Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/0d425007-e40e-3e38-a1eb-de6438295d81.roa
File:                     0d425007-e40e-3e38-a1eb-de6438295d81.roa (raw, json)
Hash identifier:          kBi+BTPlyi7yReQzgJvwlM7FUmiLbPwwbBYdjLhXt8c=
Subject key identifier:   6C:E1:56:EF:15:D2:06:FB:4A:07:77:02:67:63:1D:EC:BD:E3:1A:98
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584B16A1708A0F032B6ACEC32B54
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/0d425007-e40e-3e38-a1eb-de6438295d81.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     8070
IP address blocks:        64.40.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:70:8a:0f:03:2b:6a:ce:c3:2b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=edf3e156-8dc2-462a-8bc3-a126610ffda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:ee:97:29:93:ba:5f:02:f3:4f:27:d6:f8:
                    fb:1e:78:7b:dd:c6:18:42:e7:ea:39:09:6f:8a:d7:
                    11:9c:64:e4:66:fe:08:8d:73:f1:bb:a3:27:92:e4:
                    f6:8a:31:cb:a4:f6:e9:00:d7:5e:a7:8e:26:a3:b6:
                    b7:06:07:fb:ab:ea:e5:65:24:70:b8:5f:19:f2:b8:
                    b1:cc:98:41:e4:1d:a8:f0:15:73:0c:d7:a9:84:8c:
                    d8:53:92:11:53:6a:09:3b:4a:d5:49:9a:d7:88:14:
                    cd:e3:7d:18:99:ce:b8:d0:2f:11:4f:3b:cf:1f:ac:
                    50:56:da:7e:b5:f7:ec:f9:71:6a:03:3b:33:ca:8d:
                    a5:a7:9b:f8:69:31:d2:45:c6:a2:77:0e:99:7a:f7:
                    8a:4c:fb:3b:87:6d:ff:41:a8:d4:5e:99:db:7c:9a:
                    6d:10:e8:06:47:0e:bb:8d:fc:30:97:9d:67:cf:08:
                    ee:aa:89:73:ca:5b:e9:dc:8d:93:5a:bc:c4:85:ec:
                    a8:b9:09:63:49:c0:86:d4:00:b3:6a:01:ea:f6:95:
                    89:a9:af:90:aa:c6:63:d4:7a:e8:00:be:14:6f:a0:
                    1b:3c:9b:5e:f9:6f:36:de:43:02:da:bd:d3:16:02:
                    78:f2:21:d9:57:8f:aa:9f:1d:68:43:5b:35:77:5e:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E1:56:EF:15:D2:06:FB:4A:07:77:02:67:63:1D:EC:BD:E3:1A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/0d425007-e40e-3e38-a1eb-de6438295d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:9f:d6:55:63:4a:73:7e:08:8c:31:8c:90:2b:19:7d:68:aa:
         dc:52:4f:6b:8b:51:02:17:e4:b8:2e:30:4c:6e:41:16:8d:88:
         e9:59:95:54:8a:40:5e:91:59:c4:29:6d:0e:bc:26:6c:5a:05:
         68:79:b0:50:c5:5b:3b:fb:65:c0:48:80:2d:8e:cb:46:08:69:
         c3:7c:2e:02:52:9d:56:44:32:84:07:4e:53:48:1e:f2:18:dc:
         88:19:74:dc:7f:69:89:82:07:fc:0c:56:b9:3b:47:a4:7e:13:
         e7:31:52:08:ec:c4:77:46:b9:10:6a:5b:b2:b7:02:ec:f8:27:
         9b:d0:a2:70:fd:63:b4:b3:c0:6d:11:52:17:81:c6:4d:f3:c7:
         bb:85:16:6a:42:bd:92:a4:23:e1:ea:84:c9:8c:9a:bf:05:18:
         9e:bf:c8:bb:8b:b9:58:51:73:48:54:9d:08:c9:c6:38:ee:25:
         42:66:fd:81:78:e4:8a:6e:c4:04:4c:64:09:2b:2c:a3:21:c4:
         1e:eb:db:20:a1:44:ad:4a:a0:1b:75:f4:3d:67:19:b1:16:ec:
         09:8f:84:a7:8c:3e:fc:bf:1a:e4:51:b4:19:f9:f5:a3:65:53:
         a1:47:5d:7a:cc:4c:e1:d6:91:f8:19:af:f5:27:3f:90:86:5a:
         0d:ff:0b:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoXCKDwMras7DK1QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUyMmQ3YWUtMTIyNC00M2ZiLTkwN2EtNjY5MGY3YmQ5
YTJlMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZWRmM2UxNTYtOGRjMi00NjJhLThiYzMtYTEyNjYxMGZmZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaHulymTul8C808n1vj7Hnh73cYYQufqOQlv
itcRnGTkZv4IjXPxu6MnkuT2ijHLpPbpANdep44mo7a3Bgf7q+rlZSRwuF8Z8rix
zJhB5B2o8BVzDNephIzYU5IRU2oJO0rVSZrXiBTN430Ymc640C8RTzvPH6xQVtp+
tffs+XFqAzszyo2lp5v4aTHSRcaidw6ZeveKTPs7h23/QajUXpnbfJptEOgGRw67
jfwwl51nzwjuqolzylvp3I2TWrzEheyouQljScCG1ACzagHq9pWJqa+QqsZj1Hro
AL4Ub6AbPJte+W823kMC2r3TFgJ48iHZV4+qnx1oQ1s1d16BjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGzhVu8V0gb7Sgd3AmdjHey94xqYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZTIy
ZDdhZS0xMjI0LTQzZmItOTA3YS02NjkwZjdiZDlhMmUvMGQ0MjUwMDctZTQwZS0z
ZTM4LWExZWItZGU2NDM4Mjk1ZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWUyMmQ3YWUtMTIyNC00M2ZiLTkw
N2EtNjY5MGY3YmQ5YTJlLzVlMjJkN2FlLTEyMjQtNDNmYi05MDdhLTY2OTBmN2Jk
OWEyZS5jcmwwHwYDVR0jBBgwFoAUYLFmHyIaYxU6c0EQcq4OzNe6NGgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZTIyZDdhZS0xMjI0LTQzZmItOTA3YS02Njkw
ZjdiZDlhMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6f1lVjSnN+CIwxjJArGX1oqtxST2uLUQIX5LguMExuQRaNiOlZlVSK
QF6RWcQpbQ68JmxaBWh5sFDFWzv7ZcBIgC2Oy0YIacN8LgJSnVZEMoQHTlNIHvIY
3IgZdNx/aYmCB/wMVrk7R6R+E+cxUgjsxHdGuRBqW7K3Auz4J5vQonD9Y7SzwG0R
UheBxk3zx7uFFmpCvZKkI+HqhMmMmr8FGJ6/yLuLuVhRc0hUnQjJxjjuJUJm/YF4
5IpuxARMZAkrLKMhxB7r2yChRK1KoBt19D1nGbEW7AmPhKeMPvy/GuRRtBn59aNl
U6FHXXrMTOHWkfgZr/UnP5CGWg3/C24=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:42:13 2025 by rpki-client