Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/f4ea5459-55bb-3265-8853-098299ea3d19.roa
File:                     f4ea5459-55bb-3265-8853-098299ea3d19.roa (raw, json)
Hash identifier:          8M1aH9CgjmmpUDwPknV8l4PAPKzOEKlRqelAA3vsSNg=
Subject key identifier:   9C:EF:3B:17:6D:DB:09:CF:9A:FB:F9:59:C6:0D:62:A2:59:14:5A:B1
Certificate issuer:       /CN=6b930876-7fd4-4879-9e0c-4dd44b4cc7f7
Certificate serial:       010D0C9F4328584AEE2693EB6B40E246E5A58E60
Authority key identifier: 68:54:80:31:69:F3:83:7F:13:F3:75:11:6F:11:FA:3A:F6:DB:C8:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/f4ea5459-55bb-3265-8853-098299ea3d19.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     15221
IP address blocks:        66.113.0.0/19 maxlen: 24
                          209.248.64.0/18 maxlen: 24
                          2605:90c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:93:eb:6b:40:e2:46:e5:a5:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b930876-7fd4-4879-9e0c-4dd44b4cc7f7
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=c0b77319-af0f-4833-9fcf-13c6e71a8f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:80:d7:e2:ad:99:07:9b:64:f2:91:cf:48:
                    ad:85:95:cf:f7:7f:11:30:9f:a4:c7:4a:16:16:e1:
                    d4:8f:01:d7:b2:d2:30:6e:44:30:cf:54:1a:c6:c9:
                    42:9e:53:1a:67:51:d8:cb:fb:89:64:32:ed:a5:c8:
                    50:48:40:43:4d:76:a4:8b:ca:b5:61:8c:e0:17:85:
                    c0:e6:d0:96:cd:e4:9a:a6:11:75:58:6b:ac:95:64:
                    f0:3c:6a:3e:11:01:e0:49:02:f4:f9:94:6a:d9:4f:
                    94:49:94:df:2a:91:9b:59:3b:36:03:0b:73:48:5d:
                    3c:66:e3:18:47:64:ff:8e:bf:f0:7c:73:16:35:16:
                    e8:9d:c7:90:3e:71:b9:31:8a:b5:d3:b6:ee:5e:c8:
                    03:c9:7f:b5:cb:75:7f:43:8f:39:f7:32:ff:e6:33:
                    5c:ad:08:5a:cc:69:27:8a:8e:b0:a6:e7:20:1a:58:
                    96:8e:80:41:ef:58:03:ad:8d:ad:14:96:3a:aa:31:
                    a9:02:73:ed:de:29:e6:1b:ae:33:8b:1d:d4:69:e8:
                    7c:d2:4e:ec:ad:82:92:d2:d0:18:e8:f9:60:a1:88:
                    08:a4:f2:06:94:61:0d:ea:a8:fa:4b:22:0c:90:5b:
                    ed:70:5b:05:55:37:d7:51:3d:2b:2d:19:f1:e0:78:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EF:3B:17:6D:DB:09:CF:9A:FB:F9:59:C6:0D:62:A2:59:14:5A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/f4ea5459-55bb-3265-8853-098299ea3d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.crl

            X509v3 Authority Key Identifier:
                keyid:68:54:80:31:69:F3:83:7F:13:F3:75:11:6F:11:FA:3A:F6:DB:C8:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b930876-7fd4-4879-9e0c-4dd44b4cc7f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.113.0.0/19
                  209.248.64.0/18
