Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa
File:                     e4bee016-f469-32b3-882a-abe4f14aaed6.roa (raw, json)
Hash identifier:          vrXFSOFHw1Xni1B1tlq/vSdmOnPOgyyTNx0Hbq2wj5E=
Subject key identifier:   87:53:CB:61:CA:3B:A8:2B:ED:04:61:B1:4D:A2:89:E1:F1:82:3C:1E
Certificate issuer:       /CN=935332e4-2b48-45ab-95bc-6d4c2916350f
Certificate serial:       010D0C9F4328584AE9F68057A02B1E6B5F14B020
Authority key identifier: DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     393507
IP address blocks:        149.20.68.0/23 maxlen: 24
                          2620:137:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:80:57:a0:2b:1e:6b:5f:14:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935332e4-2b48-45ab-95bc-6d4c2916350f
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=182374c9-af02-4116-ac52-41193feb7c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0f:c7:f9:57:d2:a0:29:c6:f7:27:de:0c:f2:
                    2b:a8:ea:4e:64:24:10:bb:77:e9:5e:01:f5:e2:da:
                    08:eb:ec:cb:21:fe:47:50:8a:64:1d:a2:2c:70:73:
                    e4:60:35:50:54:7c:fc:02:a9:74:cf:6a:e8:a3:b0:
                    e5:05:e1:28:d5:63:8a:db:cb:06:dd:25:46:ec:02:
                    cf:87:e5:e4:6e:f3:0c:71:9c:33:75:19:14:60:17:
                    f5:b4:51:60:02:7e:10:4a:31:f4:1f:21:d0:72:c9:
                    8c:d3:1f:42:9e:78:ef:32:9c:1c:69:88:13:6d:6d:
                    e7:b7:b0:24:7d:4c:9b:f3:dc:14:8f:8e:31:db:03:
                    a7:b5:cd:e7:43:cf:2a:18:bb:9a:e2:58:5a:fd:06:
                    fa:77:18:86:c3:d2:57:bb:96:d7:27:97:eb:fd:0a:
                    27:f9:ae:b9:77:58:0d:a3:3c:31:91:4f:4c:de:0d:
                    23:f4:0e:38:29:a2:0e:9f:d6:86:1f:00:21:57:74:
                    a7:a2:06:50:4c:d6:3a:1c:a7:2f:b4:e4:94:a7:39:
                    b8:70:cf:f4:79:45:32:78:05:04:b5:08:31:97:77:
                    5d:ad:c2:bb:33:b6:fa:d8:64:54:22:dd:1c:2e:51:
                    d7:d1:83:6e:be:d0:88:08:d3:80:66:e3:b5:a1:78:
                    6c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:53:CB:61:CA:3B:A8:2B:ED:04:61:B1:4D:A2:89:E1:F1:82:3C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/e4bee016-f469-32b3-882a-abe4f14aaed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.crl

            X509v3 Authority Key Identifier:
                keyid:DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.68.0/23
                IPv6:
                  2620:137:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:93:e5:23:d9:93:e0:a6:bc:f7:0f:dc:51:e5:25:a0:02:
         c2:1a:f8:51:95:4a:da:25:c0:9b:18:0e:ad:fa:9f:82:3b:dc:
         47:2b:77:42:40:9c:56:43:f4:0f:bd:de:84:21:d7:88:c8:ba:
         35:20:73:5f:a1:4e:ae:54:01:09:72:5b:11:27:0a:0c:ce:1b:
         e3:15:8b:c6:c2:2e:7c:4d:d8:53:e7:c2:34:d5:1f:51:17:ee:
         d4:26:c3:14:ef:20:2a:4c:33:b2:17:55:02:26:69:c1:38:d0:
         64:35:63:d2:e5:2e:98:9a:53:be:5a:c3:ed:a2:ce:db:37:4e:
         6b:17:c1:8f:10:6f:a7:a3:ea:0f:4f:56:85:81:84:43:90:89:
         7e:86:11:55:79:27:a9:ab:50:ed:86:7a:04:62:ef:04:37:f0:
         09:69:70:c9:aa:03:9b:ec:35:98:f4:9c:ce:30:3f:a6:b9:58:
         12:4d:8a:fa:d3:a5:9c:68:2a:ef:70:72:db:42:b8:6f:e4:8d:
         f1:1a:da:02:61:d7:08:08:49:06:9c:df:b1:30:1c:7a:e4:92:
         bf:45:a9:ea:1e:7c:c4:a5:73:ae:0c:6d:d5:b8:38:dd:c8:5f:
         35:39:e2:b5:d2:9d:0c:c3:a3:81:33:b2:e6:87:62:1b:33:14:
         1c:65:8c:88
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErp9oBXoCsea18UsCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM1MzMyZTQtMmI0OC00NWFiLTk1YmMtNmQ0YzI5MTYz
NTBmMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk
MTgyMzc0YzktYWYwMi00MTE2LWFjNTItNDExOTNmZWI3YzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg/H+VfSoCnG9yfeDPIrqOpOZCQQu3fpXgH1
4toI6+zLIf5HUIpkHaIscHPkYDVQVHz8Aql0z2roo7DlBeEo1WOK28sG3SVG7ALP
h+XkbvMMcZwzdRkUYBf1tFFgAn4QSjH0HyHQcsmM0x9CnnjvMpwcaYgTbW3nt7Ak
fUyb89wUj44x2wOntc3nQ88qGLua4lha/Qb6dxiGw9JXu5bXJ5fr/Qon+a65d1gN
ozwxkU9M3g0j9A44KaIOn9aGHwAhV3SnogZQTNY6HKcvtOSUpzm4cM/0eUUyeAUE
tQgxl3ddrcK7M7b62GRUIt0cLlHX0YNuvtCICNOAZuO1oXhs1QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFIdTy2HKO6gr7QRhsU2iieHxgjweMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzUz
MzJlNC0yYjQ4LTQ1YWItOTViYy02ZDRjMjkxNjM1MGYvZTRiZWUwMTYtZjQ2OS0z
MmIzLTg4MmEtYWJlNGYxNGFhZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM1MzMyZTQtMmI0OC00NWFiLTk1
YmMtNmQ0YzI5MTYzNTBmLzkzNTMzMmU0LTJiNDgtNDVhYi05NWJjLTZkNGMyOTE2
MzUwZi5jcmwwHwYDVR0jBBgwFoAU3yARWi8qRKVdcwwqMfTCryf56qAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzUzMzJlNC0yYjQ4LTQ1YWItOTViYy02ZDRj
MjkxNjM1MGYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBlRREMA8E
AgACMAkDBwQmIAE3YAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAP2T5SPZk+CmvPcP3FHlJaACwhr4UZVK
2iXAmxgOrfqfgjvcRyt3QkCcVkP0D73ehCHXiMi6NSBzX6FOrlQBCXJbEScKDM4b
4xWLxsIufE3YU+fCNNUfURfu1CbDFO8gKkwzshdVAiZpwTjQZDVj0uUumJpTvlrD
7aLO2zdOaxfBjxBvp6PqD09WhYGEQ5CJfoYRVXknqatQ7YZ6BGLvBDfwCWlwyaoD
m+w1mPSczjA/prlYEk2K+tOlnGgq73By20K4b+SN8RraAmHXCAhJBpzfsTAceuSS
v0Wp6h58xKVzrgxt1bg43chfNTnitdKdDMOjgTOy5odiGzMUHGWMiA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:34:34 2025 by rpki-client