Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa
File:                     2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa (raw, json)
Hash identifier:          IuCoO8gR0vRFcROQv8WuNVMS/VqIVteVIrnhXKXaL9A=
Subject key identifier:   11:60:87:ED:D3:4A:A6:40:16:E8:B8:74:CB:9D:DA:9B:A3:4C:48:C1
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584B0A115C481AA2FBC1DCCD1B20
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     13414
IP address blocks:        64.63.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5c:48:1a:a2:fb:c1:dc:cd:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=11ac857f-2063-4640-8414-063ab1b6d239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:da:f7:9f:bb:55:3b:92:95:65:2d:47:bd:
                    91:0c:17:50:ac:18:ce:03:ef:8e:89:ca:7f:82:d9:
                    59:2a:b5:19:f6:79:ac:ec:67:77:e1:d4:15:88:70:
                    f6:cf:c6:70:18:a2:d2:08:f3:f5:73:7e:ca:f0:da:
                    b9:45:b5:1c:cb:ba:aa:75:72:79:21:99:03:7e:58:
                    27:da:30:2e:7d:d3:a4:43:b2:30:8d:d7:b5:a8:d0:
                    c4:ff:84:86:e3:7b:91:ca:4b:ae:35:b9:74:e1:4c:
                    01:ed:d4:93:69:70:87:ad:59:f5:90:91:fb:43:4e:
                    d9:49:24:0a:e6:5a:cb:c2:94:cb:ce:80:05:0f:8a:
                    a6:86:6f:e1:83:b3:bc:08:ee:72:8b:7e:2e:47:02:
                    fe:5b:57:4e:33:47:8e:ac:f2:bc:c6:1c:5b:ec:5f:
                    a2:3a:cd:c8:59:eb:68:67:74:63:ec:8f:98:6f:04:
                    de:05:d7:22:83:15:77:e4:b3:bc:b1:97:bc:e5:44:
                    d1:ad:49:56:2a:67:fa:11:e1:20:3b:2b:0d:6a:a6:
                    36:43:c1:ba:9d:40:de:fd:80:75:70:69:eb:20:2e:
                    90:d1:1a:ab:cd:4f:80:63:74:3e:bf:03:07:e4:20:
                    3a:6f:be:d3:d6:4f:e2:1c:3e:82:40:42:04:61:fb:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:60:87:ED:D3:4A:A6:40:16:E8:B8:74:CB:9D:DA:9B:A3:4C:48:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ed:42:3d:8a:dc:64:df:30:f5:dc:54:58:4b:a0:2f:aa:36:
         58:ec:09:d8:b8:91:00:c1:2b:a3:b2:bf:93:57:0b:72:5e:9b:
         9e:68:91:99:31:16:0d:67:0e:de:1b:f3:1b:e4:bd:a8:57:66:
         fd:7a:48:ba:8b:11:36:08:4b:8d:83:f0:06:71:77:4f:b3:2f:
         b4:13:2f:70:b3:f5:96:db:e6:34:5f:6a:3a:e3:b9:6a:dc:64:
         98:f0:b7:39:b5:71:fe:68:e8:00:b3:a3:6b:c2:1e:3f:73:8a:
         a1:6c:4a:51:b5:cf:ed:d8:46:6d:1a:08:76:c2:14:94:c1:21:
         77:24:b4:9d:71:e4:57:06:b9:ba:b4:9a:3c:56:16:ca:b7:b1:
         7d:0d:14:ce:42:86:6e:97:57:bc:e7:75:16:0d:71:36:a3:11:
         84:7b:83:4b:33:c7:24:e3:41:a6:bb:54:7d:27:e8:73:c5:d3:
         5e:3e:8f:66:87:5d:66:bb:5d:b3:d9:7f:ae:f5:4f:2c:70:b5:
         4d:30:65:fe:1b:9a:01:da:4d:13:8b:a4:54:2e:8a:f9:f6:67:
         af:33:57:62:8a:44:7f:36:7d:0a:e7:a4:dc:56:d3:65:46:dd:
         03:52:44:f8:56:21:53:dd:82:f2:86:43:0a:72:9c:62:0e:d0:
         ac:63:5e:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEVxIGqL7wdzNGyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
MTFhYzg1N2YtMjA2My00NjQwLTg0MTQtMDYzYWIxYjZkMjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP7a95+7VTuSlWUtR72RDBdQrBjOA++Oicp/
gtlZKrUZ9nms7Gd34dQViHD2z8ZwGKLSCPP1c37K8Nq5RbUcy7qqdXJ5IZkDflgn
2jAufdOkQ7Iwjde1qNDE/4SG43uRykuuNbl04UwB7dSTaXCHrVn1kJH7Q07ZSSQK
5lrLwpTLzoAFD4qmhm/hg7O8CO5yi34uRwL+W1dOM0eOrPK8xhxb7F+iOs3IWeto
Z3Rj7I+YbwTeBdcigxV35LO8sZe85UTRrUlWKmf6EeEgOysNaqY2Q8G6nUDe/YB1
cGnrIC6Q0RqrzU+AY3Q+vwMH5CA6b77T1k/iHD6CQEIEYfsmOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFgh+3TSqZAFui4dMud2pujTEjBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMjk5NmE3NTgtODI2Zi0z
OWNkLTlhMDgtOGZmZjNiZGZkNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD85MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHtQj2K3GTfMPXcVFhLoC+qNljsCdi4kQDBK6Oyv5NXC3Jem55okZkx
Fg1nDt4b8xvkvahXZv16SLqLETYIS42D8AZxd0+zL7QTL3Cz9Zbb5jRfajrjuWrc
ZJjwtzm1cf5o6ACzo2vCHj9ziqFsSlG1z+3YRm0aCHbCFJTBIXcktJ1x5FcGubq0
mjxWFsq3sX0NFM5Chm6XV7zndRYNcTajEYR7g0szxyTjQaa7VH0n6HPF014+j2aH
XWa7XbPZf671TyxwtU0wZf4bmgHaTROLpFQuivn2Z68zV2KKRH82fQrnpNxW02VG
3QNSRPhWIVPdgvKGQwpynGIO0KxjXgY=
-----END CERTIFICATE-----
Generated at Sun Sep 7 21:34:35 2025 by rpki-client