Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c6989b4e-4153-3c32-b2c1-c5356fec346e.roa
File:                     c6989b4e-4153-3c32-b2c1-c5356fec346e.roa (raw, json)
Hash identifier:          KB3nFZM2nE1kKTflIZUsgctBtGuccoXNjuNsfLDxmsA=
Subject key identifier:   A3:9E:9A:A0:67:5B:AE:49:12:7A:7E:8F:A2:07:5A:D0:62:00:12:13
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584B2A2C305E78B53B9E90171FB0
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c6989b4e-4153-3c32-b2c1-c5356fec346e.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     32491
IP address blocks:        64.98.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:30:5e:78:b5:3b:9e:90:17:1f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=8193bac8-bef7-4a0c-9514-0f66bc277efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:0b:ab:e5:66:78:69:12:14:f4:7f:6d:5e:
                    64:4a:e0:d8:f4:1e:ca:b0:be:2b:4c:4e:5b:e4:0f:
                    65:a6:cd:fb:30:99:0c:69:30:67:95:47:61:96:88:
                    fc:72:79:92:6b:8a:a9:50:7d:4e:d3:9c:a6:6b:5e:
                    f3:25:66:ce:8d:bf:95:84:86:90:db:61:3b:45:23:
                    48:64:7f:f6:6c:12:f4:5a:d4:de:45:93:b6:4e:b3:
                    dd:87:61:24:ef:68:81:a8:a5:2b:b1:28:64:26:fc:
                    d1:1a:e4:02:3a:df:6b:c2:e5:d5:2f:4a:65:26:94:
                    79:ee:1a:4d:47:6a:d4:87:48:85:33:45:d0:bb:37:
                    80:d5:2b:f5:dd:d4:1a:ef:0c:fb:2a:88:7b:81:ad:
                    79:c0:9e:a9:6a:fa:c2:66:4c:ac:9a:d7:4e:8c:78:
                    87:3e:77:30:2b:42:97:fd:78:f7:ae:99:51:62:18:
                    b2:85:3d:21:99:07:30:fe:9b:5c:1c:62:de:2b:32:
                    0f:ad:9f:31:7e:2c:2b:e9:96:b4:8d:b3:5a:2a:72:
                    49:d4:88:3f:cf:b6:53:8b:06:f9:a7:fe:52:79:27:
                    33:bf:b5:93:7e:36:87:38:05:56:53:0e:df:3d:bd:
                    2d:a2:09:4c:d8:21:62:f8:04:b7:f1:0a:7b:26:b4:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9E:9A:A0:67:5B:AE:49:12:7A:7E:8F:A2:07:5A:D0:62:00:12:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c6989b4e-4153-3c32-b2c1-c5356fec346e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e5:7e:62:4d:64:0a:3d:55:24:0c:7c:a6:72:97:17:76:41:
         90:68:b8:6c:df:db:7e:4f:cf:91:d1:55:e8:3a:72:e7:dc:7c:
         5e:85:b6:11:19:fe:f9:e8:f6:b5:70:1b:85:74:6b:2c:0e:f3:
         63:cf:7c:7b:49:62:40:da:08:5a:8c:e8:a6:f8:12:3f:1b:3b:
         59:a5:48:2f:d4:b2:cc:32:1c:e1:3a:6f:b8:fa:c9:2c:d8:03:
         a4:8f:b7:9d:5c:d6:e6:22:3e:a3:93:44:2f:7b:76:54:28:9c:
         21:8d:2e:95:fe:ad:1b:a2:eb:e6:1c:66:a3:3d:01:05:62:b3:
         35:1c:cd:59:e3:b9:c0:7b:ae:2c:ea:9f:db:4f:22:12:9f:82:
         eb:20:41:d5:49:53:39:54:9a:a2:cc:5c:8d:2c:26:19:f7:6a:
         9c:85:22:5f:ff:c8:2e:cd:81:5e:78:95:de:3b:42:45:51:98:
         29:b2:e2:c2:1c:a4:87:f6:96:c6:fc:40:d5:18:a2:cc:73:fe:
         3a:bc:53:6c:c8:44:80:15:c4:3b:e8:25:ec:7b:34:96:d3:02:
         2b:32:a8:1e:06:3a:8f:0f:f9:13:03:63:4c:cc:f5:af:c9:75:
         67:ef:35:67:fc:e5:1e:68:db:59:d5:00:b4:6f:a9:95:04:f3:
         12:df:5a:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDBeeLU7npAXH7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
ODE5M2JhYzgtYmVmNy00YTBjLTk1MTQtMGY2NmJjMjc3ZWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoQLq+VmeGkSFPR/bV5kSuDY9B7KsL4rTE5b
5A9lps37MJkMaTBnlUdhloj8cnmSa4qpUH1O05yma17zJWbOjb+VhIaQ22E7RSNI
ZH/2bBL0WtTeRZO2TrPdh2Ek72iBqKUrsShkJvzRGuQCOt9rwuXVL0plJpR57hpN
R2rUh0iFM0XQuzeA1Sv13dQa7wz7Koh7ga15wJ6pavrCZkysmtdOjHiHPncwK0KX
/Xj3rplRYhiyhT0hmQcw/ptcHGLeKzIPrZ8xfiwr6Za0jbNaKnJJ1Ig/z7ZTiwb5
p/5SeSczv7WTfjaHOAVWUw7fPb0toglM2CFi+AS38Qp7JrR8LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOemqBnW65JEnp+j6IHWtBiABITMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvYzY5ODliNGUtNDE1My0z
YzMyLWIyYzEtYzUzNTZmZWMzNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQGKRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACPlfmJNZAo9VSQMfKZylxd2QZBouGzf235Pz5HRVeg6cufcfF6FthEZ
/vno9rVwG4V0aywO82PPfHtJYkDaCFqM6Kb4Ej8bO1mlSC/UsswyHOE6b7j6ySzY
A6SPt51c1uYiPqOTRC97dlQonCGNLpX+rRui6+YcZqM9AQViszUczVnjucB7rizq
n9tPIhKfgusgQdVJUzlUmqLMXI0sJhn3apyFIl//yC7NgV54ld47QkVRmCmy4sIc
pIf2lsb8QNUYosxz/jq8U2zIRIAVxDvoJex7NJbTAisyqB4GOo8P+RMDY0zM9a/J
dWfvNWf85R5o21nVALRvqZUE8xLfWh0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:06:53 2025 by rpki-client