Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa
File:                     97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa (raw, json)
Hash identifier:          RNTYTQgAwKCXrvKsvKY6KHDsPW50mkc+0VgQ2TH31Hc=
Subject key identifier:   AC:23:40:C2:9B:D7:1B:92:9D:79:AA:EE:DC:9D:9A:3C:A8:0B:7D:D3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A74B5D914C5536A32292899A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     852
IP address blocks:        64.114.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d9:14:c5:53:6a:32:29:28:99:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=27408887-20d0-47d1-b35e-83ee42f98040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:c1:41:cd:3b:59:b2:5c:c1:51:14:d0:85:
                    96:66:44:71:4d:f3:7d:e7:76:dc:da:9e:2b:de:c4:
                    89:f3:4c:54:81:46:0c:fb:8e:01:67:dd:ad:ff:69:
                    f2:fe:c2:4c:0f:1e:1a:35:25:fa:a2:76:81:7d:03:
                    56:2d:07:fa:ca:4a:c2:6d:d9:01:dc:ae:e6:22:da:
                    05:66:2b:8e:64:83:84:5d:be:ab:c6:23:6e:51:cd:
                    05:fa:21:bc:b5:c6:be:6e:13:c0:01:1b:30:ad:9b:
                    14:34:24:db:db:7f:a4:95:52:24:85:f4:5a:f5:2c:
                    fa:26:c1:7c:0a:fa:59:92:33:73:e3:a1:94:d7:0e:
                    5d:3d:21:49:14:4b:65:b1:bc:c3:95:74:fc:6e:db:
                    4b:f7:e6:45:c0:de:f0:de:e6:b8:f5:3b:73:65:45:
                    21:c5:c9:9e:b5:67:ad:e0:ce:a9:1d:10:76:4d:16:
                    38:0f:33:81:41:09:9b:47:c6:71:58:e1:7f:74:7d:
                    a3:52:29:f3:57:2e:37:15:70:f9:a7:58:a7:fe:a4:
                    81:2c:79:08:ce:41:5f:db:de:32:a4:07:01:50:b4:
                    f9:6c:c6:3d:dd:55:c1:25:a4:fb:f4:78:7b:01:23:
                    f1:65:73:90:0f:f7:3f:41:60:d7:49:ab:07:4b:2d:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:23:40:C2:9B:D7:1B:92:9D:79:AA:EE:DC:9D:9A:3C:A8:0B:7D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:38:f7:78:d6:dd:42:1f:89:42:66:ac:9a:9d:ec:e7:d0:29:
         8b:9a:c1:88:ca:4a:86:e5:ac:b3:2a:97:76:23:12:1b:d8:4c:
         00:4b:5e:a7:4e:97:30:ff:ba:9c:3b:23:2a:ac:69:ce:5a:0c:
         cc:11:d4:02:2f:92:ca:7c:5e:46:85:d8:a4:48:22:dd:4d:7e:
         1c:03:20:02:af:9e:c3:0f:22:a7:93:75:f7:c5:d9:7d:ef:93:
         7f:68:83:33:fe:a9:74:c2:10:36:75:3d:67:fe:86:42:41:79:
         a0:92:c8:fb:4d:be:a5:92:b0:ff:47:92:cd:82:f6:74:8a:23:
         81:08:84:e3:57:5c:df:5e:0e:1b:83:05:a5:60:f2:b2:d8:dd:
         a1:e1:c7:70:cd:f1:b0:c4:8a:f3:1d:3d:79:6f:4c:82:6d:78:
         da:3a:72:b4:5c:7d:96:99:ae:a1:43:4f:af:a4:36:57:45:e2:
         c8:1b:35:89:7b:45:d8:71:9b:e2:3b:d5:b8:10:bf:6e:7f:68:
         c7:ab:1b:02:76:b7:4c:fc:dd:1b:f5:b2:75:4f:2e:ea:fb:fc:
         da:3c:1e:ad:96:96:c9:5a:c3:d1:7c:8e:45:78:9d:0a:15:b4:
         25:ca:c0:0d:99:26:a5:47:50:fe:cc:d8:b7:61:5e:2d:16:99:
         ca:58:ee:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0tdkUxVNqMikomaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
Mjc0MDg4ODctMjBkMC00N2QxLWIzNWUtODNlZTQyZjk4MDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDnBQc07WbJcwVEU0IWWZkRxTfN953bc2p4r
3sSJ80xUgUYM+44BZ92t/2ny/sJMDx4aNSX6onaBfQNWLQf6ykrCbdkB3K7mItoF
ZiuOZIOEXb6rxiNuUc0F+iG8tca+bhPAARswrZsUNCTb23+klVIkhfRa9Sz6JsF8
CvpZkjNz46GU1w5dPSFJFEtlsbzDlXT8bttL9+ZFwN7w3ua49TtzZUUhxcmetWet
4M6pHRB2TRY4DzOBQQmbR8ZxWOF/dH2jUinzVy43FXD5p1in/qSBLHkIzkFf294y
pAcBULT5bMY93VXBJaT79Hh7ASPxZXOQD/c/QWDXSasHSy09QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKwjQMKb1xuSnXmq7tydmjyoC33TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTdkZjNmM2YtYTViYS0z
OTY2LWE5ZWUtZjUwYjk5MzRmMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHJpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo493jW3UIfiUJmrJqd7OfQKYuawYjKSoblrLMql3YjEhvYTABLXqdO
lzD/upw7Iyqsac5aDMwR1AIvksp8XkaF2KRIIt1NfhwDIAKvnsMPIqeTdffF2X3v
k39ogzP+qXTCEDZ1PWf+hkJBeaCSyPtNvqWSsP9Hks2C9nSKI4EIhONXXN9eDhuD
BaVg8rLY3aHhx3DN8bDEivMdPXlvTIJteNo6crRcfZaZrqFDT6+kNldF4sgbNYl7
Rdhxm+I71bgQv25/aMerGwJ2t0z83Rv1snVPLur7/No8Hq2Wlslaw9F8jkV4nQoV
tCXKwA2ZJqVHUP7M2LdhXi0WmcpY7hE=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:21:46 2025 by rpki-client