Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
File:                     6b20c6c8-b544-3233-9c89-ea3eead2913d.roa (raw, json)
Hash identifier:          XbMljONCBxXIFb6KgJ8vCkg7LkXHf6LYg9lPCKwGgwE=
Subject key identifier:   C0:45:03:1A:A4:0C:6F:D9:A8:79:E4:1E:27:92:1E:6F:6D:B1:15:F9
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584AB4EB773CD4D814DF20D4CF00
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     18914
IP address blocks:        204.8.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:77:3c:d4:d8:14:df:20:d4:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=c3a1b2e9-1723-4c4d-8d2e-24ba2a26f17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d3:1c:e1:ed:cc:1e:44:06:a5:fb:9d:b9:0e:
                    f9:fb:77:6f:22:04:4e:36:3a:d7:38:4b:90:24:66:
                    02:40:59:39:71:c5:5a:b4:eb:64:f5:3b:a5:42:1b:
                    98:d4:f3:fd:a6:0c:9f:ab:12:a9:39:41:29:ef:0e:
                    79:93:c2:9c:c3:ea:5e:61:65:95:e7:8d:c5:48:d7:
                    41:df:39:73:1e:9d:ca:03:8b:3a:05:54:ec:ed:59:
                    46:18:57:9c:1e:fb:c6:3d:27:b1:4a:fc:f9:ca:f2:
                    87:ec:16:ac:75:c0:37:b4:4e:fb:07:fa:66:a1:05:
                    15:29:11:18:e4:ef:84:1c:b4:db:55:48:96:d5:46:
                    8b:ff:85:68:6b:89:05:ea:89:54:61:a9:05:74:7a:
                    e1:6b:da:b4:ca:1f:f5:e8:e4:19:8f:fd:a7:02:c8:
                    d6:44:cd:d5:eb:d2:a4:b5:4b:7c:b5:4b:e4:51:0b:
                    c7:4e:17:f7:4c:aa:8b:96:ed:ae:dd:3c:1e:14:6b:
                    07:b8:24:0a:e1:4f:cc:a9:4c:91:3b:d8:7f:d1:34:
                    6d:74:70:db:63:57:5f:ed:fd:79:a0:d4:51:2d:50:
                    f1:1b:0d:31:ca:73:13:02:b3:90:51:71:cd:90:11:
                    a0:c2:3e:b0:a9:a9:df:f8:90:22:ef:43:67:f5:80:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:45:03:1A:A4:0C:6F:D9:A8:79:E4:1E:27:92:1E:6F:6D:B1:15:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1f:29:4d:30:50:4b:b2:91:e3:4a:47:bf:51:ea:0e:0c:cb:
         62:ee:60:85:08:d1:79:eb:ae:16:76:88:1d:87:43:d5:d2:a1:
         41:3d:1a:64:7d:d8:82:fc:b5:8d:13:5e:85:c3:b8:2b:f5:18:
         ff:6c:7f:a2:50:14:e9:e4:9d:57:f6:32:d8:39:92:cd:67:45:
         e8:0f:a0:21:bd:44:1c:bd:09:c9:a2:a0:28:24:63:9e:44:69:
         35:9e:9e:2c:1a:7f:e0:8d:9b:34:5a:d0:4e:ab:ab:a3:70:a7:
         3c:94:1b:12:49:c1:df:0c:12:66:c7:e4:22:3d:43:7c:84:74:
         4d:60:1a:04:6a:a6:a1:bd:5a:66:69:ff:8a:54:38:16:cb:36:
         1a:42:9a:1e:8a:a9:54:73:b2:b2:18:49:ae:60:b8:dc:c7:5e:
         99:37:81:35:02:9a:54:88:40:84:cd:71:c7:7d:19:71:f9:b6:
         a4:94:6a:75:8e:b7:e4:82:8d:4e:06:ef:6c:7d:f9:57:6a:bf:
         66:29:50:65:23:f8:8d:34:9b:54:29:b5:56:74:86:7c:ea:3b:
         7f:69:b6:8a:9e:f7:5b:57:e0:ad:9b:a9:46:01:c4:ae:e4:40:
         de:f8:d8:bf:b7:3b:3a:10:bd:28:cb:cf:d9:51:5c:0c:3f:4c:
         ce:e8:af:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063c81NgU3yDUzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
YzNhMWIyZTktMTcyMy00YzRkLThkMmUtMjRiYTJhMjZmMTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNMc4e3MHkQGpfuduQ75+3dvIgRONjrXOEuQ
JGYCQFk5ccVatOtk9TulQhuY1PP9pgyfqxKpOUEp7w55k8Kcw+peYWWV543FSNdB
3zlzHp3KA4s6BVTs7VlGGFecHvvGPSexSvz5yvKH7BasdcA3tE77B/pmoQUVKREY
5O+EHLTbVUiW1UaL/4Voa4kF6olUYakFdHrha9q0yh/16OQZj/2nAsjWRM3V69Kk
tUt8tUvkUQvHThf3TKqLlu2u3TweFGsHuCQK4U/MqUyRO9h/0TRtdHDbY1df7f15
oNRRLVDxGw0xynMTArOQUXHNkBGgwj6wqanf+JAi70Nn9YADUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMBFAxqkDG/ZqHnkHieSHm9tsRX5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvNmIyMGM2YzgtYjU0NC0z
MjMzLTljODktZWEzZWVhZDI5MTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAhsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4fKU0wUEuykeNKR79R6g4My2LuYIUI0XnrrhZ2iB2HQ9XSoUE9GmR9
2IL8tY0TXoXDuCv1GP9sf6JQFOnknVf2Mtg5ks1nRegPoCG9RBy9CcmioCgkY55E
aTWeniwaf+CNmzRa0E6rq6NwpzyUGxJJwd8MEmbH5CI9Q3yEdE1gGgRqpqG9WmZp
/4pUOBbLNhpCmh6KqVRzsrIYSa5guNzHXpk3gTUCmlSIQITNccd9GXH5tqSUanWO
t+SCjU4G72x9+Vdqv2YpUGUj+I00m1QptVZ0hnzqO39ptoqe91tX4K2bqUYBxK7k
QN742L+3OzoQvSjLz9lRXAw/TM7or4Y=
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:14:22 2025 by rpki-client