Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/eed966e5-38e0-3f2b-b394-1ed398a6d48f.roa
File:                     eed966e5-38e0-3f2b-b394-1ed398a6d48f.roa (raw, json)
Hash identifier:          AKfuK/9opMYgFMVOmIOj7Ilao4PFwnalh5S91DWLEp8=
Subject key identifier:   C1:4D:22:A0:E2:91:17:71:03:5D:4A:DF:DC:31:D5:68:AB:79:D2:7F
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584A6C55C390E317F2BEABABD9C0
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/eed966e5-38e0-3f2b-b394-1ed398a6d48f.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     27539
IP address blocks:        64.68.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:c3:90:e3:17:f2:be:ab:ab:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=9d4657e9-8169-4980-9229-5ffc51858a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:45:7e:29:1a:f6:1c:a6:07:d5:ad:e2:40:35:
                    fc:14:da:4c:68:bb:6b:0a:b2:96:f2:e7:41:58:39:
                    b0:38:9a:28:16:0e:51:19:9e:1d:01:06:82:6d:c4:
                    b8:5e:86:b8:f9:4c:51:a3:46:8b:b9:af:d3:c5:50:
                    ed:e3:92:ce:c6:a0:82:52:99:b7:eb:e0:71:29:17:
                    c6:75:77:fd:5f:45:1d:fc:4e:39:f5:18:f3:9a:fd:
                    6b:24:c9:8d:34:fe:7c:5a:24:14:f8:aa:e9:52:40:
                    9a:df:89:8e:6c:a9:20:60:0c:68:a4:f2:11:fd:2c:
                    91:60:1d:b8:8b:c9:6c:3c:9b:60:82:2b:69:04:59:
                    e0:8e:a4:bf:d9:b0:19:4b:d2:d8:8b:73:a8:ea:39:
                    6e:1b:c1:b0:44:30:cd:6d:22:eb:d0:c3:f1:0c:4f:
                    42:54:4c:e1:86:ec:d6:72:15:d3:d6:57:fe:7b:2c:
                    4d:5a:a5:3d:f2:22:bf:45:44:34:32:74:96:a9:03:
                    8d:6d:ee:1b:c6:fd:f2:08:ba:2e:34:35:bd:3d:84:
                    f6:72:cf:0a:bf:7a:29:cf:ad:54:4b:b6:7a:50:31:
                    36:44:b4:e0:6f:a1:08:52:39:86:4a:99:f1:1d:2a:
                    ff:5b:5b:6d:44:16:24:0f:88:71:34:71:28:15:6e:
                    91:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4D:22:A0:E2:91:17:71:03:5D:4A:DF:DC:31:D5:68:AB:79:D2:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/eed966e5-38e0-3f2b-b394-1ed398a6d48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:79:f8:9d:08:0a:94:1f:83:04:bf:8b:bd:60:8e:10:f4:47:
         58:95:1b:86:23:6f:3d:ac:09:12:0d:9c:db:0b:73:4a:07:f0:
         4b:1d:f4:ef:90:2d:a8:59:0c:23:cf:8d:b4:8d:7f:e0:d3:0b:
         32:7e:3d:dd:1a:75:85:ce:92:28:0c:58:b8:2b:df:c7:39:82:
         0c:b2:3c:e2:7b:cf:1a:eb:39:52:b2:a2:51:5b:8c:89:c4:a4:
         b4:83:91:3e:fa:45:04:f4:1d:b0:74:a9:8b:61:19:44:70:18:
         f9:66:cc:be:92:c0:35:06:13:63:9e:d9:15:b9:35:e3:b2:7d:
         1f:1e:b2:b8:63:53:44:5b:8d:9a:ff:3f:2e:47:41:e8:10:87:
         a3:96:35:fa:88:cc:a9:3d:86:56:29:4d:96:e5:53:f4:1c:22:
         81:f1:c0:15:07:a5:cb:5b:d6:40:5f:d6:df:0c:91:19:4e:f9:
         67:6e:ea:d2:e5:7e:c8:f7:f7:f9:db:75:5e:26:f1:be:0b:4c:
         f9:ef:c5:1c:f0:56:5e:40:05:a2:88:9e:6b:19:47:24:56:0d:
         07:1b:f6:10:9a:be:c2:1c:f5:09:ba:eb:22:9a:08:db:6c:a2:
         f1:fc:17:29:e8:39:16:dd:0e:93:4e:96:5f:c8:0d:1e:b0:64:
         69:37:47:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVcOQ4xfyvqur2cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli
OWI2MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk
OWQ0NjU3ZTktODE2OS00OTgwLTkyMjktNWZmYzUxODU4YTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0V+KRr2HKYH1a3iQDX8FNpMaLtrCrKW8udB
WDmwOJooFg5RGZ4dAQaCbcS4Xoa4+UxRo0aLua/TxVDt45LOxqCCUpm36+BxKRfG
dXf9X0Ud/E459Rjzmv1rJMmNNP58WiQU+KrpUkCa34mObKkgYAxopPIR/SyRYB24
i8lsPJtggitpBFngjqS/2bAZS9LYi3Oo6jluG8GwRDDNbSLr0MPxDE9CVEzhhuzW
chXT1lf+eyxNWqU98iK/RUQ0MnSWqQONbe4bxv3yCLouNDW9PYT2cs8Kv3opz61U
S7Z6UDE2RLTgb6EIUjmGSpnxHSr/W1ttRBYkD4hxNHEoFW6RVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFNIqDikRdxA11K39wx1WiredJ/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh
NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvZWVkOTY2ZTUtMzhlMC0z
ZjJiLWIzOTQtMWVkMzk4YTZkNDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4
MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5
YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk
OGRjOWI5YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEQLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADF5+J0ICpQfgwS/i71gjhD0R1iVG4Yjbz2sCRINnNsLc0oH8Esd9O+Q
LahZDCPPjbSNf+DTCzJ+Pd0adYXOkigMWLgr38c5ggyyPOJ7zxrrOVKyolFbjInE
pLSDkT76RQT0HbB0qYthGURwGPlmzL6SwDUGE2Oe2RW5NeOyfR8esrhjU0RbjZr/
Py5HQegQh6OWNfqIzKk9hlYpTZblU/QcIoHxwBUHpctb1kBf1t8MkRlO+Wdu6tLl
fsj39/nbdV4m8b4LTPnvxRzwVl5ABaKInmsZRyRWDQcb9hCavsIc9Qm66yKaCNts
ovH8FynoORbdDpNOll/IDR6wZGk3R0c=
-----END CERTIFICATE-----
Generated at Thu Jul 31 02:46:51 2025 by rpki-client