Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64162acf-d318-3dd6-b5da-7175429aede7.roa
File:                     64162acf-d318-3dd6-b5da-7175429aede7.roa (raw, json)
Hash identifier:          l3SQDANTuLH9GX9X24CcYTAVTkw1gMim3pn5pjZj+AQ=
Subject key identifier:   D5:B2:66:A4:6A:2F:C6:25:FD:64:F3:92:8D:10:B0:42:51:D8:8D:E1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DC8FA029D765B14FE418AF18
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64162acf-d318-3dd6-b5da-7175429aede7.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        72.255.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:a0:29:d7:65:b1:4f:e4:18:af:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=3837292c-a15c-413c-a77d-9a8ba3019f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:3d:29:9d:a6:f2:1a:8c:35:91:8d:9e:38:
                    15:0b:16:6b:46:77:99:14:3e:80:fc:2e:ba:25:3f:
                    0c:52:7b:74:9a:07:a3:c7:55:51:df:0a:aa:8c:44:
                    24:02:f8:db:63:bd:c1:e2:24:78:5c:1f:24:e1:93:
                    9b:8f:35:65:34:06:d0:a8:f6:41:9e:8c:93:e7:0e:
                    a5:9a:fd:95:45:8f:bd:74:42:1b:44:18:63:76:4f:
                    85:a0:a5:12:73:4c:3a:d6:a7:a5:eb:b4:56:c9:a1:
                    55:f1:38:29:da:a3:59:2d:3f:f2:e5:0f:c5:86:8b:
                    86:d3:3f:e8:cb:2f:86:2d:88:0e:0a:95:e1:24:c7:
                    0c:a3:07:69:2f:9d:f0:95:6c:e9:8b:da:e7:d5:b9:
                    88:c9:20:88:a8:82:54:07:e3:5b:0f:0b:50:73:4e:
                    c0:8f:13:59:5a:68:95:37:6e:c2:35:37:df:dd:c3:
                    87:8e:9f:5e:90:ef:b2:97:1c:f3:75:bb:bd:fc:62:
                    29:9d:70:af:77:93:47:59:ee:77:c8:9e:7a:75:1a:
                    72:b7:d4:da:e7:10:13:3f:1d:ec:c1:8f:4b:8a:22:
                    5f:90:7e:cb:f2:20:06:69:cd:d0:14:ff:e2:6b:a1:
                    38:4d:62:c3:a2:09:dd:be:14:4b:43:29:50:99:c4:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:66:A4:6A:2F:C6:25:FD:64:F3:92:8D:10:B0:42:51:D8:8D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64162acf-d318-3dd6-b5da-7175429aede7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.255.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e2:c8:3c:24:06:38:5b:7f:4b:fb:3a:35:7a:85:72:7c:21:
         25:73:42:74:fa:33:e7:37:ba:ce:36:13:84:ff:d7:00:82:3a:
         9d:30:f4:21:9a:d0:ba:71:d0:e9:24:97:86:06:ea:58:88:29:
         74:f3:2d:37:34:43:38:0c:86:e1:57:d9:dd:34:be:e4:6b:4a:
         cb:f5:9c:7b:f5:c5:d1:87:2e:f2:ed:7b:3d:f4:58:3f:0e:fd:
         c2:4c:c6:57:c4:a7:0b:ec:12:fb:a5:f2:af:f8:c6:41:00:97:
         d5:8e:71:eb:e9:b8:1f:26:2c:92:ba:ec:db:b5:fd:3b:d9:b2:
         bf:b9:91:63:ad:3b:d3:c1:a7:5d:18:2b:d2:5d:02:57:7a:b0:
         e9:ca:68:d6:65:47:fe:96:b8:ba:6d:9d:04:8e:c9:4a:6e:7a:
         7a:75:7d:60:c0:3b:21:34:4e:49:ea:43:2d:cc:65:62:f1:2f:
         5b:44:68:f8:04:87:e4:3f:19:e8:a4:fb:60:41:bf:21:c9:6c:
         c1:88:09:0a:37:aa:28:e8:89:3b:74:36:4a:57:e8:ed:2f:06:
         c4:d4:de:20:7e:ad:10:e3:37:3e:f4:85:96:6a:b6:d0:13:a8:
         3d:6d:c5:3b:9e:f1:2c:c3:05:05:8f:7e:b2:b5:e2:8c:c4:c1:
         0d:43:75:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj6Ap12WxT+QYrxgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
MzgzNzI5MmMtYTE1Yy00MTNjLWE3N2QtOWE4YmEzMDE5ZjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLk9KZ2m8hqMNZGNnjgVCxZrRneZFD6A/C66
JT8MUnt0mgejx1VR3wqqjEQkAvjbY73B4iR4XB8k4ZObjzVlNAbQqPZBnoyT5w6l
mv2VRY+9dEIbRBhjdk+FoKUSc0w61qel67RWyaFV8Tgp2qNZLT/y5Q/FhouG0z/o
yy+GLYgOCpXhJMcMowdpL53wlWzpi9rn1bmIySCIqIJUB+NbDwtQc07AjxNZWmiV
N27CNTff3cOHjp9ekO+ylxzzdbu9/GIpnXCvd5NHWe53yJ56dRpyt9Ta5xATPx3s
wY9LiiJfkH7L8iAGac3QFP/ia6E4TWLDogndvhRLQylQmcRC7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWyZqRqL8Yl/WTzko0QsEJR2I3hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjQxNjJhY2YtZDMxOC0z
ZGQ2LWI1ZGEtNzE3NTQyOWFlZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILiyDwkBjhbf0v7OjV6hXJ8ISVzQnT6M+c3us42E4T/1wCCOp0w9CGa
0Lpx0Okkl4YG6liIKXTzLTc0QzgMhuFX2d00vuRrSsv1nHv1xdGHLvLtez30WD8O
/cJMxlfEpwvsEvul8q/4xkEAl9WOcevpuB8mLJK67Nu1/TvZsr+5kWOtO9PBp10Y
K9JdAld6sOnKaNZlR/6WuLptnQSOyUpuenp1fWDAOyE0TknqQy3MZWLxL1tEaPgE
h+Q/Geik+2BBvyHJbMGICQo3qijoiTt0NkpX6O0vBsTU3iB+rRDjNz70hZZqttAT
qD1txTue8SzDBQWPfrK14ozEwQ1DdV8=
-----END CERTIFICATE-----
Generated at Wed Jun 18 04:09:56 2025 by rpki-client