Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa
File:                     3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa (raw, json)
Hash identifier:          M25mdMB55JAGZwQBxoBJRliVRGFVSAb7dGz1Fs6OQLk=
Subject key identifier:   34:54:B4:A0:30:9F:F9:4D:EA:72:34:CC:E6:EE:A8:B6:8B:69:FA:C0
Certificate issuer:       /CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
Certificate serial:       010D0C9F4328584AFEE6A5E37860941E943F2580
Authority key identifier: 1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     27630
IP address blocks:        67.43.160.0/20 maxlen: 24
                          69.166.0.0/21 maxlen: 24
                          72.34.224.0/19 maxlen: 24
                          207.246.192.0/20 maxlen: 24
                          208.122.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a5:e3:78:60:94:1e:94:3f:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=d8126b4f-ded1-42bd-9b13-7d92fd3f9a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:44:38:21:0a:c8:21:31:3c:1f:34:e9:ca:92:
                    ea:ea:80:82:43:c6:c3:cb:5c:bb:3f:14:11:cc:d0:
                    23:1c:aa:99:57:a0:c2:0e:bc:a6:b3:2a:78:88:40:
                    d6:85:43:aa:57:63:79:c7:a5:c0:5a:1f:ef:f7:89:
                    bc:44:0a:19:58:3b:f8:32:15:54:e0:97:9c:29:af:
                    e3:2c:70:a9:5d:f7:d1:d2:5f:b7:28:97:8f:5f:63:
                    4d:fc:b1:d0:4c:d3:e8:79:db:12:da:e9:f9:17:52:
                    6b:dc:9a:9e:c4:07:f5:a1:92:78:3c:ff:c6:10:4e:
                    b1:12:f5:e8:22:a5:74:50:ef:e0:5b:71:75:df:54:
                    58:27:97:8c:96:b3:ab:19:4d:26:05:15:88:08:43:
                    b9:c5:64:6e:78:8c:45:02:1d:42:58:30:61:5a:01:
                    f7:0e:fc:6c:b5:5e:bb:a9:b5:ad:e7:ff:26:56:89:
                    b7:22:c3:5e:24:f4:90:10:d2:5b:b1:13:30:d5:8e:
                    11:82:d1:10:74:d3:e8:c6:8a:2d:75:9b:90:1b:87:
                    8c:41:6a:1a:70:10:e9:0f:96:42:cd:76:3e:8d:bf:
                    62:ff:6c:78:d4:6c:d5:b9:db:7f:61:80:f0:65:96:
                    72:7f:c6:0b:f7:53:f3:ca:8b:f6:a3:a8:7e:10:ff:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:54:B4:A0:30:9F:F9:4D:EA:72:34:CC:E6:EE:A8:B6:8B:69:FA:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.crl

            X509v3 Authority Key Identifier:
                keyid:1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.160.0/20
                  69.166.0.0/21
                  72.34.224.0/19
                  207.246.192.0/20
                  208.122.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:45:a3:8f:47:f6:8f:e7:5e:b7:92:d8:ee:f7:b5:cd:7c:61:
         61:72:db:b3:50:98:e8:95:11:37:d3:79:d2:65:5c:f0:c9:15:
         bb:f3:89:86:81:9e:1a:31:28:58:1e:79:cf:13:f3:c7:ab:ce:
         e0:04:e3:37:ad:bc:26:25:29:6e:c2:78:23:86:51:91:85:56:
         a6:41:8f:ed:92:56:9b:33:b7:99:20:93:02:a5:53:40:8e:13:
         b9:6f:fd:13:db:f0:22:b1:45:d4:bf:78:cd:ba:ed:20:29:9a:
         cc:b5:e4:95:8c:f8:d6:de:ca:8b:62:c8:4f:c7:ea:03:2d:75:
         26:f6:60:f4:cb:fe:74:0d:ed:d7:db:b5:14:e8:ea:0d:96:a4:
         67:a8:50:80:11:7c:fc:0c:0f:3a:d3:38:e1:37:bc:7b:06:0f:
         79:43:33:d7:6e:ab:e8:ae:36:c1:c7:4b:16:9d:0e:aa:b1:f0:
         43:d1:56:6b:a4:73:b3:d8:cd:72:1c:fb:27:ef:43:9b:dd:52:
         a8:89:ef:de:10:fe:4e:f5:84:a9:7c:54:92:ff:2d:28:27:62:
         93:56:ae:8b:09:36:b7:66:c4:7b:a2:29:46:97:89:95:82:62:
         1b:87:27:1a:9c:c1:5b:62:47:93:f6:da:cd:e6:b9:99:c2:d1:
         6c:f2:d8:47
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEr+5qXjeGCUHpQ/JYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVjNWJkY2ItOTRlYS00ODJmLTk4OWYtYTYzNjdhZGIy
NGI0MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZDgxMjZiNGYtZGVkMS00MmJkLTliMTMtN2Q5MmZkM2Y5YTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEQ4IQrIITE8HzTpypLq6oCCQ8bDy1y7PxQR
zNAjHKqZV6DCDrymsyp4iEDWhUOqV2N5x6XAWh/v94m8RAoZWDv4MhVU4JecKa/j
LHCpXffR0l+3KJePX2NN/LHQTNPoedsS2un5F1Jr3JqexAf1oZJ4PP/GEE6xEvXo
IqV0UO/gW3F131RYJ5eMlrOrGU0mBRWICEO5xWRueIxFAh1CWDBhWgH3DvxstV67
qbWt5/8mVom3IsNeJPSQENJbsRMw1Y4RgtEQdNPoxootdZuQG4eMQWoacBDpD5ZC
zXY+jb9i/2x41GzVudt/YYDwZZZyf8YL91Pzyov2o6h+EP+eRwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFDRUtKAwn/lN6nI0zObuqLaLafrAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWM1
YmRjYi05NGVhLTQ4MmYtOTg5Zi1hNjM2N2FkYjI0YjQvM2JlZjFjYTUtY2ZlZi0z
OTc2LThiYWMtNGVkOWQ5YTNmYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVjNWJkY2ItOTRlYS00ODJmLTk4
OWYtYTYzNjdhZGIyNGI0LzY1YzViZGNiLTk0ZWEtNDgyZi05ODlmLWE2MzY3YWRi
MjRiNC5jcmwwHwYDVR0jBBgwFoAUH5f2NbVPC4uIOMSdXRGlc/lZ8UcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWM1YmRjYi05NGVhLTQ4MmYtOTg5Zi1hNjM2
N2FkYjI0YjQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEQyugAwQD
RaYAAwQFSCLgAwQEz/bAAwQE0HrgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAJFo49H9o/nXreS2O73tc18
YWFy27NQmOiVETfTedJlXPDJFbvziYaBnhoxKFgeec8T88erzuAE4zetvCYlKW7C
eCOGUZGFVqZBj+2SVpszt5kgkwKlU0COE7lv/RPb8CKxRdS/eM267SApmsy15JWM
+NbeyotiyE/H6gMtdSb2YPTL/nQN7dfbtRTo6g2WpGeoUIARfPwMDzrTOOE3vHsG
D3lDM9duq+iuNsHHSxadDqqx8EPRVmukc7PYzXIc+yfvQ5vdUqiJ794Q/k71hKl8
VJL/LSgnYpNWrosJNrdmxHuiKUaXiZWCYhuHJxqcwVtiR5P22s3muZnC0Wzy2Ec=
-----END CERTIFICATE-----
Generated at Fri Sep 19 12:08:39 2025 by rpki-client