Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/95c37dc5-4af1-35df-b43e-52d457c356c7.roa
File:                     95c37dc5-4af1-35df-b43e-52d457c356c7.roa (raw, json)
Hash identifier:          mCr8aofePyZBAhuG8oh9jt2V88e3uXjnaIAf/4Tvre8=
Subject key identifier:   9F:99:F2:84:F6:2F:1E:F9:65:FF:04:BD:2E:15:53:9B:F1:5A:E4:88
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584A119AAE589B073BF57875AE80
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/95c37dc5-4af1-35df-b43e-52d457c356c7.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     1239
IP address blocks:        63.161.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ae:58:9b:07:3b:f5:78:75:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=61493b7c-8e88-4dbc-821b-743692bf6984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:fd:e3:1f:a0:19:d5:89:56:3b:25:06:db:
                    26:76:9c:44:29:76:b1:47:29:7f:64:b3:17:ab:09:
                    cd:93:48:69:e8:67:95:49:44:4f:94:ae:c2:0a:ff:
                    b8:f5:bf:8f:2f:4a:cb:8b:92:73:69:80:37:6b:4d:
                    dc:30:7a:34:46:a0:e1:26:6a:b5:bb:a8:2d:00:d8:
                    91:f8:e8:22:44:2d:f5:89:10:21:e9:47:59:0c:27:
                    3b:cd:7f:64:95:d3:74:d3:bd:33:37:89:83:43:fc:
                    30:15:1b:b0:ba:b1:3b:8d:11:e0:70:60:f3:5e:c6:
                    54:75:d3:c4:81:48:36:a1:ba:21:7f:11:30:12:ab:
                    fa:b3:41:13:aa:53:8f:55:b9:98:1b:b1:7c:44:83:
                    39:8d:2b:02:68:d8:3b:e5:3b:c7:f3:5e:f1:92:ce:
                    72:66:a3:48:3b:9f:ef:15:68:d2:99:dd:1e:b0:3a:
                    bb:16:9d:cc:14:5f:ec:7b:1c:8a:13:47:ec:0f:cc:
                    ae:9d:f9:9c:ba:22:0b:d3:85:ae:23:c8:07:2c:cd:
                    f8:77:e8:54:d2:bf:68:80:10:2f:a6:8f:44:d7:b8:
                    b8:32:0b:96:d5:df:65:20:17:4e:4f:c8:e6:87:be:
                    39:e3:7e:fc:82:de:79:64:a5:e3:85:80:fa:04:6f:
                    95:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:99:F2:84:F6:2F:1E:F9:65:FF:04:BD:2E:15:53:9B:F1:5A:E4:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/95c37dc5-4af1-35df-b43e-52d457c356c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.161.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d4:1f:01:28:e5:a4:28:3c:f2:6f:6d:63:bf:f7:b9:9e:f1:
         8b:2e:27:bb:35:7a:d2:6f:32:e0:2b:63:ee:f1:74:34:4c:65:
         d9:26:e9:a2:39:a5:3f:8c:0b:53:30:77:7a:db:be:5b:10:7b:
         e8:7f:d1:c7:3f:7f:19:60:92:73:73:11:9c:56:90:3b:05:48:
         fa:89:8f:23:45:ab:ca:e7:9b:46:61:95:cc:e0:46:d2:26:ab:
         e5:c4:75:ac:24:46:b1:9f:d0:be:c2:7a:25:db:29:d0:84:5a:
         c7:1b:3c:75:7a:9c:c3:cc:20:3f:8a:69:c9:60:66:48:04:37:
         33:34:d2:c3:8a:c0:0f:9a:2c:5e:13:5a:b8:cf:9a:d2:75:9b:
         2d:0e:4c:78:19:75:e5:76:bf:ad:29:66:38:a5:d6:7a:9f:c1:
         07:08:13:86:91:0c:45:12:b5:83:7e:dc:8e:b0:5d:a0:f6:c5:
         ed:96:ee:42:b1:a7:b1:04:b4:6c:30:09:64:ff:4c:00:f4:58:
         4d:ed:04:d6:b9:05:1b:64:10:53:bd:3e:18:23:c5:a4:f7:71:
         29:e8:f7:3d:68:6f:25:0c:ae:ff:cc:bf:d7:2b:35:a5:80:43:
         6a:25:9e:27:cf:cd:5c:6c:17:5c:c0:c5:7a:95:5a:6b:7e:fc:
         7c:81:f5:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmq5Ymwc79Xh1roAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk
NjE0OTNiN2MtOGU4OC00ZGJjLTgyMWItNzQzNjkyYmY2OTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmf94x+gGdWJVjslBtsmdpxEKXaxRyl/ZLMX
qwnNk0hp6GeVSURPlK7CCv+49b+PL0rLi5JzaYA3a03cMHo0RqDhJmq1u6gtANiR
+OgiRC31iRAh6UdZDCc7zX9kldN0070zN4mDQ/wwFRuwurE7jRHgcGDzXsZUddPE
gUg2obohfxEwEqv6s0ETqlOPVbmYG7F8RIM5jSsCaNg75TvH817xks5yZqNIO5/v
FWjSmd0esDq7Fp3MFF/sexyKE0fsD8yunfmcuiIL04WuI8gHLM34d+hU0r9ogBAv
po9E17i4MguW1d9lIBdOT8jmh7454378gt55ZKXjhYD6BG+VuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+Z8oT2Lx75Zf8EvS4VU5vxWuSIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvOTVjMzdkYzUtNGFmMS0z
NWRmLWI0M2UtNTJkNDU3YzM1NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6FpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLUHwEo5aQoPPJvbWO/97me8YsuJ7s1etJvMuArY+7xdDRMZdkm6aI5
pT+MC1Mwd3rbvlsQe+h/0cc/fxlgknNzEZxWkDsFSPqJjyNFq8rnm0ZhlczgRtIm
q+XEdawkRrGf0L7CeiXbKdCEWscbPHV6nMPMID+KaclgZkgENzM00sOKwA+aLF4T
WrjPmtJ1my0OTHgZdeV2v60pZjil1nqfwQcIE4aRDEUStYN+3I6wXaD2xe2W7kKx
p7EEtGwwCWT/TAD0WE3tBNa5BRtkEFO9PhgjxaT3cSno9z1obyUMrv/Mv9crNaWA
Q2olnifPzVxsF1zAxXqVWmt+/HyB9Zo=
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:47:29 2025 by rpki-client