Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/3871d5bb-09ec-39bf-8586-6aa9fc9257c7.roa
File:                     3871d5bb-09ec-39bf-8586-6aa9fc9257c7.roa (raw, json)
Hash identifier:          4K+YfLRB5iBYLCA/Lep8egLAXM4vEIaqf58qcozFFhU=
Subject key identifier:   6D:7D:00:73:72:BC:64:F4:5C:38:A9:54:77:25:C4:F8:41:4E:70:32
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584A6DBB517C1D33A6B53632BB00
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/3871d5bb-09ec-39bf-8586-6aa9fc9257c7.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396185
IP address blocks:        64.178.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:51:7c:1d:33:a6:b5:36:32:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=50899e1a-1d57-48a4-a589-58d9e1114d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:8d:1d:0d:39:56:7d:73:57:76:e2:d0:d1:
                    0f:44:f6:76:4d:b4:64:3d:c0:b1:05:b0:71:1c:be:
                    5e:f0:45:cf:92:8b:39:9e:bf:b6:b9:14:25:4e:47:
                    aa:bf:c7:27:ab:82:6f:e2:d2:38:cb:23:b3:d4:d4:
                    39:a8:7f:a8:9d:31:19:ec:9b:31:96:7f:ee:21:d0:
                    3d:5f:0e:78:ad:cc:88:7b:80:29:cf:bd:37:0b:25:
                    2f:1f:d0:1e:86:0c:ae:89:f1:37:e9:b2:34:5a:b0:
                    c1:01:fd:93:83:a8:f7:61:d0:a1:19:fe:49:9e:bb:
                    4d:94:5a:47:c6:4d:b6:fa:5a:f6:9d:e6:9c:8f:61:
                    12:11:e9:e4:2c:ab:df:e8:13:5c:3a:ba:78:f3:4d:
                    2a:a2:59:b1:b5:de:78:9e:ff:53:47:31:0d:17:65:
                    6b:88:c0:2a:8a:5b:93:dd:2c:d1:fc:b0:97:88:50:
                    ec:40:8b:aa:db:32:92:34:a1:ca:c5:c3:c3:dd:2a:
                    cc:f6:c0:a6:a3:a7:6e:a6:df:e9:be:30:d5:ec:a2:
                    a4:6a:ee:06:82:c4:71:6b:96:18:ae:d8:d7:38:5e:
                    4a:54:5e:88:6c:0d:9a:49:67:75:1e:92:28:ae:80:
                    2f:5f:f6:a8:df:7e:fb:9b:20:d2:16:a6:b2:a2:89:
                    f4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7D:00:73:72:BC:64:F4:5C:38:A9:54:77:25:C4:F8:41:4E:70:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/3871d5bb-09ec-39bf-8586-6aa9fc9257c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.178.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5c:bb:9b:61:d3:4b:bb:fb:d9:18:74:3d:98:9a:31:a1:c9:
         40:c7:77:0d:7b:79:af:7c:8b:fc:63:96:0a:ac:3a:77:f0:c9:
         15:0d:3d:73:7e:21:91:e6:ee:83:98:f9:e5:87:2b:b3:3d:52:
         c7:ab:c1:87:3a:f5:05:3d:2b:46:1f:ee:f9:1b:d5:b4:fc:3c:
         09:39:a6:6e:d2:9f:16:10:0f:a8:b3:b1:d9:42:ec:c7:bd:c2:
         dd:ed:cd:06:71:d4:b7:2f:49:3f:1d:64:29:15:a2:7e:e6:c5:
         44:c1:0b:27:bc:3a:27:04:b3:19:14:9a:e1:a1:9a:6f:1d:7f:
         06:d0:e9:b3:46:ae:d3:f6:b7:ec:aa:43:c1:f1:69:3b:88:68:
         f6:d0:df:4b:03:28:54:0c:34:04:64:57:b2:d5:9f:0d:c1:3c:
         32:54:50:f4:4f:67:32:5a:b3:e9:2b:5e:24:a5:ec:93:c3:2d:
         4b:c8:36:c9:c1:0d:d5:f6:2a:9b:15:ee:f7:c3:3d:a6:12:46:
         e7:4c:b5:82:ee:16:31:29:4e:c0:76:b2:fd:80:bb:49:21:39:
         0d:c8:24:b8:08:80:04:2a:b5:06:cf:db:1c:90:59:6b:1c:d4:
         b9:03:f3:6e:5c:55:36:2f:0d:10:a3:01:58:c5:b3:7a:c4:61:
         7c:4a:8e:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1F8HTOmtTYyuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm
YTExMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
NTA4OTllMWEtMWQ1Ny00OGE0LWE1ODktNThkOWUxMTE0ZDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2SNHQ05Vn1zV3bi0NEPRPZ2TbRkPcCxBbBx
HL5e8EXPkos5nr+2uRQlTkeqv8cnq4Jv4tI4yyOz1NQ5qH+onTEZ7Jsxln/uIdA9
Xw54rcyIe4Apz703CyUvH9AehgyuifE36bI0WrDBAf2Tg6j3YdChGf5JnrtNlFpH
xk22+lr2neacj2ESEenkLKvf6BNcOrp4800qolmxtd54nv9TRzENF2VriMAqiluT
3SzR/LCXiFDsQIuq2zKSNKHKxcPD3SrM9sCmo6dupt/pvjDV7KKkau4GgsRxa5YY
rtjXOF5KVF6IbA2aSWd1HpIoroAvX/ao3377myDSFqayoon0ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG19AHNyvGT0XDipVHclxPhBTnAyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw
ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMzg3MWQ1YmItMDllYy0z
OWJmLTg1ODYtNmFhOWZjOTI1N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1
YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk
ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5
NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLLmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdcu5th00u7+9kYdD2YmjGhyUDHdw17ea98i/xjlgqsOnfwyRUNPXN+
IZHm7oOY+eWHK7M9UserwYc69QU9K0Yf7vkb1bT8PAk5pm7SnxYQD6izsdlC7Me9
wt3tzQZx1LcvST8dZCkVon7mxUTBCye8OicEsxkUmuGhmm8dfwbQ6bNGrtP2t+yq
Q8HxaTuIaPbQ30sDKFQMNARkV7LVnw3BPDJUUPRPZzJas+krXiSl7JPDLUvINsnB
DdX2KpsV7vfDPaYSRudMtYLuFjEpTsB2sv2Au0khOQ3IJLgIgAQqtQbP2xyQWWsc
1LkD825cVTYvDRCjAVjFs3rEYXxKjk8=
-----END CERTIFICATE-----
Generated at Sun Jul 13 12:23:32 2025 by rpki-client