Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa
File:                     e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa (raw, json)
Hash identifier:          5j0eSzaLO0ydIAyYhQwcNmQIX6cED3cKnM18zN6FcFM=
Subject key identifier:   EF:96:1B:83:22:63:E9:DB:E9:D6:2F:25:18:77:23:2A:B4:AB:F2:80
Certificate issuer:       /CN=1d2a01f1-a616-44d9-84b3-ada8470eabb9
Certificate serial:       010D0C9F4328584B1806DBECADC6427554CA4B20
Authority key identifier: 68:00:42:A6:53:C6:93:B8:A9:50:83:FB:A5:D4:6E:B9:33:FA:B7:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     398461
IP address blocks:        69.64.113.0/24 maxlen: 24
                          2602:fd47::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/1d2a01f1-a616-44d9-84b3-ada8470eabb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/1d2a01f1-a616-44d9-84b3-ada8470eabb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:db:ec:ad:c6:42:75:54:ca:4b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2a01f1-a616-44d9-84b3-ada8470eabb9
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=1809a120-e3e4-4e53-bf9c-9b2a80652501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:2d:c5:7e:1d:3d:a1:0c:2d:de:6d:43:2e:
                    c5:92:53:55:4f:31:d3:96:cb:d8:96:51:ad:1c:75:
                    09:3e:1a:9b:44:04:97:fe:3c:84:e4:3b:f2:8c:16:
                    52:dd:1f:b1:75:80:dd:05:59:2d:e1:c7:6f:45:26:
                    bb:a3:69:04:16:55:4c:f7:4e:78:b1:03:01:0e:92:
                    2d:61:99:5e:20:cd:78:22:bb:b5:8c:d1:d0:87:3d:
                    07:db:e7:0a:94:7c:2c:0e:2b:16:2a:bf:42:3b:60:
                    26:15:80:74:c2:a2:4a:78:59:db:b8:95:b2:36:ee:
                    dc:10:ca:62:f4:f6:b1:db:d1:71:3a:6d:be:99:8d:
                    f9:0c:75:72:50:f8:27:dd:e5:7a:46:a4:97:c9:9b:
                    a6:fb:d8:41:4c:ef:03:28:89:54:bf:29:d5:fd:ad:
                    34:4f:3a:94:7d:04:a8:1d:52:52:95:c4:be:f9:20:
                    07:42:fe:fc:91:83:09:5c:5b:ac:3b:5d:d0:ab:ed:
                    70:d4:dd:7a:aa:d3:43:9e:1f:cb:6e:21:55:a5:1c:
                    14:0f:60:1c:af:dd:de:2e:68:20:4b:71:43:af:76:
                    98:c3:4a:cd:bc:66:f5:3d:39:ef:ed:c2:4e:6a:a6:
                    e7:df:95:1c:74:e1:7a:fb:fd:e2:40:5c:b0:4f:b2:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:96:1B:83:22:63:E9:DB:E9:D6:2F:25:18:77:23:2A:B4:AB:F2:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/e5bbcf1b-bb80-3cf4-af0b-3a40c90b1c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9/1d2a01f1-a616-44d9-84b3-ada8470eabb9.crl

            X509v3 Authority Key Identifier:
                keyid:68:00:42:A6:53:C6:93:B8:A9:50:83:FB:A5:D4:6E:B9:33:FA:B7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d2a01f1-a616-44d9-84b3-ada8470eabb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.113.0/24
