Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/34f46494-911b-31c5-8c33-4d107bb4be88.roa
File:                     34f46494-911b-31c5-8c33-4d107bb4be88.roa (raw, json)
Hash identifier:          0Oz836HUV2FOxVpa6xQj3TX1+Hska8F6igHfLYigE3c=
Subject key identifier:   A7:68:18:99:22:6E:E9:58:7F:EC:C1:22:6A:3F:48:4D:72:05:20:91
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584B4AE60FCECCDB5FF632B64E80
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/34f46494-911b-31c5-8c33-4d107bb4be88.roa
Signing time:             Tue 23 Sep 2025 18:21:04 +0000
ROA not before:           Tue 23 Sep 2025 18:21:04 +0000
ROA not after:            Mon 22 Dec 2025 19:21:04 +0000
asID:                     0
IP address blocks:        209.63.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:e6:0f:ce:cc:db:5f:f6:32:b6:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Sep 23 18:21:04 2025 GMT
            Not After : Dec 22 19:21:04 2025 GMT
        Subject: CN=94b3124c-77d6-4928-8662-0aeceb15ee60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:f4:0f:53:ab:3f:cf:32:17:f1:9c:b9:2f:
                    77:0b:39:ff:d9:ff:4b:e8:95:6d:50:49:43:76:c4:
                    d0:3c:53:72:26:36:fa:e6:8b:72:74:b0:61:53:2f:
                    ef:e2:c2:a5:14:e1:ca:bc:87:2f:68:a4:08:c9:ec:
                    a3:d2:0b:be:97:12:ac:4c:70:45:71:bf:68:90:61:
                    d1:7b:2e:08:4b:e8:10:7e:a7:cd:2d:7c:de:bf:26:
                    9e:97:f6:cf:d3:8b:94:6d:00:e7:cb:5c:36:39:0c:
                    44:53:f2:9a:73:84:a0:15:c8:f4:ba:c0:7f:4e:87:
                    00:e8:0f:d9:08:29:d5:94:ad:eb:ee:8d:74:e5:c8:
                    94:4f:b6:5a:d0:63:89:e3:02:10:f6:8a:1f:3f:cb:
                    f5:ea:aa:00:e4:74:60:7e:a1:72:5e:fa:8e:6f:cf:
                    40:fd:ec:2f:4b:92:25:4d:cf:0d:a8:e4:71:21:2b:
                    16:c4:cc:1f:da:9d:69:78:64:6e:6d:b6:f1:12:47:
                    0e:e3:1d:12:43:99:97:67:05:92:22:5f:e7:06:e1:
                    82:19:f8:25:5d:9e:4a:a6:18:d8:c7:83:79:e2:b7:
                    f8:2e:63:0a:68:3f:d8:61:eb:e7:3c:c0:23:05:a7:
                    70:fa:54:b9:ab:49:89:d7:2f:03:c9:c8:2c:9a:52:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:68:18:99:22:6E:E9:58:7F:EC:C1:22:6A:3F:48:4D:72:05:20:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/34f46494-911b-31c5-8c33-4d107bb4be88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.63.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:db:19:5d:5f:83:fe:09:f0:55:1a:82:bf:aa:6b:fb:ee:b3:
         04:f6:ef:89:a8:63:4d:c7:6e:db:68:3b:bc:61:03:78:c1:1f:
         6c:32:cf:09:2a:c3:02:50:e3:ad:9d:32:f8:ae:94:ac:ce:71:
         e5:2a:4d:0f:2f:46:2f:82:6c:17:f7:e9:47:ac:1e:e5:67:dc:
         11:cc:c8:d8:75:6e:31:c0:61:03:94:af:fc:72:e5:f1:22:9c:
         ba:53:95:af:df:6a:fd:ea:b9:41:20:7d:8c:3f:2e:3d:07:63:
         0b:3a:fd:82:b4:82:1c:67:85:1e:8e:fe:11:96:b6:d7:9b:ba:
         a2:b7:20:cb:9d:fb:ac:83:89:eb:ae:b8:3c:db:83:54:9e:e7:
         ed:3d:ac:6a:69:cb:f0:04:9d:ac:3a:4a:b8:0b:73:bf:9d:97:
         cd:24:7b:b2:b2:40:26:de:e3:52:f9:44:e8:7a:db:1f:f3:34:
         d6:89:8a:fb:f1:55:1c:6d:c0:3b:9e:1b:6d:b0:f9:87:d6:5c:
         2c:08:a2:e0:ea:79:47:32:de:72:a6:97:ee:83:89:43:81:8d:
         37:2d:43:60:6d:bb:f6:26:6c:d2:9c:e7:5c:0a:c5:f0:3e:53:
         89:e8:c6:5e:3a:9d:3d:9c:16:dc:ee:08:7e:ad:a8:2c:4f:81:
         97:d6:18:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtK5g/OzNtf9jK2ToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk2ODY5MDAtZjIwMS00YjJjLWExYzctYWZiNzI1YWJl
NDdmMB4XDTI1MDkyMzE4MjEwNFoXDTI1MTIyMjE5MjEwNFowLzEtMCsGA1UEAxMk
OTRiMzEyNGMtNzdkNi00OTI4LTg2NjItMGFlY2ViMTVlZTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3/0D1OrP88yF/GcuS93Czn/2f9L6JVtUElD
dsTQPFNyJjb65otydLBhUy/v4sKlFOHKvIcvaKQIyeyj0gu+lxKsTHBFcb9okGHR
ey4IS+gQfqfNLXzevyael/bP04uUbQDny1w2OQxEU/Kac4SgFcj0usB/TocA6A/Z
CCnVlK3r7o105ciUT7Za0GOJ4wIQ9oofP8v16qoA5HRgfqFyXvqOb89A/ewvS5Il
Tc8NqORxISsWxMwf2p1peGRubbbxEkcO4x0SQ5mXZwWSIl/nBuGCGfglXZ5KphjY
x4N54rf4LmMKaD/YYevnPMAjBadw+lS5q0mJ1y8DycgsmlLuCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdoGJkibulYf+zBImo/SE1yBSCRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTY4
NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVhYmU0N2YvMzRmNDY0OTQtOTExYi0z
MWM1LThjMzMtNGQxMDdiYjRiZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjk2ODY5MDAtZjIwMS00YjJjLWEx
YzctYWZiNzI1YWJlNDdmLzY5Njg2OTAwLWYyMDEtNGIyYy1hMWM3LWFmYjcyNWFi
ZTQ3Zi5jcmwwHwYDVR0jBBgwFoAURs2354epIDJb5uOqVlhZzABXhPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3
MjVhYmU0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0T8NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfbGV1fg/4J8FUagr+qa/vuswT274moY03HbttoO7xhA3jBH2wyzwkq
wwJQ462dMviulKzOceUqTQ8vRi+CbBf36UesHuVn3BHMyNh1bjHAYQOUr/xy5fEi
nLpTla/fav3quUEgfYw/Lj0HYws6/YK0ghxnhR6O/hGWttebuqK3IMud+6yDieuu
uDzbg1Se5+09rGppy/AEnaw6SrgLc7+dl80ke7KyQCbe41L5ROh62x/zNNaJivvx
VRxtwDueG22w+YfWXCwIouDqeUcy3nKml+6DiUOBjTctQ2Btu/YmbNKc51wKxfA+
U4noxl46nT2cFtzuCH6tqCxPgZfWGNc=
-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:21 2025 by rpki-client