Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
File:                     fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa (raw, json)
Hash identifier:          4lBUkCQoHn17j0M9WK8VlCYSxC4tHXNyK6HuGAdMhMA=
Subject key identifier:   A8:DC:D4:FB:E9:1C:FE:AF:F0:1A:96:D2:F5:C8:03:14:41:BB:A7:F7
Certificate issuer:       /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial:       010D0C9F4328584A58CB02F1C084DF6FED1D2500
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     64227
IP address blocks:        64.237.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:02:f1:c0:84:df:6f:ed:1d:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=72c99b2e-98ad-4761-a5aa-35f110694b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:c1:1a:34:85:31:79:d4:ae:23:2d:4c:fa:
                    38:01:d5:36:54:0d:f1:d6:03:96:ba:9d:40:aa:ae:
                    15:16:a3:99:b3:79:2d:f2:0a:2e:30:68:ac:50:fc:
                    14:e8:78:e0:d8:c6:37:93:75:2b:8e:b0:69:37:bc:
                    3e:59:d7:7a:1a:69:0a:f0:c4:6f:19:34:39:e2:8a:
                    62:91:9f:5d:ad:02:94:97:3d:c4:f8:5a:ef:8a:1e:
                    e1:b4:b6:a1:10:11:6c:d8:db:6a:b9:3a:6d:69:00:
                    de:6b:7e:9a:99:cb:50:5f:df:0b:4e:d6:e1:5e:16:
                    10:dc:77:df:ba:93:11:20:71:ee:43:90:2f:b5:ff:
                    f3:db:6f:d5:81:aa:e5:d3:5d:17:a2:cf:5c:22:10:
                    3a:74:5e:46:66:1a:76:29:a9:f9:93:7e:75:ee:30:
                    13:40:00:bd:62:e9:67:99:c8:cb:a8:66:c3:0f:2c:
                    cc:77:fa:47:63:77:4f:cc:23:78:79:3b:77:bf:f9:
                    65:40:30:20:df:c8:20:04:0b:91:98:b7:66:c7:4e:
                    b7:c2:e5:f3:dc:f7:18:2e:26:80:d8:b0:48:ea:39:
                    66:3c:4c:b1:82:7d:e2:15:10:92:df:e2:89:a4:3b:
                    d6:df:29:38:02:ac:c1:89:79:d5:b6:9a:ed:25:a8:
                    ae:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DC:D4:FB:E9:1C:FE:AF:F0:1A:96:D2:F5:C8:03:14:41:BB:A7:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl

            X509v3 Authority Key Identifier:
                keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:08:f9:aa:60:f8:06:c0:2b:31:2c:f5:c3:37:0f:a0:c6:02:
         cc:a8:2f:ae:05:21:3e:b2:b7:bb:4c:78:f7:65:5d:20:30:77:
         43:33:62:f6:a7:e6:55:2f:c3:d3:b1:e9:3c:ca:03:06:d2:4c:
         dc:c7:c5:6a:ad:e0:47:69:ab:b0:9b:40:8c:8a:bc:f9:30:18:
         75:5d:d7:2d:d1:1a:fa:c5:c3:2e:ff:51:f1:c4:35:3f:e6:b0:
         e2:ab:95:a2:94:49:c5:b8:1e:ec:5e:04:f9:22:0b:1d:55:73:
         2c:3e:ee:01:e0:b5:79:25:33:d5:8d:a3:62:3d:31:db:7b:37:
         a1:6f:70:b6:da:ea:db:11:41:4d:a7:75:d9:10:ec:83:8f:96:
         9a:46:b8:f0:1b:7e:44:54:aa:80:48:e2:cc:4d:27:65:b4:aa:
         d7:4e:92:c1:4b:23:fd:71:a5:b6:98:d3:48:46:9f:1d:97:51:
         fb:f9:0b:bd:d7:7b:40:c9:80:a4:f8:18:32:a4:a9:7d:28:2e:
         35:bc:c3:69:5b:bb:22:6b:bb:93:20:47:89:25:ba:9e:cb:bc:
         92:d5:01:c0:78:25:56:c1:27:00:cd:f8:25:e5:5e:2b:d7:73:
         11:32:fc:61:d8:16:b1:36:f2:29:9f:e0:94:33:1b:54:63:aa:
         c8:54:28:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywLxwITfb+0dJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzcwYjg2ZjUtMGFlNy00ZTZjLWEzMmUtMDgzMTAxNTZk
ZjNmMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk
NzJjOTliMmUtOThhZC00NzYxLWE1YWEtMzVmMTEwNjk0Yjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilbBGjSFMXnUriMtTPo4AdU2VA3x1gOWup1A
qq4VFqOZs3kt8gouMGisUPwU6Hjg2MY3k3UrjrBpN7w+Wdd6GmkK8MRvGTQ54opi
kZ9drQKUlz3E+Frvih7htLahEBFs2NtquTptaQDea36amctQX98LTtbhXhYQ3Hff
upMRIHHuQ5Avtf/z22/Vgarl010Xos9cIhA6dF5GZhp2Kan5k3517jATQAC9Yuln
mcjLqGbDDyzMd/pHY3dPzCN4eTt3v/llQDAg38ggBAuRmLdmx063wuXz3PcYLiaA
2LBI6jlmPEyxgn3iFRCS3+KJpDvW3yk4AqzBiXnVtprtJaiu0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKjc1PvpHP6v8BqW0vXIAxRBu6f3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBi
ODZmNS0wYWU3LTRlNmMtYTMyZS0wODMxMDE1NmRmM2YvZmM2MDFiZGEtNmRkMC0z
YzY2LWJjNjQtNjgyYzljMGRmZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzcwYjg2ZjUtMGFlNy00ZTZjLWEz
MmUtMDgzMTAxNTZkZjNmLzM3MGI4NmY1LTBhZTctNGU2Yy1hMzJlLTA4MzEwMTU2
ZGYzZi5jcmwwHwYDVR0jBBgwFoAUKnBuVYRj4+5yYJDqTSbO8pwumNAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzBiODZmNS0wYWU3LTRlNmMtYTMyZS0wODMx
MDE1NmRmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQO1oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsI+apg+AbAKzEs9cM3D6DGAsyoL64FIT6yt7tMePdlXSAwd0MzYvan
5lUvw9Ox6TzKAwbSTNzHxWqt4Edpq7CbQIyKvPkwGHVd1y3RGvrFwy7/UfHENT/m
sOKrlaKUScW4HuxeBPkiCx1Vcyw+7gHgtXklM9WNo2I9Mdt7N6FvcLba6tsRQU2n
ddkQ7IOPlppGuPAbfkRUqoBI4sxNJ2W0qtdOksFLI/1xpbaY00hGnx2XUfv5C73X
e0DJgKT4GDKkqX0oLjW8w2lbuyJru5MgR4klup7LvJLVAcB4JVbBJwDN+CXlXivX
cxEy/GHYFrE28imf4JQzG1RjqshUKNw=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:56:08 2025 by rpki-client