Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5deaba47-f89d-36fd-bc29-3207101b910b.roa
File:                     5deaba47-f89d-36fd-bc29-3207101b910b.roa (raw, json)
Hash identifier:          b5NxHuL+5NGGSo4z0Y9cQrxJl69AxkLF1l2R08dtKDU=
Subject key identifier:   99:31:2D:C2:6A:83:4D:FC:AE:C0:ED:BB:E3:63:DA:96:F4:B1:F5:EB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849CE9A69BCF24E10AE6FAFF8C8
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5deaba47-f89d-36fd-bc29-3207101b910b.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     36261
IP address blocks:        64.124.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:69:bc:f2:4e:10:ae:6f:af:f8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=3a1d8e41-bb65-43ab-8aff-764ffc7d8b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:aa:69:ed:95:d3:9c:77:ec:96:07:14:47:bb:
                    e8:0d:e6:76:8d:5d:c9:c6:5a:88:0a:64:6b:56:33:
                    00:d4:17:05:e2:74:87:00:9f:14:f3:13:30:a8:f9:
                    69:b5:a2:79:8e:1f:5f:2e:41:1e:7d:34:14:fe:1f:
                    6f:b8:e8:a8:e5:be:93:a4:92:1a:38:8b:69:ac:04:
                    88:2c:fd:d4:5c:12:58:f3:2c:af:65:6b:4d:ef:83:
                    a7:65:3b:d7:d8:43:fd:7d:d0:0f:07:8e:b5:81:4e:
                    67:94:67:79:e7:06:13:ce:e7:48:7c:5c:75:e4:41:
                    a0:ae:79:8a:13:de:30:f9:9c:c0:24:da:67:76:cb:
                    1f:98:14:1c:2c:0f:c4:de:a9:db:4a:5f:a8:94:f1:
                    f7:18:31:77:5b:0d:17:1c:39:0e:4e:dd:a2:ca:7f:
                    db:19:3f:eb:b8:2f:56:aa:ef:d4:fc:51:76:0c:b3:
                    c3:b6:93:d4:18:e2:ea:c1:a6:df:84:aa:e7:f0:74:
                    f0:2e:d6:08:c4:d8:05:ea:cb:45:9f:15:1d:4d:d8:
                    35:3c:80:56:ca:ca:e4:87:cb:d7:a0:48:26:0e:10:
                    6c:50:a7:93:cf:a4:bf:92:6f:86:88:38:2c:3b:9d:
                    83:ec:dd:1a:a5:00:25:e1:6e:61:09:6a:7a:28:00:
                    89:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:31:2D:C2:6A:83:4D:FC:AE:C0:ED:BB:E3:63:DA:96:F4:B1:F5:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5deaba47-f89d-36fd-bc29-3207101b910b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a0:73:fd:0f:90:ba:fd:b2:fa:f6:a5:dc:6b:5a:31:04:89:
         f5:53:ff:97:a5:26:b5:60:5b:26:69:27:fd:9b:5e:dd:ba:8c:
         c0:2b:2e:b6:b2:0c:87:9b:fc:ab:88:a3:cf:81:8b:f4:b2:63:
         ae:1c:8a:16:a1:ad:ea:a3:e6:4f:f8:28:81:45:ce:68:4a:04:
         5b:11:5d:18:4c:c3:ad:f2:b3:e2:26:86:e7:c2:32:ed:5c:4a:
         23:a4:61:62:9e:9f:8d:1c:fe:95:84:97:ae:eb:4e:0c:3b:68:
         d1:81:78:26:37:65:8a:29:3d:ed:5d:7c:8f:ce:cd:9a:c8:4e:
         f6:e5:23:ba:a2:b0:8b:6d:7f:42:87:82:39:bb:1b:f6:c1:4b:
         2b:e0:e2:91:de:3a:ff:a8:5b:9f:f8:1d:36:6f:96:2f:66:ad:
         67:1b:39:7e:b7:c5:7e:47:cd:0e:3b:58:cb:a6:4d:6f:46:fe:
         01:03:89:72:f0:72:b8:5e:e8:4b:1e:52:75:16:84:85:42:8e:
         f1:ae:73:73:95:6b:1f:dc:d3:bf:77:3e:78:6a:ec:52:3a:09:
         4b:32:4f:37:17:3f:a5:3e:8e:20:37:fc:56:5b:eb:47:03:5c:
         df:07:d3:63:b2:15:cc:b3:1b:b9:f0:06:ec:d4:4b:a5:fe:68:
         5a:f7:87:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmm88k4Qrm+v+MgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
M2ExZDhlNDEtYmI2NS00M2FiLThhZmYtNzY0ZmZjN2Q4YjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKpp7ZXTnHfslgcUR7voDeZ2jV3JxlqICmRr
VjMA1BcF4nSHAJ8U8xMwqPlptaJ5jh9fLkEefTQU/h9vuOio5b6TpJIaOItprASI
LP3UXBJY8yyvZWtN74OnZTvX2EP9fdAPB461gU5nlGd55wYTzudIfFx15EGgrnmK
E94w+ZzAJNpndssfmBQcLA/E3qnbSl+olPH3GDF3Ww0XHDkOTt2iyn/bGT/ruC9W
qu/U/FF2DLPDtpPUGOLqwabfhKrn8HTwLtYIxNgF6stFnxUdTdg1PIBWysrkh8vX
oEgmDhBsUKeTz6S/km+GiDgsO52D7N0apQAl4W5hCWp6KACJrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJkxLcJqg038rsDtu+Nj2pb0sfXrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNWRlYWJhNDctZjg5ZC0z
NmZkLWJjMjktMzIwNzEwMWI5MTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHw/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJqgc/0PkLr9svr2pdxrWjEEifVT/5elJrVgWyZpJ/2bXt26jMArLray
DIeb/KuIo8+Bi/SyY64cihahreqj5k/4KIFFzmhKBFsRXRhMw63ys+ImhufCMu1c
SiOkYWKen40c/pWEl67rTgw7aNGBeCY3ZYopPe1dfI/OzZrITvblI7qisIttf0KH
gjm7G/bBSyvg4pHeOv+oW5/4HTZvli9mrWcbOX63xX5HzQ47WMumTW9G/gEDiXLw
crhe6EseUnUWhIVCjvGuc3OVax/c0793Pnhq7FI6CUsyTzcXP6U+jiA3/FZb60cD
XN8H02OyFcyzG7nwBuzUS6X+aFr3h34=
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:16:21 2025 by rpki-client