Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/4bd9c907-2635-314b-9622-7e9c0aab1cdc.roa
File:                     4bd9c907-2635-314b-9622-7e9c0aab1cdc.roa (raw, json)
Hash identifier:          5+146+aiedH9PiHYwKjD/UlKYxLAs+i4AmdHrhyJwc8=
Subject key identifier:   64:F3:F5:76:72:AD:F2:CF:26:2D:30:3D:4B:6D:0E:95:DF:9D:85:BD
Certificate issuer:       /CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692
Certificate serial:       010D0C9F4328584AC5AB80BB5EA99397960CCAC0
Authority key identifier: 74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/4bd9c907-2635-314b-9622-7e9c0aab1cdc.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     62681
IP address blocks:        192.206.32.0/23 maxlen: 24
                          2620:3b:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:80:bb:5e:a9:93:97:96:0c:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=b7973648-a52a-45a4-840a-7ea689635957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:ef:be:e3:80:81:24:8f:c7:90:b4:dd:29:
                    2c:fa:69:20:98:53:cf:b9:87:b2:d8:90:4d:25:b1:
                    bf:07:eb:7d:99:11:c0:55:4a:4a:a1:ab:98:05:58:
                    af:8b:d7:cd:c8:20:9d:6d:6c:df:12:44:7d:e6:8a:
                    32:7a:ad:41:63:82:4f:42:6e:34:dd:4b:af:e8:47:
                    c2:27:e4:ca:96:76:83:2f:aa:44:37:ba:9d:43:08:
                    81:45:d2:97:63:9c:da:ab:d5:1e:08:58:0e:7d:77:
                    da:f3:95:75:48:b5:a4:49:f9:bf:77:c2:5f:21:f7:
                    d0:fe:10:67:f8:4e:2a:6e:89:85:60:4a:4f:22:35:
                    41:7b:4b:ee:58:43:d4:e9:08:b4:20:0c:56:a2:62:
                    7a:51:19:3f:d4:67:b5:ce:d5:52:3a:d5:2a:2d:92:
                    80:6f:1e:63:82:c3:36:c4:65:a0:ab:a7:4e:33:1a:
                    fd:48:c4:69:26:c1:dc:d3:c5:a6:1d:56:63:b2:7a:
                    41:e5:c6:bf:18:d1:aa:e4:cd:27:19:c9:b9:31:75:
                    33:e2:2c:33:87:85:d5:cc:56:89:56:81:82:ca:77:
                    11:01:e9:f6:22:23:fa:45:e5:43:bc:df:a2:0f:7d:
                    98:45:3a:11:9b:b4:54:06:ef:9b:e0:1c:e1:bd:d5:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F3:F5:76:72:AD:F2:CF:26:2D:30:3D:4B:6D:0E:95:DF:9D:85:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/4bd9c907-2635-314b-9622-7e9c0aab1cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.crl

            X509v3 Authority Key Identifier:
                keyid:74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.32.0/23
                IPv6:
                  2620:3b:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:56:c0:d1:39:9c:28:53:35:42:2c:9c:f5:d6:5c:27:6f:
         29:3b:1b:5e:b5:d7:66:a6:5f:65:b2:3f:38:d0:26:e1:14:f1:
         04:04:f7:cd:c8:df:2b:ef:62:3f:bd:ca:f3:2b:d5:a2:04:a8:
         af:da:8c:d0:76:42:0c:42:81:71:ee:9b:9a:e4:e1:af:c3:9c:
         3e:f2:c5:c2:57:8f:5b:fb:ad:e5:a1:64:7e:89:94:20:c9:c0:
         c4:fc:f1:41:c9:bc:84:91:ca:1e:75:34:22:7b:d4:3b:da:a1:
         ac:4a:0d:0d:fa:76:02:5e:47:55:f3:9d:73:07:6c:b9:c9:9e:
         3a:97:f2:b0:b0:ea:30:d1:f8:1a:9b:39:da:bb:47:9a:6e:fd:
         e7:41:3f:9b:ec:70:2f:ea:91:3d:e0:f6:a9:c3:d8:81:9f:d9:
         be:41:81:33:37:01:4e:7c:b6:ae:59:b9:89:97:db:e8:12:42:
         e1:5f:69:7e:01:30:1d:23:21:ab:bd:e5:bb:d4:79:49:d9:44:
         64:68:f9:be:52:ea:d1:d1:b7:f5:09:ad:93:eb:8b:00:64:61:
         f2:bf:ce:ee:bd:23:fa:bd:e1:d3:73:03:7b:4d:ed:6f:64:f7:
         59:cc:20:f8:11:48:a5:65:38:e1:18:40:4e:c8:cd:81:1f:ba:
         7a:82:ae:0e
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErFq4C7XqmTl5YMysAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ0MWU0YmQtM2IwZi00ZDhjLWFkOGEtMTI1NTU1ZTdi
NjkyMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
Yjc5NzM2NDgtYTUyYS00NWE0LTg0MGEtN2VhNjg5NjM1OTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPnvvuOAgSSPx5C03Sks+mkgmFPPuYey2JBN
JbG/B+t9mRHAVUpKoauYBVivi9fNyCCdbWzfEkR95ooyeq1BY4JPQm403Uuv6EfC
J+TKlnaDL6pEN7qdQwiBRdKXY5zaq9UeCFgOfXfa85V1SLWkSfm/d8JfIffQ/hBn
+E4qbomFYEpPIjVBe0vuWEPU6Qi0IAxWomJ6URk/1Ge1ztVSOtUqLZKAbx5jgsM2
xGWgq6dOMxr9SMRpJsHc08WmHVZjsnpB5ca/GNGq5M0nGcm5MXUz4iwzh4XVzFaJ
VoGCyncRAen2IiP6ReVDvN+iD32YRToRm7RUBu+b4BzhvdWVhwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFGTz9XZyrfLPJi0wPUttDpXfnYW9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZDQx
ZTRiZC0zYjBmLTRkOGMtYWQ4YS0xMjU1NTVlN2I2OTIvNGJkOWM5MDctMjYzNS0z
MTRiLTk2MjItN2U5YzBhYWIxY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWQ0MWU0YmQtM2IwZi00ZDhjLWFk
OGEtMTI1NTU1ZTdiNjkyL2VkNDFlNGJkLTNiMGYtNGQ4Yy1hZDhhLTEyNTU1NWU3
YjY5Mi5jcmwwHwYDVR0jBBgwFoAUdMqN3/KrEa6GQTO4J9Lsn/2es4swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZDQxZTRiZC0zYjBmLTRkOGMtYWQ4YS0xMjU1
NTVlN2I2OTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwM4gMA8E
AgACMAkDBwAmIAA7QAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQu9WwNE5nChTNUIsnPXWXCdvKTsbXrXX
ZqZfZbI/ONAm4RTxBAT3zcjfK+9iP73K8yvVogSor9qM0HZCDEKBce6bmuThr8Oc
PvLFwlePW/ut5aFkfomUIMnAxPzxQcm8hJHKHnU0InvUO9qhrEoNDfp2Al5HVfOd
cwdsucmeOpfysLDqMNH4Gps52rtHmm7950E/m+xwL+qRPeD2qcPYgZ/ZvkGBMzcB
Tny2rlm5iZfb6BJC4V9pfgEwHSMhq73lu9R5SdlEZGj5vlLq0dG39Qmtk+uLAGRh
8r/O7r0j+r3h03MDe03tb2T3Wcwg+BFIpWU44RhATsjNgR+6eoKuDg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:56:10 2025 by rpki-client