Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bebf06c6-5729-3410-9940-94a3d9be684d.roa
File:                     bebf06c6-5729-3410-9940-94a3d9be684d.roa (raw, json)
Hash identifier:          agQkhvoJDJLsPRTKNfGRYR4h2dgifrWVxedPyLAG++s=
Subject key identifier:   AA:78:2D:CB:F3:4B:B5:F3:D3:FC:04:A9:03:FC:05:E2:2C:61:F5:48
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B33F1B785D35A0BCABCB4F900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bebf06c6-5729-3410-9940-94a3d9be684d.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     9304
IP address blocks:        69.17.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b7:85:d3:5a:0b:ca:bc:b4:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=9de49984-e3cd-4fbc-bb65-a3e122ed3fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:74:1c:2f:b6:92:50:8a:61:83:5c:df:e3:
                    4b:a4:17:0d:74:45:e8:8d:25:8f:4f:a8:07:cd:38:
                    52:f8:55:7b:2e:25:f8:d2:b9:c9:eb:67:e2:ba:44:
                    27:32:5b:cd:8a:39:bc:92:f8:f7:4f:ff:e1:ba:05:
                    97:bf:6b:a2:d1:77:5e:cc:dc:aa:2c:53:14:b4:a2:
                    57:f4:57:4e:cd:79:aa:bb:50:ed:62:66:c4:6a:32:
                    7d:af:fe:e1:77:7e:0b:99:a3:c5:ab:5a:ec:66:fe:
                    af:48:d5:fb:90:a4:8e:e2:13:4e:62:86:5f:bb:64:
                    48:fc:c6:ce:70:19:6a:24:c1:f6:93:de:df:0c:7d:
                    c9:00:0a:c4:6c:2b:bd:83:1b:81:9c:18:93:0c:e2:
                    aa:56:ca:5a:f7:32:b0:0d:1f:f1:2a:6d:9b:52:24:
                    bc:91:85:54:69:4e:0f:18:35:07:c6:31:c1:30:d0:
                    f2:4b:f4:2a:74:59:94:22:cf:dd:48:86:2c:db:3a:
                    67:91:1e:a5:28:6e:c1:c7:b2:51:76:4f:52:2c:82:
                    8e:31:8a:72:4c:15:e8:b0:a2:59:f4:57:53:96:9f:
                    5a:bb:0b:07:5f:15:3d:d9:1d:35:eb:27:a1:0f:6f:
                    be:77:45:1f:99:0b:96:f2:17:9e:da:f5:bf:5e:1f:
                    03:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:78:2D:CB:F3:4B:B5:F3:D3:FC:04:A9:03:FC:05:E2:2C:61:F5:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bebf06c6-5729-3410-9940-94a3d9be684d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:3c:a7:ad:ab:90:90:10:ef:a4:2f:2c:5f:48:fe:a4:e6:b7:
         d0:94:23:00:7d:9f:29:a5:94:98:a9:2d:19:e0:24:95:d4:1b:
         54:fa:cb:d8:7a:ad:09:30:11:51:6a:38:45:0b:0c:b4:ec:12:
         67:e3:c5:4b:87:80:cc:f9:fb:cd:f2:48:72:dc:b3:91:11:94:
         fa:4b:0e:a2:7f:7f:49:40:cf:69:f2:ea:63:ad:df:06:55:42:
         a6:55:66:56:e0:53:45:44:69:46:45:dd:eb:d8:77:f6:02:6a:
         42:71:0e:2e:9f:78:cb:46:29:cb:ee:59:36:26:af:89:38:d5:
         f4:80:97:37:12:1b:a5:6c:3a:f5:e6:37:82:4e:e2:a0:b6:ef:
         bb:34:d9:2e:53:5a:fb:a0:44:89:d2:e9:af:ac:ea:04:b4:68:
         31:6e:49:ff:42:7f:0c:6c:1c:9c:a9:be:dd:50:66:ad:99:ad:
         21:aa:b6:4b:98:25:88:b1:f6:42:cb:2b:3b:b6:69:89:d7:db:
         40:69:f1:f0:53:cd:d3:dd:ff:27:35:32:67:af:65:ad:37:ba:
         4b:a3:e8:8b:aa:d7:58:1c:89:17:ef:f4:08:dd:0c:c7:8a:22:
         10:3f:e2:2c:5d:b8:72:be:68:bf:50:31:cc:dc:42:f5:7a:af:
         d3:ee:89:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8beF01oLyry0+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk
OWRlNDk5ODQtZTNjZC00ZmJjLWJiNjUtYTNlMTIyZWQzZmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgid0HC+2klCKYYNc3+NLpBcNdEXojSWPT6gH
zThS+FV7LiX40rnJ62fiukQnMlvNijm8kvj3T//hugWXv2ui0XdezNyqLFMUtKJX
9FdOzXmqu1DtYmbEajJ9r/7hd34LmaPFq1rsZv6vSNX7kKSO4hNOYoZfu2RI/MbO
cBlqJMH2k97fDH3JAArEbCu9gxuBnBiTDOKqVspa9zKwDR/xKm2bUiS8kYVUaU4P
GDUHxjHBMNDyS/QqdFmUIs/dSIYs2zpnkR6lKG7Bx7JRdk9SLIKOMYpyTBXosKJZ
9FdTlp9auwsHXxU92R016yehD2++d0UfmQuW8hee2vW/Xh8D+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKp4LcvzS7Xz0/wEqQP8BeIsYfVIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmViZjA2YzYtNTcyOS0z
NDEwLTk5NDAtOTRhM2Q5YmU2ODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRFAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADE8p62rkJAQ76QvLF9I/qTmt9CUIwB9nymllJipLRngJJXUG1T6y9h6
rQkwEVFqOEULDLTsEmfjxUuHgMz5+83ySHLcs5ERlPpLDqJ/f0lAz2ny6mOt3wZV
QqZVZlbgU0VEaUZF3evYd/YCakJxDi6feMtGKcvuWTYmr4k41fSAlzcSG6VsOvXm
N4JO4qC277s02S5TWvugRInS6a+s6gS0aDFuSf9CfwxsHJypvt1QZq2ZrSGqtkuY
JYix9kLLKzu2aYnX20Bp8fBTzdPd/yc1MmevZa03ukuj6Iuq11gciRfv9AjdDMeK
IhA/4ixduHK+aL9QMczcQvV6r9PuiXA=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:56:43 2025 by rpki-client