                IPv6:
                  2605:90c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:89:f1:17:f3:1e:9b:a1:9c:2a:26:8c:7f:52:41:e0:1f:ad:
         0b:14:c1:b9:69:b6:ad:7c:c9:24:be:f1:4e:b7:d2:fd:69:da:
         b6:da:3d:d2:8e:db:e2:fa:9b:04:65:05:cc:79:16:e2:65:7a:
         3c:79:69:ea:06:1d:c0:cd:28:37:58:1b:2c:77:72:7a:01:dc:
         e1:4e:2b:7b:94:5b:5a:03:d9:75:1b:61:23:c6:2f:ed:89:b4:
         92:32:52:12:21:43:9f:3e:b5:77:6f:06:0c:19:15:3f:1d:eb:
         7b:18:bc:c5:cc:94:4b:a8:cb:fd:ba:ff:6b:f5:6b:e2:0d:02:
         96:08:74:49:61:f9:10:96:7e:a1:fa:33:53:59:34:a7:21:8b:
         4f:0a:5c:7f:7a:4c:a2:c9:fc:d1:c4:2a:e8:46:7a:8d:39:f4:
         3b:69:52:fc:f9:98:f9:83:e7:83:60:44:10:cb:b9:e2:cc:ec:
         44:ff:ba:9a:f9:d7:0a:eb:53:bb:a9:ef:1e:98:19:be:d4:1c:
         51:ca:15:0c:90:05:c4:b0:04:e3:b2:2a:4a:53:ad:d4:7e:a2:
         da:33:79:69:17:59:b5:c9:ab:3a:d6:7b:4b:ce:49:e2:ad:29:
         63:5a:58:6b:48:6f:74:46:8d:a9:fc:92:5e:e0:3b:fe:73:57:
         f5:c7:0b:d7
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEruJpPra0DiRuWljmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmI5MzA4NzYtN2ZkNC00ODc5LTllMGMtNGRkNDRiNGNj
N2Y3MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk
YzBiNzczMTktYWYwZi00ODMzLTlmY2YtMTNjNmU3MWE4ZjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiuA1+KtmQebZPKRz0ithZXP938RMJ+kx0oW
FuHUjwHXstIwbkQwz1QaxslCnlMaZ1HYy/uJZDLtpchQSEBDTXaki8q1YYzgF4XA
5tCWzeSaphF1WGuslWTwPGo+EQHgSQL0+ZRq2U+USZTfKpGbWTs2AwtzSF08ZuMY
R2T/jr/wfHMWNRbonceQPnG5MYq107buXsgDyX+1y3V/Q4859zL/5jNcrQhazGkn
io6wpucgGliWjoBB71gDrY2tFJY6qjGpAnPt3inmG64zix3Uaeh80k7srYKS0tAY
6PlgoYgIpPIGlGEN6qj6SyIMkFvtcFsFVTfXUT0rLRnx4HineQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFJzvOxdt2wnPmvv5WcYNYqJZFFqxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Yjkz
MDg3Ni03ZmQ0LTQ4NzktOWUwYy00ZGQ0NGI0Y2M3ZjcvZjRlYTU0NTktNTViYi0z
MjY1LTg4NTMtMDk4Mjk5ZWEzZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmI5MzA4NzYtN2ZkNC00ODc5LTll
MGMtNGRkNDRiNGNjN2Y3LzZiOTMwODc2LTdmZDQtNDg3OS05ZTBjLTRkZDQ0YjRj
YzdmNy5jcmwwHwYDVR0jBBgwFoAUaFSAMWnzg38T83URbxH6OvbbyE4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82YjkzMDg3Ni03ZmQ0LTQ4NzktOWUwYy00ZGQ0
NGI0Y2M3ZjcuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFQnEAAwQG
0fhAMA0EAgACMAcDBQAmBZDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABWJ8RfzHpuhnComjH9SQeAfrQsU
wblptq18ySS+8U630v1p2rbaPdKO2+L6mwRlBcx5FuJlejx5aeoGHcDNKDdYGyx3
cnoB3OFOK3uUW1oD2XUbYSPGL+2JtJIyUhIhQ58+tXdvBgwZFT8d63sYvMXMlEuo
y/26/2v1a+INApYIdElh+RCWfqH6M1NZNKchi08KXH96TKLJ/NHEKuhGeo059Dtp
Uvz5mPmD54NgRBDLueLM7ET/upr51wrrU7up7x6YGb7UHFHKFQyQBcSwBOOyKkpT
rdR+otozeWkXWbXJqzrWe0vOSeKtKWNaWGtIb3RGjan8kl7gO/5zV/XHC9c=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:58:41 2025 by rpki-client