Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/064a5c52-51e9-3a09-8b2c-8d86e42bdb8d.roa
File:                     064a5c52-51e9-3a09-8b2c-8d86e42bdb8d.roa (raw, json)
Hash identifier:          9NgYgun5jnZ5WVFPAX2tCuM1BoERFsHrOKOlS+0e8yg=
Subject key identifier:   BE:80:A6:39:FA:6D:90:61:E9:11:57:4E:B8:F4:44:54:37:D6:92:BE
Certificate issuer:       /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial:       010D0C9F4328584A6F207C7D38342FA71BADEB00
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/064a5c52-51e9-3a09-8b2c-8d86e42bdb8d.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     2055
IP address blocks:        76.165.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7c:7d:38:34:2f:a7:1b:ad:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=53701d20-221b-4407-b138-8d0a3da1bc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b7:3c:39:3e:d5:1d:20:9c:c4:f8:a3:e5:fa:
                    e4:0d:32:ce:4a:6c:e8:36:7f:c7:fa:07:70:5d:92:
                    ee:06:f6:3f:13:28:9d:ac:d3:25:24:81:8e:e1:e7:
                    42:f8:7c:3d:0d:a8:fc:4d:e8:61:46:93:db:01:e0:
                    e5:7f:83:ba:df:39:ed:13:d6:ed:ba:d2:fd:d8:d4:
                    74:24:2a:fc:56:83:26:c5:79:3d:07:03:95:e6:9f:
                    e8:0d:fb:5a:8a:08:3e:fa:7b:81:c1:81:bd:48:25:
                    a8:99:7a:e2:46:86:49:b2:58:bd:63:b7:14:7d:2d:
                    3f:1a:47:69:9d:3c:22:e9:fb:5c:25:c9:f6:f8:3d:
                    3b:6f:74:05:44:49:77:07:22:48:6a:42:1d:22:dc:
                    f1:c4:d9:19:80:a7:c4:5c:54:96:f5:f2:8a:32:ae:
                    47:69:c1:42:16:92:42:67:8a:43:02:d0:41:7c:2e:
                    b1:97:a5:f7:e0:b4:be:91:9d:9b:19:44:c6:97:cc:
                    77:bd:22:3a:8b:90:c2:77:01:54:c2:e7:25:da:90:
                    1d:92:1c:24:8c:9e:a6:e9:34:6f:6a:73:a1:ef:4c:
                    0a:e6:8d:d9:d4:6b:68:3b:e2:c0:f6:c0:e8:a9:3c:
                    5a:5d:88:5f:1e:c1:75:1b:4d:f3:1c:f8:28:71:9d:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:80:A6:39:FA:6D:90:61:E9:11:57:4E:B8:F4:44:54:37:D6:92:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/064a5c52-51e9-3a09-8b2c-8d86e42bdb8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl

            X509v3 Authority Key Identifier:
                keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.165.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d3:f8:7c:27:9a:00:55:7a:85:ae:fb:f8:b1:35:88:0e:1e:
         07:b1:f4:66:82:ae:19:54:de:90:e3:bf:43:bc:48:0d:01:9f:
         5e:a6:d0:40:af:99:5a:cc:ba:ec:0b:84:dc:15:dc:a5:f1:e1:
         33:f6:81:90:ec:80:c6:fa:05:2c:47:02:76:bd:9c:48:ac:0b:
         5b:c8:c7:71:2e:b4:12:9c:6a:06:c2:b4:d9:56:d5:89:6c:5b:
         9b:df:10:c9:07:ac:b0:51:ae:f8:0f:af:aa:31:e7:1e:38:83:
         51:42:6d:e1:73:c4:ab:c2:71:6a:98:f7:96:23:b9:ed:01:7b:
         c0:94:5c:a8:19:12:f1:6e:85:7b:4c:3b:40:18:56:1b:69:20:
         2d:8a:a0:76:38:95:06:7a:b8:58:57:f1:30:d8:97:cd:91:91:
         7b:22:3a:3e:75:84:c2:60:93:88:17:1a:ab:ed:32:97:ae:34:
         8f:8e:8a:c1:bf:7c:4f:9c:2f:89:b2:74:be:7e:c9:0e:af:6a:
         01:cf:5c:e2:60:a7:a3:5b:91:f4:78:92:39:f3:16:fd:d3:60:
         8f:e3:39:92:ba:2e:72:95:ea:b5:27:7b:70:a6:ee:51:81:b5:
         aa:c0:f6:1d:55:f8:1e:30:d4:06:46:c6:81:05:fa:ec:80:d9:
         99:95:05:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIHx9ODQvpxut6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiNTMwNjctNDQ5My00N2FiLWJjZjItN2ZhOWFkNDY1
NzljMB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk
NTM3MDFkMjAtMjIxYi00NDA3LWIxMzgtOGQwYTNkYTFiYzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Lc8OT7VHSCcxPij5frkDTLOSmzoNn/H+gdw
XZLuBvY/EyidrNMlJIGO4edC+Hw9Daj8TehhRpPbAeDlf4O63zntE9btutL92NR0
JCr8VoMmxXk9BwOV5p/oDftaigg++nuBwYG9SCWomXriRoZJsli9Y7cUfS0/Gkdp
nTwi6ftcJcn2+D07b3QFREl3ByJIakIdItzxxNkZgKfEXFSW9fKKMq5HacFCFpJC
Z4pDAtBBfC6xl6X34LS+kZ2bGUTGl8x3vSI6i5DCdwFUwucl2pAdkhwkjJ6m6TRv
anOh70wK5o3Z1GtoO+LA9sDoqTxaXYhfHsF1G03zHPgocZ3T+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6Apjn6bZBh6RFXTrj0RFQ31pK+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YWI1
MzA2Ny00NDkzLTQ3YWItYmNmMi03ZmE5YWQ0NjU3OWMvMDY0YTVjNTItNTFlOS0z
YTA5LThiMmMtOGQ4NmU0MmJkYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGFiNTMwNjctNDQ5My00N2FiLWJj
ZjItN2ZhOWFkNDY1NzljLzRhYjUzMDY3LTQ0OTMtNDdhYi1iY2YyLTdmYTlhZDQ2
NTc5Yy5jcmwwHwYDVR0jBBgwFoAUrv1uP9auMbIMbnvGOKUvOihTS8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YWI1MzA2Ny00NDkzLTQ3YWItYmNmMi03ZmE5
YWQ0NjU3OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTKXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvT+HwnmgBVeoWu+/ixNYgOHgex9GaCrhlU3pDjv0O8SA0Bn16m0ECv
mVrMuuwLhNwV3KXx4TP2gZDsgMb6BSxHAna9nEisC1vIx3EutBKcagbCtNlW1Yls
W5vfEMkHrLBRrvgPr6ox5x44g1FCbeFzxKvCcWqY95Yjue0Be8CUXKgZEvFuhXtM
O0AYVhtpIC2KoHY4lQZ6uFhX8TDYl82RkXsiOj51hMJgk4gXGqvtMpeuNI+OisG/
fE+cL4mydL5+yQ6vagHPXOJgp6NbkfR4kjnzFv3TYI/jOZK6LnKV6rUne3Cm7lGB
tarA9h1V+B4w1AZGxoEF+uyA2ZmVBck=
-----END CERTIFICATE-----
Generated at Mon Jul 7 13:09:23 2025 by rpki-client