Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa
File:                     c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa (raw, json)
Hash identifier:          1lOWn5n1CCUoZjBnrtEhRjBB9/uO6Jm8ekRVMipftaU=
Subject key identifier:   2C:8C:E8:87:AC:AF:87:34:06:0B:B7:A9:B2:3C:83:E2:3A:C0:7A:1F
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584ADECBC281782AFD13516CB5D8
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        209.169.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:c2:81:78:2a:fd:13:51:6c:b5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=d506734b-077e-4a17-81dd-e8471f343fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:3e:ef:60:52:07:4a:a3:99:46:d3:e1:d8:
                    b9:dc:c8:71:fe:69:5b:07:15:d2:84:7d:de:55:eb:
                    37:ba:47:62:61:32:4e:f2:ab:cd:5a:8d:c7:cb:89:
                    6f:3d:ef:c6:03:f0:62:4f:96:f7:84:92:00:eb:1a:
                    5e:04:1d:3d:8f:94:10:c1:e8:64:68:76:a9:06:10:
                    d1:ef:b9:b1:76:9c:65:01:c5:e5:6c:da:5e:8c:9d:
                    1d:a2:a6:41:91:03:58:3d:be:f5:e0:cb:99:9a:6f:
                    cd:09:2b:b3:26:ae:d4:0d:2b:3d:a1:7d:e0:26:bc:
                    32:68:7d:61:56:51:d4:fd:a0:8a:f3:53:d4:34:45:
                    d8:02:e2:ba:bb:3e:6b:1a:42:f2:eb:39:20:09:0e:
                    58:5b:57:fa:24:bd:e0:fe:6c:c8:e2:9a:55:73:f5:
                    63:b6:9e:0e:c5:25:e9:7f:d0:3e:a2:d2:e8:55:f3:
                    34:6d:b9:46:b1:59:26:95:fa:1a:8f:1b:4b:75:8a:
                    3a:44:7f:6b:7e:30:2b:e7:93:c8:88:de:e1:db:aa:
                    bd:48:84:e5:38:6d:a7:7b:01:b9:f6:b6:b9:9d:26:
                    95:1e:b8:13:89:d7:b1:d6:0d:e3:b8:a4:39:3d:79:
                    93:cb:57:57:a1:4f:27:55:5d:7b:ba:f1:a9:21:06:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:E8:87:AC:AF:87:34:06:0B:B7:A9:B2:3C:83:E2:3A:C0:7A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c72c3f9f-6ae9-35bb-8f0e-2a4435c03f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:78:cf:2f:60:f0:6d:99:99:61:34:32:bf:b3:72:34:72:
         a1:85:b1:ed:be:db:3d:92:c1:d6:37:73:de:e5:80:39:15:b8:
         94:47:ce:4a:82:5f:95:57:0c:95:f3:8e:f3:76:77:d3:a2:dc:
         73:34:3b:29:c4:c4:48:77:a9:82:d2:68:a7:5a:3d:58:9a:4d:
         2d:9e:6f:54:dd:b7:bf:c3:ff:42:53:bd:b5:2c:b4:b7:0e:7f:
         d4:d7:13:25:df:b1:83:15:c1:75:41:46:57:24:0d:41:17:2f:
         82:c5:b1:25:6b:52:fa:25:0a:17:15:dc:2b:72:1d:99:15:6c:
         0f:8f:02:30:3f:6f:dd:fd:78:24:23:08:7a:68:d9:3c:dc:ff:
         4c:eb:dd:d3:8d:db:52:43:8f:ef:d3:1e:93:49:94:08:33:58:
         d9:58:b2:60:99:51:81:0e:26:66:b8:f5:af:3b:dd:32:20:ca:
         20:bb:d7:94:7c:29:8b:b2:3a:00:e3:20:c6:75:61:b5:67:69:
         1a:67:4d:d4:3a:0d:e9:b4:a3:ba:03:9c:5c:76:da:f0:34:ff:
         b9:76:31:87:81:7d:ea:63:96:5c:dc:d9:b5:ac:4d:a0:6f:92:
         cc:9e:4a:5f:66:3f:48:a6:9b:20:6e:1a:91:c1:86:e5:b1:d0:
         91:76:76:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8KBeCr9E1FstdgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw
MjhiMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZDUwNjczNGItMDc3ZS00YTE3LTgxZGQtZTg0NzFmMzQzZmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp98+72BSB0qjmUbT4di53Mhx/mlbBxXShH3e
Ves3ukdiYTJO8qvNWo3Hy4lvPe/GA/BiT5b3hJIA6xpeBB09j5QQwehkaHapBhDR
77mxdpxlAcXlbNpejJ0doqZBkQNYPb714MuZmm/NCSuzJq7UDSs9oX3gJrwyaH1h
VlHU/aCK81PUNEXYAuK6uz5rGkLy6zkgCQ5YW1f6JL3g/mzI4ppVc/Vjtp4OxSXp
f9A+otLoVfM0bblGsVkmlfoajxtLdYo6RH9rfjAr55PIiN7h26q9SITlOG2newG5
9ra5nSaVHrgTidex1g3juKQ5PXmTy1dXoU8nVV17uvGpIQYOpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCyM6Iesr4c0Bgu3qbI8g+I6wHofMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk
ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYzcyYzNmOWYtNmFlOS0z
NWJiLThmMGUtMmE0NDM1YzAzZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk
Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3
MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0
NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5UeM8vYPBtmZlhNDK/s3I0cqGFse2+2z2SwdY3c97lgDkVuJRHzkqC
X5VXDJXzjvN2d9Oi3HM0OynExEh3qYLSaKdaPViaTS2eb1Tdt7/D/0JTvbUstLcO
f9TXEyXfsYMVwXVBRlckDUEXL4LFsSVrUvolChcV3CtyHZkVbA+PAjA/b939eCQj
CHpo2Tzc/0zr3dON21JDj+/THpNJlAgzWNlYsmCZUYEOJma49a873TIgyiC715R8
KYuyOgDjIMZ1YbVnaRpnTdQ6Dem0o7oDnFx22vA0/7l2MYeBfepjllzc2bWsTaBv
ksyeSl9mP0immyBuGpHBhuWx0JF2dpY=
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:43:56 2025 by rpki-client