Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa
File:                     4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa (raw, json)
Hash identifier:          uu7ltzY2h9B3HsSEP0twg6Oa4pFzJA7UoSN/z+eky0g=
Subject key identifier:   95:FF:6A:97:6E:1F:F8:68:EA:65:D9:DC:BE:73:0D:85:F8:87:5D:10
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A86DBAD0087D32C2393944980
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        64.9.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:ad:00:87:d3:2c:23:93:94:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=b2d7e2bb-7711-40f0-9d11-986c01ef1ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:98:6e:27:2e:b9:4d:3f:e0:54:db:39:ef:0e:
                    30:d6:e5:7c:6d:23:0d:cc:b1:f9:dd:e6:79:9f:d7:
                    5c:60:d1:57:af:cd:c9:a9:2b:6d:86:4e:cb:98:0a:
                    84:ff:ed:13:c5:f6:7e:57:de:6d:73:66:10:c8:1c:
                    6c:33:bf:d2:d9:d9:01:b9:a2:cf:1f:8f:8f:4c:1e:
                    de:28:d4:5e:59:90:9c:07:8e:98:48:4f:35:79:4d:
                    11:90:03:88:c0:50:19:0d:55:e3:57:60:0c:93:22:
                    9a:db:b1:2b:0e:a1:4f:1c:24:8a:58:70:ff:4f:f7:
                    36:5e:2f:2f:b3:88:a4:a6:bd:44:61:e1:e0:5e:19:
                    7e:fb:d3:09:a8:ae:25:c1:a6:92:91:92:e4:a5:c3:
                    c2:70:23:8e:12:39:43:38:73:3c:d6:95:9f:46:83:
                    9e:6f:01:9f:38:dd:39:41:88:4c:ab:9c:05:68:a6:
                    2f:1a:0d:66:f4:f0:09:c9:ea:8b:bb:0e:60:a0:46:
                    2d:a5:5b:b6:7a:57:6f:55:09:78:95:98:18:01:49:
                    31:9b:d3:c0:92:ad:ee:0e:bb:d7:06:b1:71:1b:48:
                    53:06:a6:b9:a7:52:b9:ba:9f:7b:22:3a:32:a5:8b:
                    65:f8:3f:25:3b:dd:cb:f9:57:43:f7:6d:d9:d2:70:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FF:6A:97:6E:1F:F8:68:EA:65:D9:DC:BE:73:0D:85:F8:87:5D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4ff3fb78-12e8-3a40-8ef9-422826ab9f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:62:de:f5:ef:f3:3b:a0:12:3d:db:56:5d:e7:66:0e:b8:31:
         c6:41:fe:59:02:9f:8b:c0:c4:e1:c4:14:3e:5c:0a:5e:03:ce:
         7d:f1:5e:a2:42:10:0e:97:8c:90:7c:1b:90:48:53:5a:23:be:
         ff:20:06:fa:24:a2:07:37:9f:d2:08:c6:72:97:98:c6:e2:6d:
         42:b1:2b:e4:a4:d7:36:35:a4:43:cd:14:11:01:a8:14:99:ae:
         53:b5:61:28:21:54:ea:66:78:5f:73:1c:44:ff:39:e4:07:4c:
         1c:24:ea:a0:a4:f8:de:d8:9a:cc:5d:9c:2e:fc:20:40:be:7c:
         02:7c:15:d8:ef:0b:26:70:36:1d:52:2d:c1:7a:8e:a7:59:32:
         93:12:32:54:ac:57:2d:4a:c9:23:7f:35:bf:01:4c:00:d9:7a:
         a0:f3:c1:af:0d:05:a3:8a:87:ed:2f:34:37:c1:d9:31:8a:f7:
         59:80:3a:c8:ee:d7:70:80:38:2c:69:95:2d:91:4a:9d:94:98:
         44:c2:20:81:c7:59:60:02:b8:64:c1:2c:f3:54:f4:45:53:cc:
         b8:a3:f4:fd:7e:d1:88:84:17:67:97:99:ae:7b:be:14:6d:5a:
         e8:05:c2:9c:f8:e8:8a:6d:ca:6c:79:02:1b:8a:a3:4f:d7:cf:
         07:27:85:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG260Ah9MsI5OUSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
YjJkN2UyYmItNzcxMS00MGYwLTlkMTEtOTg2YzAxZWYxZWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZhuJy65TT/gVNs57w4w1uV8bSMNzLH53eZ5
n9dcYNFXr83JqStthk7LmAqE/+0TxfZ+V95tc2YQyBxsM7/S2dkBuaLPH4+PTB7e
KNReWZCcB46YSE81eU0RkAOIwFAZDVXjV2AMkyKa27ErDqFPHCSKWHD/T/c2Xi8v
s4ikpr1EYeHgXhl++9MJqK4lwaaSkZLkpcPCcCOOEjlDOHM81pWfRoOebwGfON05
QYhMq5wFaKYvGg1m9PAJyeqLuw5goEYtpVu2eldvVQl4lZgYAUkxm9PAkq3uDrvX
BrFxG0hTBqa5p1K5up97IjoypYtl+D8lO93L+VdD923Z0nBToQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJX/apduH/ho6mXZ3L5zDYX4h10QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNGZmM2ZiNzgtMTJlOC0z
YTQwLThlZjktNDIyODI2YWI5ZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAniMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGli3vXv8zugEj3bVl3nZg64McZB/lkCn4vAxOHEFD5cCl4Dzn3xXqJC
EA6XjJB8G5BIU1ojvv8gBvokogc3n9IIxnKXmMbibUKxK+Sk1zY1pEPNFBEBqBSZ
rlO1YSghVOpmeF9zHET/OeQHTBwk6qCk+N7YmsxdnC78IEC+fAJ8FdjvCyZwNh1S
LcF6jqdZMpMSMlSsVy1KySN/Nb8BTADZeqDzwa8NBaOKh+0vNDfB2TGK91mAOsju
13CAOCxplS2RSp2UmETCIIHHWWACuGTBLPNU9EVTzLij9P1+0YiEF2eXma57vhRt
WugFwpz46Iptymx5AhuKo0/XzwcnhSw=
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:33 2025 by rpki-client