Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3bc1f1dc-45eb-347f-b398-662c3b0bf87f.roa
File:                     3bc1f1dc-45eb-347f-b398-662c3b0bf87f.roa (raw, json)
Hash identifier:          Al/iYEEzb1iHVr9eLtTB2CHzAWVzTOf/tSq0nSGzf2s=
Subject key identifier:   15:71:B8:14:AD:65:F5:4A:8C:9B:DE:AA:6C:B1:F3:BC:5E:7C:2F:99
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584B13D6BE2B8CE77FD98C1CF500
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3bc1f1dc-45eb-347f-b398-662c3b0bf87f.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     27385
IP address blocks:        69.67.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:be:2b:8c:e7:7f:d9:8c:1c:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=5de84b89-7d61-48a6-86a3-c691cbfdacf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:8b:c2:9b:b0:99:7b:6a:74:b0:ea:fb:a0:
                    b6:46:46:21:7c:6d:1e:c7:09:94:90:93:af:b1:f3:
                    a1:5c:08:53:3c:0d:86:8b:7b:06:35:31:f9:d0:fd:
                    98:2d:82:09:69:ed:bf:dc:0c:e3:f2:13:aa:df:1a:
                    ed:7e:23:68:4d:55:e4:45:a9:f0:79:aa:d9:78:68:
                    5c:5d:4f:5d:0f:c9:57:28:47:c0:e6:b7:82:8f:47:
                    3b:b5:07:ac:3b:13:59:3f:0e:82:fe:3e:92:b2:9c:
                    90:ac:09:49:26:5c:2a:10:fd:44:4c:80:0c:a8:3c:
                    29:68:f4:65:9b:a9:7a:4e:47:09:86:d5:73:34:d4:
                    af:4b:7d:57:c3:7c:a0:55:1b:56:22:bc:b8:17:03:
                    da:3c:1b:e9:26:b9:3a:19:ff:3f:d9:2f:37:f3:71:
                    a4:c7:a2:0b:86:90:8d:aa:85:79:07:81:22:69:81:
                    c3:88:0b:1d:6c:50:61:20:f3:aa:ed:8e:0c:32:65:
                    28:a6:bf:2a:ea:32:5b:10:5d:fc:ed:d2:f1:ae:ab:
                    1b:e4:ce:c3:7c:4e:07:86:5a:6f:14:f6:e0:d6:64:
                    cb:28:48:79:96:55:75:6e:ff:23:06:8f:99:4f:0d:
                    02:83:d7:ef:a2:fc:10:f2:2b:28:4b:e8:b4:fb:04:
                    f2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:B8:14:AD:65:F5:4A:8C:9B:DE:AA:6C:B1:F3:BC:5E:7C:2F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3bc1f1dc-45eb-347f-b398-662c3b0bf87f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:ce:1b:af:c5:3a:dc:7e:81:d3:f6:8e:f1:6a:fc:73:7d:
         8b:3b:51:77:89:8e:61:54:19:34:55:54:87:2c:5b:ac:b8:7a:
         84:d5:56:b2:5f:41:52:5b:2f:30:17:04:c1:c2:86:23:78:cc:
         d8:bf:96:53:91:6e:57:a1:5a:e0:e5:6d:d8:1d:bc:a3:b8:33:
         55:2f:ed:da:c5:2d:89:da:0a:0c:12:73:28:4a:c8:21:59:04:
         6c:29:89:e6:c0:7e:5e:60:84:64:09:52:09:da:cd:07:cd:15:
         dc:d6:16:5b:b5:1c:ba:e2:6a:fc:f7:23:36:d0:cf:c1:54:0c:
         47:c4:cb:b4:17:b8:16:4a:b0:78:c5:a9:d9:be:6f:2a:6d:5b:
         9b:52:c1:ed:88:45:f8:01:fc:f1:1d:5e:95:e9:15:31:6b:2d:
         d8:01:a0:5a:97:8e:d7:71:4f:65:2c:30:e1:c1:fc:39:6d:c5:
         c1:a3:f2:c4:82:38:f9:c1:0e:3b:79:dd:d7:c5:f9:72:aa:de:
         f8:0e:d7:25:16:0d:56:ad:53:ec:de:25:28:90:f9:64:ed:e0:
         a3:30:ed:0c:dc:58:30:33:33:7e:70:5f:4b:23:ec:28:03:c3:
         84:03:6f:28:7a:1f:79:4d:ea:8e:70:f8:62:57:f2:fc:35:d9:
         6f:be:bf:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1r4rjOd/2Ywc9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx
ZDQxMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
NWRlODRiODktN2Q2MS00OGE2LTg2YTMtYzY5MWNiZmRhY2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusKLwpuwmXtqdLDq+6C2RkYhfG0exwmUkJOv
sfOhXAhTPA2Gi3sGNTH50P2YLYIJae2/3Azj8hOq3xrtfiNoTVXkRanwearZeGhc
XU9dD8lXKEfA5reCj0c7tQesOxNZPw6C/j6SspyQrAlJJlwqEP1ETIAMqDwpaPRl
m6l6TkcJhtVzNNSvS31Xw3ygVRtWIry4FwPaPBvpJrk6Gf8/2S8383Gkx6ILhpCN
qoV5B4EiaYHDiAsdbFBhIPOq7Y4MMmUopr8q6jJbEF387dLxrqsb5M7DfE4Hhlpv
FPbg1mTLKEh5llV1bv8jBo+ZTw0Cg9fvovwQ8isoS+i0+wTyWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVxuBStZfVKjJveqmyx87xefC+ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2
ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvM2JjMWYxZGMtNDVlYi0z
NDdmLWIzOTgtNjYyYzNiMGJmODdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2
NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj
MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl
OGNlYzFkNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRUOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0XzhuvxTrcfoHT9o7xavxzfYs7UXeJjmFUGTRVVIcsW6y4eoTVVrJf
QVJbLzAXBMHChiN4zNi/llORblehWuDlbdgdvKO4M1Uv7drFLYnaCgwScyhKyCFZ
BGwpiebAfl5ghGQJUgnazQfNFdzWFlu1HLriavz3IzbQz8FUDEfEy7QXuBZKsHjF
qdm+byptW5tSwe2IRfgB/PEdXpXpFTFrLdgBoFqXjtdxT2UsMOHB/DltxcGj8sSC
OPnBDjt53dfF+XKq3vgO1yUWDVatU+zeJSiQ+WTt4KMw7QzcWDAzM35wX0sj7CgD
w4QDbyh6H3lN6o5w+GJX8vw12W++v3w=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:30:04 2025 by rpki-client