Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa
File:                     e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa (raw, json)
Hash identifier:          PigJuUs0lsuFTzll+G5SagAXwzdRXIIvsz/GmzKuvr4=
Subject key identifier:   49:75:9E:7D:84:0C:80:02:A3:22:FB:9D:07:3F:3A:66:1F:74:7B:7A
Certificate issuer:       /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial:       010D0C9F4328584AFEE6ABA34A0C7E94768B3E80
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        69.89.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ab:a3:4a:0c:7e:94:76:8b:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=4d164aaf-f2eb-4909-bc07-c6095f261b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:f3:71:30:e8:58:65:c0:9c:9a:f5:da:59:
                    d7:e4:d7:35:e8:d0:47:6f:da:4c:e7:36:c8:ae:33:
                    6e:db:6d:e8:1d:c6:0b:52:5c:df:49:28:b4:12:9d:
                    05:8b:81:08:bf:5e:80:fa:14:7a:db:23:67:b9:36:
                    d9:ad:09:fd:29:63:45:54:0f:2d:47:a1:46:cf:c3:
                    21:11:85:e6:0c:8a:5d:a5:e4:01:f1:93:9e:27:0b:
                    c0:1d:09:f8:8d:22:ce:a1:9d:10:48:f4:e5:d6:77:
                    2b:58:4d:55:1f:58:af:56:3b:fb:16:4b:11:36:41:
                    4b:45:73:4c:03:bd:28:86:39:08:bd:5f:94:a5:20:
                    83:ca:0a:e9:cb:aa:22:06:36:d9:5b:eb:57:c8:19:
                    10:a9:88:a8:90:fd:f5:45:7f:4b:23:3c:d2:6e:2c:
                    b1:5e:db:a8:45:bb:f6:69:db:83:e5:ed:7f:e8:c5:
                    9e:d3:96:10:57:b8:e0:65:1b:ec:e9:4e:07:ca:9d:
                    55:32:c4:8e:73:fb:97:58:c5:c8:f9:e9:db:b6:9f:
                    ee:45:93:63:e1:0e:ee:1c:7d:00:44:e9:6c:70:39:
                    7d:1d:bd:53:4b:77:29:cb:a9:be:7e:9a:3c:fc:0d:
                    ae:08:16:5a:bf:dd:f6:85:9c:8a:ae:82:0f:5b:3c:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:75:9E:7D:84:0C:80:02:A3:22:FB:9D:07:3F:3A:66:1F:74:7B:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl

            X509v3 Authority Key Identifier:
                keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:22:93:93:78:01:9d:80:4e:f9:b0:ae:72:86:c0:9f:c1:
         c6:20:01:30:96:7d:08:27:44:97:f9:01:f5:66:f3:d9:15:a9:
         b2:1b:2a:1c:05:f5:72:74:45:12:40:01:02:f8:2d:b0:03:97:
         5d:03:6f:ec:5f:50:14:69:37:c0:ce:20:74:40:62:e5:ad:29:
         7f:7a:80:7b:54:4c:2d:5b:ef:d4:e7:6a:b5:38:db:6e:48:1f:
         0d:d6:f8:ce:b2:c0:58:8e:33:41:0e:ac:c1:ca:4b:d8:a4:09:
         fd:27:f3:e6:58:39:6e:08:18:c6:ae:c2:2f:6c:98:9e:df:b1:
         63:e3:7b:cf:ea:95:ba:24:b2:1e:a3:95:42:83:5e:ae:67:62:
         5a:5e:1e:cb:1c:0e:2a:8f:d8:f9:f8:6d:cf:e6:5a:4c:f5:17:
         05:96:89:70:88:41:1a:35:c7:28:c5:1a:1a:b0:cc:e4:ef:fb:
         19:f5:1a:ce:87:3c:fa:e2:70:bd:e3:5c:b8:de:f3:36:3a:d7:
         61:3b:78:b0:ed:30:8c:b5:a9:94:19:3c:d6:91:4b:63:bb:82:
         cb:f5:50:0e:b6:4e:61:51:76:de:72:b6:2c:3f:48:dc:44:ab:
         57:2e:42:8e:a4:be:a1:c6:ae:59:54:44:47:6c:e1:63:dd:57:
         26:ff:d3:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qujSgx+lHaLPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0
OWY4MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
NGQxNjRhYWYtZjJlYi00OTA5LWJjMDctYzYwOTVmMjYxYjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqzzcTDoWGXAnJr12lnX5Nc16NBHb9pM5zbI
rjNu223oHcYLUlzfSSi0Ep0Fi4EIv16A+hR62yNnuTbZrQn9KWNFVA8tR6FGz8Mh
EYXmDIpdpeQB8ZOeJwvAHQn4jSLOoZ0QSPTl1ncrWE1VH1ivVjv7FksRNkFLRXNM
A70ohjkIvV+UpSCDygrpy6oiBjbZW+tXyBkQqYiokP31RX9LIzzSbiyxXtuoRbv2
aduD5e1/6MWe05YQV7jgZRvs6U4Hyp1VMsSOc/uXWMXI+enbtp/uRZNj4Q7uHH0A
ROlscDl9Hb1TS3cpy6m+fpo8/A2uCBZav932hZyKroIPWzxclQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEl1nn2EDIACoyL7nQc/OmYfdHt6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz
M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvZTBhOTliMzctODNjNy0z
Zjk1LWFmMmYtZWVmNjA0ZGExZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw
OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh
NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4
NjM0YTQ5ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVkqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnRIpOTeAGdgE75sK5yhsCfwcYgATCWfQgnRJf5AfVm89kVqbIbKhwF
9XJ0RRJAAQL4LbADl10Db+xfUBRpN8DOIHRAYuWtKX96gHtUTC1b79TnarU4225I
Hw3W+M6ywFiOM0EOrMHKS9ikCf0n8+ZYOW4IGMauwi9smJ7fsWPje8/qlboksh6j
lUKDXq5nYlpeHsscDiqP2Pn4bc/mWkz1FwWWiXCIQRo1xyjFGhqwzOTv+xn1Gs6H
PPricL3jXLje8zY612E7eLDtMIy1qZQZPNaRS2O7gsv1UA62TmFRdt5ytiw/SNxE
q1cuQo6kvqHGrllUREds4WPdVyb/01E=
-----END CERTIFICATE-----
Generated at Sun Aug 31 22:05:20 2025 by rpki-client