Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa
File:                     be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa (raw, json)
Hash identifier:          WaskI9F8oXhpKvb3kN/PefD5auqiLj+IChj5ZWyU+LQ=
Subject key identifier:   F6:06:DA:25:28:7C:BF:1B:C2:77:4C:F6:BA:DF:B7:A0:BF:A4:20:EB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DF5A7B629D45DB89EEF98100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     35994
IP address blocks:        69.192.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:7b:62:9d:45:db:89:ee:f9:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=cd44ef27-f2bb-4de6-b6fb-5a18d3ecdaf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:7d:f0:73:68:df:f7:57:7a:52:ad:8f:76:
                    a9:42:89:82:de:db:e8:61:81:80:8b:bf:e5:33:7a:
                    f1:ae:28:42:bf:13:0a:38:ec:12:2f:d1:b6:74:44:
                    ae:14:8d:ee:6b:12:63:71:10:62:b5:06:9e:dd:b3:
                    8c:18:de:b7:05:fc:bc:c6:8c:22:48:2c:8a:94:08:
                    fd:b4:ca:bb:f2:d3:92:9b:e8:27:b1:e0:c1:d5:03:
                    80:95:07:da:9d:25:fc:49:c1:91:1d:ce:e7:88:bf:
                    e1:c8:09:e8:fc:ef:2a:0e:21:3c:a8:cc:9f:6c:b8:
                    24:64:2a:53:ce:1b:ea:06:49:44:01:b3:f2:46:96:
                    2c:eb:48:87:b1:d2:83:ea:3a:f1:e7:b7:02:03:8c:
                    87:16:84:5f:25:ef:f3:58:36:6f:4e:29:30:8e:7b:
                    99:fd:55:66:07:1a:a3:dc:0c:dd:de:9d:64:a8:e9:
                    29:ec:ef:4e:ba:ad:96:33:b0:3f:f4:c9:f3:72:7e:
                    66:ba:8f:62:06:6b:20:5d:15:d1:f1:f1:11:da:12:
                    da:16:f3:73:0b:e0:f9:fa:b4:b9:58:37:2a:77:21:
                    bd:a7:a6:a2:f0:25:d1:02:2c:2e:2f:16:45:0b:64:
                    23:fd:3e:8b:48:08:c2:ed:99:04:15:c5:c8:ca:57:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:06:DA:25:28:7C:BF:1B:C2:77:4C:F6:BA:DF:B7:A0:BF:A4:20:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be7b0b00-3e06-3a41-aac4-2449ed36b1a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.192.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:5e:f8:5c:23:fd:f9:f1:ca:68:fc:1d:cd:05:50:ff:3d:76:
         52:95:98:f1:85:92:79:cb:35:92:ef:0e:68:6b:83:1a:bf:74:
         11:f4:5b:73:7d:2c:46:6b:92:f5:51:4d:31:ad:85:22:97:a5:
         9a:66:c9:37:99:88:68:18:a6:b4:20:65:13:c1:8c:cb:49:1c:
         dc:ff:68:69:84:34:61:1e:af:7d:23:a1:99:a8:e3:ff:6b:c3:
         11:7f:28:93:4b:f8:c3:46:27:35:8b:a1:4e:44:b2:9d:3e:f6:
         80:1e:f1:fb:73:02:fc:b8:0f:45:c2:09:c4:4f:52:d9:ee:b2:
         e3:97:58:4d:cf:f7:1c:91:b0:09:6b:91:50:ee:88:72:f7:11:
         e5:ff:ce:2e:66:80:d6:19:2b:9c:70:e8:f9:24:dd:a0:7c:41:
         8d:a9:b4:63:5d:bc:5f:a0:5f:4c:13:d8:ef:7e:65:13:ec:5d:
         27:8e:92:50:eb:dc:87:33:4f:2e:f1:56:90:69:f5:8c:e7:b0:
         db:77:43:ef:44:c4:81:dc:eb:79:01:28:f7:14:2f:8b:1e:23:
         57:bc:99:dd:9f:24:55:e9:04:d0:0c:86:c3:3f:ee:9c:df:65:
         a3:7d:ee:88:e6:d7:0e:22:2b:ab:34:fa:13:56:d2:64:86:3d:
         de:5b:f3:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWntinUXbie75gQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk
Y2Q0NGVmMjctZjJiYi00ZGU2LWI2ZmItNWExOGQzZWNkYWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOh98HNo3/dXelKtj3apQomC3tvoYYGAi7/l
M3rxrihCvxMKOOwSL9G2dESuFI3uaxJjcRBitQae3bOMGN63Bfy8xowiSCyKlAj9
tMq78tOSm+gnseDB1QOAlQfanSX8ScGRHc7niL/hyAno/O8qDiE8qMyfbLgkZCpT
zhvqBklEAbPyRpYs60iHsdKD6jrx57cCA4yHFoRfJe/zWDZvTikwjnuZ/VVmBxqj
3Azd3p1kqOkp7O9Ouq2WM7A/9Mnzcn5muo9iBmsgXRXR8fER2hLaFvNzC+D5+rS5
WDcqdyG9p6ai8CXRAiwuLxZFC2Qj/T6LSAjC7ZkEFcXIylc8rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPYG2iUofL8bwndM9rrft6C/pCDrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmU3YjBiMDAtM2UwNi0z
YTQxLWFhYzQtMjQ0OWVkMzZiMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARcCKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFe+Fwj/fnxymj8Hc0FUP89dlKVmPGFknnLNZLvDmhrgxq/dBH0W3N9
LEZrkvVRTTGthSKXpZpmyTeZiGgYprQgZRPBjMtJHNz/aGmENGEer30joZmo4/9r
wxF/KJNL+MNGJzWLoU5Esp0+9oAe8ftzAvy4D0XCCcRPUtnusuOXWE3P9xyRsAlr
kVDuiHL3EeX/zi5mgNYZK5xw6Pkk3aB8QY2ptGNdvF+gX0wT2O9+ZRPsXSeOklDr
3IczTy7xVpBp9YznsNt3Q+9ExIHc63kBKPcUL4seI1e8md2fJFXpBNAMhsM/7pzf
ZaN97ojm1w4iK6s0+hNW0mSGPd5b82Y=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:52 2025 by rpki-client