Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af424e5a-fe55-37bc-b4a0-701afe584b15.roa
File:                     af424e5a-fe55-37bc-b4a0-701afe584b15.roa (raw, json)
Hash identifier:          tFDpxpekGPlMPRmxdbBLGDIUzMKxDgoDJlsT1+EXKGA=
Subject key identifier:   63:F0:4F:2D:15:70:1C:A1:C9:59:09:C2:69:6E:42:3A:40:31:DE:78
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584AC2E0DBF6C734A29F52FD02C0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af424e5a-fe55-37bc-b4a0-701afe584b15.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     715
IP address blocks:        64.78.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:db:f6:c7:34:a2:9f:52:fd:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=9ee872ff-e481-4561-bd29-1e4758850088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:52:3e:2f:33:ae:dc:54:fb:ad:c8:84:2d:
                    87:82:cf:09:c5:7c:69:86:ff:df:a6:95:c4:d6:88:
                    ca:de:e3:49:bc:55:ef:a7:0e:4e:ba:c5:dc:b6:1c:
                    b0:3f:da:0e:69:35:a3:4b:b9:1c:2d:d0:1e:83:e3:
                    39:f8:46:af:e7:1a:a2:5f:7f:3c:3d:6e:34:ac:4a:
                    59:14:1c:03:02:9f:b4:22:45:6c:95:18:7d:4d:be:
                    38:a0:f0:0e:d6:16:9c:53:a9:2e:0a:ee:80:61:cd:
                    7f:cb:e6:d2:fa:59:d1:eb:6d:d1:b0:b6:51:84:b0:
                    60:4e:61:49:89:c3:b5:b8:7e:7c:f8:b8:ca:d5:87:
                    72:73:98:9f:16:1d:b3:e7:92:e8:00:82:f0:98:a4:
                    90:21:b2:67:da:6a:79:12:a2:57:8f:84:4b:66:ed:
                    24:bd:13:50:53:57:1d:1f:cc:8e:3d:00:9c:a2:8d:
                    46:58:f7:37:63:7d:df:d4:33:7f:87:d0:d8:f7:83:
                    29:1d:39:c7:5c:31:57:6b:e3:0f:52:4d:f1:3f:05:
                    57:56:2b:a1:9a:6d:d5:a3:2b:4b:77:19:c1:19:06:
                    53:a8:ab:34:b1:fd:43:45:d7:bd:31:9f:2f:e0:46:
                    c1:74:5d:91:ea:d8:5a:dc:f6:52:a7:b2:31:7c:2f:
                    05:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F0:4F:2D:15:70:1C:A1:C9:59:09:C2:69:6E:42:3A:40:31:DE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/af424e5a-fe55-37bc-b4a0-701afe584b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.78.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:7a:da:da:2e:24:31:d6:cd:4e:3c:08:86:7f:a5:80:92:5f:
         db:1d:4b:46:dc:e6:30:11:d4:1c:5b:24:80:6f:8a:f5:78:15:
         78:fe:be:be:50:a5:83:c5:95:f9:bf:18:df:3c:71:3e:8b:1c:
         f0:5f:49:73:0a:e0:7f:79:7a:9e:5b:79:f1:20:cf:a5:f1:99:
         b1:07:41:1b:97:f7:e6:83:a9:ee:2a:f8:83:f2:25:e3:11:e6:
         eb:c5:42:44:bd:67:ef:43:e4:7f:7e:b6:94:c1:60:55:52:3d:
         7e:5b:8c:e5:9f:d8:a1:28:d0:b3:ec:c7:52:6a:ad:81:6d:53:
         e1:3d:74:35:fa:9f:29:aa:ee:6c:c3:78:8a:08:93:ad:09:f3:
         7b:2a:81:47:57:be:43:08:97:10:c2:8a:f3:23:56:6d:c8:28:
         49:5e:48:ad:13:2b:81:1e:2f:4e:df:0a:16:66:33:54:1f:2a:
         37:28:10:a9:c3:c2:74:95:b6:63:6d:b8:d9:60:e4:ca:73:d9:
         f3:1f:34:b7:4a:62:e3:a0:68:f1:0f:e1:02:aa:66:f1:ec:2a:
         eb:1a:be:9f:09:78:b3:46:c4:c6:26:8c:8b:88:f2:16:e4:dd:
         20:62:84:fe:65:9c:8a:78:b9:59:54:2e:f9:2e:75:e1:3b:c7:
         dd:13:a9:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Nv2xzSin1L9AsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
OWVlODcyZmYtZTQ4MS00NTYxLWJkMjktMWU0NzU4ODUwMDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTBSPi8zrtxU+63IhC2Hgs8JxXxphv/fppXE
1ojK3uNJvFXvpw5OusXcthywP9oOaTWjS7kcLdAeg+M5+Eav5xqiX388PW40rEpZ
FBwDAp+0IkVslRh9Tb44oPAO1hacU6kuCu6AYc1/y+bS+lnR623RsLZRhLBgTmFJ
icO1uH58+LjK1Ydyc5ifFh2z55LoAILwmKSQIbJn2mp5EqJXj4RLZu0kvRNQU1cd
H8yOPQCcoo1GWPc3Y33f1DN/h9DY94MpHTnHXDFXa+MPUk3xPwVXViuhmm3VoytL
dxnBGQZTqKs0sf1DRde9MZ8v4EbBdF2R6tha3PZSp7IxfC8FXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPwTy0VcByhyVkJwmluQjpAMd54MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYWY0MjRlNWEtZmU1NS0z
N2JjLWI0YTAtNzAxYWZlNTg0YjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQE7IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALN62touJDHWzU48CIZ/pYCSX9sdS0bc5jAR1BxbJIBvivV4FXj+vr5Q
pYPFlfm/GN88cT6LHPBfSXMK4H95ep5befEgz6XxmbEHQRuX9+aDqe4q+IPyJeMR
5uvFQkS9Z+9D5H9+tpTBYFVSPX5bjOWf2KEo0LPsx1JqrYFtU+E9dDX6nymq7mzD
eIoIk60J83sqgUdXvkMIlxDCivMjVm3IKEleSK0TK4EeL07fChZmM1QfKjcoEKnD
wnSVtmNtuNlg5Mpz2fMfNLdKYuOgaPEP4QKqZvHsKusavp8JeLNGxMYmjIuI8hbk
3SBihP5lnIp4uVlULvkudeE7x90TqYs=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:04 2025 by rpki-client