Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d25750-701f-3253-ad38-368bc9596c15.roa
File:                     d1d25750-701f-3253-ad38-368bc9596c15.roa (raw, json)
Hash identifier:          QsptQd4hPLFatJtp1uNvNPT7eu2yVNu8CuMBFEztd70=
Subject key identifier:   D4:08:98:4A:0C:CD:6B:87:F5:FF:8F:92:B5:71:91:C5:04:98:BA:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849CE9A72251F7012131F808200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d25750-701f-3253-ad38-368bc9596c15.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     7342
IP address blocks:        64.6.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:72:25:1f:70:12:13:1f:80:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=f27f1045-c40d-460d-89f3-6588bcd3e4ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:11:7e:e4:3f:c4:f2:51:bd:27:17:35:50:13:
                    77:ef:01:7a:05:cc:19:9b:94:b4:ce:db:25:b3:94:
                    b2:fa:a5:5a:bd:7e:f7:1c:9d:3e:28:88:33:1d:4b:
                    9a:1d:e9:60:b0:be:9f:df:9e:6c:1e:6d:8f:c2:cf:
                    1a:ca:50:bb:e6:4f:39:ed:2a:87:82:f8:b7:f5:a0:
                    09:5d:71:b3:53:31:d0:34:1d:56:3c:d1:b4:22:21:
                    18:d6:f9:91:ad:fc:ee:84:26:f7:a5:00:df:4c:fc:
                    e4:c1:e1:b7:68:75:0c:9c:7d:83:3f:84:07:45:a8:
                    53:32:83:1d:11:87:d6:f9:71:68:79:8f:a4:99:98:
                    ae:ef:24:62:9c:dc:9d:ec:39:69:1a:a4:6a:78:d5:
                    1b:cb:e1:a6:a5:69:81:ee:3b:33:62:8b:43:1f:94:
                    71:cc:34:01:8c:11:d9:8e:db:c3:57:75:6d:c1:52:
                    30:dd:4b:85:ed:c3:a7:9e:52:4e:af:c8:7d:a0:31:
                    0b:16:33:d6:fd:2d:2c:70:b0:fd:f8:d6:9e:4b:7b:
                    6b:6c:88:f1:79:d4:c0:bd:5c:3e:c0:ea:da:6b:a3:
                    55:c8:b3:2c:b7:9c:d2:f9:5e:6c:12:74:25:ed:d8:
                    de:08:81:7e:4b:98:43:48:e7:0b:d6:11:1d:43:af:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:08:98:4A:0C:CD:6B:87:F5:FF:8F:92:B5:71:91:C5:04:98:BA:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d25750-701f-3253-ad38-368bc9596c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a5:4c:03:99:aa:9a:a6:df:0a:79:42:7c:72:97:52:17:a4:
         3a:e1:e5:b0:54:5e:64:98:0d:c2:5c:8b:8e:9c:69:33:b0:82:
         26:b0:20:93:5a:01:71:b2:62:c2:af:00:63:3b:e5:5b:37:62:
         8d:ef:21:39:3f:57:4b:04:1c:7c:22:21:45:f1:5a:4b:29:a3:
         63:1b:16:4c:ab:24:68:bb:4d:ca:45:89:52:fa:24:d4:d4:7a:
         d1:74:8b:dc:52:00:73:7d:ed:f1:2c:7d:43:2a:bc:49:d1:5a:
         ca:5e:23:54:6f:88:d2:62:b3:2e:98:a2:01:b7:16:16:77:68:
         05:1b:54:ae:1a:0c:ea:33:29:a3:e0:55:aa:03:c0:5b:f2:89:
         71:a3:39:fd:91:f8:3b:69:fc:be:05:35:2c:4e:80:87:69:81:
         4c:55:47:00:25:c5:ff:34:69:a2:36:24:81:6e:43:76:b3:35:
         6e:a3:72:da:9e:89:d7:80:5e:2b:3a:13:c8:bd:c1:00:42:49:
         7a:52:93:b9:0f:27:21:16:50:ee:83:c2:fd:b0:3a:15:d9:5f:
         6a:7c:91:db:2f:f1:35:0f:02:42:b1:e6:53:5b:42:51:ec:29:
         05:ff:71:36:a3:83:89:78:24:cd:4d:98:b8:db:c1:37:d9:59:
         63:ba:dd:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmnIlH3ASEx+AggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
ZjI3ZjEwNDUtYzQwZC00NjBkLTg5ZjMtNjU4OGJjZDNlNGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBF+5D/E8lG9Jxc1UBN37wF6BcwZm5S0ztsl
s5Sy+qVavX73HJ0+KIgzHUuaHelgsL6f355sHm2Pws8aylC75k857SqHgvi39aAJ
XXGzUzHQNB1WPNG0IiEY1vmRrfzuhCb3pQDfTPzkweG3aHUMnH2DP4QHRahTMoMd
EYfW+XFoeY+kmZiu7yRinNyd7DlpGqRqeNUby+GmpWmB7jszYotDH5RxzDQBjBHZ
jtvDV3VtwVIw3UuF7cOnnlJOr8h9oDELFjPW/S0scLD9+NaeS3trbIjxedTAvVw+
wOraa6NVyLMst5zS+V5sEnQl7djeCIF+S5hDSOcL1hEdQ68x7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQImEoMzWuH9f+PkrVxkcUEmLpVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDFkMjU3NTAtNzAxZi0z
MjUzLWFkMzgtMzY4YmM5NTk2YzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAZJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+lTAOZqpqm3wp5Qnxyl1IXpDrh5bBUXmSYDcJci46caTOwgiawIJNa
AXGyYsKvAGM75Vs3Yo3vITk/V0sEHHwiIUXxWkspo2MbFkyrJGi7TcpFiVL6JNTU
etF0i9xSAHN97fEsfUMqvEnRWspeI1RviNJisy6YogG3FhZ3aAUbVK4aDOozKaPg
VaoDwFvyiXGjOf2R+Dtp/L4FNSxOgIdpgUxVRwAlxf80aaI2JIFuQ3azNW6jctqe
ideAXis6E8i9wQBCSXpSk7kPJyEWUO6Dwv2wOhXZX2p8kdsv8TUPAkKx5lNbQlHs
KQX/cTajg4l4JM1NmLjbwTfZWWO63YY=
-----END CERTIFICATE-----
Generated at Sun May 11 12:44:36 2025 by rpki-client