Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa
File:                     6fd4acdc-dcae-3060-9289-fccba0d195f6.roa (raw, json)
Hash identifier:          yAp48S7X0j/vsPkYDEH/zFx+zvTrsOeQk/zrauZgq4A=
Subject key identifier:   9E:E9:E1:86:39:FA:AB:CF:45:31:2F:11:49:02:78:4F:9F:7E:24:D4
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290C900BE0DA6FA8029D000
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.61.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c9:00:be:0d:a6:fa:80:29:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=5f9dbc0f-2df4-47e0-b17a-d8fc39afa976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:96:53:97:c7:50:a9:c6:3a:bf:79:26:8a:
                    79:be:e9:7e:93:fc:46:50:93:e9:25:59:14:9e:7b:
                    45:d7:11:ad:44:05:15:c0:36:1c:09:52:be:07:c8:
                    a4:93:90:24:88:a7:a2:c0:45:8d:02:09:6d:07:cc:
                    cd:12:7c:b6:98:c0:75:21:79:7e:24:60:80:e3:80:
                    ae:ad:a8:ce:e8:ac:f3:d5:86:d2:31:89:f9:51:e8:
                    ce:0f:d4:61:3e:12:98:50:f9:5e:13:b3:b2:c0:e2:
                    9a:62:d7:25:c2:a9:12:00:8c:e7:a3:5a:ae:d8:c5:
                    b0:df:27:83:3b:2c:1c:a3:60:34:16:ba:29:1f:5f:
                    97:7b:bb:57:4d:ce:7c:33:e1:b9:d9:44:b5:79:4b:
                    9e:5b:f4:48:c3:bc:0a:77:0c:95:a8:9d:b4:5b:19:
                    83:20:fe:6a:aa:aa:65:e0:c2:cf:97:49:d2:8e:ff:
                    b7:4c:f8:ac:c0:9b:7e:cc:f0:27:3c:2a:27:8a:3b:
                    67:a1:3a:0b:25:5e:cc:0e:5c:66:0a:01:86:7f:f6:
                    7b:4c:d2:8f:4a:e7:3a:7c:48:7a:a8:92:cd:22:23:
                    1a:e3:7c:fc:bc:21:62:73:d7:18:20:cc:51:60:95:
                    07:8c:8a:14:b1:f1:bd:fd:68:ca:de:08:2d:c4:41:
                    ee:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E9:E1:86:39:FA:AB:CF:45:31:2F:11:49:02:78:4F:9F:7E:24:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:2e:1e:07:29:12:6a:84:0d:9f:9b:9f:c4:0a:3e:d5:a7:60:
         61:88:39:de:6d:54:3b:90:0a:cd:92:0b:3b:9d:5e:2f:2e:4d:
         b5:aa:e1:2b:8d:34:05:3a:78:9b:71:e3:a8:60:c2:08:3d:35:
         26:69:d9:92:b3:c7:06:5d:45:4d:75:9a:4a:8b:78:c4:2d:6e:
         a7:07:41:bd:a5:58:d1:1f:d7:2d:aa:4e:61:94:6f:65:98:ac:
         68:b1:1e:b4:e2:1b:d8:bb:47:92:9c:fa:d0:da:1a:c9:43:fe:
         34:0a:cf:d9:79:ea:d2:b4:b2:02:26:24:c5:50:76:50:98:75:
         d7:65:de:29:7c:9a:78:99:b8:5d:c7:b2:25:76:42:26:26:36:
         44:a4:a9:ff:8d:5d:ce:9d:b5:c9:86:08:65:fe:59:3d:65:d4:
         9f:ef:be:7f:b4:30:bc:cf:2e:3e:33:fd:0f:7a:02:d0:90:02:
         a8:e9:63:71:42:e1:03:21:13:40:a3:51:94:b9:fe:0a:92:07:
         2b:9a:45:64:87:4b:d3:c3:e8:9b:21:de:da:3a:77:ec:c6:d2:
         1a:69:72:a7:26:5a:52:25:d3:0f:f0:2e:9c:ce:98:5f:de:6b:
         80:ec:32:4a:66:ba:78:29:0a:e0:c5:c7:d3:13:a1:d2:bf:9c:
         b3:df:ea:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMkAvg2m+oAp0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
NWY5ZGJjMGYtMmRmNC00N2UwLWIxN2EtZDhmYzM5YWZhOTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncOWU5fHUKnGOr95Jop5vul+k/xGUJPpJVkU
nntF1xGtRAUVwDYcCVK+B8ikk5AkiKeiwEWNAgltB8zNEny2mMB1IXl+JGCA44Cu
rajO6Kzz1YbSMYn5UejOD9RhPhKYUPleE7OywOKaYtclwqkSAIzno1qu2MWw3yeD
Oywco2A0FropH1+Xe7tXTc58M+G52US1eUueW/RIw7wKdwyVqJ20WxmDIP5qqqpl
4MLPl0nSjv+3TPiswJt+zPAnPConijtnoToLJV7MDlxmCgGGf/Z7TNKPSuc6fEh6
qJLNIiMa43z8vCFic9cYIMxRYJUHjIoUsfG9/WjK3ggtxEHurQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ7p4YY5+qvPRTEvEUkCeE+ffiTUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNmZkNGFjZGMtZGNhZS0z
MDYwLTkyODktZmNjYmEwZDE5NWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMuHgcpEmqEDZ+bn8QKPtWnYGGIOd5tVDuQCs2SCzudXi8uTbWq4SuN
NAU6eJtx46hgwgg9NSZp2ZKzxwZdRU11mkqLeMQtbqcHQb2lWNEf1y2qTmGUb2WY
rGixHrTiG9i7R5Kc+tDaGslD/jQKz9l56tK0sgImJMVQdlCYdddl3il8mniZuF3H
siV2QiYmNkSkqf+NXc6dtcmGCGX+WT1l1J/vvn+0MLzPLj4z/Q96AtCQAqjpY3FC
4QMhE0CjUZS5/gqSByuaRWSHS9PD6Jsh3to6d+zG0hppcqcmWlIl0w/wLpzOmF/e
a4DsMkpmungpCuDFx9MTodK/nLPf6lo=
-----END CERTIFICATE-----
Generated at Thu Jul 10 09:39:26 2025 by rpki-client