Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4c1f93-4391-36bc-8691-e437f97177da.roa
File:                     3f4c1f93-4391-36bc-8691-e437f97177da.roa (raw, json)
Hash identifier:          TlET4rNWv0cOz+XkXhswbnAiP7vaQURsw8cda3iBO0o=
Subject key identifier:   D6:61:C2:05:0B:F0:8A:69:97:69:34:DB:08:F2:7E:12:26:4B:87:23
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A07D5423706601436AB4823C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4c1f93-4391-36bc-8691-e437f97177da.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     16625
IP address blocks:        104.114.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:42:37:06:60:14:36:ab:48:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=7a98e198-cfdc-437c-a600-ee1bf5738258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:06:ff:4a:f7:2d:19:06:7e:46:02:13:c7:30:
                    c8:24:4a:6f:04:d0:ad:d8:cf:e8:bc:7b:04:75:98:
                    ee:1a:7a:c3:01:60:37:b7:3e:c8:d3:2e:72:19:bd:
                    59:7a:5d:bc:73:34:b4:6d:a7:a5:12:03:3e:2c:bb:
                    09:42:3c:bb:8a:b3:bb:89:da:2f:24:a3:31:7d:1a:
                    7a:98:d8:9c:90:be:54:79:e3:21:8f:46:a7:3b:7e:
                    05:4c:14:20:39:0e:e4:1c:7f:9c:78:8a:b1:21:cb:
                    1b:f9:2c:1a:3a:67:99:4b:c7:16:8d:37:f2:c9:18:
                    0f:e5:96:fb:94:c4:fb:50:e8:0d:ef:7a:45:93:e9:
                    8a:6c:32:b3:d6:27:b9:55:82:6f:e1:28:22:ab:77:
                    b3:14:6d:c0:d3:6f:c2:1d:df:80:3b:f7:79:08:8c:
                    d7:8f:8e:29:56:c1:39:88:c0:8f:ba:25:14:23:b6:
                    ad:28:c3:13:f4:9f:e0:6e:90:e3:e6:79:93:cc:f2:
                    c1:18:6d:8f:db:ec:90:e6:08:c0:61:c0:31:a5:21:
                    f6:e6:57:be:cd:65:9b:33:09:75:46:75:a0:e3:ea:
                    7c:cc:24:98:65:86:d1:b4:61:a4:51:7d:90:a8:a0:
                    96:0b:2a:11:f6:b1:c2:22:2d:8d:0f:3d:9b:6f:43:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:61:C2:05:0B:F0:8A:69:97:69:34:DB:08:F2:7E:12:26:4B:87:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f4c1f93-4391-36bc-8691-e437f97177da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.114.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e6:c7:8f:f1:98:3c:03:6b:fa:b0:04:79:ff:f5:12:6e:9f:
         3b:d2:4b:71:4e:7b:ab:fa:88:f4:11:d2:53:0b:7c:88:ff:9d:
         12:64:46:90:e9:74:a0:33:7b:9e:f5:5c:05:b5:d4:c5:41:52:
         ab:25:c7:30:29:e7:11:44:6b:0f:15:07:af:5e:00:d2:8d:e2:
         74:9b:c9:39:60:eb:86:ab:15:f2:15:5b:b3:64:fa:45:d2:7f:
         59:31:bb:87:30:ec:f6:03:8d:90:6b:d0:9c:66:e3:3f:e7:85:
         b9:db:17:98:94:5e:df:5c:df:86:f7:63:b6:56:5f:42:7f:54:
         d7:43:0d:e4:64:7d:2c:ce:c7:53:b1:11:6c:17:36:52:a9:f3:
         2f:d0:f1:ea:1c:92:3a:a0:31:58:32:03:20:23:68:36:a0:08:
         53:7b:63:77:00:92:62:d2:d6:55:6f:da:8f:cf:15:e7:32:1a:
         52:ed:c3:e7:ce:ed:01:5b:9b:8e:f1:af:ba:e4:57:72:44:d6:
         79:7c:59:ff:48:ea:af:09:ca:89:b8:0c:de:7f:f7:0d:27:f7:
         b6:cb:7b:e7:35:f2:ed:3e:16:ab:dd:b1:ec:79:21:5c:73:1d:
         98:1b:0f:b8:dc:3d:29:02:7f:23:f2:9b:ad:fd:6b:38:73:45:
         14:3a:fb:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1UI3BmAUNqtII8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk
N2E5OGUxOTgtY2ZkYy00MzdjLWE2MDAtZWUxYmY1NzM4MjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAb/SvctGQZ+RgITxzDIJEpvBNCt2M/ovHsE
dZjuGnrDAWA3tz7I0y5yGb1Zel28czS0baelEgM+LLsJQjy7irO7idovJKMxfRp6
mNickL5UeeMhj0anO34FTBQgOQ7kHH+ceIqxIcsb+SwaOmeZS8cWjTfyyRgP5Zb7
lMT7UOgN73pFk+mKbDKz1ie5VYJv4Sgiq3ezFG3A02/CHd+AO/d5CIzXj44pVsE5
iMCPuiUUI7atKMMT9J/gbpDj5nmTzPLBGG2P2+yQ5gjAYcAxpSH25le+zWWbMwl1
RnWg4+p8zCSYZYbRtGGkUX2QqKCWCyoR9rHCIi2NDz2bb0PzeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZhwgUL8Ippl2k02wjyfhImS4cjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y0YzFmOTMtNDM5MS0z
NmJjLTg2OTEtZTQzN2Y5NzE3N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaHJQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILmx4/xmDwDa/qwBHn/9RJunzvSS3FOe6v6iPQR0lMLfIj/nRJkRpDp
dKAze571XAW11MVBUqslxzAp5xFEaw8VB69eANKN4nSbyTlg64arFfIVW7Nk+kXS
f1kxu4cw7PYDjZBr0Jxm4z/nhbnbF5iUXt9c34b3Y7ZWX0J/VNdDDeRkfSzOx1Ox
EWwXNlKp8y/Q8eockjqgMVgyAyAjaDagCFN7Y3cAkmLS1lVv2o/PFecyGlLtw+fO
7QFbm47xr7rkV3JE1nl8Wf9I6q8Jyom4DN5/9w0n97bLe+c18u0+Fqvdsex5IVxz
HZgbD7jcPSkCfyPym639azhzRRQ6+9U=
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:25:23 2025 by rpki-client