Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/dd4850d9-75a7-3dad-b668-45a0826fe731.roa
File:                     dd4850d9-75a7-3dad-b668-45a0826fe731.roa (raw, json)
Hash identifier:          GNJLZAZ81ANJvESEJFDc39qHwFcN9JVxnJW2kYMkriM=
Subject key identifier:   B5:5E:89:80:3B:F9:46:2A:BC:66:29:F0:72:3E:4F:A9:A8:34:FE:6F
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584B127164C2533DAAAA3188C300
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/dd4850d9-75a7-3dad-b668-45a0826fe731.roa
Signing time:             Wed 03 Sep 2025 13:00:41 +0000
ROA not before:           Wed 03 Sep 2025 13:00:41 +0000
ROA not after:            Tue 02 Dec 2025 14:00:41 +0000
asID:                     21947
IP address blocks:        69.51.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:12:71:64:c2:53:3d:aa:aa:31:88:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Sep  3 13:00:41 2025 GMT
            Not After : Dec  2 14:00:41 2025 GMT
        Subject: CN=53cda968-6b54-4fde-bf94-a1bb5ae79e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:b8:a9:27:b9:1b:ab:4c:fe:d1:95:d8:38:
                    44:3f:3b:80:d9:25:f3:ef:6f:da:7f:fe:f1:fa:07:
                    e0:60:fd:59:07:53:26:3f:84:69:72:01:3b:a0:5c:
                    8f:aa:a7:3b:c7:c7:ba:31:34:2f:9d:1e:6a:5e:bd:
                    f5:9f:75:81:c4:5f:42:b6:ae:a9:83:56:78:c6:35:
                    8b:8b:bd:f7:e7:ae:2c:e7:f1:51:86:18:f4:c5:db:
                    6c:63:1e:22:45:97:a4:ed:46:53:e9:b7:f7:23:2d:
                    b0:ac:c9:7d:0b:c3:3e:92:a9:d6:3a:a4:8f:69:ee:
                    33:64:54:64:36:1a:17:02:c1:aa:bd:3f:02:c1:f3:
                    f4:50:a9:28:c4:0d:43:17:a1:4f:86:b5:c1:51:6d:
                    d9:1c:ce:9d:02:e6:b6:3c:6f:cd:e3:3c:db:dd:0f:
                    b0:f9:9a:71:ab:e3:cd:6a:24:c3:dd:d2:4c:62:84:
                    60:39:dd:02:97:f9:53:2e:da:12:89:09:43:8d:a8:
                    ed:73:14:e1:1d:e1:ae:42:4a:ec:ab:20:ca:42:1b:
                    78:a2:16:00:b4:96:23:0a:cb:ed:1c:ae:9d:b8:00:
                    4e:b3:3b:72:0f:1a:a3:be:6c:ec:c7:e2:78:12:94:
                    a8:ec:7b:ba:a8:a5:76:09:05:7c:3c:9a:12:c5:f2:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5E:89:80:3B:F9:46:2A:BC:66:29:F0:72:3E:4F:A9:A8:34:FE:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/dd4850d9-75a7-3dad-b668-45a0826fe731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2e:06:92:8f:70:2d:47:49:d6:ad:dc:d7:17:2a:fb:52:c8:
         64:f3:6b:28:40:96:c9:2b:f1:ce:46:99:e1:49:22:38:01:2b:
         41:0e:ad:cf:2d:be:f3:c9:65:bc:c8:73:86:a0:e2:ee:87:65:
         82:40:ea:fb:6c:c4:5b:7f:62:b6:9c:f0:8d:d4:c7:2e:f2:ee:
         0f:e0:07:07:4b:bc:c9:ff:c7:86:02:e2:a8:de:c9:18:84:e9:
         69:89:e6:ea:63:c2:72:0d:9e:96:0d:1b:eb:fc:75:7c:0c:2a:
         06:70:dd:31:ee:39:e7:17:e2:ae:10:31:57:3c:3b:29:b6:51:
         97:57:ad:8d:dd:24:4b:68:03:88:f7:47:3e:ec:29:bc:a4:a8:
         7a:34:62:9a:1c:82:02:bd:85:24:8a:c1:3a:11:80:8f:6a:a1:
         16:68:f2:bf:4f:2a:e5:7c:8a:0c:8b:d2:69:33:1e:74:b8:6d:
         e5:17:c7:64:8b:57:38:6d:f3:53:0f:9e:79:5b:38:37:e5:23:
         45:2b:16:11:11:03:22:71:27:2e:fe:b4:f7:a9:8d:0c:21:80:
         1e:1d:be:cf:fe:7c:c7:25:21:59:13:c1:18:78:f1:e6:c1:9c:
         d6:40:0e:17:dd:c3:d6:79:7f:c7:ab:f1:69:fb:e8:68:62:78:
         8a:3a:e6:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWTCUz2qqjGIwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz
OGEzMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk
NTNjZGE5NjgtNmI1NC00ZmRlLWJmOTQtYTFiYjVhZTc5ZTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVi4qSe5G6tM/tGV2DhEPzuA2SXz72/af/7x
+gfgYP1ZB1MmP4RpcgE7oFyPqqc7x8e6MTQvnR5qXr31n3WBxF9Ctq6pg1Z4xjWL
i733564s5/FRhhj0xdtsYx4iRZek7UZT6bf3Iy2wrMl9C8M+kqnWOqSPae4zZFRk
NhoXAsGqvT8CwfP0UKkoxA1DF6FPhrXBUW3ZHM6dAua2PG/N4zzb3Q+w+Zpxq+PN
aiTD3dJMYoRgOd0Cl/lTLtoSiQlDjajtcxThHeGuQkrsqyDKQht4ohYAtJYjCsvt
HK6duABOsztyDxqjvmzsx+J4EpSo7Hu6qKV2CQV8PJoSxfJ+dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVeiYA7+UYqvGYp8HI+T6moNP5vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3
MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvZGQ0ODUwZDktNzVhNy0z
ZGFkLWI2NjgtNDVhMDgyNmZlNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk
YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj
MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1
NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRTNAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEuBpKPcC1HSdat3NcXKvtSyGTzayhAlskr8c5GmeFJIjgBK0EOrc8t
vvPJZbzIc4ag4u6HZYJA6vtsxFt/Yrac8I3Uxy7y7g/gBwdLvMn/x4YC4qjeyRiE
6WmJ5upjwnINnpYNG+v8dXwMKgZw3THuOecX4q4QMVc8Oym2UZdXrY3dJEtoA4j3
Rz7sKbykqHo0YpocggK9hSSKwToRgI9qoRZo8r9PKuV8igyL0mkzHnS4beUXx2SL
Vzht81MPnnlbODflI0UrFhERAyJxJy7+tPepjQwhgB4dvs/+fMclIVkTwRh48ebB
nNZADhfdw9Z5f8er8Wn76GhieIo65lw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:21 2025 by rpki-client