Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda5329a-5221-3b2c-b2f3-ab7b002f8192.roa
File:                     cda5329a-5221-3b2c-b2f3-ab7b002f8192.roa (raw, json)
Hash identifier:          2Y+5BtfODkDMr0cuQEcPqazuT4lHZQATiSz2BR4iQ/E=
Subject key identifier:   5B:0F:BA:A9:E3:BB:E2:29:E7:4C:B5:2C:DA:E3:2E:3B:6B:DC:C6:E5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B21CC3214E7C76D9D592D61C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda5329a-5221-3b2c-b2f3-ab7b002f8192.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     63949
IP address blocks:        172.234.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:32:14:e7:c7:6d:9d:59:2d:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=c6b3c666-79ae-4ce9-86a4-57d4bf163be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:1f:2b:1e:4c:fc:c9:c5:fd:4b:c1:eb:f6:
                    f6:37:60:fa:8f:28:3c:e5:f4:79:c5:d2:e2:f6:dd:
                    08:9c:f7:66:04:00:99:e7:4a:e8:f6:d8:3b:cd:e7:
                    fe:af:38:0d:8c:6a:51:6c:e8:8a:44:0f:08:33:d3:
                    df:4f:e7:d8:85:a1:cd:87:af:de:4b:f0:e4:30:f1:
                    ae:d8:ad:3a:6d:8f:2d:fc:3d:7f:e6:b5:1b:5c:f9:
                    a6:20:eb:fa:eb:af:a3:3d:4a:14:ff:fb:78:9a:e7:
                    10:f1:08:b4:77:37:96:a4:c3:21:4f:c3:3b:e4:a7:
                    03:f3:f8:92:4f:30:bd:0d:2d:b7:20:97:8d:b1:46:
                    fd:f9:22:11:0e:aa:4c:af:76:c5:a2:73:8c:1b:05:
                    93:f4:a6:45:f6:91:b6:5b:c9:bd:96:4b:b3:07:0b:
                    07:c0:3a:11:6c:7e:14:94:9d:f6:6c:41:a0:83:ba:
                    46:c6:7e:e7:75:d8:cc:3d:a7:c4:83:30:e5:7b:1c:
                    0e:5e:0d:4c:76:2e:57:76:c7:c2:08:e7:f2:b8:7a:
                    b0:90:46:21:8e:6f:94:60:8d:4c:77:c5:f9:0c:d4:
                    9e:5d:a5:28:c3:0a:69:bc:eb:be:4b:39:26:5e:b7:
                    a7:e5:f6:9f:8b:34:3f:32:cc:d7:c9:7c:bb:50:9b:
                    9b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0F:BA:A9:E3:BB:E2:29:E7:4C:B5:2C:DA:E3:2E:3B:6B:DC:C6:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda5329a-5221-3b2c-b2f3-ab7b002f8192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.234.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:9e:0f:07:49:e4:60:a4:dc:89:20:b8:52:7b:08:9c:7f:
         76:45:bd:71:6f:03:38:b5:c6:88:13:97:be:49:46:64:24:68:
         26:21:f6:4b:00:96:dd:18:30:55:7f:3b:ab:7e:47:e8:82:de:
         9b:27:db:e5:aa:c4:92:d2:2c:7e:63:50:66:1d:31:b0:8e:6c:
         56:7d:6b:da:86:48:30:f9:a1:58:8a:2e:eb:51:8d:77:84:c0:
         4f:a5:fa:e5:c6:1c:8c:8f:ca:bb:1c:9c:06:04:3a:6a:08:da:
         bc:63:83:2a:56:96:37:a5:09:54:f8:a0:64:19:d6:d6:e7:a0:
         f1:ec:58:67:f0:c4:6f:1d:aa:4e:ce:aa:73:de:1b:c4:30:27:
         95:28:f7:8f:b0:44:16:a1:c3:dd:f0:ae:1e:f2:15:ed:fb:b3:
         c9:7b:f1:69:e0:be:d7:f9:ed:db:22:25:86:51:23:1e:9f:fb:
         67:00:4b:1e:94:c1:af:db:71:3f:9a:00:26:92:8d:e5:b2:25:
         e3:62:03:ac:7a:31:9c:b1:bb:03:35:58:0f:37:0f:40:d0:a5:
         64:12:32:a2:56:05:64:dc:f6:3f:4d:ad:31:d5:e5:e9:a1:7f:
         dc:ad:33:d0:cf:fb:dc:c0:27:d0:0c:0c:c6:1b:70:3f:8e:bc:
         86:0b:5f:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzDIU58dtnVktYcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
YzZiM2M2NjYtNzlhZS00Y2U5LTg2YTQtNTdkNGJmMTYzYmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSQfKx5M/MnF/UvB6/b2N2D6jyg85fR5xdLi
9t0InPdmBACZ50ro9tg7zef+rzgNjGpRbOiKRA8IM9PfT+fYhaHNh6/eS/DkMPGu
2K06bY8t/D1/5rUbXPmmIOv666+jPUoU//t4mucQ8Qi0dzeWpMMhT8M75KcD8/iS
TzC9DS23IJeNsUb9+SIRDqpMr3bFonOMGwWT9KZF9pG2W8m9lkuzBwsHwDoRbH4U
lJ32bEGgg7pGxn7nddjMPafEgzDlexwOXg1Mdi5XdsfCCOfyuHqwkEYhjm+UYI1M
d8X5DNSeXaUowwppvOu+SzkmXren5fafizQ/MszXyXy7UJubEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFsPuqnju+Ip50y1LNrjLjtr3MblMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RhNTMyOWEtNTIyMS0z
YjJjLWIyZjMtYWI3YjAwMmY4MTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrOpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtCng8HSeRgpNyJILhSewicf3ZFvXFvAzi1xogTl75JRmQkaCYh9ksA
lt0YMFV/O6t+R+iC3psn2+WqxJLSLH5jUGYdMbCObFZ9a9qGSDD5oViKLutRjXeE
wE+l+uXGHIyPyrscnAYEOmoI2rxjgypWljelCVT4oGQZ1tbnoPHsWGfwxG8dqk7O
qnPeG8QwJ5Uo94+wRBahw93wrh7yFe37s8l78Wngvtf57dsiJYZRIx6f+2cASx6U
wa/bcT+aACaSjeWyJeNiA6x6MZyxuwM1WA83D0DQpWQSMqJWBWTc9j9NrTHV5emh
f9ytM9DP+9zAJ9AMDMYbcD+OvIYLXxM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:20 2025 by rpki-client