Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/85cae2bd-5063-312a-99a8-0b49ad92edfa.roa
File:                     85cae2bd-5063-312a-99a8-0b49ad92edfa.roa (raw, json)
Hash identifier:          /SRXp9NDMrMsUJWKc6ni8MsrU+7HB8RXcZZgnMWgAxg=
Subject key identifier:   42:A6:28:1D:F3:C8:BF:D7:C6:DE:A1:23:4E:DF:57:0A:79:6C:DB:FA
Certificate issuer:       /CN=bbc10cdd-c548-4bd0-aafb-ae57822b4599
Certificate serial:       010D0C9F4328584A8576057E0B136A4A31E10C80
Authority key identifier: BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/85cae2bd-5063-312a-99a8-0b49ad92edfa.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        64.39.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:05:7e:0b:13:6a:4a:31:e1:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbc10cdd-c548-4bd0-aafb-ae57822b4599
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=1b5998c4-3171-42d7-84df-b6c146fda97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:5c:34:8e:50:6f:82:f1:aa:1d:14:9b:f8:
                    32:92:6f:34:15:99:b9:05:c8:b8:6a:7e:43:f0:d6:
                    53:a5:8b:c5:24:4f:aa:34:71:b9:94:32:a8:7c:4c:
                    e5:22:34:50:89:f1:4a:ff:81:25:4b:8a:9a:37:78:
                    89:3f:bf:38:97:46:61:1a:d9:a1:cc:cc:fb:b3:18:
                    e2:9b:4e:27:47:5d:77:35:bf:79:1f:5e:04:1f:be:
                    3e:b2:fe:48:fb:bc:5d:de:7c:e9:83:48:0d:83:47:
                    2c:6e:31:9c:a2:c7:c6:a2:c6:69:bf:bd:ba:f5:70:
                    30:17:37:47:3b:bf:70:81:e7:aa:05:fc:8c:b4:d3:
                    4e:db:41:d7:b5:cf:29:97:d8:03:82:31:9f:82:41:
                    fd:0f:89:ac:03:f6:46:62:d6:b9:0b:52:26:e6:fd:
                    66:20:b8:88:ef:e6:b6:e6:94:d1:b9:34:be:a6:2c:
                    de:92:ec:0a:07:a9:9b:cf:2e:93:79:b1:ec:ec:8f:
                    6f:92:58:a4:48:67:d3:6c:78:e7:9b:22:d7:e4:7b:
                    43:2f:4b:83:ee:99:37:f6:08:67:06:d0:27:e6:f3:
                    c9:bb:0f:1b:3a:e8:b1:10:96:61:b0:ad:4e:0d:be:
                    ab:86:d9:3c:62:e1:a9:a6:53:d0:a2:3e:a4:dd:d7:
                    df:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A6:28:1D:F3:C8:BF:D7:C6:DE:A1:23:4E:DF:57:0A:79:6C:DB:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/85cae2bd-5063-312a-99a8-0b49ad92edfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:69:97:4e:0a:22:fc:c2:0d:b9:dd:f2:38:8c:ba:a8:46:e8:
         17:af:10:8e:8b:27:1a:17:a7:a4:aa:43:ef:10:62:6b:36:17:
         9a:cc:ad:ab:50:d8:0d:6a:7e:e6:53:01:a5:1f:cc:04:c2:b7:
         95:02:e5:8b:5a:c5:3e:c5:a8:4b:ee:ad:36:54:2f:28:a3:f2:
         0c:fd:bb:70:89:80:75:18:95:25:85:17:75:bd:1a:e5:85:ee:
         64:48:f1:bc:c9:94:03:29:ae:ba:65:62:5c:e8:fe:00:48:f0:
         77:a1:48:e7:0d:53:ae:7d:87:32:14:ff:92:36:0f:4a:ad:67:
         36:25:99:de:0a:8b:ef:20:5a:d6:5b:81:84:ed:89:73:cf:8f:
         99:89:ff:a8:48:37:f4:42:4b:eb:45:bb:46:4c:09:ee:e8:5a:
         32:1e:62:a7:f6:7b:fb:76:0c:59:05:d0:1c:07:77:46:7e:c3:
         28:cb:34:c9:bb:5f:61:5f:2c:56:dc:fe:f0:c1:08:9c:4a:79:
         07:57:5c:7b:c2:e6:bb:8b:ff:17:ab:fb:0b:29:5e:d9:ed:ac:
         cb:9a:b8:31:89:7b:0b:df:bd:87:6c:ed:01:3c:ce:e4:9b:a4:
         c2:84:bf:3c:a0:de:24:70:df:55:54:cf:6c:94:e6:73:66:cf:
         da:c8:eb:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgV+CxNqSjHhDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmJjMTBjZGQtYzU0OC00YmQwLWFhZmItYWU1NzgyMmI0
NTk5MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk
MWI1OTk4YzQtMzE3MS00MmQ3LTg0ZGYtYjZjMTQ2ZmRhOTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbBcNI5Qb4Lxqh0Um/gykm80FZm5Bci4an5D
8NZTpYvFJE+qNHG5lDKofEzlIjRQifFK/4ElS4qaN3iJP784l0ZhGtmhzMz7sxji
m04nR113Nb95H14EH74+sv5I+7xd3nzpg0gNg0csbjGcosfGosZpv7269XAwFzdH
O79wgeeqBfyMtNNO20HXtc8pl9gDgjGfgkH9D4msA/ZGYta5C1Im5v1mILiI7+a2
5pTRuTS+pizekuwKB6mbzy6TebHs7I9vklikSGfTbHjnmyLX5HtDL0uD7pk39ghn
BtAn5vPJuw8bOuixEJZhsK1ODb6rhtk8YuGpplPQoj6k3dffwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKmKB3zyL/Xxt6hI07fVwp5bNv6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYmMx
MGNkZC1jNTQ4LTRiZDAtYWFmYi1hZTU3ODIyYjQ1OTkvODVjYWUyYmQtNTA2My0z
MTJhLTk5YTgtMGI0OWFkOTJlZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmJjMTBjZGQtYzU0OC00YmQwLWFh
ZmItYWU1NzgyMmI0NTk5L2JiYzEwY2RkLWM1NDgtNGJkMC1hYWZiLWFlNTc4MjJi
NDU5OS5jcmwwHwYDVR0jBBgwFoAUvPigByhW42Jis5K3mf0+IOsYb/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iYmMxMGNkZC1jNTQ4LTRiZDAtYWFmYi1hZTU3
ODIyYjQ1OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCfoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhpl04KIvzCDbnd8jiMuqhG6BevEI6LJxoXp6SqQ+8QYms2F5rMratQ
2A1qfuZTAaUfzATCt5UC5YtaxT7FqEvurTZULyij8gz9u3CJgHUYlSWFF3W9GuWF
7mRI8bzJlAMprrplYlzo/gBI8HehSOcNU659hzIU/5I2D0qtZzYlmd4Ki+8gWtZb
gYTtiXPPj5mJ/6hIN/RCS+tFu0ZMCe7oWjIeYqf2e/t2DFkF0BwHd0Z+wyjLNMm7
X2FfLFbc/vDBCJxKeQdXXHvC5ruL/xer+wspXtntrMuauDGJewvfvYds7QE8zuSb
pMKEvzyg3iRw31VUz2yU5nNmz9rI67M=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:36:22 2025 by rpki-client