Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4a475e-7805-313a-8a90-9e9a9d40bc1f.roa
File:                     8b4a475e-7805-313a-8a90-9e9a9d40bc1f.roa (raw, json)
Hash identifier:          SUepEtluEgntNy2xLbJBPZlmX/uFMNNBRcE1vubTi1M=
Subject key identifier:   57:36:9F:BA:09:3B:7A:C5:CC:02:62:62:1B:E3:99:1D:6E:12:0E:F0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A18955C83A9A975C23B8FE060
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4a475e-7805-313a-8a90-9e9a9d40bc1f.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     200005
IP address blocks:        170.199.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:5c:83:a9:a9:75:c2:3b:8f:e0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=8b128036-3dba-446f-8b4c-45413654e4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:81:f7:e8:b4:b3:c2:30:52:d6:41:ab:4c:
                    d2:0a:a1:cb:ea:7d:03:32:08:94:f3:a6:82:78:61:
                    bc:54:13:4e:01:ce:b9:0a:72:cd:51:e0:45:12:aa:
                    8f:9e:42:81:fa:ce:92:0b:a4:7f:a5:d0:bf:c1:1e:
                    da:26:f9:d0:6b:df:9d:28:20:7d:8e:42:08:bb:e9:
                    6f:70:50:d6:34:10:37:8e:05:a6:b4:7e:d3:59:28:
                    09:5a:aa:c2:a7:9c:a6:72:e9:e5:bf:e9:ff:1c:c5:
                    86:e2:d5:c1:32:f2:2a:d7:c4:1f:1e:96:2a:45:44:
                    86:98:61:4f:b9:91:99:95:8d:a0:83:f3:ad:f4:ab:
                    a1:10:ab:de:ff:56:cc:15:24:e2:a0:db:ef:4e:d0:
                    7d:83:8a:3b:7b:20:bc:9b:6d:43:6a:56:f3:ed:65:
                    8a:f8:bb:6b:ca:1a:01:72:ab:9f:ee:cb:8a:92:12:
                    d6:f3:dc:02:d7:29:32:21:e3:ba:49:da:6b:f5:da:
                    e9:1b:7d:b6:4b:91:cf:db:2d:e7:72:a9:49:46:ea:
                    c2:c7:66:4d:08:99:3e:01:df:ff:be:f0:e2:9c:de:
                    e2:b2:e4:7e:23:aa:f1:87:30:8e:77:8c:cd:c1:87:
                    61:d7:a3:b6:5e:16:78:23:19:f2:d5:24:2b:8f:ff:
                    38:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:36:9F:BA:09:3B:7A:C5:CC:02:62:62:1B:E3:99:1D:6E:12:0E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b4a475e-7805-313a-8a90-9e9a9d40bc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:76:dd:95:e3:7a:5f:43:8a:19:ef:d4:56:60:14:93:6e:53:
         81:d5:18:c2:7a:02:56:88:15:10:09:fb:1b:f2:11:04:97:59:
         5a:18:8a:05:b9:6e:58:38:ca:c8:89:fd:4e:02:5a:62:e0:46:
         04:80:06:28:c0:c2:9e:8e:75:ff:c6:ac:3d:12:e8:3f:18:f1:
         28:36:7b:78:05:41:53:b1:58:61:98:b9:3a:cd:fe:96:04:03:
         38:ee:5f:f3:16:9d:a3:9a:ec:4d:1e:d0:a6:60:c3:42:8b:25:
         1b:af:f8:7f:b3:9c:ae:b4:12:e9:9f:7e:a8:94:1f:fd:9e:4d:
         7c:f4:cd:db:cb:6b:11:f5:d6:00:09:d6:c6:90:75:e5:e0:16:
         59:52:ce:d6:75:72:cf:44:f6:c7:89:ac:89:2e:71:d7:e2:ef:
         ca:c7:05:09:39:34:3b:37:79:e2:b1:a2:10:e1:46:c9:4f:1b:
         5e:43:2d:e6:ed:c9:3d:06:5c:9c:45:30:62:db:c3:70:35:9e:
         3f:05:37:d9:f8:99:d8:41:65:b4:83:a1:b8:c5:47:03:4f:e2:
         59:7e:f3:c2:da:3f:dc:24:05:a7:3f:b9:68:fd:16:43:e7:e1:
         0b:74:ad:92:33:93:b4:75:b8:04:b2:4c:35:4d:55:90:38:47:
         3b:d5:ab:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlVyDqal1wjuP4GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
OGIxMjgwMzYtM2RiYS00NDZmLThiNGMtNDU0MTM2NTRlNGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KCB9+i0s8IwUtZBq0zSCqHL6n0DMgiU86aC
eGG8VBNOAc65CnLNUeBFEqqPnkKB+s6SC6R/pdC/wR7aJvnQa9+dKCB9jkIIu+lv
cFDWNBA3jgWmtH7TWSgJWqrCp5ymcunlv+n/HMWG4tXBMvIq18QfHpYqRUSGmGFP
uZGZlY2gg/Ot9KuhEKve/1bMFSTioNvvTtB9g4o7eyC8m21Dalbz7WWK+LtryhoB
cquf7suKkhLW89wC1ykyIeO6Sdpr9drpG322S5HP2y3ncqlJRurCx2ZNCJk+Ad//
vvDinN7isuR+I6rxhzCOd4zNwYdh16O2XhZ4Ixny1SQrj/84HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFc2n7oJO3rFzAJiYhvjmR1uEg7wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI0YTQ3NWUtNzgwNS0z
MTNhLThhOTAtOWU5YTlkNDBiYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJ23ZXjel9Dihnv1FZgFJNuU4HVGMJ6AlaIFRAJ+xvyEQSXWVoYigW5
blg4ysiJ/U4CWmLgRgSABijAwp6Odf/GrD0S6D8Y8Sg2e3gFQVOxWGGYuTrN/pYE
AzjuX/MWnaOa7E0e0KZgw0KLJRuv+H+znK60EumffqiUH/2eTXz0zdvLaxH11gAJ
1saQdeXgFllSztZ1cs9E9seJrIkucdfi78rHBQk5NDs3eeKxohDhRslPG15DLebt
yT0GXJxFMGLbw3A1nj8FN9n4mdhBZbSDobjFRwNP4ll+88LaP9wkBac/uWj9FkPn
4Qt0rZIzk7R1uASyTDVNVZA4RzvVq2E=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:22 2025 by rpki-client