Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/612a769d-12bd-3a21-be95-85e29ded5b2b.roa
File:                     612a769d-12bd-3a21-be95-85e29ded5b2b.roa (raw, json)
Hash identifier:          /5/jvLTTymHbYWR+vrNvxpEOEeIBpPXxHqLF1Rk6Lm4=
Subject key identifier:   54:55:C3:B5:70:6D:07:29:B9:B8:F1:97:DD:98:01:28:11:C1:76:DF
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F4328584AFAB682830B334BE5BB679C80
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/612a769d-12bd-3a21-be95-85e29ded5b2b.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     200288
IP address blocks:        69.168.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:82:83:0b:33:4b:e5:bb:67:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=b02140f0-72c3-4ad4-a5f0-832c6268c60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3d:1e:40:4e:1a:51:a5:e2:af:8a:7d:f1:1f:
                    52:cd:1d:a4:3c:0b:b9:95:e6:21:9f:ec:0a:11:36:
                    d7:4f:e0:ae:2a:01:7a:d5:99:48:6e:18:37:39:a4:
                    92:e3:5b:58:8e:b0:de:e5:d6:f6:93:fc:09:c9:01:
                    17:b6:03:77:75:cf:8a:69:98:78:f2:7a:51:4f:28:
                    de:89:bd:52:d6:84:5c:20:25:c8:03:a8:cd:17:3c:
                    7a:5b:ac:eb:fe:3d:e5:ab:d8:12:4d:35:54:fb:02:
                    99:c5:3e:89:0a:6b:b1:38:59:67:dd:4a:75:c0:85:
                    7e:fa:bf:87:d0:14:dd:8b:7c:42:ae:de:c7:64:06:
                    35:65:f0:61:d4:13:4a:76:ad:b7:75:dc:9a:1e:d1:
                    e2:2b:be:53:7c:7b:d5:df:aa:d9:5c:16:1b:4c:62:
                    bd:ea:80:3f:c5:19:69:f9:66:76:85:6a:2a:1f:8b:
                    ab:ca:63:f1:33:35:e7:9f:d6:98:14:07:e0:b1:31:
                    31:3d:10:b4:ec:f1:1c:03:46:00:d6:0c:eb:ef:56:
                    e4:a2:68:10:da:86:41:9e:0a:4c:c6:d3:b3:bd:fe:
                    9d:bf:35:a0:75:81:cd:df:b5:44:1d:33:ab:25:b6:
                    56:38:6f:8a:1e:b3:8d:7c:97:82:56:30:e1:34:1a:
                    26:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:55:C3:B5:70:6D:07:29:B9:B8:F1:97:DD:98:01:28:11:C1:76:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/612a769d-12bd-3a21-be95-85e29ded5b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:08:e8:50:49:d3:06:25:10:ee:53:ea:b0:e7:56:26:10:e9:
         ba:eb:2b:d2:cd:90:fe:f8:5a:48:25:4a:05:9c:50:17:f2:03:
         f7:6c:17:82:ac:35:16:61:8a:c6:44:a2:dd:6f:15:16:a7:af:
         5b:b7:f3:7f:b2:0a:f3:7a:9a:7e:78:27:2d:f9:fb:58:e9:57:
         6e:d1:1e:9c:a1:bb:2f:08:35:2c:28:d3:ce:94:02:83:ec:ae:
         24:3f:a1:76:94:a0:67:0c:41:12:2e:e7:81:39:40:23:4c:a9:
         be:28:2a:0b:8d:c0:05:91:0f:da:3d:ba:d5:c4:c4:f5:ea:26:
         35:fc:7f:fa:2b:f8:e8:7b:69:64:eb:91:06:36:06:53:50:db:
         fc:a3:72:ed:0a:7a:b6:66:54:ab:3c:17:52:0e:98:5c:4e:bb:
         40:01:a3:b8:13:46:16:4e:46:8b:00:1b:fb:a8:e2:9a:b9:57:
         ba:27:64:56:0b:9a:7e:01:ff:16:9c:a2:f2:f1:c6:cf:38:1b:
         91:d8:b1:8d:97:bc:4a:96:8f:b8:07:b7:6f:0f:61:96:8c:f2:
         24:9f:f3:72:f0:21:0c:d0:fb:e2:1f:b0:a8:00:96:d2:6b:19:
         7f:1f:a0:40:49:79:35:8e:b7:dd:88:21:29:a8:29:15:66:20:
         20:d6:03:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toKDCzNL5btnnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm
MjE4MB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk
YjAyMTQwZjAtNzJjMy00YWQ0LWE1ZjAtODMyYzYyNjhjNjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD0eQE4aUaXir4p98R9SzR2kPAu5leYhn+wK
ETbXT+CuKgF61ZlIbhg3OaSS41tYjrDe5db2k/wJyQEXtgN3dc+KaZh48npRTyje
ib1S1oRcICXIA6jNFzx6W6zr/j3lq9gSTTVU+wKZxT6JCmuxOFln3Up1wIV++r+H
0BTdi3xCrt7HZAY1ZfBh1BNKdq23ddyaHtHiK75TfHvV36rZXBYbTGK96oA/xRlp
+WZ2hWoqH4urymPxMzXnn9aYFAfgsTExPRC07PEcA0YA1gzr71bkomgQ2oZBngpM
xtOzvf6dvzWgdYHN37VEHTOrJbZWOG+KHrONfJeCVjDhNBomrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFRVw7VwbQcpubjxl92YASgRwXbfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx
ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvNjEyYTc2OWQtMTJiZC0z
YTIxLWJlOTUtODVlMjlkZWQ1YjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm
NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm
ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk
ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUI6FBJ0wYlEO5T6rDnViYQ6brrK9LNkP74WkglSgWcUBfyA/dsF4Ks
NRZhisZEot1vFRanr1u383+yCvN6mn54Jy35+1jpV27RHpyhuy8INSwo086UAoPs
riQ/oXaUoGcMQRIu54E5QCNMqb4oKguNwAWRD9o9utXExPXqJjX8f/or+Oh7aWTr
kQY2BlNQ2/yjcu0KerZmVKs8F1IOmFxOu0ABo7gTRhZORosAG/uo4pq5V7onZFYL
mn4B/xacovLxxs84G5HYsY2XvEqWj7gHt28PYZaM8iSf83LwIQzQ++IfsKgAltJr
GX8foEBJeTWOt92IISmoKRVmICDWAyE=
-----END CERTIFICATE-----
Generated at Mon Sep 8 05:01:13 2025 by rpki-client