Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa
File:                     f984caa1-48ee-3a26-8d40-a1b14e45f110.roa (raw, json)
Hash identifier:          Fz5RXk/PtR3kef3iAn6iD3vK1v9wHWqM46jCnly8Y3w=
Subject key identifier:   62:AD:81:22:6A:46:CE:FF:24:4C:8E:FF:EA:36:C9:5A:E7:3E:9C:AF
Certificate issuer:       /CN=74a39a1b-8414-451d-8610-7af7342dc8f6
Certificate serial:       010D0C9F4328584A146552BD3E71BA4C1E735320
Authority key identifier: 88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     21976
IP address blocks:        192.16.204.0/24 maxlen: 24
                          192.108.106.0/24 maxlen: 24
                          2620:45:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:52:bd:3e:71:ba:4c:1e:73:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a39a1b-8414-451d-8610-7af7342dc8f6
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=ddfe10fa-3b08-44d9-9310-3a6c9fb8f745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:4f:ff:9c:6c:a1:97:ad:eb:e0:6f:c3:75:
                    82:a4:05:a5:c2:9f:bd:d2:ed:df:df:bc:36:fc:85:
                    06:53:87:fd:e1:af:07:96:39:2f:e3:3d:26:f6:53:
                    e2:51:0d:6f:ee:bf:fc:f3:96:ca:14:fb:ae:83:0e:
                    4a:1b:4c:5f:e9:bc:fa:43:9c:df:a0:03:13:9b:7c:
                    2a:95:83:89:da:de:e7:32:3b:41:4b:91:38:fa:cc:
                    63:6e:b9:c4:ab:f1:f7:ff:bd:bc:3a:6e:11:bd:1b:
                    90:8b:5b:09:44:41:99:59:8b:17:1f:81:2b:84:fa:
                    cc:d1:18:ee:f4:e4:e5:27:fd:b2:9e:6e:70:c3:74:
                    4b:3c:a7:df:b6:58:14:5b:ae:07:bd:1a:b2:05:0e:
                    c9:b9:25:07:e1:d8:b1:85:7e:a8:8b:2a:d5:11:81:
                    27:72:e8:45:88:8d:23:aa:f7:d1:af:8d:9d:bf:31:
                    22:b0:cc:eb:9c:04:b6:ea:75:90:f4:37:aa:1e:a7:
                    92:75:19:0d:78:ee:b1:3e:ec:93:52:82:dc:f9:a8:
                    c3:8c:88:d4:72:54:f0:cb:e5:79:27:fe:27:ec:2e:
                    4f:2b:0c:fa:eb:27:64:bc:e2:36:73:5a:13:82:cf:
                    83:1b:13:4e:89:4e:bd:9c:14:b4:33:2f:e0:d6:4a:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AD:81:22:6A:46:CE:FF:24:4C:8E:FF:EA:36:C9:5A:E7:3E:9C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.crl

            X509v3 Authority Key Identifier:
                keyid:88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.204.0/24
                  192.108.106.0/24
                IPv6:
                  2620:45:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e4:3d:38:6c:89:6b:7d:76:4e:54:97:f0:9f:cf:5c:01:03:
         03:e7:1a:27:ed:70:12:19:c7:6d:72:56:4b:55:a2:27:34:59:
         c9:b0:ea:8c:4f:14:43:86:2c:1b:fb:d5:3b:5c:c1:37:1a:79:
         2a:9a:b2:4a:5b:c2:c9:65:30:b7:fc:e6:14:53:75:d0:67:34:
         24:39:44:50:d0:30:c8:26:e7:1f:b8:df:ff:0f:fb:45:49:e8:
         83:2d:f6:c5:06:43:58:96:2b:f0:de:62:0a:39:ea:c2:45:2c:
         bb:86:00:55:31:42:8d:e8:83:4f:22:32:ef:89:46:23:9d:e5:
         d9:23:18:03:05:53:48:5b:8c:73:e5:d2:56:58:f2:e3:b8:94:
         de:15:16:db:4a:26:e3:e4:ca:6b:ec:cb:cd:53:f4:80:3b:65:
         76:f0:e2:cc:38:fb:b2:9c:94:7e:ab:c4:ad:dc:e9:eb:ee:f7:
         5e:ce:1d:69:0d:2f:0d:0d:43:03:ff:45:f9:38:99:af:a1:fb:
         6b:fa:06:7d:91:6b:d8:75:99:2d:b8:e3:ed:f9:bc:63:7e:b7:
         10:14:2d:21:e1:cf:24:c9:a6:87:5f:07:5c:f6:1a:23:df:bf:
         29:5b:f3:61:7a:fc:f8:76:b5:fa:f6:73:7f:5f:b1:01:6b:b1:
         31:2c:18:a6
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEoUZVK9PnG6TB5zUyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRhMzlhMWItODQxNC00NTFkLTg2MTAtN2FmNzM0MmRj
OGY2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZGRmZTEwZmEtM2IwOC00NGQ5LTkzMTAtM2E2YzlmYjhmNzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqlP/5xsoZet6+Bvw3WCpAWlwp+90u3f37w2
/IUGU4f94a8Hljkv4z0m9lPiUQ1v7r/885bKFPuugw5KG0xf6bz6Q5zfoAMTm3wq
lYOJ2t7nMjtBS5E4+sxjbrnEq/H3/728Om4RvRuQi1sJREGZWYsXH4ErhPrM0Rju
9OTlJ/2ynm5ww3RLPKfftlgUW64HvRqyBQ7JuSUH4dixhX6oiyrVEYEncuhFiI0j
qvfRr42dvzEisMzrnAS26nWQ9DeqHqeSdRkNeO6xPuyTUoLc+ajDjIjUclTwy+V5
J/4n7C5PKwz66ydkvOI2c1oTgs+DGxNOiU69nBS0My/g1koKRQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFGKtgSJqRs7/JEyO/+o2yVrnPpyvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGEz
OWExYi04NDE0LTQ1MWQtODYxMC03YWY3MzQyZGM4ZjYvZjk4NGNhYTEtNDhlZS0z
YTI2LThkNDAtYTFiMTRlNDVmMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhMzlhMWItODQxNC00NTFkLTg2
MTAtN2FmNzM0MmRjOGY2Lzc0YTM5YTFiLTg0MTQtNDUxZC04NjEwLTdhZjczNDJk
YzhmNi5jcmwwHwYDVR0jBBgwFoAUiHVdBiYi7RqletdVS8yuxNiMOj0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NGEzOWExYi04NDE0LTQ1MWQtODYxMC03YWY3
MzQyZGM4ZjYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwBDMAwQA
wGxqMA8EAgACMAkDBwAmIABFwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAl+Q9OGyJa312TlSX8J/PXAED
A+caJ+1wEhnHbXJWS1WiJzRZybDqjE8UQ4YsG/vVO1zBNxp5KpqySlvCyWUwt/zm
FFN10Gc0JDlEUNAwyCbnH7jf/w/7RUnogy32xQZDWJYr8N5iCjnqwkUsu4YAVTFC
jeiDTyIy74lGI53l2SMYAwVTSFuMc+XSVljy47iU3hUW20om4+TKa+zLzVP0gDtl
dvDizDj7spyUfqvErdzp6+73Xs4daQ0vDQ1DA/9F+TiZr6H7a/oGfZFr2HWZLbjj
7fm8Y363EBQtIeHPJMmmh18HXPYaI9+/KVvzYXr8+Ha1+vZzf1+xAWuxMSwYpg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:04:24 2025 by rpki-client