Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/9bf85187-a45e-3962-8697-1db7dbb2477a.roa
File:                     9bf85187-a45e-3962-8697-1db7dbb2477a.roa (raw, json)
Hash identifier:          s837Kjml7E1W1B7KeIXixiX1vkzAtCh/6yzCm6+n99U=
Subject key identifier:   62:16:0E:01:BE:C5:EA:38:6C:B4:13:A7:07:72:B5:13:36:30:03:44
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F43285849D594ED5968CB2C6155EFE1B0
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/9bf85187-a45e-3962-8697-1db7dbb2477a.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     3257
IP address blocks:        64.112.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ed:59:68:cb:2c:61:55:ef:e1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=194a1624-7931-493b-879a-5cff43420e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:04:e4:b3:d9:85:22:8d:32:eb:dd:e9:84:
                    0e:e5:b3:59:ff:7f:40:f2:1c:e5:54:da:01:e0:b7:
                    8f:34:43:f5:1c:17:fb:a1:7f:f4:47:0c:23:fb:a3:
                    91:1b:23:03:ec:fa:ab:6d:99:27:8e:e2:a3:f6:cf:
                    b1:38:c3:f4:44:9b:37:4f:6c:57:99:d6:59:c9:e8:
                    c3:93:d4:73:a5:7f:4d:73:0f:ce:84:54:85:e1:85:
                    f2:0b:5a:c7:53:b9:6b:d3:01:6a:f4:47:c0:7b:94:
                    a6:0a:17:03:b6:57:d1:a2:f5:76:9b:79:c6:45:e4:
                    6b:25:3a:26:bd:ef:38:a0:39:78:da:77:04:44:b3:
                    cd:cf:16:62:d9:d0:55:da:5f:be:a2:52:66:1c:3b:
                    c7:38:38:c6:df:f8:d3:b6:32:ac:25:2f:5b:00:2f:
                    e6:53:87:5b:6a:8f:5c:33:79:4a:70:dc:02:e4:28:
                    d6:e6:bd:6e:f3:28:e1:70:99:9e:6c:d5:43:09:6d:
                    0c:1e:a7:b7:f1:8a:45:2e:7d:f8:18:9e:a8:bf:83:
                    86:1e:e0:a1:0a:c4:76:28:a9:7a:bf:bb:02:66:46:
                    ea:2b:56:68:ae:27:b7:27:2b:d5:72:e6:8a:d2:2b:
                    f1:f2:0f:41:df:59:b8:d1:41:3d:68:eb:7b:09:08:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:16:0E:01:BE:C5:EA:38:6C:B4:13:A7:07:72:B5:13:36:30:03:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/9bf85187-a45e-3962-8697-1db7dbb2477a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:2f:1b:d0:43:69:fb:1a:4f:f0:45:48:e5:1a:83:c7:d6:6b:
         bb:c7:87:ff:f2:00:33:2d:e0:ec:6d:4b:d0:45:59:16:c6:5c:
         4b:0a:ba:72:12:75:01:33:c9:7a:0f:a9:3b:02:53:8b:c2:89:
         a0:83:9f:50:42:f9:63:ce:27:a3:f7:29:10:02:6e:96:a6:26:
         ad:b7:16:3c:ac:c8:63:8e:6c:ef:db:96:73:42:bd:e3:c7:1d:
         93:b4:c2:d3:0a:98:09:11:38:6d:56:9f:c7:e2:4d:50:b6:3f:
         e9:74:5e:7f:de:09:9a:c3:19:04:af:8f:f3:62:bb:7d:9f:25:
         79:f0:31:2d:0e:86:8e:20:be:a9:24:21:28:87:c3:50:27:9c:
         b8:b4:ed:4d:08:8b:67:98:5f:b9:98:23:61:03:ef:6f:73:f9:
         f8:45:01:9c:33:ff:40:73:17:35:8e:33:13:52:cb:11:84:39:
         78:59:1f:46:93:0d:c4:25:df:fd:93:9d:68:02:08:bd:e0:43:
         ef:25:4b:ac:38:02:ea:4a:cb:35:ff:21:6e:b4:8b:53:a6:1f:
         d9:8d:8a:07:37:76:01:7f:ac:f3:8a:91:2f:5b:68:3f:dc:d4:
         05:f1:59:37:5b:9e:2c:a7:8e:75:e8:9e:eb:3b:c2:9c:dc:54:
         80:6b:20:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlO1ZaMssYVXv4bAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc4MDRkZWMtZmQwMC00MjZmLWJiYTQtMDM4ZDliNzUz
ZmM1MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
MTk0YTE2MjQtNzkzMS00OTNiLTg3OWEtNWNmZjQzNDIwZTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyIE5LPZhSKNMuvd6YQO5bNZ/39A8hzlVNoB
4LePNEP1HBf7oX/0Rwwj+6ORGyMD7PqrbZknjuKj9s+xOMP0RJs3T2xXmdZZyejD
k9RzpX9Ncw/OhFSF4YXyC1rHU7lr0wFq9EfAe5SmChcDtlfRovV2m3nGReRrJTom
ve84oDl42ncERLPNzxZi2dBV2l++olJmHDvHODjG3/jTtjKsJS9bAC/mU4dbao9c
M3lKcNwC5CjW5r1u8yjhcJmebNVDCW0MHqe38YpFLn34GJ6ov4OGHuChCsR2KKl6
v7sCZkbqK1Zorie3JyvVcuaK0ivx8g9B31m40UE9aOt7CQgM0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIWDgG+xeo4bLQTpwdytRM2MANEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgw
NGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhkOWI3NTNmYzUvOWJmODUxODctYTQ1ZS0z
OTYyLTg2OTctMWRiN2RiYjI0NzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTc4MDRkZWMtZmQwMC00MjZmLWJi
YTQtMDM4ZDliNzUzZmM1L2E3ODA0ZGVjLWZkMDAtNDI2Zi1iYmE0LTAzOGQ5Yjc1
M2ZjNS5jcmwwHwYDVR0jBBgwFoAUaHUbHIZZZDl7Ob43HRBnZpyHMqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgwNGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhk
OWI3NTNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQHBSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL0vG9BDafsaT/BFSOUag8fWa7vHh//yADMt4OxtS9BFWRbGXEsKunIS
dQEzyXoPqTsCU4vCiaCDn1BC+WPOJ6P3KRACbpamJq23FjysyGOObO/blnNCvePH
HZO0wtMKmAkROG1Wn8fiTVC2P+l0Xn/eCZrDGQSvj/Niu32fJXnwMS0Oho4gvqkk
ISiHw1AnnLi07U0Ii2eYX7mYI2ED729z+fhFAZwz/0BzFzWOMxNSyxGEOXhZH0aT
DcQl3/2TnWgCCL3gQ+8lS6w4AupKyzX/IW60i1OmH9mNigc3dgF/rPOKkS9baD/c
1AXxWTdbniynjnXonus7wpzcVIBrIPk=
-----END CERTIFICATE-----
Generated at Fri Jun 6 13:46:31 2025 by rpki-client