                IPv6:
                  2602:fd47::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:63:3e:70:f5:df:d5:af:44:5f:d5:54:e5:8a:4c:3f:d5:04:
         c1:39:fa:14:f1:8f:0f:25:4f:cf:7e:24:7f:e1:5d:b4:c5:e8:
         71:37:cf:ad:fd:08:5a:64:15:f6:d3:84:d4:9e:83:b4:9a:51:
         eb:9e:8a:00:eb:4c:f8:20:16:e5:49:8d:23:f8:0d:84:6f:88:
         cc:24:2f:ff:7b:7a:41:e2:30:17:63:b1:5b:63:c0:dd:b6:f9:
         11:e8:0b:f5:db:80:aa:be:2c:f4:0d:b5:a6:5b:33:f5:fd:ef:
         92:4f:fb:68:b6:87:ad:54:be:d5:be:b8:87:f7:57:4d:cf:4c:
         0b:98:a4:e0:80:c6:c5:0a:b3:8b:fe:4d:44:a0:5d:a6:73:e9:
         df:a4:d4:06:6b:5a:7f:81:d9:90:d7:84:ea:85:db:1b:19:05:
         4d:26:70:c1:86:e2:c5:39:d9:31:55:32:68:41:63:b6:56:0f:
         dc:cd:68:70:95:bc:50:ac:d5:4d:71:2b:1d:9f:4e:ae:02:ff:
         d6:b8:04:98:31:b2:f8:06:85:14:5b:43:03:a1:1c:ce:c0:8f:
         d6:eb:5d:2e:c3:ac:80:c7:06:71:9d:55:55:8e:71:6a:f0:4c:
         34:5e:3d:35:1a:af:3d:25:bb:10:aa:e7:f2:f4:82:9b:7e:23:
         b1:36:8d:11
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsYBtvsrcZCdVTKSyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyYTAxZjEtYTYxNi00NGQ5LTg0YjMtYWRhODQ3MGVh
YmI5MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MTgwOWExMjAtZTNlNC00ZTUzLWJmOWMtOWIyYTgwNjUyNTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo0txX4dPaEMLd5tQy7FklNVTzHTlsvYllGt
HHUJPhqbRASX/jyE5DvyjBZS3R+xdYDdBVkt4cdvRSa7o2kEFlVM9054sQMBDpIt
YZleIM14Iru1jNHQhz0H2+cKlHwsDisWKr9CO2AmFYB0wqJKeFnbuJWyNu7cEMpi
9Pax29FxOm2+mY35DHVyUPgn3eV6RqSXyZum+9hBTO8DKIlUvynV/a00TzqUfQSo
HVJSlcS++SAHQv78kYMJXFusO13Qq+1w1N16qtNDnh/LbiFVpRwUD2Acr93eLmgg
S3FDr3aYw0rNvGb1PTnv7cJOaqbn35UcdOF6+/3iQFywT7LSbwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFO+WG4MiY+nb6dYvJRh3Iyq0q/KAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDJh
MDFmMS1hNjE2LTQ0ZDktODRiMy1hZGE4NDcwZWFiYjkvZTViYmNmMWItYmI4MC0z
Y2Y0LWFmMGItM2E0MGM5MGIxYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQyYTAxZjEtYTYxNi00NGQ5LTg0
YjMtYWRhODQ3MGVhYmI5LzFkMmEwMWYxLWE2MTYtNDRkOS04NGIzLWFkYTg0NzBl
YWJiOS5jcmwwHwYDVR0jBBgwFoAUaABCplPGk7ipUIP7pdRuuTP6twAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDJhMDFmMS1hNjE2LTQ0ZDktODRiMy1hZGE4
NDcwZWFiYjkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQARUBxMA4E
AgACMAgDBgQmAv1HADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcYz5w9d/Vr0Rf1VTlikw/1QTBOfoU8Y8P
JU/PfiR/4V20xehxN8+t/QhaZBX204TUnoO0mlHrnooA60z4IBblSY0j+A2Eb4jM
JC//e3pB4jAXY7FbY8DdtvkR6Av124Cqviz0DbWmWzP1/e+ST/totoetVL7VvriH
91dNz0wLmKTggMbFCrOL/k1EoF2mc+nfpNQGa1p/gdmQ14TqhdsbGQVNJnDBhuLF
OdkxVTJoQWO2Vg/czWhwlbxQrNVNcSsdn06uAv/WuASYMbL4BoUUW0MDoRzOwI/W
610uw6yAxwZxnVVVjnFq8Ew0Xj01Gq89JbsQqufy9IKbfiOxNo0R
-----END CERTIFICATE-----
Generated at Sat Sep 20 07:15:03 2025 by rpki-client