Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/abd8ba96-6442-37e0-adea-b9ee7ef663fc.roa
File:                     abd8ba96-6442-37e0-adea-b9ee7ef663fc.roa (raw, json)
Hash identifier:          iA31lsKYeCEI5CS5tDhLfuzxECQLIiYzRC2fabUIxqc=
Subject key identifier:   CB:B0:56:D7:C5:25:56:D8:7D:55:66:5B:A6:83:0E:B9:CF:D0:5E:C5
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584A10354958F1F05517555CE784
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/abd8ba96-6442-37e0-adea-b9ee7ef663fc.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     14297
IP address blocks:        206.201.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:49:58:f1:f0:55:17:55:5c:e7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=f400e088-6761-4da7-b2da-381319701c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:51:b6:9f:35:eb:d6:3a:8d:90:2e:9e:b0:
                    d1:3a:6c:d7:34:b8:59:f2:df:e5:9f:c9:5e:0a:f7:
                    5c:3d:44:b6:cd:fc:ce:53:ef:82:45:d9:6a:8d:a0:
                    c5:f6:db:59:39:c4:9b:d2:d4:5d:d6:13:19:54:13:
                    db:2a:ab:31:90:99:86:31:dc:a4:0d:cb:2c:d3:bb:
                    ba:69:06:98:e4:94:23:f5:4a:d2:78:a8:d8:e2:19:
                    f8:67:58:a0:99:f5:8c:a5:21:a3:f8:b6:4e:29:70:
                    f4:c0:14:c0:66:10:25:3f:0d:c5:49:1d:f2:6b:41:
                    cd:6d:5e:c7:04:8e:06:d3:46:1f:0f:63:07:77:06:
                    f0:55:43:08:46:c1:95:88:d1:ff:d1:3e:0a:58:fa:
                    6b:c3:1a:ab:34:b8:e4:a7:b7:73:3b:0a:bb:4d:1a:
                    33:a5:cc:c1:bb:91:a0:60:7a:8c:6d:82:36:02:be:
                    df:a3:9d:89:50:b3:ea:a2:50:6d:c3:66:a7:65:48:
                    70:19:c4:ab:db:a5:5e:b1:2c:54:88:7a:38:e7:27:
                    9e:5b:28:30:d6:fc:97:e1:f4:9d:51:55:48:39:90:
                    e3:8a:7c:5f:c2:d0:0f:35:12:ea:1f:c1:1c:d4:3f:
                    6a:8f:c0:dd:c0:b6:df:d2:ff:d5:e9:58:c6:98:df:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B0:56:D7:C5:25:56:D8:7D:55:66:5B:A6:83:0E:B9:CF:D0:5E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/abd8ba96-6442-37e0-adea-b9ee7ef663fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:40:94:0c:d6:b9:3d:a0:d8:46:02:b2:e6:bd:44:18:6a:ee:
         4d:ac:2a:84:c6:91:b7:57:1e:82:13:15:f9:d0:92:c7:5f:8e:
         2e:25:b8:37:87:50:3b:fe:d4:73:b7:f4:2c:ae:4c:d4:16:7d:
         00:eb:9e:95:b6:66:66:a2:e0:64:1c:63:f1:c8:1a:ff:7c:c3:
         52:d6:73:e9:b6:79:58:d1:5e:6d:22:17:e0:db:2c:00:dd:e7:
         f8:99:24:e7:fd:f4:24:34:9c:ec:1d:0a:6b:79:21:85:9f:92:
         fa:15:04:a1:b7:dc:0f:2f:c8:22:08:20:0a:fc:56:60:15:88:
         b3:2c:da:6d:50:6c:dc:0f:b0:fc:84:47:99:23:67:46:82:82:
         70:24:e6:de:c7:6a:84:bc:dc:74:a6:10:ba:d2:f8:f0:dd:ee:
         fa:1e:74:5a:64:e1:80:7a:90:75:7c:20:fd:78:f9:c9:7f:02:
         50:14:04:82:54:97:25:32:4e:33:3b:3d:50:95:6f:93:78:e7:
         89:b8:d0:fb:0b:14:2b:43:c2:ea:9c:0a:3b:bb:91:9d:65:04:
         f0:ce:8b:3b:74:a8:64:50:2d:ae:ef:cb:72:b1:13:2e:a1:b6:
         46:b1:55:39:6e:c9:75:14:12:fd:e7:93:91:8d:83:32:22:f9:
         82:22:72:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUlY8fBVF1Vc54QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk
ZjQwMGUwODgtNjc2MS00ZGE3LWIyZGEtMzgxMzE5NzAxYzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAretRtp8169Y6jZAunrDROmzXNLhZ8t/ln8le
CvdcPUS2zfzOU++CRdlqjaDF9ttZOcSb0tRd1hMZVBPbKqsxkJmGMdykDcss07u6
aQaY5JQj9UrSeKjY4hn4Z1igmfWMpSGj+LZOKXD0wBTAZhAlPw3FSR3ya0HNbV7H
BI4G00YfD2MHdwbwVUMIRsGViNH/0T4KWPprwxqrNLjkp7dzOwq7TRozpczBu5Gg
YHqMbYI2Ar7fo52JULPqolBtw2anZUhwGcSr26VesSxUiHo45yeeWygw1vyX4fSd
UVVIOZDjinxfwtAPNRLqH8Ec1D9qj8DdwLbf0v/V6VjGmN8wwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMuwVtfFJVbYfVVmW6aDDrnP0F7FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYWJkOGJhOTYtNjQ0Mi0z
N2UwLWFkZWEtYjllZTdlZjY2M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzskeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdAlAzWuT2g2EYCsua9RBhq7k2sKoTGkbdXHoITFfnQksdfji4luDeH
UDv+1HO39CyuTNQWfQDrnpW2Zmai4GQcY/HIGv98w1LWc+m2eVjRXm0iF+DbLADd
5/iZJOf99CQ0nOwdCmt5IYWfkvoVBKG33A8vyCIIIAr8VmAViLMs2m1QbNwPsPyE
R5kjZ0aCgnAk5t7HaoS83HSmELrS+PDd7voedFpk4YB6kHV8IP14+cl/AlAUBIJU
lyUyTjM7PVCVb5N454m40PsLFCtDwuqcCju7kZ1lBPDOizt0qGRQLa7vy3KxEy6h
tkaxVTluyXUUEv3nk5GNgzIi+YIicj0=
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:06:16 2025 by rpki-client