Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06774f75-4e9d-33b3-9002-846b6551e953.roa
File:                     06774f75-4e9d-33b3-9002-846b6551e953.roa (raw, json)
Hash identifier:          SK95wR/6YjSHJKK9MVAC7WpVoWV+CSURTjNitxJUbYo=
Subject key identifier:   F9:41:6D:D5:61:CE:A4:8C:B4:F8:B5:53:F8:4A:C9:0E:25:ED:8D:B2
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B715CD168EAB360619CF5B040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06774f75-4e9d-33b3-9002-846b6551e953.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     22944
IP address blocks:        67.140.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:d1:68:ea:b3:60:61:9c:f5:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=a96a9ade-a467-464f-a3ba-7a0c115ce95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:45:23:42:7e:46:3e:33:0d:32:27:ac:06:
                    7a:64:c5:b8:0f:0f:33:cf:f4:0e:a2:b1:18:29:bf:
                    c8:7d:9d:78:2a:18:16:a7:14:9a:82:78:f5:18:71:
                    1d:a6:13:9f:a2:22:6b:61:6d:7e:79:49:81:0d:23:
                    81:6f:0c:a8:9a:24:fe:4f:b4:05:1c:aa:51:b1:0f:
                    0e:77:ca:38:e6:84:98:28:28:06:b8:f7:9a:c9:56:
                    3c:cb:51:a8:8f:29:4c:32:9f:1e:5a:17:d9:be:38:
                    75:26:ee:58:d6:aa:81:e3:9b:05:c0:57:d8:56:76:
                    94:d0:df:d7:c0:67:bf:5e:fa:b2:4a:eb:15:e4:3b:
                    78:7b:9f:3c:d3:24:1f:aa:1a:5b:83:03:9e:19:0d:
                    b3:a6:22:a5:de:9f:66:c2:c0:66:a0:65:fa:66:75:
                    88:71:77:f0:03:b7:ce:ae:13:04:0e:77:bb:70:fb:
                    31:a4:ba:60:f9:82:6b:23:8b:4a:69:82:a5:89:e9:
                    5a:0f:fd:41:e5:ec:33:03:e1:a0:91:68:13:ca:68:
                    5b:5e:f0:9d:b9:ca:0a:e5:94:a0:be:ce:07:0f:e5:
                    56:91:4c:94:a0:64:8c:16:33:e8:f1:3e:2b:eb:8b:
                    4f:03:9b:c0:20:f1:6b:60:1e:e9:9f:9f:fc:85:9e:
                    0f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:41:6D:D5:61:CE:A4:8C:B4:F8:B5:53:F8:4A:C9:0E:25:ED:8D:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06774f75-4e9d-33b3-9002-846b6551e953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.140.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:92:77:47:18:3b:37:59:ae:03:3f:42:00:ea:7a:5e:c5:d4:
         4a:ce:38:0d:5a:5c:77:76:f4:af:eb:c0:fc:83:bb:b5:8b:3a:
         90:06:0b:72:19:9d:bf:26:0b:48:9b:b5:64:b8:59:ed:93:65:
         e7:df:9f:8b:b5:af:8b:b2:78:05:bc:f0:37:d6:31:89:7c:82:
         ca:96:a0:dd:90:aa:bc:cf:6e:11:5e:96:2a:2b:e5:a7:08:08:
         72:70:21:ab:7c:af:fb:b5:fb:f0:f2:f7:ed:06:8f:b5:52:08:
         fb:95:a0:17:d3:fd:b1:f3:be:5d:5e:7c:46:99:13:a2:a5:4f:
         8f:0a:cc:53:f7:de:47:3f:ab:6e:be:36:a7:7c:ab:d2:22:55:
         85:ab:df:29:b4:a2:e7:f6:b9:cd:0f:b8:8c:db:3a:71:37:4c:
         6e:3c:5c:bb:e4:5e:9a:e7:c1:6a:69:a1:b4:59:41:ab:e0:13:
         8e:f7:6b:df:63:6e:7c:18:70:16:cb:31:cd:37:ad:40:93:8d:
         34:8c:0a:c6:b7:b3:25:f1:c2:95:a3:91:06:cb:7c:c9:02:63:
         35:3e:1d:e6:e8:79:d7:a4:be:8b:fb:03:6a:49:21:08:a3:35:
         e3:cd:44:a0:b3:37:a1:d0:54:1c:70:ae:ef:db:5c:64:0f:c2:
         24:e2:8c:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNFo6rNgYZz1sEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
YTk2YTlhZGUtYTQ2Ny00NjRmLWEzYmEtN2EwYzExNWNlOTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHZFI0J+Rj4zDTInrAZ6ZMW4Dw8zz/QOorEY
Kb/IfZ14KhgWpxSagnj1GHEdphOfoiJrYW1+eUmBDSOBbwyomiT+T7QFHKpRsQ8O
d8o45oSYKCgGuPeayVY8y1GojylMMp8eWhfZvjh1Ju5Y1qqB45sFwFfYVnaU0N/X
wGe/XvqySusV5Dt4e5880yQfqhpbgwOeGQ2zpiKl3p9mwsBmoGX6ZnWIcXfwA7fO
rhMEDne7cPsxpLpg+YJrI4tKaYKlielaD/1B5ewzA+GgkWgTymhbXvCducoK5ZSg
vs4HD+VWkUyUoGSMFjPo8T4r64tPA5vAIPFrYB7pn5/8hZ4PuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPlBbdVhzqSMtPi1U/hKyQ4l7Y2yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDY3NzRmNzUtNGU5ZC0z
M2IzLTkwMDItODQ2YjY1NTFlOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ4y9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABaSd0cYOzdZrgM/QgDqel7F1ErOOA1aXHd29K/rwPyDu7WLOpAGC3IZ
nb8mC0ibtWS4We2TZeffn4u1r4uyeAW88DfWMYl8gsqWoN2QqrzPbhFelior5acI
CHJwIat8r/u1+/Dy9+0Gj7VSCPuVoBfT/bHzvl1efEaZE6KlT48KzFP33kc/q26+
Nqd8q9IiVYWr3ym0ouf2uc0PuIzbOnE3TG48XLvkXprnwWppobRZQavgE473a99j
bnwYcBbLMc03rUCTjTSMCsa3syXxwpWjkQbLfMkCYzU+Heboedekvov7A2pJIQij
NePNRKCzN6HQVBxwru/bXGQPwiTijGo=
-----END CERTIFICATE-----
Generated at Sat Oct 11 03:36:21 2025 by rpki-client