Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d89092f4-8a71-3cc5-8c2b-4fa24708e663.roa
File:                     d89092f4-8a71-3cc5-8c2b-4fa24708e663.roa (raw, json)
Hash identifier:          ToTN59A3k2jKr2l7rnpEjRoHEbIIve0/b9dd1HavIn8=
Subject key identifier:   6B:EF:B9:B8:A3:A7:B8:26:F5:90:BF:BE:18:2B:59:41:69:C9:27:0E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B3FAC88050FAA632F1F8DA080
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d89092f4-8a71-3cc5-8c2b-4fa24708e663.roa
Signing time:             Fri 19 Sep 2025 17:51:15 +0000
ROA not before:           Fri 19 Sep 2025 17:51:15 +0000
ROA not after:            Thu 18 Dec 2025 18:51:15 +0000
asID:                     0
IP address blocks:        67.150.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:ac:88:05:0f:aa:63:2f:1f:8d:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 19 17:51:15 2025 GMT
            Not After : Dec 18 18:51:15 2025 GMT
        Subject: CN=09769d09-0a7d-489f-980d-a1b67fe13901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c0:66:75:21:0e:9f:e9:1c:9e:cf:e7:59:32:
                    1b:1f:91:b5:57:be:8a:1f:73:eb:eb:2e:75:5b:f7:
                    45:56:8e:74:1a:96:e2:02:4a:7a:05:19:31:61:4a:
                    b9:72:99:2a:9c:77:e1:44:f6:f9:6b:96:4b:b5:1d:
                    cf:ce:03:bd:05:4c:75:f1:cd:d1:b1:92:53:04:f9:
                    79:40:d2:fb:62:46:10:e1:59:90:9c:89:17:1f:d6:
                    36:44:98:9b:4f:70:a6:fc:0e:9c:a0:01:f9:9a:fb:
                    b0:08:e2:f9:d3:f9:3d:bc:e8:df:ac:ff:4c:69:64:
                    47:2c:28:c5:d0:7b:d1:c2:30:07:0e:8f:34:8e:ca:
                    81:98:ce:0c:20:93:b1:37:a5:55:38:e2:8e:be:42:
                    b6:38:8c:6d:fa:f3:bc:f3:2c:c6:1b:a6:52:76:e7:
                    c5:df:7b:8f:bc:96:d2:25:53:c1:e6:5c:81:2f:ad:
                    5a:d2:a8:5b:60:78:0e:32:fa:e7:08:58:de:77:2d:
                    29:bf:1a:1e:33:21:8c:63:bc:4f:f7:0e:94:cb:b5:
                    0f:a1:fe:43:72:bc:2a:8e:54:8a:4b:b4:13:87:31:
                    c8:83:20:6f:5b:13:8f:31:5e:6a:d7:3f:e0:40:ef:
                    44:07:3a:cd:95:99:0d:70:33:ba:d4:94:de:b9:3e:
                    ad:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EF:B9:B8:A3:A7:B8:26:F5:90:BF:BE:18:2B:59:41:69:C9:27:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d89092f4-8a71-3cc5-8c2b-4fa24708e663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:29:72:88:d8:3a:99:e0:6a:28:9d:cb:58:56:f7:3a:ca:37:
         0e:08:9a:2b:15:6b:20:6e:1a:84:5e:b9:70:84:16:9f:21:a0:
         83:b0:f6:c7:e1:5e:3f:bc:45:c2:a7:f1:d1:39:12:f8:56:d9:
         46:40:bd:76:84:0b:88:5a:08:7f:fd:d4:ed:d7:63:f9:50:d6:
         ac:37:fa:53:24:5a:4c:b3:9c:ae:be:84:de:29:12:7a:db:b6:
         2c:b1:f6:4b:1d:25:0a:52:a5:df:9c:9a:8a:c1:9a:ab:37:f4:
         d4:89:f0:10:41:f8:1f:90:90:11:7e:f5:9a:4d:9d:ea:89:3c:
         95:25:f0:fd:b2:6b:a0:6a:e8:1c:1b:21:1c:30:60:b6:82:86:
         ff:47:7b:48:5e:0d:11:62:69:10:7e:df:7f:e5:a4:c8:5c:5e:
         e0:2a:9d:82:c4:b8:ee:ed:43:dd:5d:7c:f7:e3:8e:b5:d3:55:
         3e:4c:63:57:a8:db:62:68:3d:91:d4:2e:d2:29:9e:e6:4c:f0:
         b6:2e:70:2a:d6:e8:4c:84:85:d6:c8:cf:bd:60:66:3d:39:83:
         0f:e4:a0:a5:5b:26:3f:5d:60:84:75:ee:33:3d:ae:71:17:e6:
         25:a1:2f:ac:6c:b0:d8:64:ed:ab:8a:ea:7a:6b:9c:3e:9f:91:
         0c:00:ed:bc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs/rIgFD6pjLx+NoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDkxOTE3NTExNVoXDTI1MTIxODE4NTExNVowLzEtMCsGA1UEAxMk
MDk3NjlkMDktMGE3ZC00ODlmLTk4MGQtYTFiNjdmZTEzOTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMBmdSEOn+kcns/nWTIbH5G1V76KH3Pr6y51
W/dFVo50GpbiAkp6BRkxYUq5cpkqnHfhRPb5a5ZLtR3PzgO9BUx18c3RsZJTBPl5
QNL7YkYQ4VmQnIkXH9Y2RJibT3Cm/A6coAH5mvuwCOL50/k9vOjfrP9MaWRHLCjF
0HvRwjAHDo80jsqBmM4MIJOxN6VVOOKOvkK2OIxt+vO88yzGG6ZSdufF33uPvJbS
JVPB5lyBL61a0qhbYHgOMvrnCFjedy0pvxoeMyGMY7xP9w6Uy7UPof5DcrwqjlSK
S7QThzHIgyBvWxOPMV5q1z/gQO9EBzrNlZkNcDO61JTeuT6txQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGvvubijp7gm9ZC/vhgrWUFpyScOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDg5MDkyZjQtOGE3MS0z
Y2M1LThjMmItNGZhMjQ3MDhlNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQ5YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAyClyiNg6meBqKJ3LWFb3Oso3DgiaKxVrIG4ahF65cIQWnyGgg7D2x+Fe
P7xFwqfx0TkS+FbZRkC9doQLiFoIf/3U7ddj+VDWrDf6UyRaTLOcrr6E3ikSetu2
LLH2Sx0lClKl35yaisGaqzf01InwEEH4H5CQEX71mk2d6ok8lSXw/bJroGroHBsh
HDBgtoKG/0d7SF4NEWJpEH7ff+WkyFxe4CqdgsS47u1D3V189+OOtdNVPkxjV6jb
Ymg9kdQu0ime5kzwti5wKtboTISF1sjPvWBmPTmDD+SgpVsmP11ghHXuMz2ucRfm
JaEvrGyw2GTtq4rqemucPp+RDADtvA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:18 2025 by rpki-client