Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dea7db87-2826-35a7-8644-c9e3d986426f.roa
File:                     dea7db87-2826-35a7-8644-c9e3d986426f.roa (raw, json)
Hash identifier:          ajVVFWHdZUPDfLma9FnGtJ0LFO0SM96e6CqmO6JK+BY=
Subject key identifier:   EC:37:3A:AD:C2:CC:8A:B8:D8:6A:F6:B7:B7:F4:1A:75:F0:3A:2B:94
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A8F3B741359C79D1781323820
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dea7db87-2826-35a7-8644-c9e3d986426f.roa
Signing time:             Fri 18 Jul 2025 13:01:05 +0000
ROA not before:           Fri 18 Jul 2025 13:01:05 +0000
ROA not after:            Thu 16 Oct 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        64.237.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8f:3b:74:13:59:c7:9d:17:81:32:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul 18 13:01:05 2025 GMT
            Not After : Oct 16 13:01:05 2025 GMT
        Subject: CN=bf98e736-0201-4823-a8b4-d379f7319c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:bc:95:fa:32:c7:9d:26:64:65:f5:98:f8:
                    e4:00:b5:0c:17:98:44:a9:cd:04:5a:2a:82:02:b2:
                    36:c8:38:92:1e:5d:db:6f:3a:85:c4:d6:98:c9:b4:
                    b9:23:47:8e:ef:5b:cb:a1:c6:50:17:5d:a0:ef:23:
                    8a:e8:a8:0f:b4:cc:43:4c:ca:76:90:b2:27:8d:c0:
                    83:12:49:09:71:4b:e0:c3:d2:79:50:a2:5b:38:fc:
                    54:89:0e:3a:68:f4:12:e8:db:e5:c2:77:f1:2f:5f:
                    94:95:ad:5e:30:e5:eb:5d:24:91:18:bb:12:52:23:
                    d8:c5:5e:e7:4b:59:7b:81:9e:0d:50:cc:2e:38:b6:
                    20:e7:53:57:9c:89:18:cb:28:50:b0:ed:94:f5:db:
                    b3:10:91:64:d6:e6:9f:30:89:bb:a5:05:db:1d:7c:
                    e1:25:8c:1c:e7:1b:42:ff:6c:8a:b7:7f:bc:79:a6:
                    e9:65:d8:3e:ba:83:c9:bd:be:71:6d:b4:eb:1c:2f:
                    da:0d:e1:72:f1:f0:6d:e3:43:60:6c:37:77:1f:d4:
                    9e:cb:e3:5f:65:b5:6f:05:fc:b9:f5:eb:c4:3e:be:
                    14:15:37:ad:db:c1:62:55:b9:5f:57:f4:95:50:36:
                    29:54:28:ff:82:d6:01:e1:4c:06:c2:1c:7a:6c:49:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:37:3A:AD:C2:CC:8A:B8:D8:6A:F6:B7:B7:F4:1A:75:F0:3A:2B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dea7db87-2826-35a7-8644-c9e3d986426f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:35:2b:2b:67:d6:10:eb:77:e7:23:80:fc:84:ca:5d:70:2b:
         3d:d0:9e:ff:77:38:a5:c2:eb:b8:c8:ff:26:90:a0:11:3d:25:
         49:9b:a9:be:ce:01:07:24:31:95:8d:82:e3:09:6a:46:f7:8d:
         3b:d2:4e:7c:bf:1f:5f:e5:d7:29:a5:30:fd:d0:a7:8f:82:9c:
         e9:8a:29:c4:f7:9d:0c:0d:0b:13:b6:65:30:dc:8c:0a:6f:77:
         22:a9:34:8a:93:f1:a7:d7:e8:d0:e2:d7:cb:15:32:6e:f1:3b:
         bd:62:df:2a:cc:9d:ea:04:99:92:c7:27:d6:27:52:1a:5f:ed:
         2f:7f:6d:d5:31:99:ef:5b:ac:a1:d1:d7:f9:02:64:55:1b:e8:
         e7:3d:cb:31:c5:d0:31:e2:b7:99:b8:56:70:ab:ff:73:41:b1:
         1c:d0:f9:59:e0:c7:ed:e0:a4:af:38:9c:a7:92:5e:9b:e1:59:
         1e:6c:b1:8a:e7:a1:49:96:40:fb:80:4b:46:85:a6:94:9b:3b:
         9b:76:f4:c4:61:07:5a:69:7d:f7:d1:5f:bc:da:8f:8e:5b:27:
         c6:e3:9b:60:b0:2f:58:61:12:94:4a:59:cb:54:b4:3f:ff:a1:
         83:2b:72:3f:2c:99:5a:2d:08:4d:29:05:c2:b0:1b:66:41:d5:
         8f:e5:20:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqPO3QTWcedF4EyOCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDcxODEzMDEwNVoXDTI1MTAxNjEzMDEwNVowLzEtMCsGA1UEAxMk
YmY5OGU3MzYtMDIwMS00ODIzLWE4YjQtZDM3OWY3MzE5YzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq28lfoyx50mZGX1mPjkALUMF5hEqc0EWiqC
ArI2yDiSHl3bbzqFxNaYybS5I0eO71vLocZQF12g7yOK6KgPtMxDTMp2kLInjcCD
EkkJcUvgw9J5UKJbOPxUiQ46aPQS6NvlwnfxL1+Ula1eMOXrXSSRGLsSUiPYxV7n
S1l7gZ4NUMwuOLYg51NXnIkYyyhQsO2U9duzEJFk1uafMIm7pQXbHXzhJYwc5xtC
/2yKt3+8eabpZdg+uoPJvb5xbbTrHC/aDeFy8fBt40NgbDd3H9Sey+NfZbVvBfy5
9evEPr4UFTet28FiVblfV/SVUDYpVCj/gtYB4UwGwhx6bElMlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOw3Oq3CzIq42Gr2t7f0GnXwOiuUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGVhN2RiODctMjgyNi0z
NWE3LTg2NDQtYzllM2Q5ODY0MjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQO0QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEY1Kytn1hDrd+cjgPyEyl1wKz3Qnv93OKXC67jI/yaQoBE9JUmbqb7O
AQckMZWNguMJakb3jTvSTny/H1/l1ymlMP3Qp4+CnOmKKcT3nQwNCxO2ZTDcjApv
dyKpNIqT8afX6NDi18sVMm7xO71i3yrMneoEmZLHJ9YnUhpf7S9/bdUxme9brKHR
1/kCZFUb6Oc9yzHF0DHit5m4VnCr/3NBsRzQ+Vngx+3gpK84nKeSXpvhWR5ssYrn
oUmWQPuAS0aFppSbO5t29MRhB1ppfffRX7zaj45bJ8bjm2CwL1hhEpRKWctUtD//
oYMrcj8smVotCE0pBcKwG2ZB1Y/lIAo=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:12:37 2025 by rpki-client