Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa
File:                     a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa (raw, json)
Hash identifier:          LNy0vPTHs0RNOdthT4avO/4w4yVD8PkPbpZiuzZ9NtE=
Subject key identifier:   49:63:E1:C4:F6:A6:BD:2B:B9:63:E0:92:CF:C9:9C:2B:82:71:46:EA
Certificate issuer:       /CN=6e6db562-79f7-40ba-9870-3eaf80e519fd
Certificate serial:       010D0C9F4328584A68260A14C7D30C8283225080
Authority key identifier: 8D:38:A8:E4:7F:F7:84:11:E7:4D:A6:EA:F8:9B:EF:1B:C4:27:D9:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     40403
IP address blocks:        199.89.230.0/24 maxlen: 24
                          2602:fab9::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:0a:14:c7:d3:0c:82:83:22:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6db562-79f7-40ba-9870-3eaf80e519fd
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=dda0b8df-e879-4a60-bdc4-33b7e68faa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:06:f7:56:ce:d6:d5:92:80:89:fd:69:06:
                    4e:a6:f8:a3:ed:4f:9a:16:06:33:b4:c6:3c:56:97:
                    28:54:4e:2a:17:0f:8a:49:a0:dd:6e:fe:5a:ec:13:
                    fa:dc:95:05:7d:8f:58:b5:42:36:71:63:1b:1e:33:
                    6a:62:55:ac:d2:c0:88:27:c7:6c:77:bd:75:9a:2f:
                    14:6a:19:a7:25:46:2f:46:c5:20:b6:22:c2:c0:44:
                    f5:f0:0c:c6:e7:37:97:a0:1c:23:2f:71:cd:10:d5:
                    67:36:82:c7:db:5c:f8:62:03:74:6c:75:96:9d:3a:
                    5c:7a:e5:63:52:40:b7:6f:39:e2:f0:0c:b2:0a:6f:
                    cd:2f:bb:70:76:68:73:37:4d:02:1a:46:f7:fb:7c:
                    cc:fb:84:fd:99:02:a8:6b:02:eb:40:16:9b:9e:41:
                    fb:74:cc:a9:4a:c4:77:97:35:5d:19:7f:84:34:cb:
                    28:07:20:2f:4b:39:f9:0c:a9:4b:28:c7:33:a9:34:
                    8c:1a:4d:72:d7:da:18:d4:7a:71:0e:cb:7b:41:70:
                    f7:47:5b:20:fe:5b:5c:5c:fb:81:6d:2d:1b:34:e0:
                    6c:44:e7:e5:e0:b3:cf:1d:37:c6:de:87:b9:af:76:
                    85:53:5a:60:2f:ba:7c:36:79:4c:d0:65:6c:93:ea:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:63:E1:C4:F6:A6:BD:2B:B9:63:E0:92:CF:C9:9C:2B:82:71:46:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.crl

            X509v3 Authority Key Identifier:
                keyid:8D:38:A8:E4:7F:F7:84:11:E7:4D:A6:EA:F8:9B:EF:1B:C4:27:D9:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.89.230.0/24
                IPv6:
                  2602:fab9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6d:fa:2d:58:e1:7d:e0:2f:8f:5b:51:3b:6d:09:76:f3:fd:
