Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/e53cba2f-02be-3018-bda4-87682927db2a.roa
File:                     e53cba2f-02be-3018-bda4-87682927db2a.roa (raw, json)
Hash identifier:          YWWmaGcJxyxy1/Hf7XkoPA4XF/sRmuqUISdbQOxB6Q4=
Subject key identifier:   49:9F:4F:72:43:87:E4:E8:E5:89:7E:16:D3:D3:9A:15:D7:94:29:22
Certificate issuer:       /CN=2c480684-ece9-4dd6-8ec6-0437d826102d
Certificate serial:       010D0C9F4328584AAB26589B9C8620125A784480
Authority key identifier: DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/e53cba2f-02be-3018-bda4-87682927db2a.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     46616
IP address blocks:        208.114.48.0/20 maxlen: 20
                          208.114.48.0/22 maxlen: 22
                          208.114.48.0/24 maxlen: 24
                          208.114.49.0/24 maxlen: 24
                          208.114.50.0/24 maxlen: 24
                          208.114.51.0/24 maxlen: 24
                          208.114.52.0/24 maxlen: 24
                          208.114.53.0/24 maxlen: 24
                          208.114.54.0/24 maxlen: 24
                          208.114.55.0/24 maxlen: 24
                          208.114.56.0/23 maxlen: 23
                          208.114.56.0/24 maxlen: 24
                          208.114.57.0/24 maxlen: 24
                          208.114.58.0/24 maxlen: 24
                          208.114.59.0/24 maxlen: 24
                          208.114.60.0/24 maxlen: 24
                          208.114.61.0/24 maxlen: 24
                          208.114.62.0/24 maxlen: 24
                          208.114.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:58:9b:9c:86:20:12:5a:78:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c480684-ece9-4dd6-8ec6-0437d826102d
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=0fa06c6e-2ce0-49ca-a76f-c772162835c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2c:5e:c8:c9:9d:ef:27:96:c3:0b:af:31:1d:
                    23:2b:38:6d:8f:1e:86:80:bc:58:c4:87:ed:e8:d0:
                    44:be:06:19:dd:06:0d:ff:94:33:f8:24:a7:26:c3:
                    6f:2b:59:6c:47:7d:d1:41:75:c2:e8:8c:8b:de:f1:
                    25:fd:f5:37:bc:ac:52:57:a1:56:22:81:2f:a5:38:
                    ff:1e:0b:d1:bf:db:74:07:60:b3:91:2b:8f:5a:70:
                    33:96:2f:1b:89:7c:7b:98:19:20:74:3a:b2:e4:b8:
                    d0:f7:c8:ee:20:5c:d5:c0:b4:7a:5a:a4:30:63:14:
                    34:e4:7b:b5:b7:d5:32:f1:c4:51:88:cd:48:21:11:
                    f7:ed:de:e0:fe:c2:ab:69:c8:6b:85:e7:6d:7c:66:
                    ad:f3:cd:8e:45:9b:5b:db:d5:5c:cd:33:e4:fb:4f:
                    ad:4e:5d:dc:e4:02:fb:1d:66:d5:d5:07:b2:f7:dc:
                    41:06:c4:9f:00:65:89:a1:2b:47:ea:57:8a:e4:c2:
                    f8:6d:6e:1b:53:4e:35:b3:91:fc:aa:23:7e:18:7f:
                    a2:22:95:f9:d7:e8:22:6d:76:4d:5b:c5:a9:29:c5:
