Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/72cee16f-4d23-30e7-aa93-a70a3456259e.roa
File:                     72cee16f-4d23-30e7-aa93-a70a3456259e.roa (raw, json)
Hash identifier:          ZyB2z9xNjeniLn04IzjjHhjyO2mC8wcmnAjczEz6STk=
Subject key identifier:   59:B5:7E:E7:02:09:22:5F:20:8B:22:01:A0:56:73:1A:14:C8:0B:D7
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584B328C4411C905C2F0F0B012C8
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/72cee16f-4d23-30e7-aa93-a70a3456259e.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     33356
IP address blocks:        67.59.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:44:11:c9:05:c2:f0:f0:b0:12:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=dd4957e9-76a2-4e7f-8b2e-422e773156d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3a:45:f6:01:4f:3b:d8:d0:03:60:21:45:40:
                    02:b3:7c:1b:c3:05:49:8a:7b:51:64:9a:9e:82:11:
                    c7:cc:fd:fb:5a:64:3a:f7:49:c0:7c:1c:74:e1:09:
                    10:db:c3:d7:1c:2b:1e:01:23:38:8c:fc:40:16:34:
                    75:df:ba:9d:c1:8e:66:4a:9f:e3:6a:ff:1a:83:2f:
                    2f:9b:ff:91:be:16:ba:ca:57:e8:17:5c:73:ea:9e:
                    46:f9:93:91:44:2c:2b:eb:cd:e2:7e:c3:19:d3:1e:
                    fc:c7:ea:ea:7f:dd:53:95:d8:ec:d9:09:b5:7b:bd:
                    a1:2d:57:13:0e:e7:23:21:a0:cd:f3:f0:4b:f9:78:
                    8b:14:fc:3b:32:33:55:cd:2e:26:f5:fd:fe:1d:c4:
                    bd:6a:61:76:97:5b:c7:bf:83:1f:47:9c:d2:85:1d:
                    13:b3:a6:58:ed:a0:6c:a7:1a:8c:02:c6:52:05:c0:
                    d4:5d:31:b0:8c:2c:31:68:99:36:1b:88:a9:44:8f:
                    b4:62:2d:cd:40:3d:bf:11:c2:b0:e6:a7:25:a1:cb:
                    dd:a1:f8:6e:8e:0a:d7:5b:15:15:08:83:32:01:82:
                    cf:13:29:69:60:8c:83:62:65:d6:96:e6:6c:3d:1d:
                    95:6d:f3:28:b6:4d:67:26:e2:9e:03:68:2f:06:ed:
                    0a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B5:7E:E7:02:09:22:5F:20:8B:22:01:A0:56:73:1A:14:C8:0B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/72cee16f-4d23-30e7-aa93-a70a3456259e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:cc:5e:4c:ba:4d:64:11:3b:36:58:58:e8:7f:ca:a8:a9:f7:
         4b:27:cd:19:53:a9:0e:eb:86:68:bc:a9:1e:b1:ce:89:9c:05:
         0c:9f:d1:93:cb:26:74:59:06:61:ef:79:43:af:56:ca:91:23:
         c4:9c:75:99:cf:c4:f3:2c:bc:9e:8e:ae:50:d8:63:4d:43:7b:
         75:93:ba:74:40:f7:18:2c:df:18:7a:91:d3:be:71:8b:b9:96:
         b9:38:15:7a:49:2f:d9:8b:02:3f:42:12:31:7c:f4:ee:9c:70:
         12:5e:db:d8:21:18:fb:3d:56:da:ad:cf:3c:f8:ff:dd:6a:0a:
         1d:c6:4c:f6:d4:b0:db:b2:9e:bb:d5:7e:c0:c0:86:97:ae:c5:
         ce:f8:b8:5b:5a:a0:68:a8:02:aa:1e:c3:a0:34:74:6b:24:4e:
         0a:5d:ac:e2:8b:48:25:6d:e8:02:2a:81:09:32:99:a5:04:62:
         bd:82:33:68:e8:54:15:0b:7b:07:09:85:07:53:0b:92:7d:f7:
         95:62:bd:83:32:41:55:ec:72:5d:b1:cd:b9:44:db:99:d5:f3:
         7f:ee:43:44:3f:4d:89:f9:73:9e:12:17:79:51:4c:9e:eb:57:
         21:08:69:a0:6a:2a:22:1d:26:e3:89:0c:06:88:6f:aa:18:e9:
         ab:44:a0:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEQRyQXC8PCwEsgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz
ZmY0MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZGQ0OTU3ZTktNzZhMi00ZTdmLThiMmUtNDIyZTc3MzE1NmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjpF9gFPO9jQA2AhRUACs3wbwwVJintRZJqe
ghHHzP37WmQ690nAfBx04QkQ28PXHCseASM4jPxAFjR137qdwY5mSp/jav8agy8v
m/+Rvha6ylfoF1xz6p5G+ZORRCwr683ifsMZ0x78x+rqf91Tldjs2Qm1e72hLVcT
DucjIaDN8/BL+XiLFPw7MjNVzS4m9f3+HcS9amF2l1vHv4MfR5zShR0Ts6ZY7aBs
pxqMAsZSBcDUXTGwjCwxaJk2G4ipRI+0Yi3NQD2/EcKw5qclocvdofhujgrXWxUV
CIMyAYLPEylpYIyDYmXWluZsPR2VbfMotk1nJuKeA2gvBu0KYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFm1fucCCSJfIIsiAaBWcxoUyAvXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3
MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvNzJjZWUxNmYtNGQyMy0z
MGU3LWFhOTMtYTcwYTM0NTYyNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl
ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl
M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx
MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQztQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjMXky6TWQROzZYWOh/yqip90snzRlTqQ7rhmi8qR6xzomcBQyf0ZPL
JnRZBmHveUOvVsqRI8ScdZnPxPMsvJ6OrlDYY01De3WTunRA9xgs3xh6kdO+cYu5
lrk4FXpJL9mLAj9CEjF89O6ccBJe29ghGPs9Vtqtzzz4/91qCh3GTPbUsNuynrvV
fsDAhpeuxc74uFtaoGioAqoew6A0dGskTgpdrOKLSCVt6AIqgQkymaUEYr2CM2jo
VBULewcJhQdTC5J995VivYMyQVXscl2xzblE25nV83/uQ0Q/TYn5c54SF3lRTJ7r
VyEIaaBqKiIdJuOJDAaIb6oY6atEoI0=
-----END CERTIFICATE-----
Generated at Thu Oct 9 03:48:50 2025 by rpki-client