Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/da556143-a513-33ee-8bc4-041462ef3705.roa
File:                     da556143-a513-33ee-8bc4-041462ef3705.roa (raw, json)
Hash identifier:          Ad+5xs/BSpsybmQ23nkKxOMPttLMsFE6fEHLzGOqYaY=
Subject key identifier:   91:5E:F9:B6:4D:3F:06:A2:DA:CB:1C:DF:CE:4C:13:92:9C:09:9C:7D
Certificate issuer:       /CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
Certificate serial:       010D0C9F4328584AFC1C1FF580D1014449508480
Authority key identifier: 62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/da556143-a513-33ee-8bc4-041462ef3705.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     29789
IP address blocks:        64.210.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:1f:f5:80:d1:01:44:49:50:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee3662-bee3-410a-9cb1-559a07ce6a9c
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=77614a89-a517-4195-b3a3-00a334058d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:38:f4:4e:5b:44:e1:8f:35:fd:0f:bf:4b:07:
                    fc:c8:3e:50:4d:e1:dc:66:85:d2:20:3f:f6:e6:3f:
                    90:a8:6f:27:91:e1:69:78:5a:4a:4f:92:1b:79:73:
                    99:38:c3:d7:e2:a3:a1:d6:38:2b:a9:3e:a9:f3:60:
                    37:02:2f:0e:64:87:27:0e:c8:48:ae:30:2b:c5:49:
                    f0:b9:c7:35:8e:5a:a7:53:91:28:55:b3:84:42:95:
                    e2:32:55:17:63:a5:54:48:a9:f3:31:1c:56:04:cc:
                    27:fc:8e:81:45:61:a8:0e:ef:9b:52:d7:30:37:0d:
                    2c:88:15:2c:c8:43:f2:e5:d1:95:d1:56:32:7c:14:
                    44:d2:ad:b7:cb:3d:a0:20:05:08:fe:8a:5e:04:dc:
                    8d:bc:d7:d2:2c:d4:47:23:29:b6:06:60:94:f8:0b:
                    b8:f7:35:ed:c6:38:2a:08:eb:7f:4b:91:4f:86:48:
                    c6:72:67:6b:c9:71:5d:cb:0f:e4:ad:b4:07:c3:d9:
                    c7:d8:f1:70:db:31:ac:c3:72:0e:b1:4a:6c:f2:ac:
                    8d:1c:92:f7:ac:bb:05:16:f7:9f:3e:30:1e:94:63:
                    86:af:ec:71:6d:22:8d:bb:b7:b8:a4:2f:87:81:e3:
                    f3:a9:43:39:d1:2c:27:af:c2:72:16:77:c7:1a:8e:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5E:F9:B6:4D:3F:06:A2:DA:CB:1C:DF:CE:4C:13:92:9C:09:9C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/da556143-a513-33ee-8bc4-041462ef3705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c/9eee3662-bee3-410a-9cb1-559a07ce6a9c.crl

            X509v3 Authority Key Identifier:
                keyid:62:5E:5D:D6:AA:8D:AD:0C:90:3F:B0:31:38:6D:1E:33:51:89:D1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9eee3662-bee3-410a-9cb1-559a07ce6a9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.210.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:45:ad:e8:b0:ce:c2:f6:c4:56:4c:9c:64:d2:14:1b:2b:
         2b:66:02:44:48:be:43:c5:7b:2b:f7:de:31:f4:11:ab:8e:26:
         fa:0a:77:7c:da:34:0f:fe:41:5e:0d:54:e2:a1:0f:5c:ec:dc:
         f6:47:bb:e3:69:3f:db:34:33:eb:94:5d:eb:7d:3a:84:f5:a8:
         81:74:c6:4e:d8:e0:96:50:d1:46:72:e0:a4:8a:ec:38:ee:21:
         9a:00:f1:f5:6d:c2:69:86:5e:53:e4:52:3c:18:b0:79:70:d8:
         13:5c:33:8f:45:32:c3:9e:72:13:d4:15:19:cd:85:2e:6d:d5:
         c6:fa:05:28:f2:d2:a8:ba:03:d6:f1:00:2f:95:57:24:09:c7:
         2e:6a:fc:5d:53:18:0b:c0:93:54:a0:62:b8:e8:9c:a9:0e:2e:
         4f:1e:79:51:75:70:e6:12:b1:20:5b:be:88:91:84:4c:80:e8:
         8d:3f:a7:1d:2d:a5:5e:53:25:ce:55:f1:97:50:12:a7:27:b1:
         6e:ae:fd:55:a6:f1:07:63:fa:b7:38:0e:67:cb:e0:c3:0e:ef:
         d5:a8:9f:7a:4e:6e:64:bf:1a:5e:85:70:44:59:a5:e1:ba:fb:
         27:de:cc:1b:58:26:90:ab:34:44:89:0a:24:e4:d1:5e:d3:01:
         9c:20:39:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HB/1gNEBRElQhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVlZTM2NjItYmVlMy00MTBhLTljYjEtNTU5YTA3Y2U2
YTljMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
Nzc2MTRhODktYTUxNy00MTk1LWIzYTMtMDBhMzM0MDU4ZDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzj0TltE4Y81/Q+/Swf8yD5QTeHcZoXSID/2
5j+QqG8nkeFpeFpKT5IbeXOZOMPX4qOh1jgrqT6p82A3Ai8OZIcnDshIrjArxUnw
ucc1jlqnU5EoVbOEQpXiMlUXY6VUSKnzMRxWBMwn/I6BRWGoDu+bUtcwNw0siBUs
yEPy5dGV0VYyfBRE0q23yz2gIAUI/opeBNyNvNfSLNRHIym2BmCU+Au49zXtxjgq
COt/S5FPhkjGcmdryXFdyw/krbQHw9nH2PFw2zGsw3IOsUps8qyNHJL3rLsFFvef
PjAelGOGr+xxbSKNu7e4pC+HgePzqUM50Swnr8JyFnfHGo7BuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFe+bZNPwai2ssc385ME5KcCZx9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZWVl
MzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlhMDdjZTZhOWMvZGE1NTYxNDMtYTUxMy0z
M2VlLThiYzQtMDQxNDYyZWYzNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWVlZTM2NjItYmVlMy00MTBhLTlj
YjEtNTU5YTA3Y2U2YTljLzllZWUzNjYyLWJlZTMtNDEwYS05Y2IxLTU1OWEwN2Nl
NmE5Yy5jcmwwHwYDVR0jBBgwFoAUYl5d1qqNrQyQP7AxOG0eM1GJ0fowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZWVlMzY2Mi1iZWUzLTQxMGEtOWNiMS01NTlh
MDdjZTZhOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQNKcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbmRa3osM7C9sRWTJxk0hQbKytmAkRIvkPFeyv33jH0EauOJvoKd3za
NA/+QV4NVOKhD1zs3PZHu+NpP9s0M+uUXet9OoT1qIF0xk7Y4JZQ0UZy4KSK7Dju
IZoA8fVtwmmGXlPkUjwYsHlw2BNcM49FMsOechPUFRnNhS5t1cb6BSjy0qi6A9bx
AC+VVyQJxy5q/F1TGAvAk1SgYrjonKkOLk8eeVF1cOYSsSBbvoiRhEyA6I0/px0t
pV5TJc5V8ZdQEqcnsW6u/VWm8Qdj+rc4DmfL4MMO79Won3pObmS/Gl6FcERZpeG6
+yfezBtYJpCrNESJCiTk0V7TAZwgOWE=
-----END CERTIFICATE-----
Generated at Sat Oct 11 00:19:27 2025 by rpki-client