Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa
File:                     94c2624e-44d2-3cbc-b242-94286db631a8.roa (raw, json)
Hash identifier:          5FnhSk+3PeJBkxsBmvsw4wFFeEuRDgTmERwKIRke5GQ=
Subject key identifier:   3D:EA:9E:7B:B7:31:97:18:07:9A:40:64:F3:46:5F:E6:D6:1E:3A:02
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584B758C9949B3646F9B58746D00
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     397422
IP address blocks:        67.59.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:99:49:b3:64:6f:9b:58:74:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=6abce3dd-c137-4519-b7f7-a2b8291db1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:7e:7e:8c:fc:43:b8:83:e8:1e:8d:a2:6c:
                    df:b8:20:53:38:56:5a:04:0d:27:54:c7:0d:62:f3:
                    15:e2:0d:a2:36:ac:8d:eb:68:48:7f:45:32:e7:f8:
                    71:4a:b2:be:b3:8c:ed:8a:de:ef:2e:22:4e:8a:04:
                    f5:1f:e0:f6:63:cd:08:d0:49:4a:80:ed:c0:af:33:
                    9c:c4:69:25:6d:a3:e5:c9:46:1b:3f:e2:a6:a7:68:
                    c1:a0:2b:3d:60:fe:48:c6:ba:21:01:67:30:15:e8:
                    58:6d:24:40:5b:6b:b6:b5:d4:84:d8:80:cc:c6:1b:
                    8f:6f:f9:e0:70:a2:56:59:d8:b0:65:c0:8c:c5:d3:
                    b2:68:0b:12:54:7d:f5:f4:a6:ad:29:38:65:12:96:
                    91:5a:e7:87:be:1a:39:90:1a:da:77:24:26:31:2f:
                    50:59:37:ae:93:1e:15:5a:38:87:4c:4e:b5:00:88:
                    f8:ab:21:63:c9:5c:3d:3d:05:78:ad:26:84:1e:1f:
                    81:24:ad:c3:82:d9:6d:c3:a7:17:4b:8b:20:18:f9:
                    6c:f1:c6:68:43:2e:68:31:64:e2:5d:84:39:ad:48:
                    d7:e5:f1:39:8e:0f:66:20:1a:ec:27:67:7d:72:63:
                    da:6a:56:27:cd:39:bb:42:37:f8:de:5a:19:e1:68:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EA:9E:7B:B7:31:97:18:07:9A:40:64:F3:46:5F:E6:D6:1E:3A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/94c2624e-44d2-3cbc-b242-94286db631a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:44:7e:7a:3a:64:8e:45:64:79:29:ca:d0:2a:40:f6:a1:5d:
         24:de:91:80:b6:d1:d4:6b:6a:ec:0f:a6:09:dc:d9:e5:c7:1f:
         de:3a:c7:bb:db:fb:d1:a8:4d:a6:8d:dd:e9:b0:09:d7:e3:1b:
         ac:00:de:71:18:76:57:c3:38:6b:f4:57:b4:80:29:86:f2:8d:
         36:6f:17:a6:79:e7:ec:d0:46:1a:c2:fb:b9:8b:44:a6:1c:c8:
         03:29:44:02:62:d0:c8:a6:50:ce:86:aa:5d:d4:1b:8b:c8:07:
         90:d0:95:da:11:d9:36:86:58:e5:fa:4c:93:85:33:26:bf:38:
         7b:34:f6:e6:b9:95:bd:05:59:a1:f0:64:fe:91:97:6a:b9:17:
         61:71:bf:3e:a0:86:b8:51:80:f3:29:0e:21:03:fa:66:51:6e:
         3d:af:9b:e1:4b:9d:9d:e7:ed:16:43:be:ac:38:9a:77:aa:c9:
         2a:e6:83:35:09:f9:ea:a9:d8:ba:91:0f:74:3d:64:75:fc:e5:
         02:57:50:47:d2:a4:33:d6:31:5e:48:d8:ec:cc:86:8b:b2:fc:
         e3:df:2e:0d:b5:c3:b7:eb:1f:32:85:c0:16:da:4a:ce:79:9f:
         fa:f3:22:51:77:d2:53:98:1c:db:d5:79:45:0a:d1:eb:5e:db:
         b2:96:53:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJlJs2Rvm1h0bQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz
ZmY0MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk
NmFiY2UzZGQtYzEzNy00NTE5LWI3ZjctYTJiODI5MWRiMWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nR+foz8Q7iD6B6NomzfuCBTOFZaBA0nVMcN
YvMV4g2iNqyN62hIf0Uy5/hxSrK+s4ztit7vLiJOigT1H+D2Y80I0ElKgO3ArzOc
xGklbaPlyUYbP+Kmp2jBoCs9YP5IxrohAWcwFehYbSRAW2u2tdSE2IDMxhuPb/ng
cKJWWdiwZcCMxdOyaAsSVH319KatKThlEpaRWueHvho5kBradyQmMS9QWTeukx4V
WjiHTE61AIj4qyFjyVw9PQV4rSaEHh+BJK3Dgtltw6cXS4sgGPls8cZoQy5oMWTi
XYQ5rUjX5fE5jg9mIBrsJ2d9cmPaalYnzTm7Qjf43loZ4WhycwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3qnnu3MZcYB5pAZPNGX+bWHjoCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3
MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvOTRjMjYyNGUtNDRkMi0z
Y2JjLWIyNDItOTQyODZkYjYzMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl
ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl
M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx
MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQztVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFEfno6ZI5FZHkpytAqQPahXSTekYC20dRrauwPpgnc2eXHH946x7vb
+9GoTaaN3emwCdfjG6wA3nEYdlfDOGv0V7SAKYbyjTZvF6Z55+zQRhrC+7mLRKYc
yAMpRAJi0MimUM6Gql3UG4vIB5DQldoR2TaGWOX6TJOFMya/OHs09ua5lb0FWaHw
ZP6Rl2q5F2Fxvz6ghrhRgPMpDiED+mZRbj2vm+FLnZ3n7RZDvqw4mneqySrmgzUJ
+eqp2LqRD3Q9ZHX85QJXUEfSpDPWMV5I2OzMhouy/OPfLg21w7frHzKFwBbaSs55
n/rzIlF30lOYHNvVeUUK0ete27KWU30=
-----END CERTIFICATE-----
Generated at Thu Oct 9 03:49:58 2025 by rpki-client