Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/8edf4efb-a249-33e7-b757-baece63171f8.roa
File:                     8edf4efb-a249-33e7-b757-baece63171f8.roa (raw, json)
Hash identifier:          4u8wlS4bfF5ldznyKN+uVd5UrZ1Pw0j0BxlyMP9UwUI=
Subject key identifier:   4E:DF:0F:79:E3:CD:7A:86:AB:BD:8C:53:AA:92:FD:55:FE:61:23:6A
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584ADECBC1F1D5E36F7BF5B0E940
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/8edf4efb-a249-33e7-b757-baece63171f8.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        209.169.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:c1:f1:d5:e3:6f:7b:f5:b0:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=890a5e66-eed5-4f1c-b903-363e7d5346e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1b:0e:64:80:14:ee:a1:be:e7:03:c6:a6:f2:
                    2c:b2:8e:1b:fa:16:b8:16:b1:2b:99:14:6e:07:4f:
                    5a:83:97:a9:d1:d8:dd:1e:12:3a:5f:e7:0f:f4:7f:
                    8e:c5:34:23:c8:7c:f2:8e:ba:6a:f1:da:ae:bd:ba:
                    8f:fc:2f:80:45:52:58:0d:66:54:67:7c:4e:62:1a:
                    33:67:c7:8a:92:da:ef:12:ec:7b:ed:f0:8e:3b:20:
                    1d:fe:15:a1:23:5b:4b:51:50:81:6d:21:ed:94:66:
                    34:48:65:78:fe:f1:a6:d3:c4:97:97:de:2a:fd:99:
                    2e:03:63:2a:43:f5:08:f2:54:ab:66:6b:76:bc:63:
                    ed:23:30:7b:cb:2f:03:a2:15:95:a6:2e:fe:2b:c6:
                    ca:6f:10:e0:bc:88:43:1c:4c:58:d2:22:86:7e:db:
                    a0:de:ed:d6:31:8d:6a:4e:1f:16:60:a1:83:f9:33:
                    ce:25:e5:3c:42:b7:43:0e:e9:cd:67:96:a7:73:ba:
                    b8:e1:91:86:53:3d:a3:d9:6d:5e:0e:13:8b:25:09:
                    a4:00:53:44:ed:56:49:bf:6d:25:51:02:c0:08:7b:
                    2a:f9:6a:7c:62:17:ce:84:6e:2a:dd:a5:ea:13:23:
                    78:ea:21:5b:97:46:f5:14:d0:d4:01:1c:61:0d:79:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DF:0F:79:E3:CD:7A:86:AB:BD:8C:53:AA:92:FD:55:FE:61:23:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/8edf4efb-a249-33e7-b757-baece63171f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:29:9f:81:cb:61:b6:0d:b3:36:2a:5e:33:80:21:9a:53:31:
         9e:cd:28:3d:6c:ef:a7:50:43:55:36:4a:c3:80:c3:29:94:56:
         39:11:9b:f5:d7:d3:26:f6:1c:a4:eb:6f:7f:fb:22:ac:01:1a:
         2d:76:24:12:6e:26:d1:7d:70:67:8d:83:63:e1:91:08:a3:7c:
         8a:70:d4:b1:79:c9:29:d5:b7:6c:13:40:4c:2b:28:76:80:8a:
         f6:f7:e6:b5:08:7f:56:6c:5e:d4:15:5b:5c:bc:23:dc:5f:39:
         06:63:40:d1:c4:72:6d:0d:08:00:e8:d0:3b:ba:93:40:8c:e0:
         11:9e:dd:a9:f8:9b:05:2e:3c:74:10:b2:1c:74:0b:86:fb:86:
         fa:08:21:92:56:af:7f:7e:f4:a1:af:26:54:87:32:f1:be:df:
         72:4d:05:6e:d5:cf:af:76:09:59:f7:9f:20:37:22:6d:de:88:
         95:9d:dd:c8:c7:8c:25:17:84:ad:d3:09:ac:1c:4c:ae:3a:db:
         40:f9:6b:49:ab:4b:13:a5:d7:de:dd:24:11:d8:90:ef:d4:4f:
         ce:8f:e3:5f:db:0d:ed:2d:8f:72:f7:4f:2d:d4:8f:89:10:c8:
         c8:4f:b8:f4:4d:59:64:1e:7f:30:ad:03:b0:05:13:14:c5:a0:
         79:1a:15:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8Hx1eNve/Ww6UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw
MjhiMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk
ODkwYTVlNjYtZWVkNS00ZjFjLWI5MDMtMzYzZTdkNTM0NmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixsOZIAU7qG+5wPGpvIsso4b+ha4FrErmRRu
B09ag5ep0djdHhI6X+cP9H+OxTQjyHzyjrpq8dquvbqP/C+ARVJYDWZUZ3xOYhoz
Z8eKktrvEux77fCOOyAd/hWhI1tLUVCBbSHtlGY0SGV4/vGm08SXl94q/ZkuA2Mq
Q/UI8lSrZmt2vGPtIzB7yy8DohWVpi7+K8bKbxDgvIhDHExY0iKGftug3u3WMY1q
Th8WYKGD+TPOJeU8QrdDDunNZ5anc7q44ZGGUz2j2W1eDhOLJQmkAFNE7VZJv20l
UQLACHsq+Wp8YhfOhG4q3aXqEyN46iFbl0b1FNDUARxhDXkjWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE7fD3njzXqGq72MU6qS/VX+YSNqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk
ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvOGVkZjRlZmItYTI0OS0z
M2U3LWI3NTctYmFlY2U2MzE3MWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk
Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3
MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0
NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKMpn4HLYbYNszYqXjOAIZpTMZ7NKD1s76dQQ1U2SsOAwymUVjkRm/XX
0yb2HKTrb3/7IqwBGi12JBJuJtF9cGeNg2PhkQijfIpw1LF5ySnVt2wTQEwrKHaA
ivb35rUIf1ZsXtQVW1y8I9xfOQZjQNHEcm0NCADo0Du6k0CM4BGe3an4mwUuPHQQ
shx0C4b7hvoIIZJWr39+9KGvJlSHMvG+33JNBW7Vz692CVn3nyA3Im3eiJWd3cjH
jCUXhK3TCawcTK4620D5a0mrSxOl197dJBHYkO/UT86P41/bDe0tj3L3Ty3Uj4kQ
yMhPuPRNWWQefzCtA7AFExTFoHkaFeo=
-----END CERTIFICATE-----
Generated at Thu Aug 21 04:56:28 2025 by rpki-client