Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/892dab07-fc18-3387-94db-11fb6f735e51.roa
File:                     892dab07-fc18-3387-94db-11fb6f735e51.roa (raw, json)
Hash identifier:          GIe0aBigpqO5rcpMadeAyxmM6+7NLi1qdpWyFLT9Gxw=
Subject key identifier:   53:B6:35:BA:74:F2:45:53:86:1A:17:2D:F3:07:35:2C:15:DA:56:0A
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584A497062C7715E701570B23A80
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/892dab07-fc18-3387-94db-11fb6f735e51.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     32491
IP address blocks:        64.98.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:62:c7:71:5e:70:15:70:b2:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=62fca190-2b0c-4244-bef0-d669888c06b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:65:ac:e2:25:ba:7f:82:09:e3:22:ff:a4:05:
                    af:10:b3:57:73:e2:bc:2d:db:ac:22:eb:3a:b1:de:
                    1a:f8:e0:21:d7:2f:27:a5:e9:5d:4a:f7:18:89:dc:
                    25:bc:ea:32:9c:c2:1c:26:ca:20:bb:c9:b8:e7:6e:
                    c2:19:5c:e0:12:d8:51:53:5f:4a:46:5e:58:7a:6c:
                    d5:9f:06:65:fa:be:73:3d:b3:76:77:1f:e2:da:06:
                    1b:fb:74:64:f9:0a:88:4f:84:b7:c0:6a:e0:1e:97:
                    fc:07:ef:eb:d2:6f:c3:87:3a:32:59:e0:cf:db:91:
                    e6:4f:08:f7:28:e3:85:ac:45:6f:90:87:c3:68:eb:
                    31:f8:10:54:a5:cc:52:d7:44:e1:5a:b6:b6:43:ba:
                    72:20:80:19:fc:69:80:56:07:ee:3f:54:c5:93:09:
                    d0:93:69:ff:e6:58:85:db:f9:61:f0:71:a9:02:3f:
                    b0:23:6d:c6:35:5f:f1:0b:c4:3b:e6:7c:94:18:1c:
                    88:3a:ac:ae:5e:b9:e4:2c:42:c0:0f:20:5c:20:13:
                    79:6e:5a:79:3d:25:d8:f1:00:58:83:4e:48:e9:6b:
                    92:bf:96:ce:76:a6:24:57:3b:a3:7a:df:84:8a:c3:
                    9e:39:c4:1b:8b:85:1f:f4:74:34:ff:2b:25:e1:72:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B6:35:BA:74:F2:45:53:86:1A:17:2D:F3:07:35:2C:15:DA:56:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/892dab07-fc18-3387-94db-11fb6f735e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:9d:3f:d9:29:3f:fd:7c:e3:a8:5d:d4:c7:7e:e0:df:55:9f:
         60:98:1d:01:19:c6:5d:86:98:36:d3:30:c6:2f:c3:88:f6:8e:
         36:bc:b7:93:1b:e6:af:76:3f:f0:16:1c:18:9d:10:e1:a5:5b:
         44:b6:09:31:f4:82:38:19:f0:72:98:78:ab:de:40:6c:05:11:
         26:c8:b4:63:1c:2a:69:9e:dc:ec:9b:66:82:51:70:01:59:d4:
         cd:ce:5b:15:06:51:a6:36:f9:96:8a:a2:d1:e6:73:c3:6a:41:
         c2:06:cd:71:7c:06:45:8e:ca:c2:db:de:97:e5:98:21:11:80:
         dc:7e:50:77:e3:c8:ee:60:10:6a:5f:08:50:1b:52:33:5b:28:
         f3:11:e9:a7:f4:db:2b:b8:1c:f0:8f:97:2f:d1:39:b3:30:67:
         da:1e:18:fb:2c:ff:c9:55:e6:7d:7b:e3:65:24:69:59:0d:6e:
         8d:01:b0:fa:91:89:d2:6a:ff:fd:a4:f6:a2:23:bb:f4:a4:42:
         3b:7c:b4:64:ce:e1:d5:36:a3:db:c8:35:0d:6e:ed:3d:fb:3a:
         cd:17:51:6b:af:41:c9:d1:6c:d9:3f:2d:c1:7b:f0:57:13:d6:
         a2:58:be:3a:28:9d:21:11:75:3a:50:c5:3e:38:69:94:25:21:
         f5:4b:82:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGLHcV5wFXCyOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk
NjJmY2ExOTAtMmIwYy00MjQ0LWJlZjAtZDY2OTg4OGMwNmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2Ws4iW6f4IJ4yL/pAWvELNXc+K8LdusIus6
sd4a+OAh1y8npeldSvcYidwlvOoynMIcJsogu8m4527CGVzgEthRU19KRl5YemzV
nwZl+r5zPbN2dx/i2gYb+3Rk+QqIT4S3wGrgHpf8B+/r0m/DhzoyWeDP25HmTwj3
KOOFrEVvkIfDaOsx+BBUpcxS10ThWra2Q7pyIIAZ/GmAVgfuP1TFkwnQk2n/5liF
2/lh8HGpAj+wI23GNV/xC8Q75nyUGByIOqyuXrnkLELADyBcIBN5blp5PSXY8QBY
g05I6WuSv5bOdqYkVzujet+EisOeOcQbi4Uf9HQ0/ysl4XJc+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFO2Nbp08kVThhoXLfMHNSwV2lYKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvODkyZGFiMDctZmMxOC0z
Mzg3LTk0ZGItMTFmYjZmNzM1ZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQGKwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALqdP9kpP/1846hd1Md+4N9Vn2CYHQEZxl2GmDbTMMYvw4j2jja8t5Mb
5q92P/AWHBidEOGlW0S2CTH0gjgZ8HKYeKveQGwFESbItGMcKmme3OybZoJRcAFZ
1M3OWxUGUaY2+ZaKotHmc8NqQcIGzXF8BkWOysLb3pflmCERgNx+UHfjyO5gEGpf
CFAbUjNbKPMR6af02yu4HPCPly/RObMwZ9oeGPss/8lV5n1742UkaVkNbo0BsPqR
idJq//2k9qIju/SkQjt8tGTO4dU2o9vINQ1u7T37Os0XUWuvQcnRbNk/LcF78FcT
1qJYvjoonSERdTpQxT44aZQlIfVLgiY=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:26:40 2025 by rpki-client