Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa
File:                     5e224ae1-808a-3754-8044-eaca79be6972.roa (raw, json)
Hash identifier:          oWlfZB2yk4mLo1ZIYOdcf3ezUD7bn/HuBdGlEmIDwpE=
Subject key identifier:   42:D4:E8:1A:E5:80:FA:AD:50:68:82:24:5B:D8:6C:A1:CF:CB:96:CD
Certificate issuer:       /CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
Certificate serial:       010D0C9F4328584AC5AB9503A6DD102429099680
Authority key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     198949
IP address blocks:        64.45.64.0/18 maxlen: 24
                          65.18.0.0/18 maxlen: 24
                          65.18.64.0/19 maxlen: 24
                          65.18.96.0/20 maxlen: 24
                          141.114.0.0/16 maxlen: 24
                          204.197.0.0/17 maxlen: 24
                          207.166.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:95:03:a6:dd:10:24:29:09:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=a5304703-2240-4f33-8225-2dbd4e4384a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:7a:9e:b6:1a:c2:79:33:4b:98:f2:b5:8b:
                    ea:95:72:23:04:24:25:e8:f6:46:07:03:3a:b5:1e:
                    db:71:f7:f6:11:ad:99:e4:0e:67:b7:a3:5e:7f:4f:
                    7e:9e:77:4d:67:b0:39:bb:a6:10:67:e9:83:20:6c:
                    90:cb:b2:8e:f5:a5:68:1c:a1:a9:26:6d:08:28:d1:
                    01:0a:92:58:17:dc:01:8d:3b:7c:06:50:c3:50:57:
                    65:aa:c2:c9:35:5c:5d:c7:d8:c7:4b:a2:94:9e:8b:
                    49:a0:e3:e7:14:c8:50:d7:b1:47:87:4d:3d:f0:5a:
                    56:67:c9:16:84:0b:a5:fa:7b:63:13:e8:d7:bc:b5:
                    38:4a:f6:fc:85:96:59:a3:b3:fb:04:e6:d7:a5:38:
                    d3:4b:33:50:e4:09:8e:6e:4b:6a:3d:27:3c:11:5f:
                    5c:70:2f:1a:ab:c4:57:79:f9:45:f4:fb:26:f2:be:
                    cb:59:96:09:7c:59:92:2f:24:8b:5a:95:74:62:55:
                    15:b7:76:a9:bc:12:a4:89:55:48:56:5f:ac:57:0e:
                    6d:68:ee:92:d0:9d:be:77:07:d1:73:11:fd:2f:22:
                    49:35:2b:30:5c:9c:9f:a2:ab:a5:de:dd:14:60:a5:
                    a6:d2:32:8d:e0:b2:34:05:67:02:7c:ea:17:4f:98:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D4:E8:1A:E5:80:FA:AD:50:68:82:24:5B:D8:6C:A1:CF:CB:96:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.45.64.0/18
                  65.18.0.0-65.18.111.255
                  141.114.0.0/16
                  204.197.0.0/17
                  207.166.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:27:44:27:ef:cc:d8:fd:90:ba:0a:e9:5d:6b:86:33:dc:87:
         cb:ed:90:df:ed:e5:9d:56:a9:d1:94:27:75:50:e7:85:71:7e:
         5c:bc:ed:f1:52:83:7c:75:e1:4a:91:c5:39:24:5c:6f:c6:f9:
         d3:7c:0c:4f:d2:bc:13:5d:89:e5:dc:ad:a7:22:64:c3:90:3e:
         02:92:cb:a5:f6:5f:ce:bb:29:d7:5b:2a:64:26:2e:05:e3:60:
         f8:84:10:b2:8b:8d:79:be:41:f5:62:3d:15:85:37:1a:1b:9f:
         d0:a3:6e:ed:c6:26:6d:e3:0c:6f:ce:00:21:0a:db:5e:e0:91:
         8a:ce:53:e5:ec:35:6b:80:30:e4:58:21:96:00:0e:c2:e0:ee:
         cd:32:1f:e5:a3:46:11:15:fc:94:2f:19:e4:da:64:fb:9d:0e:
         e9:79:12:05:17:2e:0a:30:5e:4f:7f:51:08:7f:f8:19:49:2c:
         4f:da:d7:bc:cf:09:b1:0c:98:9f:92:07:11:cf:c7:53:3a:d6:
         74:f3:0f:24:c5:f0:d8:cd:95:d6:d4:e7:05:f1:70:fa:d6:74:
         e5:09:3e:59:d5:4f:eb:93:b9:e4:b8:8b:28:1c:18:1a:72:24:
         a1:7f:74:03:36:9b:2e:23:3b:94:20:be:03:bf:11:19:f8:ae:
         6f:62:a2:d1
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWErFq5UDpt0QJCkJloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE3Y2UyMmItNjFhMC00YWU5LTljYzAtZjUwZjNiYjc1
MzBkMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
YTUzMDQ3MDMtMjI0MC00ZjMzLTgyMjUtMmRiZDRlNDM4NGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa16nrYawnkzS5jytYvqlXIjBCQl6PZGBwM6
tR7bcff2Ea2Z5A5nt6Nef09+nndNZ7A5u6YQZ+mDIGyQy7KO9aVoHKGpJm0IKNEB
CpJYF9wBjTt8BlDDUFdlqsLJNVxdx9jHS6KUnotJoOPnFMhQ17FHh0098FpWZ8kW
hAul+ntjE+jXvLU4Svb8hZZZo7P7BObXpTjTSzNQ5AmObktqPSc8EV9ccC8aq8RX
eflF9Psm8r7LWZYJfFmSLySLWpV0YlUVt3apvBKkiVVIVl+sVw5taO6S0J2+dwfR
cxH9LyJJNSswXJyfoqul3t0UYKWm0jKN4LI0BWcCfOoXT5hr6wIDAQABo4IDczCC
A28wHQYDVR0OBBYEFELU6BrlgPqtUGiCJFvYbKHPy5bNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdj
ZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2JiNzUzMGQvNWUyMjRhZTEtODA4YS0z
NzU0LTgwNDQtZWFjYTc5YmU2OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjE3Y2UyMmItNjFhMC00YWU5LTlj
YzAtZjUwZjNiYjc1MzBkL2IxN2NlMjJiLTYxYTAtNGFlOS05Y2MwLWY1MGYzYmI3
NTMwZC5jcmwwHwYDVR0jBBgwFoAUt2tfGIphWyOCw/KpdRRVpSGxh+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBm
M2JiNzUzMGQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGQC1AMAsD
AwFBEgMEBEESYAMDAI1yAwQHzMUAAwQFz6bgMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIwnRCfvzNj9kLoK
6V1rhjPch8vtkN/t5Z1WqdGUJ3VQ54Vxfly87fFSg3x14UqRxTkkXG/G+dN8DE/S
vBNdieXcraciZMOQPgKSy6X2X867KddbKmQmLgXjYPiEELKLjXm+QfViPRWFNxob
n9Cjbu3GJm3jDG/OACEK217gkYrOU+XsNWuAMORYIZYADsLg7s0yH+WjRhEV/JQv
GeTaZPudDul5EgUXLgowXk9/UQh/+BlJLE/a17zPCbEMmJ+SBxHPx1M61nTzDyTF
8NjNldbU5wXxcPrWdOUJPlnVT+uTueS4iygcGBpyJKF/dAM2my4jO5QgvgO/ERn4
rm9iotE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:46 2025 by rpki-client