Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/864da7e7-501b-3190-a653-c711c042368d.roa
File:                     864da7e7-501b-3190-a653-c711c042368d.roa (raw, json)
Hash identifier:          wA8ILMdTGSOjK/do3wq7lpdXlV9XJTZHJVS46TRDnXo=
Subject key identifier:   BF:B8:E2:18:77:17:77:B0:5B:90:6D:85:81:6B:3A:05:ED:A0:6E:46
Certificate issuer:       /CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
Certificate serial:       010D0C9F4328584ACF70FB37DD83AE294DC8F300
Authority key identifier: 7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/864da7e7-501b-3190-a653-c711c042368d.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        69.71.136.0/24 maxlen: 24
                          69.71.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:fb:37:dd:83:ae:29:4d:c8:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=73879ef4-1032-4af7-9f9f-a2fc108c58dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bb:2d:51:ed:5c:56:99:51:43:db:a6:41:f7:
                    76:46:b9:14:7b:b6:af:ef:b1:08:52:54:33:c9:f4:
                    42:41:cb:0f:a5:4b:e6:2d:5c:d4:44:0b:30:cb:c3:
                    ac:e7:6f:87:29:04:5f:eb:30:f7:90:c1:06:fe:d2:
                    85:82:08:29:f9:58:e7:13:b8:e8:f3:01:2c:ae:b7:
                    65:76:35:12:12:fd:1a:12:e3:42:44:ac:c8:91:3a:
                    bb:c4:f2:11:91:55:9c:46:f3:69:53:ca:3e:67:db:
                    f8:f4:f6:13:cc:fb:b1:cd:44:54:67:81:84:17:cc:
                    1b:35:80:4e:b6:d0:db:e7:9f:8d:2c:e1:a3:e9:01:
                    6e:39:d5:bd:45:7c:58:f8:93:90:e6:71:3e:02:02:
                    99:3d:2e:c3:6a:76:96:32:4c:94:17:e1:f9:ab:37:
                    c6:0c:48:a9:87:bb:29:23:66:ac:b6:fc:73:0c:81:
                    a9:3a:04:1c:a0:6c:8f:78:cd:c5:6a:72:9b:55:ef:
                    58:dc:20:e4:7f:35:f0:ba:e9:1f:e8:4a:88:69:d4:
                    57:a7:98:e3:e2:34:23:ed:ae:62:7a:e8:9d:d7:a6:
                    c1:b3:4b:2b:2c:af:d1:b0:a2:49:98:46:da:75:aa:
                    e6:be:e4:b3:04:53:12:2b:1b:b3:65:23:73:14:bb:
                    00:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B8:E2:18:77:17:77:B0:5B:90:6D:85:81:6B:3A:05:ED:A0:6E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/864da7e7-501b-3190-a653-c711c042368d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl

            X509v3 Authority Key Identifier:
                keyid:7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ce:af:f4:55:1d:80:11:4c:6e:e5:2b:6b:30:3b:42:5a:97:
         a2:f9:ac:de:36:ad:48:fb:d5:a6:00:dd:66:23:a1:33:77:3a:
         bb:70:c9:bd:31:44:bf:a8:03:ea:68:f0:51:d2:b1:93:c8:76:
         a2:f6:44:3f:0d:9e:d7:0c:eb:b5:a2:65:f3:fe:92:fa:f4:33:
         93:27:e5:e6:95:09:9e:ab:50:cb:03:9b:5a:1b:09:a6:90:7c:
         af:2b:22:85:91:af:11:7b:84:6c:3d:2f:72:65:88:79:84:4e:
         de:72:9e:ff:18:18:15:3e:6c:53:e1:fb:6b:10:20:4e:68:95:
         36:50:6d:e8:86:d5:4f:ee:dd:98:a5:ad:28:79:9a:22:8a:87:
         8b:2c:a7:53:03:3a:8a:03:44:e4:80:4d:39:cd:15:da:b4:9c:
         5f:88:ec:2d:7d:a9:5d:6d:ea:2c:c6:46:c8:9c:a6:93:65:f2:
         a9:95:be:74:61:30:b2:b8:b7:e3:3a:9b:a8:3f:34:f4:c2:97:
         83:60:4d:48:61:a5:c9:94:5a:a7:f8:18:35:b1:db:a2:f1:50:
         27:df:d1:03:87:f3:7f:42:5b:ee:b1:44:f7:61:64:4e:c3:b6:
         75:37:bb:1f:c0:fa:ce:ac:b8:ae:3b:c9:eb:9a:14:51:5f:ce:
         07:86:41:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcPs33YOuKU3I8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5YmMyNzQtZjc4OC00ZGE4LWEwYWEtNzQ0NjlhYzA2
ZWYxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk
NzM4NzllZjQtMTAzMi00YWY3LTlmOWYtYTJmYzEwOGM1OGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7stUe1cVplRQ9umQfd2RrkUe7av77EIUlQz
yfRCQcsPpUvmLVzURAswy8Os52+HKQRf6zD3kMEG/tKFgggp+VjnE7jo8wEsrrdl
djUSEv0aEuNCRKzIkTq7xPIRkVWcRvNpU8o+Z9v49PYTzPuxzURUZ4GEF8wbNYBO
ttDb55+NLOGj6QFuOdW9RXxY+JOQ5nE+AgKZPS7DanaWMkyUF+H5qzfGDEiph7sp
I2astvxzDIGpOgQcoGyPeM3FanKbVe9Y3CDkfzXwuukf6EqIadRXp5jj4jQj7a5i
euid16bBs0srLK/RsKJJmEbadarmvuSzBFMSKxuzZSNzFLsAYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+44hh3F3ewW5BthYFrOgXtoG5GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81ZTli
YzI3NC1mNzg4LTRkYTgtYTBhYS03NDQ2OWFjMDZlZjEvODY0ZGE3ZTctNTAxYi0z
MTkwLWE2NTMtYzcxMWMwNDIzNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWU5YmMyNzQtZjc4OC00ZGE4LWEw
YWEtNzQ0NjlhYzA2ZWYxLzVlOWJjMjc0LWY3ODgtNGRhOC1hMGFhLTc0NDY5YWMw
NmVmMS5jcmwwHwYDVR0jBBgwFoAUfftfckjG7BbujH4auySbmYv7Io4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81ZTliYzI3NC1mNzg4LTRkYTgtYTBhYS03NDQ2
OWFjMDZlZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUeIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjOr/RVHYARTG7lK2swO0Jal6L5rN42rUj71aYA3WYjoTN3Ortwyb0x
RL+oA+po8FHSsZPIdqL2RD8NntcM67WiZfP+kvr0M5Mn5eaVCZ6rUMsDm1obCaaQ
fK8rIoWRrxF7hGw9L3JliHmETt5ynv8YGBU+bFPh+2sQIE5olTZQbeiG1U/u3Zil
rSh5miKKh4ssp1MDOooDROSATTnNFdq0nF+I7C19qV1t6izGRsicppNl8qmVvnRh
MLK4t+M6m6g/NPTCl4NgTUhhpcmUWqf4GDWx26LxUCff0QOH839CW+6xRPdhZE7D
tnU3ux/A+s6suK47yeuaFFFfzgeGQak=
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:48:27 2025 by rpki-client