Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa
File:                     eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa (raw, json)
Hash identifier:          m/IVJXzUfvWFu+Nds7FfPHpf5rcViGpYnYzPlKn6e/U=
Subject key identifier:   18:88:E6:17:04:FA:C7:99:EE:52:2C:44:87:E0:E9:0D:73:DF:79:2A
Certificate issuer:       /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
Certificate serial:       010D0C9F43285849C904E81C94A62A62BC2DF140
Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     0
IP address blocks:        206.197.187.0/24 maxlen: 24
                          2001:504:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:e8:1c:94:a6:2a:62:bc:2d:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=45c7a1d0-1ed8-4f32-8610-544dd792b92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:e3:51:8c:ec:9c:76:0b:66:23:96:90:7a:
                    0a:4b:a1:8b:5b:dd:2e:4b:38:ac:37:5c:dc:b7:87:
                    bd:d2:bd:69:d7:a2:89:6e:e2:47:6e:86:4c:76:03:
                    9f:de:d3:19:28:c4:e1:e9:f1:3b:f9:88:c4:78:fa:
                    16:3b:a3:91:71:28:34:b5:44:cf:a3:d9:93:68:d0:
                    fd:d7:00:2d:24:3a:c3:f5:19:a2:42:fc:4d:b0:77:
                    53:70:6c:1b:95:0a:c7:26:b5:da:c9:98:ac:67:34:
                    7f:30:81:c4:ba:59:05:4c:5a:3b:40:61:b6:ad:88:
                    df:fa:38:15:d7:71:62:f4:88:0e:b1:61:d6:e1:98:
                    d1:8a:6a:84:1f:7e:9a:c9:58:73:1a:8f:50:bc:15:
                    c1:b1:9b:e5:68:3a:20:8f:9c:f6:46:1d:f2:f6:a4:
                    de:d2:2e:ac:fa:96:dc:14:6e:44:24:e2:1c:e9:69:
                    cc:44:38:80:9c:d2:f2:87:8e:60:9d:76:1d:a2:e4:
                    77:e0:09:e4:38:97:dd:55:d0:bc:72:09:15:66:f4:
                    e8:28:6d:1e:af:e1:50:c1:c7:c7:23:80:3a:29:2f:
                    a3:f0:4e:fb:20:c1:37:0f:14:99:b1:d3:68:d1:e0:
                    dc:8e:8e:24:60:0c:d0:b1:9e:7f:f8:59:91:10:ea:
                    4c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:88:E6:17:04:FA:C7:99:EE:52:2C:44:87:E0:E9:0D:73:DF:79:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl

            X509v3 Authority Key Identifier:
                keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.187.0/24
                IPv6:
                  2001:504:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ad:6e:34:4e:3c:4b:d3:77:8d:d1:1a:b0:b8:6b:e2:62:0a:
         51:5b:71:0e:56:15:ed:2d:43:a6:f6:b0:de:0d:ef:05:61:eb:
         bf:f9:03:5d:31:76:f0:c5:ef:8b:08:5b:0c:db:62:a3:af:22:
         b5:9e:4b:87:43:d7:84:8e:be:28:57:f6:44:6e:9f:e1:0d:ea:
         13:e9:11:91:ef:7f:7c:03:6d:62:d3:6c:51:c8:d8:d5:00:f9:
         45:f6:68:54:b0:d7:90:fb:94:b6:bb:df:5a:86:b7:c8:2c:2d:
         a2:7d:34:e1:03:ce:c0:97:17:95:1e:c0:db:51:1e:f3:a8:9d:
         1d:45:d2:2e:41:62:b8:54:56:6d:3b:23:e7:76:88:0a:d5:20:
         c2:57:b0:9e:27:d1:75:12:f1:05:04:56:3d:2b:e6:d1:36:55:
         8a:13:ec:31:3e:d9:4a:60:8f:0f:71:55:c4:f6:cc:ac:6e:82:
         17:4f:7f:ce:20:89:a0:71:fc:38:0d:dd:42:13:21:7d:8f:88:
         91:ef:ca:ca:a9:36:24:13:7b:23:61:48:d5:9f:aa:0a:6e:78:
         5c:f2:58:27:15:a8:23:24:4d:5f:d7:d7:fe:45:64:74:ae:d9:
         c3:94:ab:ae:b7:3e:f6:f0:f9:3d:0c:e7:00:44:ba:81:f1:36:
         ef:3e:96:07
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnJBOgclKYqYrwt8UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTRjOWUwY2UtMGYxMi00YmM4LTk4OWMtNWQzMzJhN2Nm
NTIyMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
NDVjN2ExZDAtMWVkOC00ZjMyLTg2MTAtNTQ0ZGQ3OTJiOTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlHjUYzsnHYLZiOWkHoKS6GLW90uSzisN1zc
t4e90r1p16KJbuJHboZMdgOf3tMZKMTh6fE7+YjEePoWO6ORcSg0tUTPo9mTaND9
1wAtJDrD9RmiQvxNsHdTcGwblQrHJrXayZisZzR/MIHEulkFTFo7QGG2rYjf+jgV
13Fi9IgOsWHW4ZjRimqEH36ayVhzGo9QvBXBsZvlaDogj5z2Rh3y9qTe0i6s+pbc
FG5EJOIc6WnMRDiAnNLyh45gnXYdouR34AnkOJfdVdC8cgkVZvToKG0er+FQwcfH
I4A6KS+j8E77IME3DxSZsdNo0eDcjo4kYAzQsZ5/+FmREOpMPQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFBiI5hcE+seZ7lIsRIfg6Q1z33kqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5
ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3Y2Y1MjIvZWI5N2IxNmYtZGQ5MC0z
M2RkLTliN2UtZmNmODgzNDFiNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTRjOWUwY2UtMGYxMi00YmM4LTk4
OWMtNWQzMzJhN2NmNTIyLzE0YzllMGNlLTBmMTItNGJjOC05ODljLTVkMzMyYTdj
ZjUyMi5jcmwwHwYDVR0jBBgwFoAU/fpf04LJWseB5rKwVLTJ0fActTwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMz
MmE3Y2Y1MjIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzsW7MA8E
AgACMAkDBwAgAQUEADAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOq1uNE48S9N3jdEasLhr4mIKUVtxDlYV
7S1Dpvaw3g3vBWHrv/kDXTF28MXviwhbDNtio68itZ5Lh0PXhI6+KFf2RG6f4Q3q
E+kRke9/fANtYtNsUcjY1QD5RfZoVLDXkPuUtrvfWoa3yCwton004QPOwJcXlR7A
21Ee86idHUXSLkFiuFRWbTsj53aICtUgwlewnifRdRLxBQRWPSvm0TZVihPsMT7Z
SmCPD3FVxPbMrG6CF09/ziCJoHH8OA3dQhMhfY+Ike/Kyqk2JBN7I2FI1Z+qCm54
XPJYJxWoIyRNX9fX/kVkdK7Zw5Srrrc+9vD5PQznAES6gfE27z6WBw==
-----END CERTIFICATE-----
Generated at Sun Jun 1 03:11:36 2025 by rpki-client