Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/e0caed8b-977e-34c0-a8c0-d37ff63f8a51.roa
File:                     e0caed8b-977e-34c0-a8c0-d37ff63f8a51.roa (raw, json)
Hash identifier:          ESBgblyf2VfDlSdvJDCmlOAVSxa+fe1ieeYgiepICmk=
Subject key identifier:   F4:6A:BC:4B:94:E5:B4:02:22:7C:EE:47:79:2F:D7:05:8E:98:3C:13
Certificate issuer:       /CN=7ec658ee-f1e4-45ca-b167-d7f1ddec24e6
Certificate serial:       010D0C9F4328584A612B14351B9456AEBA12BC00
Authority key identifier: 7E:84:9B:E3:FB:3E:6B:AC:C9:E0:F1:FC:4E:FF:81:7C:3E:54:BF:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/e0caed8b-977e-34c0-a8c0-d37ff63f8a51.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     0
IP address blocks:        206.41.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:14:35:1b:94:56:ae:ba:12:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec658ee-f1e4-45ca-b167-d7f1ddec24e6
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=079aa920-7ce9-46b7-887d-5b7f87731029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:6d:ce:32:b7:57:17:fe:2f:29:fd:38:27:
                    6b:fb:6f:9d:9e:87:98:bb:0c:61:1f:27:72:e9:c9:
                    f0:10:48:a0:9d:e4:c8:99:42:3e:59:d4:f1:ce:e5:
                    23:e1:81:7a:7b:c2:d7:b8:ca:03:a0:4b:97:ef:4e:
                    db:1f:b3:8c:64:78:f6:d1:ce:fa:5e:75:09:7b:7f:
                    b5:f9:2f:37:a2:e6:99:9e:8f:97:af:f2:cd:a5:24:
                    c2:ed:28:7f:19:ba:dd:91:97:3b:66:44:0e:69:81:
                    b3:3c:f7:36:1b:85:99:71:98:33:40:a6:99:e9:c1:
                    17:e8:52:13:62:c4:67:4e:6f:a9:83:3d:d1:58:fe:
                    f4:ef:75:11:10:e4:cf:c8:28:75:8c:8b:df:db:f7:
                    9c:56:03:e8:ff:15:6e:9c:6f:83:db:7d:f5:5e:26:
                    cf:17:02:8f:7d:4c:3c:9f:00:2e:7e:85:2b:f8:bc:
                    aa:6a:fe:b8:85:23:9d:79:c5:7c:ce:c9:43:81:75:
                    c2:a3:fb:74:16:12:99:f6:7f:71:64:d1:c3:3b:be:
                    f6:88:82:1a:c5:e3:9b:8a:73:8f:65:ca:43:b7:94:
                    65:c9:93:99:70:1f:65:93:dc:2a:6b:b0:db:76:93:
                    6e:cc:28:b5:d7:3c:3e:3d:11:d1:47:6a:9f:51:a8:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6A:BC:4B:94:E5:B4:02:22:7C:EE:47:79:2F:D7:05:8E:98:3C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/e0caed8b-977e-34c0-a8c0-d37ff63f8a51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.crl

            X509v3 Authority Key Identifier:
                keyid:7E:84:9B:E3:FB:3E:6B:AC:C9:E0:F1:FC:4E:FF:81:7C:3E:54:BF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c6:4e:33:04:7c:c9:03:e8:2c:42:54:bd:08:34:b0:5c:b4:
