Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e6005b5a-53b9-3112-ae5d-4e3bcb2de9dc.roa
File:                     e6005b5a-53b9-3112-ae5d-4e3bcb2de9dc.roa (raw, json)
Hash identifier:          tKeIdwEtGN8HvN2M0CxkRCir0/l/FbDatpYTds04J1U=
Subject key identifier:   FE:6D:70:92:A0:DF:F4:2D:55:9C:E2:36:24:A3:1F:77:90:9F:2D:FE
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584B0746D400F2211152DE11B940
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e6005b5a-53b9-3112-ae5d-4e3bcb2de9dc.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     48678
IP address blocks:        67.214.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:d4:00:f2:21:11:52:de:11:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=950646d5-a707-412d-be5e-d0ef5eb9f197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:fd:37:23:8e:34:87:c7:06:77:9a:c5:10:
                    9d:7a:a5:36:f4:b9:02:2f:d0:48:5b:49:59:63:53:
                    7c:98:2d:12:37:a8:c2:fe:2f:86:ad:16:2b:47:84:
                    8f:bf:80:f4:1e:3c:8d:00:20:a3:74:c6:7d:da:57:
                    85:5b:16:c0:07:8f:3f:8d:f2:80:89:2f:47:9f:20:
                    bb:4c:83:69:bd:7c:29:bf:60:f2:c2:f4:0e:b5:f6:
                    5e:a7:5e:ee:6b:15:40:e0:af:12:36:5f:7d:f1:ff:
                    b5:f9:cf:16:3c:a7:f6:24:5c:57:ba:98:06:ca:a6:
                    69:43:11:f9:d3:86:b9:79:0f:5a:0a:cf:53:a0:2e:
                    fe:70:44:5f:30:6f:07:1d:d9:a2:07:b1:bd:b2:78:
                    cb:c1:a4:33:f5:35:e9:8e:c3:f1:15:95:83:05:9f:
                    92:64:50:c6:e5:47:73:b8:c2:2b:6d:b8:a9:03:fb:
                    8e:8b:36:a6:bf:28:a3:39:f1:7b:2e:7b:b7:a1:10:
                    d5:17:5b:a4:35:5f:3f:a7:f0:40:3a:21:5e:7d:33:
                    ce:6b:42:0d:ab:6b:cb:a9:ae:05:cf:2e:ed:b2:ac:
                    46:9c:73:29:ef:a5:e8:5f:eb:28:fd:48:52:db:f9:
                    4c:54:af:4e:6d:f7:24:00:45:1e:e6:38:68:a5:68:
                    48:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6D:70:92:A0:DF:F4:2D:55:9C:E2:36:24:A3:1F:77:90:9F:2D:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e6005b5a-53b9-3112-ae5d-4e3bcb2de9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:9f:1d:e7:f1:92:05:c9:ce:c5:86:e7:6d:89:c5:ab:bd:35:
         06:3b:76:c7:a9:98:31:69:2e:87:15:ab:b0:7e:07:73:5d:b0:
         6b:96:c4:85:af:a8:b6:3e:6b:5a:e9:cd:82:65:8e:7c:12:45:
         6d:92:da:14:b3:39:60:f7:0a:4c:1b:4b:bf:a1:51:70:7c:b4:
         ad:50:a9:1b:e6:4d:fb:71:72:95:60:22:dd:4f:b6:0d:0c:0b:
         69:bd:de:f3:f9:88:87:30:de:2f:68:88:2f:21:08:9f:43:13:
         b5:ac:20:60:16:e8:eb:65:4c:f8:cd:52:d7:21:cf:9d:a9:9f:
         0d:d3:68:4a:22:2b:05:fe:bf:91:06:04:28:3f:ec:5a:f4:8b:
         fb:14:a2:db:1e:0f:a6:2c:70:16:79:62:88:fc:82:4c:4a:56:
         28:a0:cd:55:01:11:24:fd:87:be:e7:92:14:c4:0c:a1:e7:1d:
         80:62:7d:a9:5c:b6:ca:2d:ed:b1:26:4c:24:f5:f1:a9:a1:92:
         bb:95:d0:73:ae:1e:83:19:d2:dd:0e:aa:6b:5e:f1:51:c1:a9:
         f0:4e:36:af:57:38:14:65:f1:fd:be:c3:03:c2:37:9e:a3:4c:
         70:c1:5e:12:20:5d:82:ea:4a:34:60:28:9a:e2:56:d3:db:1a:
         2c:78:cc:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRtQA8iERUt4RuUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1
MzJlMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
OTUwNjQ2ZDUtYTcwNy00MTJkLWJlNWUtZDBlZjVlYjlmMTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSD9NyOONIfHBneaxRCdeqU29LkCL9BIW0lZ
Y1N8mC0SN6jC/i+GrRYrR4SPv4D0HjyNACCjdMZ92leFWxbAB48/jfKAiS9HnyC7
TINpvXwpv2DywvQOtfZep17uaxVA4K8SNl998f+1+c8WPKf2JFxXupgGyqZpQxH5
04a5eQ9aCs9ToC7+cERfMG8HHdmiB7G9snjLwaQz9TXpjsPxFZWDBZ+SZFDG5Udz
uMIrbbipA/uOizamvyijOfF7Lnu3oRDVF1ukNV8/p/BAOiFefTPOa0INq2vLqa4F
zy7tsqxGnHMp76XoX+so/UhS2/lMVK9ObfckAEUe5jhopWhIiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5tcJKg3/QtVZziNiSjH3eQny3+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl
OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvZTYwMDViNWEtNTNiOS0z
MTEyLWFlNWQtNGUzYmNiMmRlOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy
NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3
NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj
Y2UwNzUzMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9azMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWfHefxkgXJzsWG522Jxau9NQY7dsepmDFpLocVq7B+B3NdsGuWxIWv
qLY+a1rpzYJljnwSRW2S2hSzOWD3CkwbS7+hUXB8tK1QqRvmTftxcpVgIt1Ptg0M
C2m93vP5iIcw3i9oiC8hCJ9DE7WsIGAW6OtlTPjNUtchz52pnw3TaEoiKwX+v5EG
BCg/7Fr0i/sUotseD6YscBZ5Yoj8gkxKViigzVUBEST9h77nkhTEDKHnHYBifalc
tsot7bEmTCT18amhkruV0HOuHoMZ0t0Oqmte8VHBqfBONq9XOBRl8f2+wwPCN56j
THDBXhIgXYLqSjRgKJriVtPbGix4zLs=
-----END CERTIFICATE-----
Generated at Sat Oct 11 18:26:50 2025 by rpki-client