Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/6efe1075-4c24-3c68-a22c-fe3178d2018a.roa
File:                     6efe1075-4c24-3c68-a22c-fe3178d2018a.roa (raw, json)
Hash identifier:          Q9ziMBN7ESf6DhRu1GNXAFCdSBFM4gD4trO8JPpc2qk=
Subject key identifier:   B7:79:E5:DE:EE:E6:B5:E2:DC:A6:BB:B4:39:54:8E:4F:45:B4:AD:6F
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584A6C55D924E9801858F1D8A300
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/6efe1075-4c24-3c68-a22c-fe3178d2018a.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     400196
IP address blocks:        208.52.177.2/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d9:24:e9:80:18:58:f1:d8:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=8ead893a-4635-4020-8575-f79bf7df8c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:f3:71:27:4b:a6:19:de:90:f2:fb:5b:35:
                    47:94:ab:4d:90:65:3f:0a:4d:94:a8:36:3a:48:4c:
                    90:54:c9:94:c6:54:14:2b:49:5d:05:f2:3a:a0:1c:
                    56:02:5b:21:54:a6:6e:1a:d2:ae:a0:0d:4f:9f:e8:
                    39:bc:f9:cc:c8:2d:8d:e9:c9:29:1b:34:e0:0b:c9:
                    df:32:45:39:36:6f:95:c2:7c:0d:f4:c0:2b:22:68:
                    c9:58:23:30:dd:fe:ca:a8:1f:8d:62:c1:9c:72:bc:
                    19:f3:e5:cf:de:d3:88:6e:ea:c2:b0:0c:0d:f2:62:
                    39:fa:78:ec:42:6c:70:01:d7:87:52:63:be:94:05:
                    84:95:73:02:1a:e8:e9:b0:64:d0:84:76:97:fe:e9:
                    7a:3a:a6:6f:03:d9:53:71:58:29:26:32:b2:18:77:
                    84:e1:73:62:38:dd:8b:15:58:e4:c7:da:9c:82:47:
                    2e:f6:39:c0:9a:f1:8c:5c:bc:91:8e:04:dc:0e:e9:
                    73:72:bf:c1:03:26:86:51:cc:06:ef:b6:0f:83:f3:
                    44:54:ab:83:fb:a0:59:d3:ea:fd:eb:00:6e:d7:ec:
                    5f:31:16:52:aa:f8:20:69:2d:8c:69:e8:ea:d2:38:
                    0c:ef:3b:ad:7c:97:1a:20:62:93:dc:75:96:43:d3:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:79:E5:DE:EE:E6:B5:E2:DC:A6:BB:B4:39:54:8E:4F:45:B4:AD:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/6efe1075-4c24-3c68-a22c-fe3178d2018a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.177.2/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:8c:21:17:b3:bc:e4:ea:64:36:8f:03:d2:2b:dc:68:cf:d7:
         ea:1a:5b:81:6e:91:e3:ac:cd:8c:fc:e6:66:80:4a:c1:b2:54:
         c2:fc:2b:1d:4e:62:f5:93:8d:50:fc:62:70:48:7d:66:9d:4b:
         47:d3:e8:3a:21:99:7f:28:16:cf:87:6e:c9:dc:0d:ea:20:8f:
         2e:be:bc:97:b9:9a:e3:48:7b:56:8c:a7:e0:d8:62:34:8a:48:
         ea:7c:7b:5f:da:52:6e:17:c8:82:7e:f9:9c:39:ba:cf:c4:b9:
         f2:d2:8d:85:89:43:07:b6:69:d3:b9:ad:d4:21:1a:09:e4:72:
         02:08:dd:da:2b:95:e9:b3:1b:2c:16:47:3f:81:d5:25:0c:ec:
         3c:27:3c:9a:ea:c0:2d:07:32:18:38:43:c2:97:f4:d1:bc:71:
         73:f7:87:63:25:88:b2:f3:bb:f8:68:b0:dd:d5:84:1c:a8:55:
         2a:52:75:cd:e2:77:2d:53:66:23:4a:eb:f5:7d:ca:fe:23:8d:
         5f:7c:28:db:82:2c:26:10:83:c6:fc:7f:1c:57:8d:aa:23:64:
         40:d6:f8:2b:ea:a0:46:49:c1:ac:22:e3:01:cc:8a:09:e0:8b:
         44:d2:11:e7:b2:86:d9:09:9d:eb:99:d8:39:15:a0:4e:35:b0:
         31:eb:cd:49
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpsVdkk6YAYWPHYowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj
MTY4MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk
OGVhZDg5M2EtNDYzNS00MDIwLTg1NzUtZjc5YmY3ZGY4YzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVrzcSdLphnekPL7WzVHlKtNkGU/Ck2UqDY6
SEyQVMmUxlQUK0ldBfI6oBxWAlshVKZuGtKuoA1Pn+g5vPnMyC2N6ckpGzTgC8nf
MkU5Nm+VwnwN9MArImjJWCMw3f7KqB+NYsGccrwZ8+XP3tOIburCsAwN8mI5+njs
QmxwAdeHUmO+lAWElXMCGujpsGTQhHaX/ul6OqZvA9lTcVgpJjKyGHeE4XNiON2L
FVjkx9qcgkcu9jnAmvGMXLyRjgTcDulzcr/BAyaGUcwG77YPg/NEVKuD+6BZ0+r9
6wBu1+xfMRZSqvggaS2Maejq0jgM7zutfJcaIGKT3HWWQ9MoJQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLd55d7u5rXi3Ka7tDlUjk9FtK1vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1
ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvNmVmZTEwNzUtNGMyNC0z
YzY4LWEyMmMtZmUzMTc4ZDIwMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4
ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm
YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk
N2VjZmMxNjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0DSxAjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAPjCEXs7zk6mQ2jwPSK9xoz9fqGluBbpHjrM2M/OZmgErBslTC/Csd
TmL1k41Q/GJwSH1mnUtH0+g6IZl/KBbPh27J3A3qII8uvryXuZrjSHtWjKfg2GI0
ikjqfHtf2lJuF8iCfvmcObrPxLny0o2FiUMHtmnTua3UIRoJ5HICCN3aK5Xpsxss
Fkc/gdUlDOw8Jzya6sAtBzIYOEPCl/TRvHFz94djJYiy87v4aLDd1YQcqFUqUnXN
4nctU2YjSuv1fcr+I41ffCjbgiwmEIPG/H8cV42qI2RA1vgr6qBGScGsIuMBzIoJ
4ItE0hHnsobZCZ3rmdg5FaBONbAx681J
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:46:47 2025 by rpki-client