Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/94526494-d78b-3acf-880d-ce05e06124c2.roa
File:                     94526494-d78b-3acf-880d-ce05e06124c2.roa (raw, json)
Hash identifier:          Pn9BSbRuxSHLJB9X6RMP5R2LdYRcKGtSxTsGK/69wb8=
Subject key identifier:   8A:AC:DC:9A:EE:22:9B:F9:25:85:7C:25:C7:DF:E4:F1:40:62:95:B9
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F43285849FCAA7AF62E3B2A31676F3A80
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/94526494-d78b-3acf-880d-ce05e06124c2.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     19107
IP address blocks:        216.234.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7a:f6:2e:3b:2a:31:67:6f:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=1e0234b2-64ba-45b2-bfc3-01fd908b5583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:1d:f6:f8:94:b3:41:34:6c:4c:c0:d0:fa:
                    be:9d:e3:dd:37:81:fa:16:84:05:ec:51:cf:7c:28:
                    31:f2:f3:29:76:9a:bc:56:a6:5e:95:44:c7:2e:f0:
                    3c:c6:13:2b:40:1c:42:83:92:58:d7:02:cd:3c:43:
                    07:56:99:2b:5e:60:5b:0f:9f:95:43:83:a7:bd:6c:
                    1e:b2:bc:1c:e0:fd:09:d6:3f:89:2b:81:24:b0:8f:
                    63:c1:94:da:6d:b4:e3:6a:b9:eb:ca:93:09:7b:95:
                    77:5a:3b:6f:a9:e5:91:69:1a:fe:16:68:29:3b:20:
                    1d:19:85:a0:4b:2c:b2:b3:14:7b:34:80:4b:cc:e3:
                    48:79:79:5c:09:28:12:67:36:92:58:f8:6a:16:16:
                    4d:db:63:57:6d:ba:44:af:67:dc:78:e1:18:b6:6c:
                    8d:74:a7:43:dc:cc:d5:78:1b:4d:85:fe:8d:30:8d:
                    b7:ca:c9:f4:24:43:c1:08:77:60:c3:4f:1e:61:d6:
                    8e:2d:ca:28:b8:ed:05:1d:25:20:c1:df:9a:58:39:
                    cc:50:d6:8c:56:21:db:cd:5d:ba:f6:30:ed:7a:60:
                    e3:3f:d6:4d:66:b6:5b:d5:ec:0e:c1:b6:16:39:54:
                    7d:f0:8c:b9:0f:cf:bc:cb:4c:07:50:f9:93:15:d5:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AC:DC:9A:EE:22:9B:F9:25:85:7C:25:C7:DF:E4:F1:40:62:95:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/94526494-d78b-3acf-880d-ce05e06124c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:d5:c8:80:9f:b5:3a:1b:5f:92:2b:10:ad:6d:12:80:a5:ef:
         49:5b:52:9e:be:f8:05:50:91:71:c4:af:7f:5e:55:5e:82:90:
         1f:9b:d8:ae:82:91:6f:8b:2c:b7:d8:76:22:04:86:da:bd:63:
         d1:69:07:76:2f:58:f3:23:6a:26:74:66:a6:76:fa:aa:b7:dd:
         c4:49:89:14:fb:c3:98:95:d2:8b:45:88:02:af:a5:55:b9:72:
         e7:44:3d:2d:ee:a6:da:9f:6b:a5:49:91:a4:b6:9a:ac:db:20:
         2f:be:85:b0:d6:6a:34:56:ce:f5:67:23:77:bb:80:e7:9b:1e:
         6f:1d:a4:4e:e0:72:d5:ef:68:1c:16:7c:ee:33:19:b5:c3:81:
         75:0b:12:07:c0:67:06:45:45:56:1d:c2:16:32:07:c9:fe:77:
         60:7e:5e:bd:b9:ec:27:e0:89:df:6a:ba:40:57:66:f1:4d:c8:
         cb:5b:1d:f1:f9:81:1a:f3:b2:c9:d1:ba:3f:9d:a1:82:61:e6:
         de:14:38:9d:aa:21:2d:29:05:14:62:8d:1f:1b:4e:d0:15:95:
         cd:80:4f:8f:81:11:52:cf:42:1d:16:17:c8:0b:7e:cf:fd:3d:
         de:85:f8:3e:11:00:43:69:78:f6:07:e0:cc:13:21:6b:c8:6b:
         d4:5a:98:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnr2LjsqMWdvOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
MWUwMjM0YjItNjRiYS00NWIyLWJmYzMtMDFmZDkwOGI1NTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxQd9viUs0E0bEzA0Pq+nePdN4H6FoQF7FHP
fCgx8vMpdpq8VqZelUTHLvA8xhMrQBxCg5JY1wLNPEMHVpkrXmBbD5+VQ4OnvWwe
srwc4P0J1j+JK4EksI9jwZTabbTjarnrypMJe5V3WjtvqeWRaRr+FmgpOyAdGYWg
SyyysxR7NIBLzONIeXlcCSgSZzaSWPhqFhZN22NXbbpEr2fceOEYtmyNdKdD3MzV
eBtNhf6NMI23ysn0JEPBCHdgw08eYdaOLcoouO0FHSUgwd+aWDnMUNaMViHbzV26
9jDtemDjP9ZNZrZb1ewOwbYWOVR98Iy5D8+8y0wHUPmTFdVCtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIqs3JruIpv5JYV8Jcff5PFAYpW5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvOTQ1MjY0OTQtZDc4Yi0z
YWNmLTg4MGQtY2UwNWUwNjEyNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKjVyICftTobX5IrEK1tEoCl70lbUp6++AVQkXHEr39eVV6CkB+b2K6C
kW+LLLfYdiIEhtq9Y9FpB3YvWPMjaiZ0ZqZ2+qq33cRJiRT7w5iV0otFiAKvpVW5
cudEPS3uptqfa6VJkaS2mqzbIC++hbDWajRWzvVnI3e7gOebHm8dpE7gctXvaBwW
fO4zGbXDgXULEgfAZwZFRVYdwhYyB8n+d2B+Xr257Cfgid9qukBXZvFNyMtbHfH5
gRrzssnRuj+doYJh5t4UOJ2qIS0pBRRijR8bTtAVlc2AT4+BEVLPQh0WF8gLfs/9
Pd6F+D4RAENpePYH4MwTIWvIa9RamIY=
-----END CERTIFICATE-----
Generated at Sat Jul 5 05:08:02 2025 by rpki-client