Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/e739f768-d4c6-3ef2-9785-c19d0c08c85c.roa
File:                     e739f768-d4c6-3ef2-9785-c19d0c08c85c.roa (raw, json)
Hash identifier:          R86KbJ0Aww8xIPeNeMaII3K4UEO0eNUF7LMkuJ7xMmc=
Subject key identifier:   36:D5:AE:37:C5:EE:CD:AD:9D:09:6A:C3:68:9B:D8:DC:F7:4A:80:AD
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584AA42B7C74D8CBD06DD4598000
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/e739f768-d4c6-3ef2-9785-c19d0c08c85c.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     36479
IP address blocks:        207.195.59.0/24 maxlen: 24
                          207.195.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7c:74:d8:cb:d0:6d:d4:59:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=7998f3e3-9990-4e72-84c4-786f55bae318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:bd:ad:c6:34:13:c6:df:c6:2e:4e:8f:0f:
                    b3:0d:50:07:a6:07:d2:cd:fb:ea:13:51:e4:2f:85:
                    c5:47:d7:80:cc:b2:99:e9:10:f1:e7:12:3e:da:0b:
                    d4:1b:95:fb:a2:11:24:5d:a6:4b:f6:fe:bb:cf:63:
                    98:af:22:5c:31:a8:01:68:72:2c:6b:e7:80:f8:6c:
                    6c:51:93:cc:99:1e:d3:da:3d:3d:41:ec:df:e8:87:
                    40:43:1b:40:b1:c3:ad:d7:56:06:8e:3f:21:4a:26:
                    f5:eb:01:69:49:79:8f:83:d7:7a:40:0f:53:37:bb:
                    d9:a7:52:cf:0b:46:7e:00:36:32:fc:01:e3:9c:b8:
                    f3:85:f9:1d:85:b7:10:d1:75:97:4b:79:5e:3e:e0:
                    a6:2c:30:76:08:17:cd:11:ca:8a:17:1b:8c:a8:79:
                    24:09:05:85:19:7b:32:90:c5:97:4d:2e:3c:ef:09:
                    e0:7a:60:d5:32:27:a8:4a:22:4b:d7:9a:9a:a6:14:
                    71:93:87:c6:e9:be:44:16:7c:26:ac:2b:bf:ca:51:
                    17:6f:94:ab:08:91:d9:8b:a1:e8:89:fd:fe:2b:78:
                    63:af:7e:76:e6:5f:16:93:6e:31:d8:ee:61:b6:bc:
                    27:98:c5:15:48:1f:5f:94:b0:0a:63:cc:00:e0:34:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D5:AE:37:C5:EE:CD:AD:9D:09:6A:C3:68:9B:D8:DC:F7:4A:80:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/e739f768-d4c6-3ef2-9785-c19d0c08c85c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.195.59.0-207.195.60.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:6c:b6:fb:9d:a5:73:85:ca:a3:24:6c:fc:9d:4c:e1:31:
         dd:11:6f:64:18:75:cc:8e:0b:54:90:58:57:2a:9c:b5:38:ba:
         fd:e4:0e:72:80:cb:62:c2:ac:90:a0:87:55:57:96:7f:95:0e:
         b1:ae:7d:15:30:d9:c5:91:51:8c:b3:1d:57:11:50:f4:65:3c:
         72:2f:94:a5:30:de:7a:62:62:63:65:86:6e:2a:86:2f:49:10:
         7f:ef:5d:a0:18:7e:ed:00:fa:ff:9e:d2:a4:fb:6a:aa:24:fa:
         19:e1:8f:00:15:d9:bd:b4:61:b5:24:1c:73:89:4e:52:89:0c:
         58:3b:06:81:6f:74:3d:70:3b:0e:11:89:7e:04:12:19:51:46:
         77:b1:af:a6:38:59:90:1d:71:97:29:aa:43:ff:75:b3:a8:07:
         67:ad:63:98:68:60:fc:95:d0:d2:13:fe:57:3c:25:94:9b:66:
         cc:ff:46:34:21:c8:b5:dd:d7:d0:6c:78:27:60:7f:a2:f0:fd:
         ea:08:ff:f8:57:c4:5c:08:2e:a7:52:09:eb:b8:43:de:f0:b2:
         ee:99:22:41:82:27:b2:5c:4b:cb:27:95:2e:db:d8:b1:3f:96:
         88:6c:d9:33:c5:47:c8:00:40:72:e2:f4:52:79:49:fa:ed:b7:
         6d:2b:7d:c5
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEqkK3x02MvQbdRZgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTY0YzkyZjUtZWIwNC00NDhkLTg5MzktMzc5NDM0YjIy
OGIzMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
Nzk5OGYzZTMtOTk5MC00ZTcyLTg0YzQtNzg2ZjU1YmFlMzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4W9rcY0E8bfxi5Ojw+zDVAHpgfSzfvqE1Hk
L4XFR9eAzLKZ6RDx5xI+2gvUG5X7ohEkXaZL9v67z2OYryJcMagBaHIsa+eA+Gxs
UZPMmR7T2j09Qezf6IdAQxtAscOt11YGjj8hSib16wFpSXmPg9d6QA9TN7vZp1LP
C0Z+ADYy/AHjnLjzhfkdhbcQ0XWXS3lePuCmLDB2CBfNEcqKFxuMqHkkCQWFGXsy
kMWXTS487wngemDVMieoSiJL15qaphRxk4fG6b5EFnwmrCu/ylEXb5SrCJHZi6Ho
if3+K3hjr3525l8Wk24x2O5htrwnmMUVSB9flLAKY8wA4DR3gQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFDbVrjfF7s2tnQlqw2ib2Nz3SoCtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjRj
OTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0MzRiMjI4YjMvZTczOWY3NjgtZDRjNi0z
ZWYyLTk3ODUtYzE5ZDBjMDhjODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTY0YzkyZjUtZWIwNC00NDhkLTg5
MzktMzc5NDM0YjIyOGIzLzU2NGM5MmY1LWViMDQtNDQ4ZC04OTM5LTM3OTQzNGIy
MjhiMy5jcmwwHwYDVR0jBBgwFoAU3XZv4maXpZNiEaRYPOTVyeFZ1IAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NjRjOTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0
MzRiMjI4YjMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADPwzsD
BADPwzwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAmGxstvudpXOFyqMkbPydTOEx3RFvZBh1zI4LVJBYVyqc
tTi6/eQOcoDLYsKskKCHVVeWf5UOsa59FTDZxZFRjLMdVxFQ9GU8ci+UpTDeemJi
Y2WGbiqGL0kQf+9doBh+7QD6/57SpPtqqiT6GeGPABXZvbRhtSQcc4lOUokMWDsG
gW90PXA7DhGJfgQSGVFGd7GvpjhZkB1xlymqQ/91s6gHZ61jmGhg/JXQ0hP+Vzwl
lJtmzP9GNCHItd3X0Gx4J2B/ovD96gj/+FfEXAgup1IJ67hD3vCy7pkiQYInslxL
yyeVLtvYsT+WiGzZM8VHyABAcuL0UnlJ+u23bSt9xQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:32:07 2025 by rpki-client