Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/6d3d794c-8c99-3ee2-bfe8-2e15557d3f33.roa
File:                     6d3d794c-8c99-3ee2-bfe8-2e15557d3f33.roa (raw, json)
Hash identifier:          OdqafksAUq4vJBrS2nuxCWytA8CJEz3EN09stDwt1l0=
Subject key identifier:   06:AD:D5:E6:B2:A8:41:0C:1F:52:CF:18:5F:BF:7A:E8:C7:EC:D3:A7
Certificate issuer:       /CN=9c7abcd7-8ab3-460c-8950-f024e1b500dd
Certificate serial:       010D0C9F4328584B0FE162CA952D659EC7980B00
Authority key identifier: 47:0B:25:6D:0D:34:8D:EB:7A:79:BB:41:B9:72:37:10:EC:38:EA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/6d3d794c-8c99-3ee2-bfe8-2e15557d3f33.roa
Signing time:             Tue 02 Sep 2025 14:58:57 +0000
ROA not before:           Tue 02 Sep 2025 14:58:57 +0000
ROA not after:            Mon 01 Dec 2025 15:58:57 +0000
asID:                     400343
IP address blocks:        64.187.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/9c7abcd7-8ab3-460c-8950-f024e1b500dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/9c7abcd7-8ab3-460c-8950-f024e1b500dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:e1:62:ca:95:2d:65:9e:c7:98:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7abcd7-8ab3-460c-8950-f024e1b500dd
        Validity
            Not Before: Sep  2 14:58:57 2025 GMT
            Not After : Dec  1 15:58:57 2025 GMT
        Subject: CN=3b6fe040-056b-4ff8-a756-0e3fe0e7d8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:79:42:75:8d:c6:91:e9:59:e0:26:39:0b:
                    da:1f:1b:1c:05:d2:78:28:f8:ce:ed:4c:0e:54:25:
                    70:18:1a:4e:d6:3f:0f:b6:ff:20:1f:d7:79:16:f6:
                    df:81:76:01:7f:5e:91:e4:8e:49:71:72:13:e1:40:
                    65:d5:4b:f9:b0:38:62:f8:98:22:11:3b:35:d5:a5:
                    1b:68:38:b8:9c:68:e4:ae:8b:93:1c:b6:9e:8c:33:
                    3c:3c:0f:f8:2a:5c:66:64:9b:0f:84:0e:ae:07:86:
                    4e:f1:64:e2:88:a8:2c:38:15:2f:bd:c0:51:99:15:
                    86:f0:fe:71:e4:0f:18:68:99:b3:f2:c8:92:0e:ac:
                    1f:62:74:34:b2:61:06:43:3e:6d:7d:9c:28:c6:7c:
                    d3:8f:ef:38:43:f7:44:40:b0:f1:a2:77:55:dd:86:
                    2e:9d:44:e9:3d:d2:78:55:e4:ed:c5:18:7a:a6:2f:
                    2a:24:0a:45:bb:2f:b2:5e:ff:41:bf:9f:d6:dc:3c:
                    0b:81:1e:2f:a1:e2:0f:f4:8e:2d:91:39:9d:72:0c:
                    c3:5d:bf:fe:80:39:2a:b6:ad:a6:ec:0e:16:55:44:
                    16:e7:c3:5e:8b:d0:ce:08:fd:db:41:ac:ae:58:bc:
                    5d:11:ec:2f:cd:a5:ff:6e:32:be:41:cb:46:9b:36:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AD:D5:E6:B2:A8:41:0C:1F:52:CF:18:5F:BF:7A:E8:C7:EC:D3:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/6d3d794c-8c99-3ee2-bfe8-2e15557d3f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/9c7abcd7-8ab3-460c-8950-f024e1b500dd.crl

