Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa
File:                     a468cae4-4d9c-382f-8572-d90d29d27e8c.roa (raw, json)
Hash identifier:          rezmZuAX1+RY/g/A2ko/1gvf8+4nHlCcMF5X3hpvAdw=
Subject key identifier:   D6:08:05:E0:3E:C5:74:37:C0:DF:3D:60:BC:41:8D:8B:9E:F7:CB:E5
Certificate issuer:       /CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
Certificate serial:       010D0C9F4328584A30503FADA85B1262954E0480
Authority key identifier: 8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     26277
IP address blocks:        64.235.41.0/24 maxlen: 24
                          64.235.43.0/24 maxlen: 24
                          64.235.45.0/24 maxlen: 24
                          64.235.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3f:ad:a8:5b:12:62:95:4e:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=c63c2b8e-96a8-4afc-9b0d-eda9a1ea37b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:8f:b2:ab:e1:9d:69:8b:6f:c8:ec:86:ea:
                    2d:e0:97:ca:09:44:21:c4:ec:00:f1:06:29:f5:8c:
                    d3:0a:ab:34:b5:08:27:b7:8c:87:2c:9b:b7:f6:8a:
                    2f:b1:8a:a2:b6:7e:d8:97:18:78:01:3f:5b:ca:2e:
                    7e:3f:7e:57:62:4f:26:e0:ba:bb:c1:53:81:f8:c2:
                    35:38:31:91:ca:db:91:5c:a6:59:d5:26:81:aa:04:
                    da:08:5d:f4:43:c9:bd:27:35:73:4c:77:e3:9c:cc:
                    a3:b1:a0:a2:4a:20:a0:5a:2c:36:be:3e:f4:5b:a3:
                    df:bd:1e:b5:da:f5:9a:ac:d6:a4:1c:c8:29:eb:b2:
                    89:b1:13:3f:fa:9c:d5:cf:de:32:84:1e:3f:69:a3:
                    dc:26:30:5a:bc:5b:bb:c4:09:46:02:95:11:d5:f4:
                    64:12:59:3a:a1:00:a4:c4:b6:52:e1:a0:54:46:88:
                    78:73:c9:65:96:da:cc:df:3e:ff:50:22:b6:59:02:
                    48:7f:eb:fa:f8:df:9f:46:34:8b:dd:18:85:a6:6e:
                    08:15:da:ee:8b:33:2a:a6:58:a3:d8:ba:d3:b9:22:
                    f5:f2:fc:6f:da:27:3f:65:c0:6b:7e:d3:3a:2a:ae:
                    7b:4a:a2:10:e3:1a:fa:5b:47:29:b1:96:09:61:4a:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:08:05:E0:3E:C5:74:37:C0:DF:3D:60:BC:41:8D:8B:9E:F7:CB:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl

            X509v3 Authority Key Identifier:
                keyid:8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.235.41.0/24
                  64.235.43.0/24
                  64.235.45.0/24
                  64.235.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:7f:81:62:07:90:0b:89:22:36:8c:f6:3f:cd:4d:72:f7:00:
         cb:64:ae:52:2b:c2:fb:96:d6:50:03:80:34:44:3c:89:88:9b:
         9a:aa:6a:49:78:af:8f:05:0c:00:8e:fe:12:2a:b2:11:e2:02:
         b5:0a:5d:c1:04:0f:9c:55:af:64:e9:ad:04:4d:05:99:fd:86:
         6a:15:3a:d7:1d:e5:e3:dc:d2:f8:16:b1:e7:0b:d6:82:4f:5f:
         b6:8c:28:60:e2:f0:0b:29:53:c4:eb:f1:ab:99:95:14:2b:38:
         77:e1:5b:32:92:ab:4d:21:9a:00:d0:3f:69:f9:36:6d:2c:ab:
         11:11:82:44:fe:59:89:8e:9a:47:f2:27:40:4d:d3:15:17:1a:
         6c:1d:04:86:7c:d6:e6:cc:49:6f:86:6a:ca:6c:fa:c9:d0:0b:
         d6:51:1a:cd:d9:e8:2e:98:ce:81:74:da:de:f7:2e:c4:3e:51:
         bb:c6:bf:04:c3:92:42:5c:18:91:d3:34:ee:7d:67:2a:7d:91:
         e9:bd:50:3f:99:a6:a9:ec:22:8c:d2:ba:97:ee:54:aa:5c:09:
         8e:8a:62:a1:49:ed:9d:a9:a8:89:a2:de:f6:62:fe:25:45:13:
         02:8c:89:62:a5:27:26:60:a1:23:8f:ea:e6:d5:01:55:69:69:
         be:1b:59:e4
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEowUD+tqFsSYpVOBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmMwODM2YzUtMGMzOC00MWEyLTkxN2QtYzlkZjAwOWYx
YTMxMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YzYzYzJiOGUtOTZhOC00YWZjLTliMGQtZWRhOWExZWEzN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTaPsqvhnWmLb8jshuot4JfKCUQhxOwA8QYp
9YzTCqs0tQgnt4yHLJu39oovsYqitn7Ylxh4AT9byi5+P35XYk8m4Lq7wVOB+MI1
ODGRytuRXKZZ1SaBqgTaCF30Q8m9JzVzTHfjnMyjsaCiSiCgWiw2vj70W6PfvR61
2vWarNakHMgp67KJsRM/+pzVz94yhB4/aaPcJjBavFu7xAlGApUR1fRkElk6oQCk
xLZS4aBURoh4c8llltrM3z7/UCK2WQJIf+v6+N+fRjSL3RiFpm4IFdruizMqplij
2LrTuSL18vxv2ic/ZcBrftM6Kq57SqIQ4xr6W0cpsZYJYUp9SwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFNYIBeA+xXQ3wN89YLxBjYue98vlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82YzA4
MzZjNS0wYzM4LTQxYTItOTE3ZC1jOWRmMDA5ZjFhMzEvYTQ2OGNhZTQtNGQ5Yy0z
ODJmLTg1NzItZDkwZDI5ZDI3ZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmMwODM2YzUtMGMzOC00MWEyLTkx
N2QtYzlkZjAwOWYxYTMxLzZjMDgzNmM1LTBjMzgtNDFhMi05MTdkLWM5ZGYwMDlm
MWEzMS5jcmwwHwYDVR0jBBgwFoAUjoANjk1AtYtlb3DuxgVvu0c5AJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82YzA4MzZjNS0wYzM4LTQxYTItOTE3ZC1jOWRm
MDA5ZjFhMzEuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQOspAwQA
QOsrAwQAQOstAwQAQOs9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI9/gWIHkAuJIjaM9j/NTXL3AMtkrlIr
wvuW1lADgDREPImIm5qqakl4r48FDACO/hIqshHiArUKXcEED5xVr2TprQRNBZn9
hmoVOtcd5ePc0vgWsecL1oJPX7aMKGDi8AspU8Tr8auZlRQrOHfhWzKSq00hmgDQ
P2n5Nm0sqxERgkT+WYmOmkfyJ0BN0xUXGmwdBIZ81ubMSW+Gasps+snQC9ZRGs3Z
6C6YzoF02t73LsQ+UbvGvwTDkkJcGJHTNO59Zyp9kem9UD+ZpqnsIozSupfuVKpc
CY6KYqFJ7Z2pqImi3vZi/iVFEwKMiWKlJyZgoSOP6ubVAVVpab4bWeQ=
-----END CERTIFICATE-----
Generated at Mon Jun 30 07:05:50 2025 by rpki-client