Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/6a979d4f-d85c-3b15-966d-2651bd274e81.roa
File:                     6a979d4f-d85c-3b15-966d-2651bd274e81.roa (raw, json)
Hash identifier:          Eucqrt7y89bdKyAkpKLABHfzuaI1ZEFU+yZsNH7cdf0=
Subject key identifier:   AD:2E:1A:EE:99:61:AA:E1:F3:D1:21:3B:56:7B:AF:A3:2E:F2:55:91
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584A963698AF33F8B7FB50F9E660
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/6a979d4f-d85c-3b15-966d-2651bd274e81.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     174
IP address blocks:        65.168.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:98:af:33:f8:b7:fb:50:f9:e6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=ed05615d-7d67-4086-9c67-ffc87655225e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:8d:8a:88:47:46:56:03:d9:e7:9a:d0:73:
                    d9:80:df:2e:cf:0b:f3:cd:6f:6b:ac:17:00:ec:6a:
                    f8:ea:e3:a4:f5:a3:1a:d2:f4:90:3b:36:d2:85:53:
                    3e:f1:ab:69:93:2b:9e:94:b4:53:83:82:b4:4b:67:
                    7f:8c:2c:bc:f3:42:ac:79:b7:bb:9b:73:45:1c:cc:
                    a3:84:5f:01:af:f0:3c:98:d6:22:a4:90:57:b6:36:
                    4b:80:aa:9f:92:58:3d:d2:e6:b8:16:52:05:02:4b:
                    1a:9c:b1:08:ce:aa:e0:d2:0c:1c:2d:3e:17:ca:67:
                    99:21:f2:f1:4b:96:68:ea:3c:84:90:54:15:3b:db:
                    b1:08:8e:0c:19:94:4a:a5:40:4c:cb:7b:f1:b7:64:
                    85:95:8e:3c:28:71:48:93:31:7f:cc:aa:ba:32:1b:
                    ab:59:da:90:e6:1d:b1:45:32:17:cb:5d:11:fa:d5:
                    69:3d:95:56:b0:7c:4e:f5:b5:67:e2:87:9d:1e:b5:
                    92:0b:62:a3:78:15:9a:87:e9:c7:a6:80:0f:ab:67:
                    90:06:4b:0e:2d:7c:b3:f0:67:8d:45:58:c0:95:a4:
                    04:f7:da:e2:69:9e:42:5e:91:5d:e7:7f:78:95:04:
                    97:10:ec:a6:71:e2:5a:08:77:af:aa:b4:a8:25:8e:
                    f7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2E:1A:EE:99:61:AA:E1:F3:D1:21:3B:56:7B:AF:A3:2E:F2:55:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/6a979d4f-d85c-3b15-966d-2651bd274e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.168.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:93:0c:86:12:e9:6a:5a:ea:aa:b6:96:7b:b1:a6:43:fe:c3:
         08:50:60:ed:99:7e:b8:61:0f:12:b6:b4:bb:13:8b:c5:35:39:
         be:60:d5:2c:32:9d:8d:ed:f8:49:eb:29:97:de:0b:d1:97:6c:
         b5:69:e0:05:3d:5e:44:d2:2e:00:4d:85:14:31:67:fa:7e:2e:
         1b:ab:91:56:01:27:89:48:34:0f:b5:cb:cb:a0:3f:62:b1:ed:
         8a:82:63:a0:14:e0:e9:3c:e0:5b:55:be:c1:f6:1e:c9:a8:47:
         c7:61:b4:7c:e0:2c:2e:a9:cc:6e:eb:8a:2f:75:b4:03:73:9b:
         e0:50:7c:35:83:8a:e5:43:a6:47:45:32:eb:60:18:92:8d:c7:
         e3:6c:29:5d:fb:52:b3:78:40:93:35:fa:95:a4:42:7b:ed:87:
         93:17:4c:ea:2b:6f:d6:87:37:f6:b5:ca:8a:62:19:b3:2c:54:
         d7:2d:99:d5:21:68:7b:74:25:dd:14:1b:52:9e:92:32:15:89:
         50:5b:fc:10:80:33:76:a0:ef:1a:bc:5f:3c:69:92:53:53:ac:
         11:04:a6:b2:03:99:df:5d:b2:82:e6:90:23:d7:3a:ea:72:38:
         a0:d1:30:93:f4:74:8f:87:70:78:91:14:2a:59:10:c7:77:a1:
         de:92:df:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpivM/i3+1D55mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
ZWQwNTYxNWQtN2Q2Ny00MDg2LTljNjctZmZjODc2NTUyMjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV+NiohHRlYD2eea0HPZgN8uzwvzzW9rrBcA
7Gr46uOk9aMa0vSQOzbShVM+8atpkyuelLRTg4K0S2d/jCy880Ksebe7m3NFHMyj
hF8Br/A8mNYipJBXtjZLgKqfklg90ua4FlIFAksanLEIzqrg0gwcLT4XymeZIfLx
S5Zo6jyEkFQVO9uxCI4MGZRKpUBMy3vxt2SFlY48KHFIkzF/zKq6MhurWdqQ5h2x
RTIXy10R+tVpPZVWsHxO9bVn4oedHrWSC2KjeBWah+nHpoAPq2eQBksOLXyz8GeN
RVjAlaQE99riaZ5CXpFd5394lQSXEOymceJaCHevqrSoJY73JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0uGu6ZYarh89EhO1Z7r6Mu8lWRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvNmE5NzlkNGYtZDg1Yy0z
YjE1LTk2NmQtMjY1MWJkMjc0ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQagQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWTDIYS6Wpa6qq2lnuxpkP+wwhQYO2ZfrhhDxK2tLsTi8U1Ob5g1Swy
nY3t+EnrKZfeC9GXbLVp4AU9XkTSLgBNhRQxZ/p+LhurkVYBJ4lINA+1y8ugP2Kx
7YqCY6AU4Ok84FtVvsH2HsmoR8dhtHzgLC6pzG7rii91tANzm+BQfDWDiuVDpkdF
MutgGJKNx+NsKV37UrN4QJM1+pWkQnvth5MXTOorb9aHN/a1yopiGbMsVNctmdUh
aHt0Jd0UG1KekjIViVBb/BCAM3ag7xq8XzxpklNTrBEEprIDmd9dsoLmkCPXOupy
OKDRMJP0dI+HcHiRFCpZEMd3od6S34s=
-----END CERTIFICATE-----
Generated at Thu Jul 31 02:56:05 2025 by rpki-client