Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa
File:                     54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (raw, json)
Hash identifier:          HD38mmWxbxj3ZhtXqR99UIhCaIt2NzcA2gOYjM8V6aQ=
Subject key identifier:   20:09:5D:9C:8E:25:99:71:00:E7:35:83:74:C9:8A:4B:6C:51:3C:15
Certificate issuer:       /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0
Certificate serial:       010D0C9F43285849CD22EBC15A7510177867A200
Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa
Signing time:             Sat 10 May 2025 00:24:54 +0000
ROA not before:           Sat 10 May 2025 00:24:54 +0000
ROA not after:            Fri 08 Aug 2025 00:24:54 +0000
asID:                     395153
IP address blocks:        69.12.96.0/24 maxlen: 24
                          69.12.97.0/24 maxlen: 24
                          69.12.98.0/24 maxlen: 24
                          69.12.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cd:22:eb:c1:5a:75:10:17:78:67:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0
        Validity
            Not Before: May 10 00:24:54 2025 GMT
            Not After : Aug  8 00:24:54 2025 GMT
        Subject: CN=4375437c-9252-4ae1-bd78-3437c1fc0eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:d9:3f:b1:f8:40:47:d8:cc:d7:69:d1:b4:
                    34:e2:c8:25:5b:10:0c:1d:06:69:52:9c:02:ae:9b:
                    a8:5e:b1:67:a3:ee:7e:25:4e:0e:a4:53:30:51:95:
                    ad:2a:c8:40:02:7b:99:1d:78:10:ce:f0:86:a0:60:
                    c4:55:ab:44:0d:a0:2f:3c:af:6b:7a:d0:b9:e9:cc:
                    8c:2a:02:66:74:82:f2:8a:41:ef:e1:9d:36:c3:fe:
                    8e:19:88:86:a6:f4:64:f9:b1:d3:da:9d:47:6a:9b:
                    d4:2f:8d:7f:a1:37:1f:3d:34:d1:b8:42:32:6e:08:
                    03:e0:ec:57:10:e5:80:48:39:7a:b4:fe:67:87:37:
                    77:ce:20:5e:9e:1a:fe:60:8a:5d:77:f7:f3:c8:2a:
                    46:a2:40:4f:ed:2b:f9:e0:a8:84:ca:6c:15:c9:42:
                    f2:93:9f:7e:d4:a7:f9:65:55:2d:6d:f6:95:1f:16:
                    d2:d4:3d:d1:7a:25:99:da:ba:72:e5:20:38:93:67:
                    cd:a4:07:43:af:74:69:d5:77:75:98:37:93:3f:3a:
                    f4:6c:1f:cd:f3:fb:68:96:6a:64:04:f1:f3:cb:5c:
                    44:24:46:34:9f:4c:2d:08:e7:cb:2c:7a:fb:d7:ae:
                    a8:25:7c:c1:4a:94:19:35:e3:39:fb:fa:08:11:ce:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:09:5D:9C:8E:25:99:71:00:E7:35:83:74:C9:8A:4B:6C:51:3C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl

            X509v3 Authority Key Identifier:
                keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:75:dd:ce:4f:ea:78:b3:86:f0:74:21:1a:e8:eb:c4:72:3e:
         6f:c2:4f:11:40:7a:d7:3f:b7:34:18:0b:04:26:70:a9:50:7b:
         0d:53:c3:12:34:f4:b9:7e:80:ec:ff:8d:c1:be:03:00:21:a6:
         06:2a:25:81:d4:d1:70:c0:db:c5:71:57:42:44:d7:57:10:92:
         de:ce:f7:07:99:06:b5:35:a1:59:6b:14:9b:82:a3:81:fd:64:
         8d:b1:76:19:41:95:0c:84:35:5c:27:04:da:88:cd:3c:87:90:
         f7:04:d9:4d:ef:82:09:75:d0:c3:96:12:1d:4b:ef:56:da:a8:
         02:52:04:8a:d0:8c:d3:6a:e7:67:44:fd:0c:c6:d1:54:2c:0e:
         13:6a:00:d0:ae:00:84:80:10:de:5b:3e:aa:4b:10:e3:07:a3:
         d5:8c:32:3c:c6:9b:c1:18:2d:f9:9b:40:6a:66:12:d7:a9:1d:
         7f:5e:8e:c1:1b:df:ec:f8:8b:e3:15:ca:79:03:6e:56:ee:de:
         b6:bf:25:5e:7b:4c:d8:68:d0:70:c1:a2:f1:d5:6c:90:68:7f:
         c4:22:8b:03:11:85:c4:f0:97:38:6f:ac:4d:9d:a3:83:c8:f2:
         62:e8:01:66:17:b1:6e:c8:40:eb:a1:84:b3:31:5a:35:20:1e:
         81:8b:95:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnNIuvBWnUQF3hnogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQzYmMwZDgtNmMyNi00NDVhLTk5MmQtZjMxZTA5MzRi
NWYwMB4XDTI1MDUxMDAwMjQ1NFoXDTI1MDgwODAwMjQ1NFowLzEtMCsGA1UEAxMk
NDM3NTQzN2MtOTI1Mi00YWUxLWJkNzgtMzQzN2MxZmMwZWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWXZP7H4QEfYzNdp0bQ04sglWxAMHQZpUpwC
rpuoXrFno+5+JU4OpFMwUZWtKshAAnuZHXgQzvCGoGDEVatEDaAvPK9retC56cyM
KgJmdILyikHv4Z02w/6OGYiGpvRk+bHT2p1HapvUL41/oTcfPTTRuEIybggD4OxX
EOWASDl6tP5nhzd3ziBenhr+YIpdd/fzyCpGokBP7Sv54KiEymwVyULyk59+1Kf5
ZVUtbfaVHxbS1D3ReiWZ2rpy5SA4k2fNpAdDr3Rp1Xd1mDeTPzr0bB/N8/tolmpk
BPHzy1xEJEY0n0wtCOfLLHr7166oJXzBSpQZNeM5+/oIEc5maQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAJXZyOJZlxAOc1g3TJiktsUTwVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDNi
YzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFlMDkzNGI1ZjAvNTRlOGYwZGItMTZjOC0z
MTI2LTljN2EtNWFjNGUwOGQ0ZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQzYmMwZDgtNmMyNi00NDVhLTk5
MmQtZjMxZTA5MzRiNWYwLzY0M2JjMGQ4LTZjMjYtNDQ1YS05OTJkLWYzMWUwOTM0
YjVmMC5jcmwwHwYDVR0jBBgwFoAUWWMA3LDUuBKv4cAzHYEA7sI/UpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDNiYzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFl
MDkzNGI1ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRQxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJl13c5P6nizhvB0IRro68RyPm/CTxFAetc/tzQYCwQmcKlQew1TwxI0
9Ll+gOz/jcG+AwAhpgYqJYHU0XDA28VxV0JE11cQkt7O9weZBrU1oVlrFJuCo4H9
ZI2xdhlBlQyENVwnBNqIzTyHkPcE2U3vggl10MOWEh1L71baqAJSBIrQjNNq52dE
/QzG0VQsDhNqANCuAISAEN5bPqpLEOMHo9WMMjzGm8EYLfmbQGpmEtepHX9ejsEb
3+z4i+MVynkDblbu3ra/JV57TNho0HDBovHVbJBof8QiiwMRhcTwlzhvrE2do4PI
8mLoAWYXsW7IQOuhhLMxWjUgHoGLlfg=
-----END CERTIFICATE-----
Generated at Tue May 13 06:20:23 2025 by rpki-client