tr
DyKjNfDBQdGnQvWOEGZKQX5owj8xYM65WE+w0gaB8JUfRyD8h5JFU57fv/sdxb0M
gzrne9pzW9ekfjyLD+YLSqGmLurwvJU=
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:24:11 2025 by rpki-client