Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/59ba3509-76c2-3b16-9160-b70599626c49.roa
File:                     59ba3509-76c2-3b16-9160-b70599626c49.roa (raw, json)
Hash identifier:          uBf3cBlqVBntLTJj1w+Z33VpDhDAIGkLlQ9SgdTweaU=
Subject key identifier:   39:FA:29:D0:FB:26:08:9A:37:C9:85:7E:F3:87:87:12:BB:AF:C9:64
Certificate issuer:       /CN=28168b94-cad8-4dae-a00d-057ac35417a3
Certificate serial:       010D0C9F4328584A46A5AB0DEE9D65F64774C0C0
Authority key identifier: 16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/59ba3509-76c2-3b16-9160-b70599626c49.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     53703
IP address blocks:        64.39.192.0/19 maxlen: 24
                          72.2.179.0/24 maxlen: 24
                          158.51.164.0/22 maxlen: 24
                          198.254.28.0/22 maxlen: 24
                          199.68.220.0/22 maxlen: 24
                          199.83.56.0/22 maxlen: 24
                          199.119.144.0/21 maxlen: 24
                          208.92.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:ab:0d:ee:9d:65:f6:47:74:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28168b94-cad8-4dae-a00d-057ac35417a3
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=2508abb5-7338-43d4-b420-fcb634f4fd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:a2:b3:76:17:f4:8a:4b:1a:1c:df:29:b8:
                    40:2c:37:a3:a0:e3:3a:e1:43:a1:48:50:cf:a6:ed:
                    76:3e:33:bc:5c:12:0a:9d:b4:9e:10:36:70:5b:a7:
                    90:68:4a:7e:9f:d9:51:97:57:b6:02:74:3c:0d:26:
                    ec:87:1f:0d:73:de:7b:80:95:b6:ab:67:e7:a2:42:
                    14:87:75:b8:a6:db:3e:bd:c5:e5:a4:79:44:3e:0c:
                    c4:9a:f4:9f:56:a9:c3:02:61:58:fe:35:8a:31:71:
                    ed:4b:2b:fe:cb:c9:8a:22:1e:f6:36:57:8b:f5:d8:
                    28:69:ba:f2:23:df:bd:9f:f4:8f:c8:00:42:11:ef:
                    14:40:a3:b3:98:91:01:1b:0d:51:26:20:52:93:19:
                    e1:d2:ca:3a:bc:82:34:22:11:3c:15:15:1b:e4:74:
                    3c:f0:48:b8:b1:63:05:4d:b9:96:15:90:e8:e8:57:
                    15:4e:3c:ca:9c:47:75:f7:54:8e:59:51:df:c6:cd:
                    a5:84:44:93:68:05:bd:79:d5:e2:09:a5:6a:70:55:
                    dd:2a:61:cd:b1:ea:96:b3:1f:86:e0:41:fc:05:d2:
                    57:5a:0e:cc:07:b5:f0:07:0e:a8:37:f8:ea:d9:b3:
                    99:ef:d4:d3:eb:36:6f:40:2a:06:12:06:7b:66:1b:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FA:29:D0:FB:26:08:9A:37:C9:85:7E:F3:87:87:12:BB:AF:C9:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/59ba3509-76c2-3b16-9160-b70599626c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl

            X509v3 Authority Key Identifier:
                keyid:16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.192.0/19
                  72.2.179.0/24
                  158.51.164.0/22
