Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7b0ec10-2bdc-3d64-b93e-a5d73c31593b.roa
File:                     b7b0ec10-2bdc-3d64-b93e-a5d73c31593b.roa (raw, json)
Hash identifier:          X9dS/6Ilo27qHl47Rr4ry8/whxhOn7miyI6CLg/zaqY=
Subject key identifier:   E1:A4:C0:7A:BE:07:99:18:8C:3B:61:AF:D7:1D:58:B7:88:D4:6E:A7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970AD71885D578B0CE4700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7b0ec10-2bdc-3d64-b93e-a5d73c31593b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        69.158.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0a:d7:18:85:d5:78:b0:ce:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=bfe3b06b-1a4e-4898-9ad0-60c03537eb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:af:42:fd:a1:b0:48:72:2c:75:c9:b0:d9:
                    94:a1:5c:4c:8f:5a:ff:0a:d8:f1:e7:66:63:d5:62:
                    6a:5e:f2:86:c8:36:2d:ba:b5:cb:3e:6e:67:1c:36:
                    c7:f6:4a:10:7b:37:7a:14:9a:7b:6a:51:e8:4c:de:
                    49:af:19:a1:1f:68:0a:6b:3f:d5:2b:f2:a2:74:1c:
                    45:23:cf:93:70:84:8b:2d:7a:be:c7:bd:55:35:7d:
                    bf:4d:8c:8d:44:fa:b7:f9:35:a1:68:fc:2e:e3:5a:
                    af:ba:ed:76:49:f5:fc:45:ff:53:04:10:83:4a:7c:
                    c1:fc:6c:00:af:e4:cc:df:42:3e:44:e1:8b:d5:7c:
                    15:f7:c0:81:0c:ad:19:d6:9f:30:9c:ec:7b:9a:55:
                    5e:3b:24:90:45:f1:b6:81:92:ef:31:00:3e:c1:cd:
                    38:21:c5:b9:aa:9c:5f:7b:aa:ef:a4:4c:96:b5:84:
                    e7:62:1a:63:8e:aa:80:4c:1c:75:a5:71:0e:92:5b:
                    44:fd:a9:aa:f0:89:2f:3e:b9:5e:c5:d6:5e:d1:94:
                    b1:2f:61:87:92:ea:ad:0d:69:b9:e2:ea:b4:b9:27:
                    00:52:2a:02:50:00:b7:43:fa:21:68:ed:e1:88:c8:
                    13:93:3c:b2:1b:1e:0b:1d:7e:7e:05:95:2f:1b:57:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A4:C0:7A:BE:07:99:18:8C:3B:61:AF:D7:1D:58:B7:88:D4:6E:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b7b0ec10-2bdc-3d64-b93e-a5d73c31593b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c8:40:5d:66:f3:a8:de:de:51:44:8d:29:e5:58:ec:1b:fb:
         0d:a4:48:5c:e3:55:da:4c:d1:16:97:a5:aa:2d:14:fd:a3:3c:
         5a:fc:d9:19:c2:3e:74:b9:72:9c:d5:5f:24:b9:a9:ad:af:4e:
         7f:00:8e:36:8e:29:d0:c6:86:43:e9:23:6c:45:69:ee:cc:28:
         bb:fd:be:db:4f:bd:0e:55:23:d4:93:30:09:60:9b:ee:33:53:
         d8:e6:7d:18:ca:3a:54:01:2a:f3:29:b1:88:23:8d:f3:cb:73:
         34:67:aa:be:82:81:40:1b:3b:1e:e6:27:3e:2b:8d:07:ea:c0:
         00:14:54:1b:bb:c4:eb:f0:7b:24:c3:84:c8:14:0a:1e:28:4b:
         b7:f6:51:e1:c7:c8:62:85:a0:e4:21:12:cd:3f:0e:c8:72:58:
         4b:5f:96:60:69:04:92:1b:08:2d:79:9e:a8:72:39:5b:0b:c3:
         4c:fb:14:85:c4:fe:fc:0d:7e:00:48:f4:7f:24:ca:15:e8:31:
         99:af:15:6a:19:45:d4:f0:b0:90:07:31:e1:71:87:97:50:6c:
         da:a8:87:85:fe:ea:48:b5:2b:61:02:2f:55:36:f5:8b:15:c1:
         f8:9e:90:71:ce:6f:bf:0c:ad:77:9e:ed:1f:57:dc:cf:ef:fb:
         d6:d9:9f:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlwrXGIXVeLDORwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
YmZlM2IwNmItMWE0ZS00ODk4LTlhZDAtNjBjMDM1MzdlYjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBevQv2hsEhyLHXJsNmUoVxMj1r/Ctjx52Zj
1WJqXvKGyDYturXLPm5nHDbH9koQezd6FJp7alHoTN5JrxmhH2gKaz/VK/KidBxF
I8+TcISLLXq+x71VNX2/TYyNRPq3+TWhaPwu41qvuu12SfX8Rf9TBBCDSnzB/GwA
r+TM30I+ROGL1XwV98CBDK0Z1p8wnOx7mlVeOySQRfG2gZLvMQA+wc04IcW5qpxf
e6rvpEyWtYTnYhpjjqqATBx1pXEOkltE/amq8IkvPrlexdZe0ZSxL2GHkuqtDWm5
4uq0uScAUioCUAC3Q/ohaO3hiMgTkzyyGx4LHX5+BZUvG1edVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGkwHq+B5kYjDthr9cdWLeI1G6nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjdiMGVjMTAtMmJkYy0z
ZDY0LWI5M2UtYTVkNzNjMzE1OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARZ7vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErIQF1m86je3lFEjSnlWOwb+w2kSFzjVdpM0RaXpaotFP2jPFr82RnC
PnS5cpzVXyS5qa2vTn8AjjaOKdDGhkPpI2xFae7MKLv9vttPvQ5VI9STMAlgm+4z
U9jmfRjKOlQBKvMpsYgjjfPLczRnqr6CgUAbOx7mJz4rjQfqwAAUVBu7xOvweyTD
hMgUCh4oS7f2UeHHyGKFoOQhEs0/DshyWEtflmBpBJIbCC15nqhyOVsLw0z7FIXE
/vwNfgBI9H8kyhXoMZmvFWoZRdTwsJAHMeFxh5dQbNqoh4X+6ki1K2ECL1U29YsV
wfiekHHOb78MrXee7R9X3M/v+9bZn2Q=
-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:18 2025 by rpki-client