Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/b67aaeb6-a9af-3464-ad4c-a045f743c844.roa
File:                     b67aaeb6-a9af-3464-ad4c-a045f743c844.roa (raw, json)
Hash identifier:          Qz5raBniKuMsBS0VcEctKkoSHk+LCubM3nX/GLecRtY=
Subject key identifier:   65:85:D9:1B:91:3E:0A:8C:F0:12:08:4D:E0:1E:E5:10:12:4A:B1:9B
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584B3AEC53CDC26A457A75E19100
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/b67aaeb6-a9af-3464-ad4c-a045f743c844.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     6939
IP address blocks:        64.112.34.0/24 maxlen: 32
                          208.69.100.0/24 maxlen: 32
                          208.69.101.0/24 maxlen: 32
                          208.69.102.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:53:cd:c2:6a:45:7a:75:e1:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=2b9927d7-4743-4ddb-a2c3-a2035a909217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:73:85:5a:34:9c:0f:bb:b7:1c:c1:ff:10:
                    78:06:b7:95:23:9d:c3:11:33:ae:f9:83:d5:ec:bb:
                    c6:d2:ba:ab:a5:4c:c3:78:31:fe:79:da:42:70:1f:
                    01:a7:4c:79:a2:06:7d:91:ce:09:cb:4d:0f:18:0c:
                    22:86:2e:66:3b:7b:ef:6b:88:ac:88:85:3e:3d:6a:
                    bb:a5:2b:aa:b0:c0:23:ec:33:5e:08:a2:0a:50:6b:
                    89:96:9f:2c:dc:16:67:80:c4:e9:8c:70:a0:7e:38:
                    be:30:3f:2e:14:b3:c3:8f:cf:88:27:da:ff:8c:87:
                    06:30:99:7a:8b:d6:c5:5e:6a:86:2f:52:63:74:0a:
                    8f:07:59:91:5d:21:a1:b5:5e:6c:6f:79:c0:6f:7a:
                    0f:a1:84:07:50:d7:d6:aa:56:26:be:bf:09:5e:29:
                    00:99:59:0e:b4:e0:14:80:ad:01:75:aa:49:24:d5:
                    5c:e9:95:70:97:1d:8a:16:f3:1c:3e:6d:78:bd:c7:
                    20:38:c5:bb:5c:0c:cd:64:b5:44:4e:11:48:aa:50:
                    bc:cf:27:c1:11:41:67:18:58:b3:61:ee:31:f7:e3:
                    20:c5:89:cc:5a:c3:4d:b4:1f:ff:fd:fe:03:42:83:
                    7f:e7:09:87:09:d2:f3:03:e2:d4:2b:a3:ff:23:22:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:85:D9:1B:91:3E:0A:8C:F0:12:08:4D:E0:1E:E5:10:12:4A:B1:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/b67aaeb6-a9af-3464-ad4c-a045f743c844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.34.0/24
                  208.69.100.0-208.69.102.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:32:d6:0b:74:76:bd:29:11:53:c2:74:66:6d:5e:7a:95:f4:
         af:47:41:a5:87:69:52:7b:6b:d1:f2:64:29:95:21:ec:8e:63:
         de:22:8e:59:40:08:01:7e:5b:a7:f1:ed:7b:ad:53:3b:72:e5:
         c5:d6:97:77:47:03:1e:a0:3a:4d:8a:c3:34:80:1e:a6:0f:18:
         a3:13:a4:6a:d3:f0:bd:92:c2:f5:cd:56:e1:e2:90:e2:38:ac:
         3e:f9:d6:b7:47:e9:5f:17:13:32:62:e5:92:c9:01:5f:a9:97:
         18:1a:b1:8b:8e:55:7b:0b:89:c3:ff:11:c4:8a:ae:cd:ad:c2:
         aa:5d:de:c1:fc:de:4b:0a:91:58:c1:f9:67:0f:33:56:38:28:
         2c:5c:c7:0d:5f:06:cc:f3:dd:a7:e0:34:c0:58:03:80:94:34:
         18:e3:31:42:e8:8c:8e:27:ff:2b:09:17:3a:0f:27:6a:8f:f4:
         1f:e0:b9:38:da:cd:84:e2:fe:28:30:eb:84:a3:24:8c:89:2f:
         4f:87:a1:4c:63:93:9d:3b:06:31:04:d6:01:4c:e2:a6:de:4d:
         e5:24:81:d0:e1:e5:53:29:91:d9:09:04:7c:da:a2:dc:13:3d:
         ba:8f:a1:c1:ed:78:ba:8b:d3:61:5a:38:39:74:d9:a9:95:6b:
         43:ea:26:c1
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEs67FPNwmpFenXhkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5YWM5ZjctZWY0Zi00ZjU2LWJlYzItMjFjOWEyYjI1
YzExMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk
MmI5OTI3ZDctNDc0My00ZGRiLWEyYzMtYTIwMzVhOTA5MjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBRzhVo0nA+7txzB/xB4BreVI53DETOu+YPV
7LvG0rqrpUzDeDH+edpCcB8Bp0x5ogZ9kc4Jy00PGAwihi5mO3vva4isiIU+PWq7
pSuqsMAj7DNeCKIKUGuJlp8s3BZngMTpjHCgfji+MD8uFLPDj8+IJ9r/jIcGMJl6
i9bFXmqGL1JjdAqPB1mRXSGhtV5sb3nAb3oPoYQHUNfWqlYmvr8JXikAmVkOtOAU
gK0BdapJJNVc6ZVwlx2KFvMcPm14vccgOMW7XAzNZLVEThFIqlC8zyfBEUFnGFiz
Ye4x9+MgxYnMWsNNtB///f4DQoN/5wmHCdLzA+LUK6P/IyK9PQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFGWF2RuRPgqM8BIITeAe5RASSrGbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlh
YzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5YTJiMjVjMTEvYjY3YWFlYjYtYTlhZi0z
NDY0LWFkNGMtYTA0NWY3NDNjODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5YWM5ZjctZWY0Zi00ZjU2LWJl
YzItMjFjOWEyYjI1YzExLzZkOWFjOWY3LWVmNGYtNGY1Ni1iZWMyLTIxYzlhMmIy
NWMxMS5jcmwwHwYDVR0jBBgwFoAUHHn5hkuePscm3W7MmE2ro4PenJgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlhYzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5
YTJiMjVjMTEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAQHAiMAwD
BALQRWQDBADQRWYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAZDLWC3R2vSkRU8J0Zm1eepX0r0dBpYdpUntr
0fJkKZUh7I5j3iKOWUAIAX5bp/Hte61TO3LlxdaXd0cDHqA6TYrDNIAepg8YoxOk
atPwvZLC9c1W4eKQ4jisPvnWt0fpXxcTMmLlkskBX6mXGBqxi45VewuJw/8RxIqu
za3Cql3ewfzeSwqRWMH5Zw8zVjgoLFzHDV8GzPPdp+A0wFgDgJQ0GOMxQuiMjif/
KwkXOg8nao/0H+C5ONrNhOL+KDDrhKMkjIkvT4ehTGOTnTsGMQTWAUzipt5N5SSB
0OHlUymR2QkEfNqi3BM9uo+hwe14uovTYVo4OXTZqZVrQ+omwQ==
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:22:21 2025 by rpki-client