Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
File:                     4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa (raw, json)
Hash identifier:          +HEX5Mab0h9m/vlT5Nu7YhUsz90RoS0c6OKRIYeUy7w=
Subject key identifier:   31:09:63:3E:94:A0:CA:6A:4B:18:6E:59:78:49:1C:5D:B4:0E:7A:55
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584A305034C805D4B128DA3B3B00
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     395092
IP address blocks:        64.28.236.0/23 maxlen: 24
                          172.96.136.0/22 maxlen: 24
                          2607:a680:3::/48 maxlen: 48
                          2607:a680:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:34:c8:05:d4:b1:28:da:3b:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=b49ff0bf-adbe-4173-93f7-e036366785a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:28:f6:3d:5f:a3:9f:2f:11:2d:a2:c0:9c:
                    87:15:3b:31:5b:e3:46:0f:cb:bc:c4:39:4c:f2:cd:
                    5f:81:07:be:18:34:ff:28:6d:0e:e9:74:de:61:65:
                    af:44:03:65:61:69:19:85:76:a6:58:49:b9:7e:c2:
                    2e:d7:93:cb:b7:6c:30:8a:c0:29:f4:6c:1d:72:a3:
                    8f:5e:d1:8b:6a:53:f9:79:e6:30:b1:b0:e7:aa:dc:
                    17:1d:d0:fd:f8:70:3d:25:f6:0e:4b:5b:c8:6f:17:
                    20:bf:ea:ca:40:52:4a:c9:91:2b:a6:c7:e4:a5:66:
                    56:49:ab:e4:c8:9b:e5:62:f4:33:73:e6:f7:27:15:
                    8b:31:5a:19:14:97:c6:17:7f:49:58:e1:7d:e7:63:
                    54:a6:a2:03:61:f1:cc:2f:29:a0:0e:44:29:45:9f:
                    42:b1:99:da:77:13:eb:5f:f9:d5:94:00:dd:30:47:
                    0e:33:32:77:0f:a9:72:cb:da:b8:f2:f5:37:28:52:
                    b7:ad:1c:60:94:7f:8b:2b:98:1b:ca:09:1b:48:f8:
                    71:0b:bf:d2:df:13:56:d6:cd:72:27:ca:6e:aa:e7:
                    51:81:51:f0:47:1d:d1:d4:87:c5:3e:94:70:d4:ae:
                    39:b0:3f:27:26:3d:7a:12:49:62:00:fc:cd:19:97:
                    dc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:63:3E:94:A0:CA:6A:4B:18:6E:59:78:49:1C:5D:B4:0E:7A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.236.0/23
                  172.96.136.0/22
                IPv6:
                  2607:a680:3::/48
                  2607:a680:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:15:c1:28:ee:b1:70:c5:3f:b3:43:b2:69:b9:a4:d3:8c:93:
         b7:8b:e4:58:03:df:db:fe:30:c6:9e:42:25:d6:f7:0b:ce:76:
         d0:2d:22:40:39:bd:4e:9c:e1:33:f0:40:53:c9:71:17:42:50:
         26:25:ba:56:13:2f:a2:54:b5:a4:05:f7:66:ef:5e:e7:d4:dd:
         d6:29:89:f2:bf:59:e5:21:4f:aa:96:b6:6e:18:14:ef:48:97:
         7f:05:0c:a8:47:71:e2:39:b1:9c:70:f6:7e:94:72:51:5a:32:
         82:2c:d9:3e:63:e3:16:6b:a5:ca:fe:ba:03:93:be:0e:34:21:
         7b:47:04:10:73:77:a6:70:e1:29:c7:52:b3:fa:ba:ce:f8:64:
         16:ff:c4:6f:26:8a:00:b4:47:3d:12:ca:ae:92:5d:ab:ff:e5:
         7d:45:9a:5f:b1:8c:58:91:cf:b7:97:cf:d3:2f:f4:31:7f:e3:
         21:de:23:b5:c9:1b:0d:c7:aa:91:65:f1:27:7f:92:29:b7:94:
         8f:4b:c1:8b:88:60:ab:64:96:f9:f6:11:07:c5:9e:9d:12:51:
         d6:5e:17:5e:f2:a9:b2:28:c5:77:4f:a8:8d:39:d6:44:ed:5e:
         fd:aa:51:b4:fb:c3:df:45:db:3c:e3:b7:2a:91:e0:ee:16:ec:
         66:6b:3f:d6
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEowUDTIBdSxKNo7OwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YjQ5ZmYwYmYtYWRiZS00MTczLTkzZjctZTAzNjM2Njc4NWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuago9j1fo58vES2iwJyHFTsxW+NGD8u8xDlM
8s1fgQe+GDT/KG0O6XTeYWWvRANlYWkZhXamWEm5fsIu15PLt2wwisAp9GwdcqOP
XtGLalP5eeYwsbDnqtwXHdD9+HA9JfYOS1vIbxcgv+rKQFJKyZErpsfkpWZWSavk
yJvlYvQzc+b3JxWLMVoZFJfGF39JWOF952NUpqIDYfHMLymgDkQpRZ9CsZnadxPr
X/nVlADdMEcOMzJ3D6lyy9q48vU3KFK3rRxglH+LK5gbygkbSPhxC7/S3xNW1s1y
J8puqudRgVHwRx3R1IfFPpRw1K45sD8nJj16EkliAPzNGZfcsQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFDEJYz6UoMpqSxhuWXhJHF20DnpVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNGZjYjZlOTctNTM2OS0z
NWU0LTg0ZjktYjZlNTdjMTg1MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQBzsAwQC
rGCIMBgEAgACMBIDBwAmB6aAAAMDBwAmB6aAAAcwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWxXBKO6xcMU/
s0Oyabmk04yTt4vkWAPf2/4wxp5CJdb3C8520C0iQDm9TpzhM/BAU8lxF0JQJiW6
VhMvolS1pAX3Zu9e59Td1imJ8r9Z5SFPqpa2bhgU70iXfwUMqEdx4jmxnHD2fpRy
UVoygizZPmPjFmulyv66A5O+DjQhe0cEEHN3pnDhKcdSs/q6zvhkFv/EbyaKALRH
PRLKrpJdq//lfUWaX7GMWJHPt5fP0y/0MX/jId4jtckbDceqkWXxJ3+SKbeUj0vB
i4hgq2SW+fYRB8WenRJR1l4XXvKpsijFd0+ojTnWRO1e/apRtPvD30XbPOO3KpHg
7hbsZms/1g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:31:54 2025 by rpki-client