         82:50:25:5c:10:c9:e2:a3:1e:ea:e0:b4:67:c2:75:b7:42:f7:
         35:b6:46:c8:d9:97:dc:53:d6:1d:b6:5d:ea:5f:37:56:c9:e4:
         97:3b:4d:5d:c8:37:02:fa:82:43:be:74:7a:a4:d6:50:d2:3f:
         9d:a2:c3:e4:90:62:6c:f6:c7:e4:39:15:5c:73:14:50:d6:56:
         e4:f4:51:8a:24:8e:92:cc:c1:a2:23:36:40:02:3c:64:62:e5:
         95:68:5a:01:dc:75:6e:88:8d:c2:6f:58:7f:fe:1e:6e:a8:48:
         7a:33:ab:fe:bd:2c:56:84:90:dc:ef:12:3d:cd:8e:c1:77:2d:
         89:28:16:43:c8:ba:68:37:f0:2b:ce:55:60:46:bd:8a:af:d0:
         8f:2a:b4:b2:eb:a3:a7:95:13:57:fb:ce:48:28:64:bb:f2:79:
         62:53:ff:1f:0f:06:20:9e:94:3a:62:f0:2b:95:a8:c7:e2:a5:
         77:4e:a5:7e:af:c1:87:60:38:36:4a:1b:e2:a6:0b:e8:46:c5:
         90:bc:d0:0f:5c:9d:df:32:c8:44:28:1d:45:50:e8:91:29:26:
         83:3d:6f:50:1f:ea:41:98:9b:54:d3:5d:b6:31:37:ec:79:d9:
         7b:8f:dc:f6
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpoJgoUx9MMgoMiUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU2ZGI1NjItNzlmNy00MGJhLTk4NzAtM2VhZjgwZTUx
OWZkMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
ZGRhMGI4ZGYtZTg3OS00YTYwLWJkYzQtMzNiN2U2OGZhYTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms8G91bO1tWSgIn9aQZOpvij7U+aFgYztMY8
VpcoVE4qFw+KSaDdbv5a7BP63JUFfY9YtUI2cWMbHjNqYlWs0sCIJ8dsd711mi8U
ahmnJUYvRsUgtiLCwET18AzG5zeXoBwjL3HNENVnNoLH21z4YgN0bHWWnTpceuVj
UkC3bzni8AyyCm/NL7twdmhzN00CGkb3+3zM+4T9mQKoawLrQBabnkH7dMypSsR3
lzVdGX+ENMsoByAvSzn5DKlLKMczqTSMGk1y19oY1HpxDst7QXD3R1sg/ltcXPuB
bS0bNOBsROfl4LPPHTfG3oe5r3aFU1pgL7p8NnlM0GVsk+r11wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFElj4cT2pr0ruWPgks/JnCuCcUbqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82ZTZk
YjU2Mi03OWY3LTQwYmEtOTg3MC0zZWFmODBlNTE5ZmQvYTg4YjZkZWQtYjI3MS0z
ZDNjLWJkOWUtZmM2ZjgyYjdkZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmU2ZGI1NjItNzlmNy00MGJhLTk4
NzAtM2VhZjgwZTUxOWZkLzZlNmRiNTYyLTc5ZjctNDBiYS05ODcwLTNlYWY4MGU1
MTlmZC5jcmwwHwYDVR0jBBgwFoAUjTio5H/3hBHnTabq+JvvG8Qn2aUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82ZTZkYjU2Mi03OWY3LTQwYmEtOTg3MC0zZWFm
ODBlNTE5ZmQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAx1nmMA4E
AgACMAgDBgAmAvq5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6bfotWOF94C+PW1E7bQl28/2CUCVcEMni
ox7q4LRnwnW3Qvc1tkbI2ZfcU9Ydtl3qXzdWyeSXO01dyDcC+oJDvnR6pNZQ0j+d
osPkkGJs9sfkORVccxRQ1lbk9FGKJI6SzMGiIzZAAjxkYuWVaFoB3HVuiI3Cb1h/
/h5uqEh6M6v+vSxWhJDc7xI9zY7Bdy2JKBZDyLpoN/ArzlVgRr2Kr9CPKrSy66On
lRNX+85IKGS78nliU/8fDwYgnpQ6YvArlajH4qV3TqV+r8GHYDg2ShvipgvoRsWQ
vNAPXJ3fMshEKB1FUOiRKSaDPW9QH+pBmJtU0122MTfsedl7j9z2
-----END CERTIFICATE-----
Generated at Thu Jul 10 11:21:41 2025 by rpki-client