Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e2142ceb-7d75-39b2-9df9-50bb90f6ecf0.roa
File:                     e2142ceb-7d75-39b2-9df9-50bb90f6ecf0.roa (raw, json)
Hash identifier:          cwAo2ggjsf3/efVdIy7JRi/+uAyzKYKJ+PLXBvL/ZAI=
Subject key identifier:   59:54:C1:B6:8C:38:5E:68:5C:57:0B:0C:95:51:3C:38:8B:7D:6E:0F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B235CFCD3F13C1D41E015FEC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e2142ceb-7d75-39b2-9df9-50bb90f6ecf0.roa
Signing time:             Tue 09 Sep 2025 14:28:21 +0000
ROA not before:           Tue 09 Sep 2025 14:28:21 +0000
ROA not after:            Mon 08 Dec 2025 15:28:21 +0000
asID:                     9304
IP address blocks:        64.81.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:5c:fc:d3:f1:3c:1d:41:e0:15:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep  9 14:28:21 2025 GMT
            Not After : Dec  8 15:28:21 2025 GMT
        Subject: CN=665dff08-96c1-4ea9-8253-189082cb55b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:00:e6:f3:e7:a7:cc:33:4f:bd:be:63:bf:
                    2a:7f:a9:c6:c1:12:3d:8b:9b:23:90:f7:0d:10:4f:
                    86:d4:f6:f4:26:18:4e:e8:02:36:80:e6:5c:5f:19:
                    b8:0f:69:f7:61:1a:03:52:b9:a9:37:bd:ba:0c:ca:
                    b9:7e:a5:36:07:0a:c9:ed:27:a7:9f:1b:6a:27:c4:
                    a6:20:5f:e9:81:30:b5:0c:95:40:5a:36:e9:e7:21:
                    0c:b8:8e:26:25:4e:85:53:e7:bf:f2:95:d6:09:55:
                    d6:a3:b8:70:cd:a9:2b:84:57:a7:df:0b:89:03:9c:
                    ed:34:a8:e2:0f:8e:0b:d6:50:9f:22:be:8e:84:29:
                    cd:b6:b1:11:38:c7:b7:20:9d:57:18:d8:61:35:67:
                    cd:94:6f:4d:b5:31:c8:72:f1:23:07:a0:3d:62:a2:
                    96:21:62:2c:1b:1b:85:5a:ed:de:dc:7a:62:7d:1a:
                    4d:1f:49:0e:c8:e6:08:ef:3f:0b:6e:1f:d7:5e:d4:
                    68:db:cf:9e:a6:02:c8:98:1e:25:d6:a6:40:c9:dc:
                    9b:21:7b:5f:22:22:c4:71:70:f1:b2:be:52:d2:0f:
                    50:b7:69:2b:a0:e4:58:ba:c8:af:59:be:e4:11:d8:
                    38:c6:9d:83:e1:76:4a:eb:a0:04:e0:ea:a4:10:c8:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:54:C1:B6:8C:38:5E:68:5C:57:0B:0C:95:51:3C:38:8B:7D:6E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e2142ceb-7d75-39b2-9df9-50bb90f6ecf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.81.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:8c:6e:23:29:34:bb:e5:f4:1e:77:2f:a2:0c:0e:5d:d7:0a:
         3b:f2:19:13:bd:6c:83:c6:c3:47:76:19:1d:1b:79:8d:0f:a8:
         e4:af:0a:87:ca:00:24:f6:86:65:c6:61:c9:be:af:27:a0:e3:
         94:18:c8:4c:d5:be:6b:01:aa:4c:4b:fb:fa:28:e2:2d:23:85:
         db:1c:d0:0f:01:5c:d9:ac:75:b2:a8:36:ac:9a:97:c3:7f:ae:
         da:b3:c8:52:a4:51:90:87:d2:2b:7f:17:56:73:f2:99:43:41:
         5f:c2:d9:54:03:68:fe:71:d3:3b:f0:1e:0c:1e:60:7a:39:45:
         80:c7:a6:5f:65:87:c3:4a:03:f9:71:80:be:fe:17:43:29:47:
         27:58:ff:17:6e:64:45:ab:71:15:a8:ed:41:5a:1e:21:00:c6:
         55:75:1d:be:e1:d6:b7:24:17:03:59:f8:f3:cd:4d:54:13:be:
         d2:47:22:b3:f4:1e:0a:3f:1d:95:2f:54:80:e9:41:d4:dc:dd:
         1a:e3:a8:e3:1e:33:98:f0:b3:e3:99:8e:fa:8b:05:90:ad:71:
         f6:ac:52:0a:8e:9d:fe:9a:c8:60:83:5d:ae:61:cb:d3:a2:45:
         cb:93:be:31:03:ee:26:7f:40:e6:d2:0d:9f:0c:b2:1c:90:56:
         22:ab:71:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjXPzT8TwdQeAV/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDkwOTE0MjgyMVoXDTI1MTIwODE1MjgyMVowLzEtMCsGA1UEAxMk
NjY1ZGZmMDgtOTZjMS00ZWE5LTgyNTMtMTg5MDgyY2I1NWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7UA5vPnp8wzT72+Y78qf6nGwRI9i5sjkPcN
EE+G1Pb0JhhO6AI2gOZcXxm4D2n3YRoDUrmpN726DMq5fqU2BwrJ7SennxtqJ8Sm
IF/pgTC1DJVAWjbp5yEMuI4mJU6FU+e/8pXWCVXWo7hwzakrhFen3wuJA5ztNKji
D44L1lCfIr6OhCnNtrEROMe3IJ1XGNhhNWfNlG9NtTHIcvEjB6A9YqKWIWIsGxuF
Wu3e3HpifRpNH0kOyOYI7z8Lbh/XXtRo28+epgLImB4l1qZAydybIXtfIiLEcXDx
sr5S0g9Qt2kroORYusivWb7kEdg4xp2D4XZK66AE4OqkEMjPOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFlUwbaMOF5oXFcLDJVRPDiLfW4PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTIxNDJjZWItN2Q3NS0z
OWIyLTlkZjktNTBiYjkwZjZlY2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFGlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKqMbiMpNLvl9B53L6IMDl3XCjvyGRO9bIPGw0d2GR0beY0PqOSvCofK
ACT2hmXGYcm+ryeg45QYyEzVvmsBqkxL+/oo4i0jhdsc0A8BXNmsdbKoNqyal8N/
rtqzyFKkUZCH0it/F1Zz8plDQV/C2VQDaP5x0zvwHgweYHo5RYDHpl9lh8NKA/lx
gL7+F0MpRydY/xduZEWrcRWo7UFaHiEAxlV1Hb7h1rckFwNZ+PPNTVQTvtJHIrP0
Hgo/HZUvVIDpQdTc3RrjqOMeM5jws+OZjvqLBZCtcfasUgqOnf6ayGCDXa5hy9Oi
RcuTvjED7iZ/QObSDZ8MshyQViKrcVQ=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:52:28 2025 by rpki-client