         b7:f5:f4:bb:17:0c:8a:9b:b6:fc:57:94:b5:e5:83:5a:68:cd:
         d9:5a:3b:36:7c:b2:6f:f4:ec:77:b0:e7:9c:1b:5f:a1:70:ab:
         13:21:eb:23:f4:7d:89:89:df:2a:74:da:7c:51:4a:b8:25:21:
         8f:fc:08:6c:46:6b:7d:59:40:fe:94:74:ed:ce:d8:42:06:cf:
         9f:8b:4a:22:65:f1:6b:ba:8f:3d:50:92:4b:7e:b3:2e:8f:1a:
         02:43:85:ea:83:c1:f7:10:88:1d:ea:48:64:de:6b:00:17:d4:
         3f:02:41:4d:cb:37:25:32:d6:1c:ea:35:83:ab:0d:53:95:2b:
         c7:64:53:ef:86:82:aa:83:9c:88:e4:c5:3f:50:8b:e5:1c:4d:
         62:0e:96:47:7e:7a:26:2c:d5:25:47:ed:0f:38:1f:de:66:3f:
         73:64:ac:2e:20:99:a3:7f:ff:3a:77:8c:41:c4:54:c0:2d:c7:
         9b:a0:cb:0a:55:58:1e:07:70:6a:7c:a2:ab:26:f5:62:7a:43:
         28:a4:ef:c7:12:57:fc:d4:f3:8a:f7:10:43:8c:f5:4d:1b:0b:
         d2:5c:b2:b5:e6:99:1e:0b:85:14:53:08:62:3a:b9:e4:4e:97:
         81:63:94:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxQ1G5RWrroSvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2VjNjU4ZWUtZjFlNC00NWNhLWIxNjctZDdmMWRkZWMy
NGU2MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
MDc5YWE5MjAtN2NlOS00NmI3LTg4N2QtNWI3Zjg3NzMxMDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxBtzjK3Vxf+Lyn9OCdr+2+dnoeYuwxhHydy
6cnwEEigneTImUI+WdTxzuUj4YF6e8LXuMoDoEuX707bH7OMZHj20c76XnUJe3+1
+S83ouaZno+Xr/LNpSTC7Sh/GbrdkZc7ZkQOaYGzPPc2G4WZcZgzQKaZ6cEX6FIT
YsRnTm+pgz3RWP7073UREOTPyCh1jIvf2/ecVgPo/xVunG+D2331XibPFwKPfUw8
nwAufoUr+Lyqav64hSOdecV8zslDgXXCo/t0FhKZ9n9xZNHDO772iIIaxeObinOP
ZcpDt5RlyZOZcB9lk9wqa7DbdpNuzCi11zw+PRHRR2qfUajwQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPRqvEuU5bQCInzuR3kv1wWOmDwTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZWM2
NThlZS1mMWU0LTQ1Y2EtYjE2Ny1kN2YxZGRlYzI0ZTYvZTBjYWVkOGItOTc3ZS0z
NGMwLWE4YzAtZDM3ZmY2M2Y4YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2VjNjU4ZWUtZjFlNC00NWNhLWIx
NjctZDdmMWRkZWMyNGU2LzdlYzY1OGVlLWYxZTQtNDVjYS1iMTY3LWQ3ZjFkZGVj
MjRlNi5jcmwwHwYDVR0jBBgwFoAUfoSb4/s+a6zJ4PH8Tv+BfD5Uv1EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZWM2NThlZS1mMWU0LTQ1Y2EtYjE2Ny1kN2Yx
ZGRlYzI0ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAziloMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjGTjMEfMkD6CxCVL0INLBctLf19LsXDIqbtvxXlLXlg1pozdlaOzZ8
sm/07Hew55wbX6FwqxMh6yP0fYmJ3yp02nxRSrglIY/8CGxGa31ZQP6UdO3O2EIG
z5+LSiJl8Wu6jz1Qkkt+sy6PGgJDheqDwfcQiB3qSGTeawAX1D8CQU3LNyUy1hzq
NYOrDVOVK8dkU++GgqqDnIjkxT9Qi+UcTWIOlkd+eiYs1SVH7Q84H95mP3NkrC4g
maN//zp3jEHEVMAtx5ugywpVWB4HcGp8oqsm9WJ6Qyik78cSV/zU84r3EEOM9U0b
C9JcsrXmmR4LhRRTCGI6ueROl4FjlAk=
-----END CERTIFICATE-----
Generated at Thu Jul 10 01:37:54 2025 by rpki-client