                  198.254.28.0/22
                  199.68.220.0/22
                  199.83.56.0/22
                  199.119.144.0/21
                  208.92.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:06:b4:86:35:6c:a4:4f:40:a9:d0:3a:04:24:34:27:52:3e:
         54:fe:a1:33:59:7b:97:49:46:18:e0:d3:69:89:76:91:bc:dd:
         19:ac:4e:c5:d3:05:50:b5:6e:f0:62:ae:4d:33:59:05:50:4e:
         c7:70:53:b8:33:c7:e3:fa:7f:d7:ba:97:9c:74:8b:ed:ed:03:
         fd:bc:f5:d5:30:f1:f3:0c:8f:fb:09:67:50:1f:07:aa:d0:63:
         c2:91:09:b9:2e:f8:d3:2d:1a:e7:82:e8:73:f6:b4:c5:e2:12:
         0f:28:ca:5c:8b:21:7c:f3:8f:0a:6f:4a:41:9a:17:e6:a6:dd:
         41:ee:e9:f0:3e:4f:43:6f:e4:1e:7a:69:8d:29:b0:c6:e9:a0:
         63:81:35:b4:66:d4:63:66:19:f0:15:b9:6a:f1:0e:a4:29:78:
         69:36:e1:94:09:c4:bd:32:ef:3a:db:b7:2a:d6:4a:09:e2:3d:
         b1:36:51:f1:f8:8b:65:76:08:bc:74:ac:86:1b:70:09:3c:99:
         22:68:b9:44:be:c8:7b:27:ac:f8:ad:b4:e4:a9:ac:1a:80:4b:
         9b:c6:72:c2:14:fc:6d:a1:57:fd:ad:b1:59:4b:1a:bb:b0:ec:
         cf:c0:13:9a:b0:1f:49:df:76:7f:02:ae:a4:9b:65:b6:11:48:
         37:f1:65:ec
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEpGpasN7p1l9kd0wMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxNjhiOTQtY2FkOC00ZGFlLWEwMGQtMDU3YWMzNTQx
N2EzMB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk
MjUwOGFiYjUtNzMzOC00M2Q0LWI0MjAtZmNiNjM0ZjRmZDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKGis3YX9IpLGhzfKbhALDejoOM64UOhSFDP
pu12PjO8XBIKnbSeEDZwW6eQaEp+n9lRl1e2AnQ8DSbshx8Nc957gJW2q2fnokIU
h3W4pts+vcXlpHlEPgzEmvSfVqnDAmFY/jWKMXHtSyv+y8mKIh72NleL9dgoabry
I9+9n/SPyABCEe8UQKOzmJEBGw1RJiBSkxnh0so6vII0IhE8FRUb5HQ88Ei4sWMF
TbmWFZDo6FcVTjzKnEd191SOWVHfxs2lhESTaAW9edXiCaVqcFXdKmHNseqWsx+G
4EH8BdJXWg7MB7XwBw6oN/jq2bOZ79TT6zZvQCoGEgZ7Zhv+AQIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFDn6KdD7JgiaN8mFfvOHhxK7r8lkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODE2
OGI5NC1jYWQ4LTRkYWUtYTAwZC0wNTdhYzM1NDE3YTMvNTliYTM1MDktNzZjMi0z
YjE2LTkxNjAtYjcwNTk5NjI2YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjgxNjhiOTQtY2FkOC00ZGFlLWEw
MGQtMDU3YWMzNTQxN2EzLzI4MTY4Yjk0LWNhZDgtNGRhZS1hMDBkLTA1N2FjMzU0
MTdhMy5jcmwwHwYDVR0jBBgwFoAUFh2BYtQZNgHN9Q6vk+u3mHq99YkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODE2OGI5NC1jYWQ4LTRkYWUtYTAwZC0wNTdh
YzM1NDE3YTMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQFQCfAAwQA
SAKzAwQCnjOkAwQCxv4cAwQCx0TcAwQCx1M4AwQDx3eQAwQD0FyoMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AAQGtIY1bKRPQKnQOgQkNCdSPlT+oTNZe5dJRhjg02mJdpG83RmsTsXTBVC1bvBi
rk0zWQVQTsdwU7gzx+P6f9e6l5x0i+3tA/289dUw8fMMj/sJZ1AfB6rQY8KRCbku
+NMtGueC6HP2tMXiEg8oylyLIXzzjwpvSkGaF+am3UHu6fA+T0Nv5B56aY0psMbp
oGOBNbRm1GNmGfAVuWrxDqQpeGk24ZQJxL0y7zrbtyrWSgniPbE2UfH4i2V2CLx0
rIYbcAk8mSJouUS+yHsnrPittOSprBqAS5vGcsIU/G2hV/2tsVlLGruw7M/AE5qw
H0nfdn8CrqSbZbYRSDfxZew=
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:14:58 2025 by rpki-client