Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45387154-5e3f-334b-9217-bffbcdab101b.roa
File:                     45387154-5e3f-334b-9217-bffbcdab101b.roa (raw, json)
Hash identifier:          4ivLhKvP6FIBavJOYYUqEqpDTkfSCatj8GLDXnmhGKw=
Subject key identifier:   C4:30:B2:59:F8:D0:5F:F9:39:63:B5:44:33:CD:4C:F6:58:7E:CE:95
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A74B5D9684844A3F2F036BF80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45387154-5e3f-334b-9217-bffbcdab101b.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     852
IP address blocks:        64.114.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d9:68:48:44:a3:f2:f0:36:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=4d2e7bee-fa76-4c62-8dda-ab169c733def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b7:7b:e9:a3:f4:a7:d5:63:ed:b8:d0:bf:67:
                    96:a3:e5:b5:d2:3a:52:46:9a:d4:2d:db:31:b4:c4:
                    f9:76:42:2f:4d:f0:05:ff:78:77:8e:18:db:e8:eb:
                    3c:0f:b4:de:05:79:b2:5c:ba:d0:e8:38:54:9a:68:
                    7d:ee:ee:84:a2:b9:3a:6f:83:6f:3e:10:68:77:6f:
                    43:97:77:98:d6:5c:1b:9e:a0:91:b0:4a:72:54:1c:
                    e4:bc:a9:13:eb:b2:67:86:ab:70:b0:b7:fb:ea:bb:
                    41:32:fd:bd:7f:77:41:76:a8:62:6c:00:b1:de:ec:
                    ee:8b:53:f1:40:e7:ba:49:97:18:d6:71:85:76:12:
                    6f:10:8f:51:78:d8:a3:f0:66:c4:c7:73:9f:7d:5b:
                    a4:06:82:bb:5e:6f:55:16:bc:1d:e8:13:de:c1:0c:
                    b7:5c:3f:3c:bb:0c:e7:42:5e:f4:5d:40:53:58:a7:
                    47:1e:cf:d1:e6:a7:e3:36:06:03:00:6d:a0:cc:01:
                    1b:5a:4e:41:b2:52:74:a0:8b:96:ba:17:9d:31:06:
                    35:87:70:d7:ad:7f:67:c7:21:65:d2:c5:79:7d:5b:
                    25:d6:27:b6:0c:bd:0c:61:27:47:c5:1e:54:93:24:
                    24:35:15:03:4c:d0:83:b7:18:12:24:52:0a:10:68:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:30:B2:59:F8:D0:5F:F9:39:63:B5:44:33:CD:4C:F6:58:7E:CE:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/45387154-5e3f-334b-9217-bffbcdab101b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:98:3b:88:f1:47:6b:d4:47:c0:5c:1c:93:dc:28:46:21:df:
         05:aa:64:88:c9:da:25:6a:fa:9c:50:a9:49:b2:7d:fb:28:e7:
         ff:5d:15:c8:d7:22:8b:89:8f:09:dd:0d:35:c1:96:99:1a:65:
         6b:e1:df:28:7f:47:75:7d:a0:22:d8:28:d0:dd:28:1b:0e:27:
         3a:52:6c:83:8f:49:5b:40:9d:dc:c3:3b:12:13:5b:02:c3:26:
         6c:d6:da:83:5e:d0:c1:12:14:d9:bb:34:8e:69:a3:86:92:f0:
         24:b7:76:67:76:a7:a4:21:f8:7a:5b:81:1b:70:2a:88:aa:03:
         35:fc:74:ad:00:bf:8d:ee:5e:27:d0:9b:57:45:c2:d2:82:be:
         5a:72:79:1f:d1:c6:58:f7:2e:1a:e6:66:9b:de:c7:1c:fc:55:
         e3:43:49:d4:a1:34:b2:4f:5e:af:18:25:a9:b0:c8:ef:9d:c0:
         f8:f7:e2:0e:7f:f2:ce:56:e4:4b:68:a6:75:ee:3b:b8:8e:c8:
         7a:5e:0e:b6:f4:2c:9a:da:20:12:7c:3e:6c:2a:45:b1:12:6a:
         ca:1f:23:4b:d9:82:6c:56:b2:8e:f9:a8:f9:bc:59:83:06:3f:
         54:e9:e9:02:70:bc:d2:f5:0d:8c:d3:63:f7:4e:2d:ed:6e:28:
         d8:33:69:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdloSESj8vA2v4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
NGQyZTdiZWUtZmE3Ni00YzYyLThkZGEtYWIxNjljNzMzZGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLd76aP0p9Vj7bjQv2eWo+W10jpSRprULdsx
tMT5dkIvTfAF/3h3jhjb6Os8D7TeBXmyXLrQ6DhUmmh97u6Eork6b4NvPhBod29D
l3eY1lwbnqCRsEpyVBzkvKkT67JnhqtwsLf76rtBMv29f3dBdqhibACx3uzui1Px
QOe6SZcY1nGFdhJvEI9ReNij8GbEx3OffVukBoK7Xm9VFrwd6BPewQy3XD88uwzn
Ql70XUBTWKdHHs/R5qfjNgYDAG2gzAEbWk5BslJ0oIuWuhedMQY1h3DXrX9nxyFl
0sV5fVsl1ie2DL0MYSdHxR5UkyQkNRUDTNCDtxgSJFIKEGjvuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQwsln40F/5OWO1RDPNTPZYfs6VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDUzODcxNTQtNWUzZi0z
MzRiLTkyMTctYmZmYmNkYWIxMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHI/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALaYO4jxR2vUR8BcHJPcKEYh3wWqZIjJ2iVq+pxQqUmyffso5/9dFcjX
IouJjwndDTXBlpkaZWvh3yh/R3V9oCLYKNDdKBsOJzpSbIOPSVtAndzDOxITWwLD
JmzW2oNe0MESFNm7NI5po4aS8CS3dmd2p6Qh+HpbgRtwKoiqAzX8dK0Av43uXifQ
m1dFwtKCvlpyeR/Rxlj3LhrmZpvexxz8VeNDSdShNLJPXq8YJamwyO+dwPj34g5/
8s5W5EtopnXuO7iOyHpeDrb0LJraIBJ8PmwqRbESasofI0vZgmxWso75qPm8WYMG
P1Tp6QJwvNL1DYzTY/dOLe1uKNgzaaU=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:33:26 2025 by rpki-client