Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5e069b74-d9b9-31e5-ad43-820cd170bd0e.roa
File:                     5e069b74-d9b9-31e5-ad43-820cd170bd0e.roa (raw, json)
Hash identifier:          ashHWLEpEjXp9KH603C1LsC89eIV+S8zi6KS44HWPK0=
Subject key identifier:   93:2F:A2:CF:31:C1:98:E9:CC:14:2C:4C:10:2A:3F:56:3A:5A:BB:AF
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A86DBCB39F2F44DE51E141500
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5e069b74-d9b9-31e5-ad43-820cd170bd0e.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        64.9.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:cb:39:f2:f4:4d:e5:1e:14:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=a10bf133-3225-469d-97d8-3eb05cf204cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:03:b4:13:7c:42:eb:8d:40:65:44:9f:b0:
                    d0:7f:1a:38:cf:8c:b5:bb:60:9a:a9:ef:35:5d:89:
                    9d:81:d6:87:d3:9e:89:9c:8e:6b:2e:09:70:9d:f9:
                    0e:6b:37:02:d1:88:f2:14:16:90:25:fe:c7:44:a7:
                    74:4e:9b:8b:57:e3:09:7b:f7:3f:f1:c0:15:27:88:
                    f6:b8:b6:6f:76:36:ea:e1:f6:28:65:c1:6f:b1:15:
                    4c:90:93:ca:56:7a:16:53:2b:b2:af:a8:d1:7e:dc:
                    49:8d:b6:1c:bf:a4:de:75:84:95:5e:cb:fe:62:d5:
                    64:4e:63:9c:91:3f:0f:f6:56:3e:e4:4f:80:d3:08:
                    02:3f:76:2a:13:7b:95:bb:91:e4:22:24:31:e1:cd:
                    a3:35:78:24:c2:51:48:f2:0d:c2:76:5c:97:05:c7:
                    32:29:fa:1d:01:64:35:42:2e:89:f7:5f:5a:8d:f0:
                    d6:48:b5:14:36:9c:7d:c3:7f:7f:62:76:24:87:88:
                    cd:1b:02:60:7b:c5:36:03:f6:99:ae:3d:62:c8:fa:
                    a5:d6:c8:ab:5c:16:25:40:ec:d9:e5:46:da:3a:3d:
                    37:59:36:19:f4:0f:7d:33:8a:3f:e7:d7:ac:3d:55:
                    2a:34:56:1e:3e:c3:b4:eb:0e:7a:b2:10:bf:e6:58:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2F:A2:CF:31:C1:98:E9:CC:14:2C:4C:10:2A:3F:56:3A:5A:BB:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5e069b74-d9b9-31e5-ad43-820cd170bd0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:6a:fe:59:0f:ad:1c:69:8c:dd:81:a0:61:80:c3:bc:fd:3a:
         e4:87:7b:6b:db:81:bb:85:20:9d:d3:09:d9:7f:c8:12:39:1a:
         ea:0d:4b:9f:a0:aa:16:48:9c:6a:8b:36:f1:e2:d5:32:fd:22:
         ca:aa:42:c2:95:57:05:57:8e:ff:1c:71:fa:31:80:b2:12:5c:
         9d:94:10:67:63:12:7c:12:d9:86:12:82:21:a8:a1:92:43:5d:
         67:a2:59:26:68:81:6c:bf:1a:40:a5:65:d0:47:fb:a9:33:68:
         cd:f6:aa:00:6f:9c:b1:75:b4:20:ba:70:bb:e6:31:2a:8a:8d:
         03:15:d2:5e:5b:4d:c5:8a:ba:a8:9d:bd:d0:4b:e1:b2:05:bf:
         e3:8f:15:ec:36:63:d7:60:68:52:08:8b:13:81:d9:98:99:ce:
         91:69:11:ab:e3:08:a2:a1:29:26:14:52:31:81:43:7e:cd:5a:
         b8:27:4b:97:51:20:d4:4c:0f:c8:1c:49:0a:b4:ef:c9:12:69:
         7b:d9:8c:ce:61:e7:21:3d:e0:92:50:9a:20:48:3b:67:c6:25:
         da:76:2c:c7:2b:62:68:22:a1:7e:4a:03:f7:43:d8:56:bc:ad:
         77:74:6e:df:8a:1e:22:d8:25:84:1b:95:e2:30:78:07:84:36:
         6f:fa:d6:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG28s58vRN5R4UFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
YTEwYmYxMzMtMzIyNS00NjlkLTk3ZDgtM2ViMDVjZjIwNGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHgDtBN8QuuNQGVEn7DQfxo4z4y1u2Caqe81
XYmdgdaH056JnI5rLglwnfkOazcC0YjyFBaQJf7HRKd0TpuLV+MJe/c/8cAVJ4j2
uLZvdjbq4fYoZcFvsRVMkJPKVnoWUyuyr6jRftxJjbYcv6TedYSVXsv+YtVkTmOc
kT8P9lY+5E+A0wgCP3YqE3uVu5HkIiQx4c2jNXgkwlFI8g3CdlyXBccyKfodAWQ1
Qi6J919ajfDWSLUUNpx9w39/YnYkh4jNGwJge8U2A/aZrj1iyPql1sirXBYlQOzZ
5UbaOj03WTYZ9A99M4o/59esPVUqNFYePsO06w56shC/5ljHWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJMvos8xwZjpzBQsTBAqP1Y6WruvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNWUwNjliNzQtZDliOS0z
MWU1LWFkNDMtODIwY2QxNzBiZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAnoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtq/lkPrRxpjN2BoGGAw7z9OuSHe2vbgbuFIJ3TCdl/yBI5GuoNS5+g
qhZInGqLNvHi1TL9IsqqQsKVVwVXjv8ccfoxgLISXJ2UEGdjEnwS2YYSgiGooZJD
XWeiWSZogWy/GkClZdBH+6kzaM32qgBvnLF1tCC6cLvmMSqKjQMV0l5bTcWKuqid
vdBL4bIFv+OPFew2Y9dgaFIIixOB2ZiZzpFpEavjCKKhKSYUUjGBQ37NWrgnS5dR
INRMD8gcSQq078kSaXvZjM5h5yE94JJQmiBIO2fGJdp2LMcrYmgioX5KA/dD2Fa8
rXd0bt+KHiLYJYQbleIweAeENm/61rM=
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:24:57 2025 by rpki-client