Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa
File:                     1f1498a6-2bec-3976-84a6-72c5baa00e10.roa (raw, json)
Hash identifier:          j0W6e7EeYjSlCX3Eci5Dd7Oy/FtIU4etLkPboAou1UY=
Subject key identifier:   CA:92:D2:DE:CE:EE:EE:41:6E:DB:80:7C:CC:ED:5C:27:CB:64:19:5E
Certificate issuer:       /CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378
Certificate serial:       010D0C9F4328584A374AE1F6FCEA166B28DEDF80
Authority key identifier: 19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     3855
IP address blocks:        199.96.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:e1:f6:fc:ea:16:6b:28:de:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=064059d7-4399-4f37-bd74-3b45014c7fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c3:4e:3a:30:45:69:9c:20:be:c5:19:df:87:
                    2f:e6:2d:68:80:85:ff:1d:30:f7:70:4c:9e:4c:be:
                    91:93:da:3f:8c:78:e3:39:18:2d:a5:b8:e3:e0:6c:
                    81:de:26:50:bd:e5:05:52:1f:fc:b7:04:aa:d5:ca:
                    ed:7f:0d:e8:ee:6c:cf:87:f9:84:15:09:b8:40:df:
                    38:06:be:f1:98:4f:ac:85:8f:cf:9d:15:3b:2b:29:
                    aa:e0:83:b1:c7:54:fe:6b:da:f4:eb:66:11:88:97:
                    b0:4d:83:d3:15:82:52:33:1e:f8:2e:3e:5a:3f:25:
                    57:33:66:1b:43:e3:d8:c0:38:b1:91:1a:fb:31:77:
                    05:a9:6d:10:83:f6:97:2e:7d:58:72:22:f0:db:4e:
                    9b:03:b4:47:45:cc:76:2d:13:82:47:94:7e:24:50:
                    59:4e:66:b3:cc:a1:66:22:55:d2:8d:51:8b:61:81:
                    b0:97:6d:a3:f4:9e:69:90:cb:73:5d:42:a6:89:f1:
                    e1:b7:da:32:10:a6:ef:fa:55:4b:ce:37:4f:a5:0a:
                    48:bd:1c:e8:a2:86:a3:83:88:52:45:dd:39:8b:a9:
                    5a:45:cc:47:51:44:f9:96:8e:dc:94:94:72:1b:59:
                    b0:d7:16:a7:b0:b5:16:42:00:ff:a5:f0:ca:95:00:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:92:D2:DE:CE:EE:EE:41:6E:DB:80:7C:CC:ED:5C:27:CB:64:19:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl

            X509v3 Authority Key Identifier:
                keyid:19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:9a:09:57:50:80:3f:85:c8:94:e6:b1:c0:7a:82:1a:61:
         4e:60:01:8d:79:eb:e4:91:29:3f:fe:fd:06:b6:8d:20:5c:35:
         2b:83:11:bd:c6:3d:da:07:fb:43:ba:1c:f2:d5:54:78:79:12:
         11:60:d9:de:68:63:84:46:c6:20:19:4d:eb:41:88:94:17:04:
         51:96:78:b2:8e:82:0f:5d:a2:90:bd:59:13:5e:49:a4:42:be:
         ce:6e:69:64:23:a6:84:02:b1:d2:df:2b:e2:f3:30:b8:2c:59:
         6a:d3:33:c2:04:b1:c7:63:fb:24:df:bc:2f:80:ce:a5:2f:fc:
         31:20:ef:f1:8f:de:a4:74:3c:7c:34:5f:63:0a:c4:ee:04:4b:
         4b:c6:1e:de:e2:8c:e8:dd:d2:e0:bc:e0:fe:ca:c8:01:30:2d:
         7b:9c:0c:34:ed:da:f9:4f:cb:df:36:20:7c:cf:b1:cb:7d:75:
         81:97:60:df:b2:03:7a:fa:6d:69:30:6a:0e:3c:e7:d7:a0:ea:
         19:ec:31:b6:90:49:fb:c0:cc:a0:e1:86:0f:1a:ae:a6:42:05:
         d4:41:50:d7:f3:57:90:0a:3c:68:06:77:96:70:26:44:97:2d:
         16:69:34:35:ec:64:fd:75:c0:35:1f:bb:42:f0:24:04:88:de:
         94:95:6f:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SuH2/OoWayje34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY2NWM5ZTItYjI1MC00MDJlLWFhM2UtZWI2Zjk1NTJk
Mzc4MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
MDY0MDU5ZDctNDM5OS00ZjM3LWJkNzQtM2I0NTAxNGM3ZmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMNOOjBFaZwgvsUZ34cv5i1ogIX/HTD3cEye
TL6Rk9o/jHjjORgtpbjj4GyB3iZQveUFUh/8twSq1crtfw3o7mzPh/mEFQm4QN84
Br7xmE+shY/PnRU7Kymq4IOxx1T+a9r062YRiJewTYPTFYJSMx74Lj5aPyVXM2Yb
Q+PYwDixkRr7MXcFqW0Qg/aXLn1YciLw206bA7RHRcx2LROCR5R+JFBZTmazzKFm
IlXSjVGLYYGwl22j9J5pkMtzXUKmifHht9oyEKbv+lVLzjdPpQpIvRzoooajg4hS
Rd05i6laRcxHUUT5lo7clJRyG1mw1xansLUWQgD/pfDKlQCMKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMqS0t7O7u5BbtuAfMztXCfLZBleMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1
YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZmOTU1MmQzNzgvMWYxNDk4YTYtMmJlYy0z
OTc2LTg0YTYtNzJjNWJhYTAwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmY2NWM5ZTItYjI1MC00MDJlLWFh
M2UtZWI2Zjk1NTJkMzc4LzZmNjVjOWUyLWIyNTAtNDAyZS1hYTNlLWViNmY5NTUy
ZDM3OC5jcmwwHwYDVR0jBBgwFoAUGTJ/99QH77zguKs3zDSW9ceEtoIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZm
OTU1MmQzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2BAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4YmglXUIA/hciU5rHAeoIaYU5gAY156+SRKT/+/Qa2jSBcNSuDEb3G
PdoH+0O6HPLVVHh5EhFg2d5oY4RGxiAZTetBiJQXBFGWeLKOgg9dopC9WRNeSaRC
vs5uaWQjpoQCsdLfK+LzMLgsWWrTM8IEscdj+yTfvC+AzqUv/DEg7/GP3qR0PHw0
X2MKxO4ES0vGHt7ijOjd0uC84P7KyAEwLXucDDTt2vlPy982IHzPsct9dYGXYN+y
A3r6bWkwag4859eg6hnsMbaQSfvAzKDhhg8arqZCBdRBUNfzV5AKPGgGd5ZwJkSX
LRZpNDXsZP11wDUfu0LwJASI3pSVb7U=
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:52:21 2025 by rpki-client