            X509v3 Authority Key Identifier:
                keyid:47:0B:25:6D:0D:34:8D:EB:7A:79:BB:41:B9:72:37:10:EC:38:EA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:89:9c:44:5d:3a:e0:03:da:48:24:fc:da:ee:86:6e:be:7a:
         02:5f:4e:5d:7e:76:1e:af:66:1f:c2:1c:ee:ad:4b:04:75:5a:
         41:15:a7:17:11:31:da:eb:4f:90:5d:dc:f4:cb:e8:06:50:ad:
         43:77:4f:84:30:5a:89:5f:98:60:c3:2e:95:b6:e5:a6:ee:c2:
         f8:6a:3b:a4:92:28:7a:80:e5:70:47:2d:07:9c:4e:6b:09:d7:
         83:06:07:fc:e3:04:e1:60:0a:fc:38:15:6c:e7:66:20:35:7f:
         b6:04:69:97:95:69:a6:ec:b5:ca:71:0a:7c:d5:ae:c7:00:ac:
         cc:c1:0e:a7:f5:36:95:2b:47:29:e8:e4:f6:b9:eb:a4:30:41:
         35:f3:02:e2:d7:a5:9b:0c:03:03:c4:5d:4f:e8:be:06:74:95:
         a6:9c:e1:2c:65:b1:1e:5a:ff:5c:10:57:3f:13:86:ec:ef:a6:
         1c:85:95:fb:bf:4d:10:da:3b:97:b0:ea:71:77:8d:7e:64:53:
         3f:89:45:f8:2c:8a:f2:ff:74:47:b2:b4:d0:5c:8c:cd:e8:a4:
         b4:d5:7d:6b:70:71:94:65:92:2a:16:24:93:11:70:5f:1c:ae:
         5f:f4:c0:66:02:21:18:e6:c6:c6:2d:c0:dc:50:d8:9e:a0:c0:
         7a:20:c3:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsP4WLKlS1lnseYCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWM3YWJjZDctOGFiMy00NjBjLTg5NTAtZjAyNGUxYjUw
MGRkMB4XDTI1MDkwMjE0NTg1N1oXDTI1MTIwMTE1NTg1N1owLzEtMCsGA1UEAxMk
M2I2ZmUwNDAtMDU2Yi00ZmY4LWE3NTYtMGUzZmUwZTdkOGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTV5QnWNxpHpWeAmOQvaHxscBdJ4KPjO7UwO
VCVwGBpO1j8Ptv8gH9d5FvbfgXYBf16R5I5JcXIT4UBl1Uv5sDhi+JgiETs11aUb
aDi4nGjkrouTHLaejDM8PA/4KlxmZJsPhA6uB4ZO8WTiiKgsOBUvvcBRmRWG8P5x
5A8YaJmz8siSDqwfYnQ0smEGQz5tfZwoxnzTj+84Q/dEQLDxondV3YYunUTpPdJ4
VeTtxRh6pi8qJApFuy+yXv9Bv5/W3DwLgR4voeIP9I4tkTmdcgzDXb/+gDkqtq2m
7A4WVUQW58Nei9DOCP3bQayuWLxdEewvzaX/bjK+QctGmzYA/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAat1eayqEEMH1LPGF+/eujH7NOnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Yzdh
YmNkNy04YWIzLTQ2MGMtODk1MC1mMDI0ZTFiNTAwZGQvNmQzZDc5NGMtOGM5OS0z
ZWUyLWJmZTgtMmUxNTU1N2QzZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWM3YWJjZDctOGFiMy00NjBjLTg5
NTAtZjAyNGUxYjUwMGRkLzljN2FiY2Q3LThhYjMtNDYwYy04OTUwLWYwMjRlMWI1
MDBkZC5jcmwwHwYDVR0jBBgwFoAURwslbQ00jet6ebtBuXI3EOw46sswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC85YzdhYmNkNy04YWIzLTQ2MGMtODk1MC1mMDI0
ZTFiNTAwZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLthMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWJnERdOuAD2kgk/Nruhm6+egJfTl1+dh6vZh/CHO6tSwR1WkEVpxcR
MdrrT5Bd3PTL6AZQrUN3T4QwWolfmGDDLpW25abuwvhqO6SSKHqA5XBHLQecTmsJ
14MGB/zjBOFgCvw4FWznZiA1f7YEaZeVaabstcpxCnzVrscArMzBDqf1NpUrRyno
5Pa566QwQTXzAuLXpZsMAwPEXU/ovgZ0laac4SxlsR5a/1wQVz8ThuzvphyFlfu/
TRDaO5ew6nF3jX5kUz+JRfgsivL/dEeytNBcjM3opLTVfWtwcZRlkioWJJMRcF8c
rl/0wGYCIRjmxsYtwNxQ2J6gwHogwww=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:39:30 2025 by rpki-client