Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/22d0cd2d-99da-362d-bbbd-5333e3f0a48e.roa
File:                     22d0cd2d-99da-362d-bbbd-5333e3f0a48e.roa (raw, json)
Hash identifier:          sKb7YqFBqbu3sJCUkuDSsQC0JYoXGQo49MmWHh4KYNQ=
Subject key identifier:   36:88:65:91:97:28:25:F2:B0:18:3F:5B:D8:37:54:C9:5C:13:94:AA
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F43285849CBCF95365D0164CC85911480
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/22d0cd2d-99da-362d-bbbd-5333e3f0a48e.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     25623
IP address blocks:        199.114.249.0/24 maxlen: 24
                          199.114.251.0/24 maxlen: 24
                          2001:4830:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:95:36:5d:01:64:cc:85:91:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=10c75f97-39c6-4a29-ac8b-051943145456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:a4:8c:6e:d0:30:fe:24:f4:27:90:04:6e:
                    2d:f3:d8:a6:84:4e:42:ac:2d:13:08:2b:26:b3:38:
                    8f:b4:53:2f:cf:1e:f0:0e:08:56:c4:44:9c:85:4a:
                    dd:8d:5d:04:c6:98:e2:87:d5:6c:19:ce:26:fc:b4:
                    3b:f0:bb:3f:d5:7e:02:45:fb:90:27:73:73:40:02:
                    b2:0a:5e:33:d3:e8:bf:6b:5c:ed:5e:3c:5b:af:6d:
                    2b:e5:3b:cf:4e:e7:d6:94:21:d0:a8:17:66:8d:dc:
                    ac:37:85:25:60:43:12:6c:ac:a4:d2:67:8d:47:7f:
                    7f:8e:9f:0b:5e:f9:8f:84:d5:a1:bb:19:f4:04:74:
                    7d:ce:a9:d7:89:41:c9:27:a0:7d:a2:ca:d9:4b:09:
                    a9:c0:b4:8f:2e:28:c0:8b:d1:07:38:6c:89:7b:ee:
                    0b:c0:9e:fd:47:f9:ac:67:ad:3f:10:49:e0:1c:d2:
                    49:c4:36:7b:af:57:37:95:7b:ac:84:8d:ca:f1:7c:
                    91:1e:c0:8f:7f:18:fe:f0:a2:d6:c9:d5:2a:43:c3:
                    61:51:3c:fe:4a:2c:ee:0a:97:1c:1d:02:61:bf:7a:
                    42:36:97:de:25:31:d3:f8:21:3a:f9:d5:ff:b8:38:
                    88:db:e0:6a:09:63:e5:e1:8a:b4:9e:5c:92:37:e8:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:88:65:91:97:28:25:F2:B0:18:3F:5B:D8:37:54:C9:5C:13:94:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/22d0cd2d-99da-362d-bbbd-5333e3f0a48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.114.249.0/24
                  199.114.251.0/24
                IPv6:
                  2001:4830:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:dc:07:a9:65:d7:46:64:48:3d:7e:e2:67:c8:55:aa:51:95:
         a7:3e:9a:72:1b:d3:3c:05:d2:63:ca:63:c7:e2:61:48:1a:91:
         3f:c3:9b:fd:9c:9e:ed:be:3c:d3:a2:c8:0d:11:58:18:1e:69:
         8c:29:2a:4a:e7:d1:05:eb:be:4d:2c:02:22:72:3b:f0:c1:ca:
         5b:0c:b9:d0:04:e4:ef:e3:4f:ce:a1:6f:71:12:2a:35:71:e9:
         48:ee:79:f6:de:5d:ac:ed:a0:20:f8:02:af:2c:3e:65:e4:ab:
         60:d4:d8:07:d3:bf:9f:c2:2e:97:1a:f2:02:2f:40:69:d7:c1:
         e6:13:44:ae:cc:c6:f1:ad:fc:15:fa:a9:e6:36:a3:54:3e:da:
         93:b8:bd:ef:6a:7b:cf:19:07:ed:47:8b:bb:d7:a0:a1:14:03:
         da:ca:8f:05:f3:ba:12:22:24:6a:c7:e3:fd:7d:ec:47:6c:b4:
         5c:39:1a:e0:69:1e:ea:2d:fc:b5:1a:61:89:a5:97:d2:c4:19:
         17:ee:74:92:bd:7d:fe:57:44:f4:00:51:15:0f:67:df:47:58:
         e8:b3:5f:3f:29:00:df:dc:3f:d7:fd:0b:fc:fc:ad:a3:a6:6a:
         39:0c:4a:7b:16:61:9c:6f:9c:61:90:95:63:20:01:08:f5:2d:
         cf:fc:a7:e2
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEnLz5U2XQFkzIWRFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5
MWRkMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk
MTBjNzVmOTctMzljNi00YTI5LWFjOGItMDUxOTQzMTQ1NDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujOkjG7QMP4k9CeQBG4t89imhE5CrC0TCCsm
sziPtFMvzx7wDghWxESchUrdjV0Expjih9VsGc4m/LQ78Ls/1X4CRfuQJ3NzQAKy
Cl4z0+i/a1ztXjxbr20r5TvPTufWlCHQqBdmjdysN4UlYEMSbKyk0meNR39/jp8L
XvmPhNWhuxn0BHR9zqnXiUHJJ6B9osrZSwmpwLSPLijAi9EHOGyJe+4LwJ79R/ms
Z60/EEngHNJJxDZ7r1c3lXushI3K8XyRHsCPfxj+8KLWydUqQ8NhUTz+SizuCpcc
HQJhv3pCNpfeJTHT+CE6+dX/uDiI2+BqCWPl4Yq0nlySN+jmRQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFDaIZZGXKCXysBg/W9g3VMlcE5SqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2
MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMjJkMGNkMmQtOTlkYS0z
NjJkLWJiYmQtNTMzM2UzZjBhNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1
NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx
OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl
ZGQ4MTkxZGQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAx3L5AwQA
x3L7MA4EAgACMAgDBgAgAUgwAjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB53AepZddGZEg9fuJnyFWqUZWn
PppyG9M8BdJjymPH4mFIGpE/w5v9nJ7tvjzTosgNEVgYHmmMKSpK59EF675NLAIi
cjvwwcpbDLnQBOTv40/OoW9xEio1celI7nn23l2s7aAg+AKvLD5l5Ktg1NgH07+f
wi6XGvICL0Bp18HmE0SuzMbxrfwV+qnmNqNUPtqTuL3vanvPGQftR4u716ChFAPa
yo8F87oSIiRqx+P9fexHbLRcORrgaR7qLfy1GmGJpZfSxBkX7nSSvX3+V0T0AFEV
D2ffR1jos18/KQDf3D/X/Qv8/K2jpmo5DEp7FmGcb5xhkJVjIAEI9S3P/Kfi
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:00:15 2025 by rpki-client