Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5773bbfe-455a-31be-a6a4-580c35bbafb5.roa
File:                     5773bbfe-455a-31be-a6a4-580c35bbafb5.roa (raw, json)
Hash identifier:          QBz1jl8T/e1BSG5FfjyYdi4aaMmMLa8kOGOEvFVMm/k=
Subject key identifier:   39:1E:6B:0E:D0:49:E4:F1:F6:27:31:F7:42:2A:BB:2D:98:D3:82:3F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAAF78B43FF7902B2B5000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5773bbfe-455a-31be-a6a4-580c35bbafb5.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     40575
IP address blocks:        209.128.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:af:78:b4:3f:f7:90:2b:2b:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=316c916b-8482-406b-8e35-db35ece4b7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:db:36:97:5a:79:3c:ee:a6:03:28:91:02:
                    11:05:04:72:07:7a:d4:54:2f:45:99:80:8f:25:5d:
                    b2:1f:ac:a5:e3:67:53:73:ad:2d:a4:d3:6a:39:d0:
                    68:64:f2:71:9d:f2:c8:c0:ef:dd:60:68:be:34:5f:
                    f3:d5:85:01:6f:72:27:5e:3b:39:74:e0:d2:b9:61:
                    9d:37:08:71:4a:c8:59:eb:a3:17:c0:e6:d4:9a:46:
                    a0:4e:63:e5:a3:f8:34:d3:18:02:ad:19:1d:58:04:
                    6c:4a:41:6d:a5:ae:13:d4:a8:f8:02:92:80:4e:3c:
                    34:c6:db:59:83:96:9c:24:62:9f:08:6b:b1:dd:c8:
                    0b:10:3f:fa:56:70:f4:98:c0:77:c4:7b:08:da:37:
                    67:81:dd:13:3d:58:4e:f9:ae:31:1f:09:21:7a:60:
                    f1:59:06:b4:84:18:15:e4:1b:4f:ad:02:5d:76:9d:
                    f1:a3:86:4f:20:0a:33:72:57:b0:9f:1e:de:aa:0f:
                    aa:e6:15:b0:b5:46:e9:5f:13:ab:7c:0d:74:a4:01:
                    77:51:32:12:a8:ef:ed:63:d4:0d:f6:4a:7d:56:24:
                    a5:3c:f4:b2:d4:48:3c:e0:0e:5b:13:01:2a:2b:ed:
                    cc:15:e9:1b:c2:7d:3d:2e:4a:87:12:b3:32:f1:71:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1E:6B:0E:D0:49:E4:F1:F6:27:31:F7:42:2A:BB:2D:98:D3:82:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5773bbfe-455a-31be-a6a4-580c35bbafb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.128.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:51:bf:20:35:80:83:3d:ca:7c:dd:44:2b:21:7e:cb:5d:f1:
         d7:87:f0:59:28:49:1f:30:80:12:40:7b:d6:07:05:76:d5:76:
         aa:35:25:f3:34:70:0e:79:51:20:ca:69:74:91:48:1c:57:44:
         a6:11:ac:bf:d5:83:52:e6:97:8a:e6:91:5f:e0:0e:ed:3a:cf:
         be:c2:28:c6:6c:7e:6f:19:fc:a2:ea:5f:d0:fb:0e:74:e0:ae:
         6c:64:48:09:36:03:b9:4a:ce:55:8f:08:aa:3c:7c:d5:53:d6:
         fe:ff:38:63:38:a2:2c:69:ff:1e:56:2a:bb:d3:d6:89:0f:3d:
         a9:33:fd:52:6c:66:85:8e:51:97:fc:99:34:21:4e:50:45:bb:
         e8:47:4d:66:c0:20:76:8b:3b:d8:4e:f7:d0:ef:bb:ba:e8:f3:
         3e:25:fc:d3:a0:63:47:ab:31:c6:7f:1f:bb:4e:6b:43:a2:60:
         0a:3c:4e:af:d5:96:43:56:9f:f5:62:fb:96:69:de:d2:14:cd:
         d8:03:5f:4c:04:f7:89:6b:10:15:bf:3b:46:65:60:3c:86:3e:
         55:f2:c3:c9:c7:09:6f:ea:f9:20:7b:58:3c:da:1f:9e:e6:1e:
         2c:2d:5f:25:fa:de:8d:4e:61:b4:85:7c:c6:9b:d2:ac:0e:3f:
         29:85:e8:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2q94tD/3kCsrUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MzE2YzkxNmItODQ4Mi00MDZiLThlMzUtZGIzNWVjZTRiN2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMLbNpdaeTzupgMokQIRBQRyB3rUVC9FmYCP
JV2yH6yl42dTc60tpNNqOdBoZPJxnfLIwO/dYGi+NF/z1YUBb3InXjs5dODSuWGd
NwhxSshZ66MXwObUmkagTmPlo/g00xgCrRkdWARsSkFtpa4T1Kj4ApKATjw0xttZ
g5acJGKfCGux3cgLED/6VnD0mMB3xHsI2jdngd0TPVhO+a4xHwkhemDxWQa0hBgV
5BtPrQJddp3xo4ZPIAozclewnx7eqg+q5hWwtUbpXxOrfA10pAF3UTISqO/tY9QN
9kp9ViSlPPSy1Eg84A5bEwEqK+3MFekbwn09LkqHErMy8XGy/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDkeaw7QSeTx9icx90Iquy2Y04I/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNTc3M2JiZmUtNDU1YS0z
MWJlLWE2YTQtNTgwYzM1YmJhZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YA8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5RvyA1gIM9ynzdRCshfstd8deH8FkoSR8wgBJAe9YHBXbVdqo1JfM0
cA55USDKaXSRSBxXRKYRrL/Vg1Lml4rmkV/gDu06z77CKMZsfm8Z/KLqX9D7DnTg
rmxkSAk2A7lKzlWPCKo8fNVT1v7/OGM4oixp/x5WKrvT1okPPakz/VJsZoWOUZf8
mTQhTlBFu+hHTWbAIHaLO9hO99Dvu7ro8z4l/NOgY0erMcZ/H7tOa0OiYAo8Tq/V
lkNWn/Vi+5Zp3tIUzdgDX0wE94lrEBW/O0ZlYDyGPlXyw8nHCW/q+SB7WDzaH57m
HiwtXyX63o1OYbSFfMab0qwOPymF6E4=
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:04:08 2025 by rpki-client