Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dc1979d3-70ac-3c9a-ae0a-8b039413cde7.roa
File:                     dc1979d3-70ac-3c9a-ae0a-8b039413cde7.roa (raw, json)
Hash identifier:          g52BLg6c/3JpfEaVMopx1qMijjosQ9oxtGPigqMhAaE=
Subject key identifier:   90:14:C2:5F:CD:7E:FB:26:27:1B:03:63:0F:D7:0E:FC:77:22:B7:D1
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584ADD6683D785BF6DE232812980
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dc1979d3-70ac-3c9a-ae0a-8b039413cde7.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     64286
IP address blocks:        64.64.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:83:d7:85:bf:6d:e2:32:81:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=6b7c22f5-e0ca-49dc-84bf-d82e5cde1b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:13:c2:32:47:03:fc:1b:33:5c:74:47:c6:b8:
                    cb:4e:66:6b:a6:c5:07:c8:09:12:0a:92:e5:f1:91:
                    62:02:ef:76:bc:f3:c2:8f:4e:5e:79:bd:07:c1:85:
                    a6:db:e3:06:90:72:38:28:9a:97:20:d1:ec:c0:f3:
                    2a:30:6f:29:7b:35:b3:2a:69:34:b8:37:1a:a4:71:
                    9c:5e:91:77:ec:3e:b9:bd:da:82:e2:c0:2a:1a:86:
                    3c:88:b4:8e:f3:13:17:dc:64:e1:34:ab:9f:60:c6:
                    1a:70:27:7f:65:5b:2c:dd:cb:4a:0b:bc:07:fb:48:
                    a5:b3:6f:b1:d3:52:d2:46:cb:b8:e5:3a:78:a1:f8:
                    a9:cb:66:cf:1e:8c:ef:76:38:c4:51:f1:36:2f:17:
                    a7:d3:28:81:6c:9d:de:d0:9e:68:de:f4:0b:4c:fd:
                    46:e8:7a:67:14:88:de:11:fd:a0:16:6d:f4:e7:78:
                    e3:21:7c:6d:ad:8a:76:bb:0a:51:b0:39:7b:cf:fc:
                    a3:c4:05:63:60:df:40:e0:5e:c8:43:83:84:21:fc:
                    98:1c:78:f6:35:f3:e8:10:22:eb:b7:95:3e:40:4b:
                    e8:1c:b1:4d:c7:4e:8c:1e:f6:af:7a:e9:c0:88:c4:
                    67:0b:8d:1b:cd:59:ba:d4:84:27:43:06:17:55:54:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:14:C2:5F:CD:7E:FB:26:27:1B:03:63:0F:D7:0E:FC:77:22:B7:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/dc1979d3-70ac-3c9a-ae0a-8b039413cde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:bb:9b:b7:56:3a:5b:09:82:2e:0b:1b:00:64:92:af:4f:3b:
         35:66:e5:60:23:b6:91:a1:76:79:5f:b2:fa:f5:ec:46:86:bd:
         b1:fc:81:47:d9:5b:8c:4d:9e:fd:12:ca:c8:a7:13:ac:c4:72:
         17:4b:5d:fa:0c:e6:46:de:12:2c:71:b7:94:6f:3b:4b:f0:d3:
         38:d4:d8:d5:e9:c8:8c:cc:c0:0d:67:3d:0d:2a:fc:26:ef:3c:
         37:1a:73:8a:14:19:75:ee:d7:87:c8:30:bf:71:04:ea:ff:29:
         bf:c6:91:6f:e2:94:2e:fa:de:cf:ea:40:b9:36:f0:57:fa:b5:
         6e:89:5b:c6:50:f7:b5:6a:4b:78:0b:0e:f3:b1:9d:0b:a4:6d:
         35:38:8f:9e:00:83:98:5c:d9:f4:33:6c:4e:16:06:74:7b:13:
         48:88:fe:95:34:6c:3c:ef:94:d1:54:87:5f:fc:e9:2e:50:ed:
         84:28:ed:77:c8:7d:19:55:08:e0:a4:fc:e3:b6:d6:fd:46:b3:
         f0:9d:b7:d0:30:e9:d3:c7:71:48:4f:e2:00:78:3b:fa:fa:04:
         ca:c0:55:a9:4e:a2:4c:a8:20:36:a4:c0:16:ad:8c:44:a1:50:
         f5:ed:c7:22:29:b7:a6:bd:da:32:b0:83:94:27:b8:08:cc:e4:
         75:1a:33:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoPXhb9t4jKBKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk
NmI3YzIyZjUtZTBjYS00OWRjLTg0YmYtZDgyZTVjZGUxYjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixPCMkcD/BszXHRHxrjLTmZrpsUHyAkSCpLl
8ZFiAu92vPPCj05eeb0HwYWm2+MGkHI4KJqXINHswPMqMG8pezWzKmk0uDcapHGc
XpF37D65vdqC4sAqGoY8iLSO8xMX3GThNKufYMYacCd/ZVss3ctKC7wH+0ils2+x
01LSRsu45Tp4ofipy2bPHozvdjjEUfE2Lxen0yiBbJ3e0J5o3vQLTP1G6HpnFIje
Ef2gFm3053jjIXxtrYp2uwpRsDl7z/yjxAVjYN9A4F7IQ4OEIfyYHHj2NfPoECLr
t5U+QEvoHLFNx06MHvaveunAiMRnC40bzVm61IQnQwYXVVR6YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJAUwl/NfvsmJxsDYw/XDvx3IrfRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvZGMxOTc5ZDMtNzBhYy0z
YzlhLWFlMGEtOGIwMzk0MTNjZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEBoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADK7m7dWOlsJgi4LGwBkkq9POzVm5WAjtpGhdnlfsvr17EaGvbH8gUfZ
W4xNnv0SysinE6zEchdLXfoM5kbeEixxt5RvO0vw0zjU2NXpyIzMwA1nPQ0q/Cbv
PDcac4oUGXXu14fIML9xBOr/Kb/GkW/ilC763s/qQLk28Ff6tW6JW8ZQ97VqS3gL
DvOxnQukbTU4j54Ag5hc2fQzbE4WBnR7E0iI/pU0bDzvlNFUh1/86S5Q7YQo7XfI
fRlVCOCk/OO21v1Gs/Cdt9Aw6dPHcUhP4gB4O/r6BMrAValOokyoIDakwBatjESh
UPXtxyIpt6a92jKwg5QnuAjM5HUaM5s=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:35:28 2025 by rpki-client