Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa
File:                     7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa (raw, json)
Hash identifier:          E8xfE9H45e/RUm47WiOf4w/RSEy+EzRY9n7QB4RLmoQ=
Subject key identifier:   51:AE:A2:52:B3:D9:75:C5:D1:60:9D:31:6F:9F:F1:80:6A:03:3F:92
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584A68260CD2CE15A0F83C437C00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     8069
IP address blocks:        20.33.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:0c:d2:ce:15:a0:f8:3c:43:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=d12663a3-e851-4c78-9e68-1d624b5c48b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:4b:1f:7a:0b:7f:0b:0f:0b:ca:79:e3:97:
                    c4:5c:26:94:86:3c:52:d3:4b:ba:f6:7c:8a:f0:98:
                    a3:5c:5d:43:af:c4:59:4b:7a:09:5c:57:1a:2b:d8:
                    46:7a:f8:ab:0b:75:53:27:f2:ef:01:10:06:42:23:
                    f5:4d:fd:77:6a:32:b5:28:00:0f:67:38:96:05:fa:
                    7b:d7:19:32:1c:5a:c0:c2:f0:41:d0:cb:22:bd:68:
                    a1:e3:2e:9f:03:a4:57:32:64:7b:d0:f4:9f:cf:a9:
                    f9:14:6d:af:f4:58:9d:c3:ae:bf:dc:d6:78:ea:e8:
                    ff:4e:bd:c1:4d:dc:d7:12:e9:03:10:dc:f2:84:9e:
                    71:60:33:9b:44:8d:d5:ab:c2:62:78:7f:6c:64:cf:
                    7a:f1:b5:55:01:39:e2:24:c7:91:1b:f8:6c:8b:6d:
                    a0:1a:cd:7e:8b:65:be:37:4b:9e:ff:de:13:82:f8:
                    79:e9:c6:bc:4c:ab:57:cc:28:65:b8:57:b0:8e:f4:
                    13:f5:4a:53:91:bb:e1:73:c4:9d:ab:83:0d:eb:49:
                    36:8e:9e:ae:59:9c:b9:57:1a:99:a2:3f:4d:23:5b:
                    8b:55:75:73:4d:d9:e1:9f:05:a1:cc:0b:89:24:ba:
                    fa:ed:43:52:24:1c:d1:de:11:b8:21:b1:04:26:9d:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AE:A2:52:B3:D9:75:C5:D1:60:9D:31:6F:9F:F1:80:6A:03:3F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7c4e4c71-53ce-3cdd-bc80-7a4bbfd9a4f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:30:a6:e2:62:fe:75:45:a7:1f:31:17:5d:03:ef:15:2e:3d:
         86:84:20:d2:fe:69:99:1c:08:14:63:5d:7b:1b:72:3a:16:97:
         80:4f:1c:b5:ba:07:26:d7:2a:8d:7d:10:b9:cb:43:0d:3c:56:
         c7:33:fc:d1:3d:2f:e5:03:fa:00:93:7d:d4:06:71:06:d0:cb:
         e2:54:84:ed:37:60:c2:67:cf:7b:12:e5:c7:e7:34:11:80:85:
         55:ec:80:4b:ad:01:e9:06:e4:4e:e0:13:fa:6d:7d:8c:83:11:
         b8:ca:bd:7e:75:4e:2e:d1:5c:79:a1:17:74:e5:f3:4f:55:f7:
         95:43:d1:73:7d:f8:f4:31:ea:20:67:95:d8:46:33:60:a7:c0:
         66:eb:7d:a5:21:23:0d:24:16:25:5a:64:74:41:94:c9:ae:92:
         b1:bb:da:98:62:8d:48:7f:49:cf:ce:da:5c:94:07:8d:fc:f3:
         50:7c:62:a1:d9:cd:f1:d8:1e:4b:34:dd:76:54:84:2f:43:03:
         be:8f:48:b1:c2:90:4a:3a:83:ac:e3:85:34:b3:dd:34:7f:a3:
         11:1e:2b:13:5f:99:06:24:53:98:de:b3:1f:1e:56:49:ad:85:
         b7:3c:14:42:71:10:c4:87:ab:27:7c:ef:ee:19:e3:33:9e:8f:
         73:4c:35:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgzSzhWg+DxDfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
ZDEyNjYzYTMtZTg1MS00Yzc4LTllNjgtMWQ2MjRiNWM0OGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVRLH3oLfwsPC8p545fEXCaUhjxS00u69nyK
8JijXF1Dr8RZS3oJXFcaK9hGevirC3VTJ/LvARAGQiP1Tf13ajK1KAAPZziWBfp7
1xkyHFrAwvBB0MsivWih4y6fA6RXMmR70PSfz6n5FG2v9Fidw66/3NZ46uj/Tr3B
TdzXEukDENzyhJ5xYDObRI3Vq8JieH9sZM968bVVATniJMeRG/hsi22gGs1+i2W+
N0ue/94Tgvh56ca8TKtXzChluFewjvQT9UpTkbvhc8Sdq4MN60k2jp6uWZy5VxqZ
oj9NI1uLVXVzTdnhnwWhzAuJJLr67UNSJBzR3hG4IbEEJp174QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGuolKz2XXF0WCdMW+f8YBqAz+SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2M0ZTRjNzEtNTNjZS0z
Y2RkLWJjODAtN2E0YmJmZDlhNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgwpuJi/nVFpx8xF10D7xUuPYaEINL+aZkcCBRjXXsbcjoWl4BPHLW6
BybXKo19ELnLQw08Vscz/NE9L+UD+gCTfdQGcQbQy+JUhO03YMJnz3sS5cfnNBGA
hVXsgEutAekG5E7gE/ptfYyDEbjKvX51Ti7RXHmhF3Tl809V95VD0XN9+PQx6iBn
ldhGM2CnwGbrfaUhIw0kFiVaZHRBlMmukrG72phijUh/Sc/O2lyUB43881B8YqHZ
zfHYHks03XZUhC9DA76PSLHCkEo6g6zjhTSz3TR/oxEeKxNfmQYkU5jesx8eVkmt
hbc8FEJxEMSHqyd87+4Z4zOej3NMNVo=
-----END CERTIFICATE-----
Generated at Thu Jul 10 01:43:52 2025 by rpki-client