Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa
File:                     68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa (raw, json)
Hash identifier:          EnMrOsJfoJOEjbHEtmmR3Un07+OmKnqoMNNteRO490w=
Subject key identifier:   2F:01:8E:C3:83:E0:2B:D9:E1:0A:50:E3:25:A8:71:E7:1A:04:BF:63
Certificate issuer:       /CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
Certificate serial:       010D0C9F4328584ADD6673A0A65446B2DA9CE200
Authority key identifier: 7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     20304
IP address blocks:        69.71.137.0/24 maxlen: 24
                          69.71.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:73:a0:a6:54:46:b2:da:9c:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=fcbb7c6c-2f1e-4447-80f5-0cdae4aab8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e1:76:3d:7a:32:96:96:de:35:7b:c2:a9:cf:
                    fc:36:1a:af:5a:24:22:64:75:2c:9d:29:b5:1f:e4:
                    bd:d7:d0:48:57:43:04:26:2a:f3:a2:20:70:8d:41:
                    3b:dd:a1:9f:d1:4c:85:ce:3c:06:7d:6c:ba:e3:32:
                    66:b8:bd:73:a4:2c:a6:04:f4:41:ce:58:14:f8:ec:
                    38:a5:bf:46:22:62:6a:5e:ec:ad:ad:46:46:1b:86:
                    2b:77:16:ac:69:24:55:01:79:30:66:e3:bc:32:c1:
                    64:0b:dc:8a:f6:47:d8:f9:5f:f3:fd:e8:da:27:4e:
                    de:f1:35:6e:1a:7a:28:1e:44:8b:12:36:5e:0b:e7:
                    a9:c3:b1:67:90:f2:7f:73:07:16:8c:e0:47:76:4c:
                    53:24:2f:a2:52:e5:69:bf:8f:a0:fd:e1:39:b6:47:
                    f1:53:7e:ca:3c:df:2d:ff:1c:52:b9:f3:ff:11:d2:
                    da:b7:cd:5c:44:94:3d:5a:c2:c2:10:01:d0:2d:5f:
                    84:69:88:70:af:27:03:32:65:25:e5:30:92:c2:99:
                    7c:fe:80:4a:76:b7:a8:d5:3b:72:17:af:85:dd:27:
                    6a:2d:79:c2:1b:b0:28:e8:9b:63:66:75:f2:c9:17:
                    6e:c5:59:80:54:b3:15:50:ba:5d:3b:07:15:76:7c:
                    18:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:01:8E:C3:83:E0:2B:D9:E1:0A:50:E3:25:A8:71:E7:1A:04:BF:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/68a20ce5-8e98-39c6-9e75-3e15cf1d9815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl

            X509v3 Authority Key Identifier:
                keyid:7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.137.0-69.71.138.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:62:13:23:81:ff:a1:cd:1c:c5:9e:34:ce:77:8b:2b:1d:86:
         fb:d3:be:94:4c:e1:f6:63:80:48:e1:1d:79:5f:4d:fc:f1:10:
         b9:91:67:f7:0e:04:f2:f7:f8:80:3f:21:1c:f1:b6:fd:5e:18:
         2e:82:14:72:76:d5:ba:63:4d:aa:0e:f0:fe:66:eb:30:e3:df:
         ba:32:98:4b:28:70:e0:57:89:ca:d8:fc:f3:c6:2d:cf:72:1e:
         9b:04:46:b4:c9:88:ec:eb:0d:8d:7a:f7:d6:15:ab:52:27:b2:
         b8:db:db:15:10:b1:cb:58:d0:6f:75:ba:ab:9d:7e:d8:98:eb:
         57:39:88:99:04:f9:d5:b1:61:3d:c1:ef:22:02:93:f7:c0:09:
         b5:65:c3:51:ae:e2:88:2b:c7:b0:93:e1:83:50:27:e6:9d:7d:
         5c:14:2c:66:df:11:c7:c4:42:3c:09:57:2f:89:6a:c4:17:78:
         e0:de:82:1e:78:c6:3c:0a:af:7a:3a:54:23:27:12:34:0a:4a:
         5f:75:b4:03:b3:f8:d5:42:2a:bc:ea:f8:0c:4e:29:ca:ec:5b:
         ed:8b:eb:e5:39:63:01:88:a3:44:e1:6f:26:e3:0f:b7:6f:05:
         cf:af:1a:dc:81:e0:5e:9f:c2:e0:8c:70:fe:59:b8:61:5c:d5:
         38:bf:36:25
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErdZnOgplRGstqc4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5YmMyNzQtZjc4OC00ZGE4LWEwYWEtNzQ0NjlhYzA2
ZWYxMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk
ZmNiYjdjNmMtMmYxZS00NDQ3LTgwZjUtMGNkYWU0YWFiOGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluF2PXoylpbeNXvCqc/8NhqvWiQiZHUsnSm1
H+S919BIV0MEJirzoiBwjUE73aGf0UyFzjwGfWy64zJmuL1zpCymBPRBzlgU+Ow4
pb9GImJqXuytrUZGG4YrdxasaSRVAXkwZuO8MsFkC9yK9kfY+V/z/ejaJ07e8TVu
GnooHkSLEjZeC+epw7FnkPJ/cwcWjOBHdkxTJC+iUuVpv4+g/eE5tkfxU37KPN8t
/xxSufP/EdLat81cRJQ9WsLCEAHQLV+EaYhwrycDMmUl5TCSwpl8/oBKdreo1Tty
F6+F3SdqLXnCG7Ao6JtjZnXyyRduxVmAVLMVULpdOwcVdnwYxQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFC8BjsOD4CvZ4QpQ4yWocecaBL9jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81ZTli
YzI3NC1mNzg4LTRkYTgtYTBhYS03NDQ2OWFjMDZlZjEvNjhhMjBjZTUtOGU5OC0z
OWM2LTllNzUtM2UxNWNmMWQ5ODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWU5YmMyNzQtZjc4OC00ZGE4LWEw
YWEtNzQ0NjlhYzA2ZWYxLzVlOWJjMjc0LWY3ODgtNGRhOC1hMGFhLTc0NDY5YWMw
NmVmMS5jcmwwHwYDVR0jBBgwFoAUfftfckjG7BbujH4auySbmYv7Io4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81ZTliYzI3NC1mNzg4LTRkYTgtYTBhYS03NDQ2
OWFjMDZlZjEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABFR4kD
BABFR4owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAzWITI4H/oc0cxZ40zneLKx2G+9O+lEzh9mOASOEdeV9N
/PEQuZFn9w4E8vf4gD8hHPG2/V4YLoIUcnbVumNNqg7w/mbrMOPfujKYSyhw4FeJ
ytj888Ytz3IemwRGtMmI7OsNjXr31hWrUieyuNvbFRCxy1jQb3W6q51+2JjrVzmI
mQT51bFhPcHvIgKT98AJtWXDUa7iiCvHsJPhg1An5p19XBQsZt8Rx8RCPAlXL4lq
xBd44N6CHnjGPAqvejpUIycSNApKX3W0A7P41UIqvOr4DE4pyuxb7Yvr5TljAYij
ROFvJuMPt28Fz68a3IHgXp/C4Ixw/lm4YVzVOL82JQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:02 2025 by rpki-client