                    e5:00:54:14:63:b7:fe:3a:bf:1f:49:51:db:ce:38:
                    3c:4f:60:24:bb:88:24:c0:0d:70:d6:9e:ec:44:0f:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9F:4F:72:43:87:E4:E8:E5:89:7E:16:D3:D3:9A:15:D7:94:29:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/e53cba2f-02be-3018-bda4-87682927db2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:42:42:a3:13:9a:c7:bc:13:e5:c8:2c:98:52:16:9b:89:
         1a:ae:5d:14:b0:8c:58:5c:2b:ca:ce:4a:43:58:ab:be:44:8f:
         72:ca:40:8c:cd:73:ae:08:bf:fb:dd:38:3c:58:69:41:e0:78:
         a2:59:0e:f6:c4:08:c6:18:89:87:e3:45:4f:bb:74:80:4c:11:
         44:50:4e:59:a9:b2:a8:8c:5a:af:3f:63:1c:24:80:2f:f0:e8:
         ab:a3:d2:90:d2:00:1c:2c:21:b7:6a:f3:8c:25:03:58:40:71:
         65:8f:3a:46:85:63:e7:94:72:f2:ad:da:8e:2d:52:70:a3:b6:
         6c:b8:11:58:1e:d1:f4:2d:de:79:f3:d5:bb:37:56:54:8c:58:
         e6:73:cb:6e:f2:88:31:54:6f:d5:85:31:12:77:2f:6f:9d:1a:
         be:30:90:18:cb:fb:b0:81:2e:60:fc:0a:6d:23:d5:cf:14:9c:
         bc:51:90:c6:49:fe:e4:1a:20:f6:3a:21:ad:73:0c:f3:72:7c:
         3b:00:33:8c:b5:24:4e:71:9f:67:a8:cf:3e:71:40:0b:15:59:
         32:44:69:fc:13:4b:f7:cd:2e:5c:55:25:1f:31:db:86:e5:73:
         26:ab:7c:f2:4f:08:7f:c6:7d:9b:9d:2f:d8:37:4f:a4:c7:3b:
         b5:ec:c8:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlibnIYgElp4RIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmM0ODA2ODQtZWNlOS00ZGQ2LThlYzYtMDQzN2Q4MjYx
MDJkMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MGZhMDZjNmUtMmNlMC00OWNhLWE3NmYtYzc3MjE2MjgzNWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyxeyMmd7yeWwwuvMR0jKzhtjx6GgLxYxIft
6NBEvgYZ3QYN/5Qz+CSnJsNvK1lsR33RQXXC6IyL3vEl/fU3vKxSV6FWIoEvpTj/
HgvRv9t0B2CzkSuPWnAzli8biXx7mBkgdDqy5LjQ98juIFzVwLR6WqQwYxQ05Hu1
t9Uy8cRRiM1IIRH37d7g/sKrachrhedtfGat882ORZtb29VczTPk+0+tTl3c5AL7
HWbV1Qey99xBBsSfAGWJoStH6leK5ML4bW4bU041s5H8qiN+GH+iIpX51+gibXZN
W8WpKcXlAFQUY7f+Or8fSVHbzjg8T2Aku4gkwA1w1p7sRA9UqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmfT3JDh+To5Yl+FtPTmhXXlCkiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYzQ4
MDY4NC1lY2U5LTRkZDYtOGVjNi0wNDM3ZDgyNjEwMmQvZTUzY2JhMmYtMDJiZS0z
MDE4LWJkYTQtODc2ODI5MjdkYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmM0ODA2ODQtZWNlOS00ZGQ2LThl
YzYtMDQzN2Q4MjYxMDJkLzJjNDgwNjg0LWVjZTktNGRkNi04ZWM2LTA0MzdkODI2
MTAyZC5jcmwwHwYDVR0jBBgwFoAU228xi315cPYMwgcg0hNv9Pw2VXMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yYzQ4MDY4NC1lY2U5LTRkZDYtOGVjNi0wNDM3
ZDgyNjEwMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdaQkKjE5rHvBPlyCyYUhabiRquXRSwjFhcK8rOSkNYq75Ej3LKQIzN
c64Iv/vdODxYaUHgeKJZDvbECMYYiYfjRU+7dIBMEURQTlmpsqiMWq8/YxwkgC/w
6Kuj0pDSABwsIbdq84wlA1hAcWWPOkaFY+eUcvKt2o4tUnCjtmy4EVge0fQt3nnz
1bs3VlSMWOZzy27yiDFUb9WFMRJ3L2+dGr4wkBjL+7CBLmD8Cm0j1c8UnLxRkMZJ
/uQaIPY6Ia1zDPNyfDsAM4y1JE5xn2eozz5xQAsVWTJEafwTS/fNLlxVJR8x24bl
cyarfPJPCH/GfZudL9g3T6THO7XsyJE=
-----END CERTIFICATE-----
Generated at Tue Jul 29 17:45:52 2025 by rpki-client