Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/9ef513b6-1797-3d6b-bb78-9772e3048ccf.roa
File:                     9ef513b6-1797-3d6b-bb78-9772e3048ccf.roa (raw, json)
Hash identifier:          bnRKnUv+NwCsdHctqih8AhXksBni0Q4CiuW4Z3/DMY8=
Subject key identifier:   15:AB:8E:76:41:73:FF:4F:A4:4A:22:82:3B:84:1F:F5:7B:9F:76:9D
Certificate issuer:       /CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
Certificate serial:       010D0C9F4328584A35E58B0AB5D6A97AC3A85580
Authority key identifier: F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/9ef513b6-1797-3d6b-bb78-9772e3048ccf.roa
Signing time:             Mon 16 Jun 2025 13:01:03 +0000
ROA not before:           Mon 16 Jun 2025 13:01:03 +0000
ROA not after:            Sun 14 Sep 2025 13:01:03 +0000
asID:                     36131
IP address blocks:        69.57.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:35:e5:8b:0a:b5:d6:a9:7a:c3:a8:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
        Validity
            Not Before: Jun 16 13:01:03 2025 GMT
            Not After : Sep 14 13:01:03 2025 GMT
        Subject: CN=6dd685eb-eb30-4c62-b9c0-4c85a903cbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:16:7c:66:2b:c9:54:02:b1:5b:fc:ff:db:87:
                    47:08:07:28:74:41:40:e5:41:5d:12:d3:aa:a8:3c:
                    9a:a0:95:f7:ad:6d:13:12:b8:fc:9f:9a:52:47:f4:
                    ae:70:43:53:b9:9f:6b:cd:03:4e:84:5c:99:16:b7:
                    3b:92:da:70:34:8f:6b:f8:5e:46:3a:f4:52:e2:c9:
                    ff:b1:5f:0a:89:69:99:0d:9a:9a:cd:ec:19:ee:70:
                    c1:9c:26:6e:8b:71:3b:74:9c:83:5e:44:25:3f:e7:
                    39:ea:87:cf:2a:06:5b:92:f2:1b:6a:77:52:44:36:
                    f8:fb:2e:b8:f0:6c:10:a3:cd:78:c8:a9:10:d6:60:
                    99:43:76:f4:e4:01:ee:41:e3:bd:80:9e:e3:04:17:
                    e0:6d:f7:c2:8a:fd:5b:07:08:f7:37:3a:7c:26:b5:
                    3a:bc:f6:04:c2:c3:c6:85:ba:9b:0e:e4:ba:86:4d:
                    58:5a:99:0d:43:3e:43:a5:5e:62:b4:25:2f:2a:1e:
                    64:53:e1:d1:d8:4c:1b:b2:2a:30:82:f6:2c:59:de:
                    4c:37:e3:31:c7:e3:c1:6d:b4:09:33:78:b3:7f:6a:
                    de:49:61:79:77:bf:08:17:ce:3e:16:42:a4:e0:2d:
                    54:24:3b:aa:b9:51:2f:88:88:68:85:f3:62:0d:d0:
                    44:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AB:8E:76:41:73:FF:4F:A4:4A:22:82:3B:84:1F:F5:7B:9F:76:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/9ef513b6-1797-3d6b-bb78-9772e3048ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl

            X509v3 Authority Key Identifier:
                keyid:F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.57.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:32:ac:7b:3a:4a:6b:c5:a5:73:be:80:43:db:36:0c:55:76:
         33:31:c3:30:d1:8f:33:06:f1:56:31:cb:07:e5:65:9c:fb:5c:
         f5:b7:59:3d:52:25:98:f2:73:f1:88:9e:30:24:1f:c8:d4:84:
         70:85:4d:30:33:21:fc:20:50:62:00:c3:f8:3c:05:3e:f8:07:
         58:c0:0d:7b:4e:73:35:1c:4f:c9:26:f4:a0:73:ae:94:32:b4:
         44:90:22:c7:b3:79:97:c4:ee:b4:2c:86:30:f5:5d:34:f9:a6:
         44:a3:29:56:fb:9b:f5:62:10:fa:2a:c1:4e:22:e5:14:aa:02:
         fa:e8:84:df:97:32:a1:e8:4e:12:92:0d:ba:f1:ad:73:29:39:
         36:76:da:d4:b1:76:91:16:9b:79:6d:2f:6f:93:8f:6b:cd:bf:
         4e:26:be:74:21:5f:a0:b1:25:20:73:1b:f8:85:ea:33:ee:d5:
         ec:69:09:f4:f6:c0:4b:6b:c8:40:b5:61:35:2d:a1:30:f3:2d:
         fc:fd:b3:f8:11:b1:18:09:55:3e:9d:3f:7e:78:b5:15:ac:f4:
         25:8b:06:09:54:02:24:77:7d:c3:8c:5f:77:0c:1f:90:3b:e6:
         1e:b9:6c:56:9e:6a:a3:07:4d:4c:a5:e5:c6:33:d3:d6:2d:33:
         56:e2:59:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15YsKtdapesOoVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU5MjUzZmUtOGI0Zi00OGY2LTlmZTEtMTA5ZGY2YmIz
MjUxMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk
NmRkNjg1ZWItZWIzMC00YzYyLWI5YzAtNGM4NWE5MDNjYmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghZ8ZivJVAKxW/z/24dHCAcodEFA5UFdEtOq
qDyaoJX3rW0TErj8n5pSR/SucENTuZ9rzQNOhFyZFrc7ktpwNI9r+F5GOvRS4sn/
sV8KiWmZDZqazewZ7nDBnCZui3E7dJyDXkQlP+c56ofPKgZbkvIbandSRDb4+y64
8GwQo814yKkQ1mCZQ3b05AHuQeO9gJ7jBBfgbffCiv1bBwj3Nzp8JrU6vPYEwsPG
hbqbDuS6hk1YWpkNQz5DpV5itCUvKh5kU+HR2EwbsiowgvYsWd5MN+Mxx+PBbbQJ
M3izf2reSWF5d78IF84+FkKk4C1UJDuquVEviIhohfNiDdBE4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWrjnZBc/9PpEoigjuEH/V7n3adMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTky
NTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlkZjZiYjMyNTEvOWVmNTEzYjYtMTc5Ny0z
ZDZiLWJiNzgtOTc3MmUzMDQ4Y2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTU5MjUzZmUtOGI0Zi00OGY2LTlm
ZTEtMTA5ZGY2YmIzMjUxLzU1OTI1M2ZlLThiNGYtNDhmNi05ZmUxLTEwOWRmNmJi
MzI1MS5jcmwwHwYDVR0jBBgwFoAU+dOqBOdJT5n/YbCdWYtxuQDxUwswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTkyNTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlk
ZjZiYjMyNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTmtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD8yrHs6SmvFpXO+gEPbNgxVdjMxwzDRjzMG8VYxywflZZz7XPW3WT1S
JZjyc/GInjAkH8jUhHCFTTAzIfwgUGIAw/g8BT74B1jADXtOczUcT8km9KBzrpQy
tESQIsezeZfE7rQshjD1XTT5pkSjKVb7m/ViEPoqwU4i5RSqAvrohN+XMqHoThKS
DbrxrXMpOTZ22tSxdpEWm3ltL2+Tj2vNv04mvnQhX6CxJSBzG/iF6jPu1expCfT2
wEtryEC1YTUtoTDzLfz9s/gRsRgJVT6dP354tRWs9CWLBglUAiR3fcOMX3cMH5A7
5h65bFaeaqMHTUyl5cYz09YtM1biWWs=
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:05:32 2025 by rpki-client