Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/75e2e1c6-5850-36b2-a065-7d03da4dc2d3.roa
File:                     75e2e1c6-5850-36b2-a065-7d03da4dc2d3.roa (raw, json)
Hash identifier:          Vv83nl8iWGy5nZm2z744ZIexQqkZ6xplDlbWyODTqQU=
Subject key identifier:   5E:04:27:08:68:50:1E:00:21:7D:74:ED:E8:C3:9F:23:2E:8D:BF:DB
Certificate issuer:       /CN=487abf98-3073-43c6-b10e-a615e64ccc65
Certificate serial:       010D0C9F4328584AD3A0F4E39C869C8DFCD2A280
Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/75e2e1c6-5850-36b2-a065-7d03da4dc2d3.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        206.55.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:f4:e3:9c:86:9c:8d:fc:d2:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=4c5ca779-81bc-4771-ae65-eddccd2a81db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e4:72:df:00:11:2c:ed:e2:35:9e:30:6b:c6:
                    3e:87:c9:58:7e:3f:3d:15:23:f5:6c:03:a0:cf:e4:
                    6d:32:00:05:b4:ed:fb:54:7b:17:03:f4:bd:95:33:
                    28:a3:8e:2c:f3:3c:9b:63:75:26:79:6e:cc:7d:34:
                    ed:56:99:cb:63:c1:9a:ff:23:8b:9d:d5:33:01:a7:
                    f8:45:b4:94:07:ba:e9:04:e8:e3:5a:e8:1a:07:f8:
                    bb:ba:4e:58:05:cf:73:e8:0d:a1:54:5a:1c:ef:ff:
                    c9:7c:42:4b:94:a3:93:82:87:11:18:3d:f3:4f:ae:
                    e7:f9:2c:95:cb:8d:72:3c:93:26:ce:43:80:c7:59:
                    43:7a:66:55:d4:1c:83:32:d8:8a:40:9a:b4:e0:25:
                    7f:82:2b:b3:6d:0d:08:a9:d9:66:33:d2:8f:3c:93:
                    5e:5b:bb:3c:f5:c3:1a:6a:97:a7:16:07:07:f5:bd:
                    d4:eb:cc:83:2b:88:94:20:27:36:d5:5b:0e:7b:17:
                    9f:83:f8:31:87:2f:56:76:28:aa:aa:f0:bd:a2:77:
                    4f:6b:8f:6d:fd:2e:9a:47:0f:f0:49:62:81:6d:23:
                    b3:00:73:78:c9:8f:c2:10:ef:df:8c:ba:44:03:d0:
                    c2:42:56:03:23:63:76:85:45:4f:e0:12:69:2f:93:
                    3c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:04:27:08:68:50:1E:00:21:7D:74:ED:E8:C3:9F:23:2E:8D:BF:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/75e2e1c6-5850-36b2-a065-7d03da4dc2d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl

            X509v3 Authority Key Identifier:
                keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:43:17:c5:bf:5b:1d:8a:1f:12:01:da:8c:4f:33:5c:2c:47:
         70:5e:6a:1b:4c:45:c2:91:ee:f5:57:f9:17:d8:ed:cb:e0:5b:
         54:be:8a:c3:e4:8d:58:c6:9c:bf:e7:da:90:47:fb:0a:3c:94:
         57:6f:98:13:a9:86:93:c8:30:93:45:9e:dc:39:c1:13:af:c4:
         27:b5:f1:00:af:a3:ca:44:76:61:69:24:e4:4d:4c:2b:bf:4c:
         f6:7f:5f:7c:19:b4:b0:29:81:71:b3:0e:72:01:64:72:d0:33:
         67:f0:4d:9d:8d:dc:a1:ce:74:b2:f6:3a:4a:22:a8:28:da:56:
         20:f2:84:18:40:28:be:71:ac:b4:44:4e:ca:fe:12:e7:1b:2f:
         31:02:ab:6e:26:47:55:91:71:99:77:88:6e:c7:98:39:7f:76:
         17:15:5a:07:61:6b:8f:76:a5:92:9f:20:dd:06:5b:bd:d0:2d:
         0e:ed:c5:8e:54:1f:52:12:c4:9e:84:a3:96:a5:95:0a:94:9b:
         45:c6:93:10:bc:44:ea:dc:c3:88:39:a7:8f:4f:b1:9b:a3:ef:
         56:f2:42:94:bd:0e:4b:48:00:74:80:a5:8c:e6:d0:9c:de:91:
         cf:91:8a:d8:7e:be:dd:e2:f4:ff:b0:90:68:b6:c2:83:45:23:
         d9:24:9b:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPTjnIacjfzSooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj
YzY1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
NGM1Y2E3NzktODFiYy00NzcxLWFlNjUtZWRkY2NkMmE4MWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheRy3wARLO3iNZ4wa8Y+h8lYfj89FSP1bAOg
z+RtMgAFtO37VHsXA/S9lTMoo44s8zybY3UmeW7MfTTtVpnLY8Ga/yOLndUzAaf4
RbSUB7rpBOjjWugaB/i7uk5YBc9z6A2hVFoc7//JfEJLlKOTgocRGD3zT67n+SyV
y41yPJMmzkOAx1lDemZV1ByDMtiKQJq04CV/giuzbQ0IqdlmM9KPPJNeW7s89cMa
apenFgcH9b3U68yDK4iUICc21VsOexefg/gxhy9WdiiqqvC9ondPa49t/S6aRw/w
SWKBbSOzAHN4yY/CEO/fjLpEA9DCQlYDI2N2hUVP4BJpL5M8cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF4EJwhoUB4AIX107ejDnyMujb/bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh
YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvNzVlMmUxYzYtNTg1MC0z
NmIyLWEwNjUtN2QwM2RhNGRjMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx
MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj
Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1
ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjdkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5DF8W/Wx2KHxIB2oxPM1wsR3BeahtMRcKR7vVX+RfY7cvgW1S+isPk
jVjGnL/n2pBH+wo8lFdvmBOphpPIMJNFntw5wROvxCe18QCvo8pEdmFpJORNTCu/
TPZ/X3wZtLApgXGzDnIBZHLQM2fwTZ2N3KHOdLL2OkoiqCjaViDyhBhAKL5xrLRE
Tsr+EucbLzECq24mR1WRcZl3iG7HmDl/dhcVWgdha492pZKfIN0GW73QLQ7txY5U
H1ISxJ6Eo5allQqUm0XGkxC8ROrcw4g5p49PsZuj71byQpS9DktIAHSApYzm0Jze
kc+Rith+vt3i9P+wkGi2woNFI9kkm2M=
-----END CERTIFICATE-----
Generated at Wed Aug 20 13:12:57 2025 by rpki-client