Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/39cdf786-e1eb-3850-9f30-0a3b8005613d.roa
File:                     39cdf786-e1eb-3850-9f30-0a3b8005613d.roa (raw, json)
Hash identifier:          sSV8z2C9AObgQiGBLPLpKE/jjv/Bw96YY5dNcVLGRPk=
Subject key identifier:   AE:D2:26:1C:80:38:81:D6:5F:02:87:A2:75:27:4B:5D:D1:BE:38:B8
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584A5335A8620ACCEA66F7E2C680
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/39cdf786-e1eb-3850-9f30-0a3b8005613d.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     54523
IP address blocks:        67.59.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a8:62:0a:cc:ea:66:f7:e2:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=a7186329-9260-4b36-a825-091afdad5aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:90:c6:2b:6f:d5:9e:1b:96:72:6f:cc:d9:
                    f1:b7:48:18:fb:4d:55:59:89:e2:70:1b:9a:2a:a5:
                    64:8c:ac:18:d2:fd:0e:09:17:92:60:20:e6:fe:fa:
                    c4:b1:2f:8e:65:ea:ef:ee:cb:59:5c:cc:96:ce:12:
                    8d:49:2a:9b:ba:cf:89:6f:ea:57:72:ee:35:5d:3e:
                    d3:31:0e:63:e4:d4:db:53:dc:f9:53:00:19:64:08:
                    8e:f1:4f:71:14:42:a3:d8:99:b5:82:fe:43:2e:ed:
                    f5:cd:dd:7c:00:44:f1:73:60:d3:77:12:c4:69:8b:
                    9e:e5:21:38:eb:e3:99:76:ec:a9:2b:7e:ad:b7:b2:
                    40:35:8a:0d:3a:22:4d:02:e6:a2:f2:53:f0:33:06:
                    a0:19:6e:50:a4:92:66:c6:80:9e:4c:1b:53:59:7a:
                    7f:b7:2a:0c:4f:81:62:7d:e6:d6:bf:dc:fd:9a:35:
                    f1:10:61:7b:b2:04:a4:86:d7:b3:26:87:0d:f6:ec:
                    16:a7:c9:03:e3:69:7a:97:d3:c1:ef:b6:11:50:1e:
                    fa:61:0b:7f:cb:d8:97:7b:27:10:89:9d:d9:3c:5b:
                    a3:f8:39:89:93:89:9d:8f:a3:7f:5d:5e:24:23:1a:
                    b3:a2:05:bd:1f:70:0b:00:3f:4e:f4:1f:99:1f:7b:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D2:26:1C:80:38:81:D6:5F:02:87:A2:75:27:4B:5D:D1:BE:38:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/39cdf786-e1eb-3850-9f30-0a3b8005613d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a1:8d:f2:7b:03:47:0d:55:8b:d0:a9:23:58:b6:74:9e:68:
         47:6d:e8:7a:f7:53:78:b8:78:e7:ce:63:a6:b5:40:4b:88:55:
         80:98:d2:f7:6a:d8:c6:05:e8:c6:04:ed:7f:4e:12:83:2d:10:
         32:ba:34:30:d9:e9:18:1b:67:26:50:e5:53:ee:7e:2f:b6:9a:
         84:c0:4e:d5:c5:5a:cd:31:13:e5:85:24:31:27:ae:35:18:31:
         bd:66:1f:3f:8b:69:9c:d8:f6:27:4a:15:dc:6a:5b:3b:90:bd:
         18:1e:02:6b:04:12:e7:fd:a6:57:d6:de:db:99:fd:32:02:19:
         9c:c2:9d:b3:a8:cc:b3:ac:ef:09:1a:4a:b6:08:e3:e1:7a:5d:
         39:b7:85:64:85:30:92:7b:dd:63:df:f8:a9:f4:1e:72:d0:11:
         47:3e:b8:80:70:a0:65:be:bc:86:c1:fb:13:45:7a:9d:d1:a5:
         fa:0d:59:4e:fa:f9:75:af:de:46:cb:82:73:44:1e:06:7c:6f:
         61:aa:20:be:11:7f:de:e3:44:b6:bc:07:cf:64:0d:da:ea:60:
         26:8b:08:40:02:bc:99:19:5e:bd:74:e2:65:f9:66:35:7f:22:
         fe:14:9f:d7:71:d5:16:e2:cb:c4:88:63:98:16:d3:d1:59:e1:
         f2:86:97:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNahiCszqZvfixoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz
ZmY0MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
YTcxODYzMjktOTI2MC00YjM2LWE4MjUtMDkxYWZkYWQ1YWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AuQxitv1Z4blnJvzNnxt0gY+01VWYnicBua
KqVkjKwY0v0OCReSYCDm/vrEsS+OZerv7stZXMyWzhKNSSqbus+Jb+pXcu41XT7T
MQ5j5NTbU9z5UwAZZAiO8U9xFEKj2Jm1gv5DLu31zd18AETxc2DTdxLEaYue5SE4
6+OZduypK36tt7JANYoNOiJNAuai8lPwMwagGW5QpJJmxoCeTBtTWXp/tyoMT4Fi
febWv9z9mjXxEGF7sgSkhtezJocN9uwWp8kD42l6l9PB77YRUB76YQt/y9iXeycQ
iZ3ZPFuj+DmJk4mdj6N/XV4kIxqzogW9H3ALAD9O9B+ZH3uxFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK7SJhyAOIHWXwKHonUnS13Rvji4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3
MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvMzljZGY3ODYtZTFlYi0z
ODUwLTlmMzAtMGEzYjgwMDU2MTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl
ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl
M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx
MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQztWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADihjfJ7A0cNVYvQqSNYtnSeaEdt6Hr3U3i4eOfOY6a1QEuIVYCY0vdq
2MYF6MYE7X9OEoMtEDK6NDDZ6RgbZyZQ5VPufi+2moTATtXFWs0xE+WFJDEnrjUY
Mb1mHz+LaZzY9idKFdxqWzuQvRgeAmsEEuf9plfW3tuZ/TICGZzCnbOozLOs7wka
SrYI4+F6XTm3hWSFMJJ73WPf+Kn0HnLQEUc+uIBwoGW+vIbB+xNFep3RpfoNWU76
+XWv3kbLgnNEHgZ8b2GqIL4Rf97jRLa8B89kDdrqYCaLCEACvJkZXr104mX5ZjV/
Iv4Un9dx1Rbiy8SIY5gW09FZ4fKGlww=
-----END CERTIFICATE-----
Generated at Mon Jun 30 02:18:43 2025 by rpki-client