Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0a17557e-afb8-3970-bf2d-55928d15105f.roa
File:                     0a17557e-afb8-3970-bf2d-55928d15105f.roa (raw, json)
Hash identifier:          z5yavDABMGWMnNK/AB5+z3IgLb9TDec554jfpm+iZvE=
Subject key identifier:   D5:9B:71:F0:9B:06:F9:21:46:F3:D4:6D:D3:6E:AE:A8:96:6A:CE:F8
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F43285849EAA92ABD5950984D0C872180
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0a17557e-afb8-3970-bf2d-55928d15105f.roa
Signing time:             Tue 20 May 2025 14:13:50 +0000
ROA not before:           Tue 20 May 2025 14:13:50 +0000
ROA not after:            Mon 18 Aug 2025 14:13:50 +0000
asID:                     32491
IP address blocks:        64.98.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:a9:2a:bd:59:50:98:4d:0c:87:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: May 20 14:13:50 2025 GMT
            Not After : Aug 18 14:13:50 2025 GMT
        Subject: CN=6e7da367-34ba-41a8-9c03-d6fb0cc085f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:cd:f1:aa:6f:11:de:d3:ee:ce:09:14:ed:
                    b7:de:b6:74:c0:bc:cb:b0:b7:4f:a5:90:14:b5:91:
                    27:ba:28:6a:aa:22:84:44:7b:11:54:9c:85:0c:ba:
                    ea:c3:03:9c:f9:96:f1:4d:7c:10:a9:e7:e3:52:4a:
                    6f:9a:93:ce:90:12:ea:da:0b:2d:d8:8f:15:48:92:
                    87:b6:5b:48:b7:79:ff:76:7a:66:e6:f1:d2:6d:98:
                    61:cb:ab:29:75:f7:b5:d0:9a:57:26:e1:f1:09:80:
                    e5:15:6d:c6:9f:bd:4f:4b:6e:c5:21:43:a1:6f:4d:
                    0d:21:39:75:b0:25:c3:37:d9:01:35:17:dc:bf:67:
                    17:8c:59:6f:d6:e8:13:80:dc:6f:22:c2:1d:41:35:
                    26:e4:2f:58:8a:db:53:89:8e:ca:92:a6:19:15:e3:
                    71:44:29:4f:12:b5:45:a7:06:b1:53:c2:f2:93:03:
                    c6:78:d8:e7:97:23:03:25:4d:b8:65:93:32:ca:97:
                    f0:23:34:6f:07:41:74:bd:5d:b2:4c:ae:b2:f8:e8:
                    24:b9:98:ec:2d:cd:cc:d0:51:7f:8a:20:23:17:8d:
                    db:25:dd:46:63:2e:38:27:ed:5a:2e:fc:0c:ea:2c:
                    9e:cd:90:8f:da:6c:9b:6b:aa:3e:05:fe:a6:3d:87:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9B:71:F0:9B:06:F9:21:46:F3:D4:6D:D3:6E:AE:A8:96:6A:CE:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0a17557e-afb8-3970-bf2d-55928d15105f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:0d:03:90:1c:d2:32:c4:08:57:bc:8c:0a:26:20:28:d9:43:
         09:89:84:65:43:95:6c:8e:48:3e:be:f2:b5:85:d6:84:24:f8:
         fb:b6:71:30:25:62:3a:f3:13:11:a3:e9:4f:39:85:65:36:ec:
         6a:66:a3:81:52:8a:84:ed:17:3b:62:38:35:46:fb:b1:46:5e:
         a9:6e:0c:65:ac:01:89:00:ee:f6:17:da:6d:a6:dd:fa:6d:f6:
         98:15:76:ae:ed:07:a1:38:84:06:f5:87:6c:11:56:0b:7a:a8:
         b8:b7:64:4d:ee:24:65:ec:cb:09:29:c7:d1:de:1f:6f:76:78:
         e6:03:f3:68:ae:08:57:35:21:6b:11:ff:78:d9:82:29:f6:6f:
         31:dd:3f:9b:8b:80:ad:be:a9:a0:f9:21:0d:5c:7d:37:86:92:
         7c:49:87:21:da:d4:a9:d8:4e:5a:28:dc:5c:41:fa:13:e0:2f:
         db:46:aa:36:b2:06:a4:f1:83:d8:2b:f0:9b:ae:a7:54:2d:68:
         86:61:c8:57:28:30:9f:a1:91:d5:85:a8:54:3d:c7:82:73:53:
         db:99:b8:2b:9c:46:d7:c6:9d:22:78:9e:58:0f:c1:94:99:6f:
         c4:cb:75:4b:09:ca:16:e8:31:79:e2:2b:e4:df:4a:d2:e0:51:
         32:1e:72:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqqSq9WVCYTQyHIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI1MDUyMDE0MTM1MFoXDTI1MDgxODE0MTM1MFowLzEtMCsGA1UEAxMk
NmU3ZGEzNjctMzRiYS00MWE4LTljMDMtZDZmYjBjYzA4NWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+/N8apvEd7T7s4JFO233rZ0wLzLsLdPpZAU
tZEnuihqqiKERHsRVJyFDLrqwwOc+ZbxTXwQqefjUkpvmpPOkBLq2gst2I8VSJKH
tltIt3n/dnpm5vHSbZhhy6spdfe10JpXJuHxCYDlFW3Gn71PS27FIUOhb00NITl1
sCXDN9kBNRfcv2cXjFlv1ugTgNxvIsIdQTUm5C9YittTiY7KkqYZFeNxRClPErVF
pwaxU8LykwPGeNjnlyMDJU24ZZMyypfwIzRvB0F0vV2yTK6y+OgkuZjsLc3M0FF/
iiAjF43bJd1GYy44J+1aLvwM6iyezZCP2myba6o+Bf6mPYc0KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWbcfCbBvkhRvPUbdNurqiWas74MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvMGExNzU1N2UtYWZiOC0z
OTcwLWJmMmQtNTU5MjhkMTUxMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQGKQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALwNA5Ac0jLECFe8jAomICjZQwmJhGVDlWyOSD6+8rWF1oQk+Pu2cTAl
YjrzExGj6U85hWU27Gpmo4FSioTtFztiODVG+7FGXqluDGWsAYkA7vYX2m2m3fpt
9pgVdq7tB6E4hAb1h2wRVgt6qLi3ZE3uJGXsywkpx9HeH292eOYD82iuCFc1IWsR
/3jZgin2bzHdP5uLgK2+qaD5IQ1cfTeGknxJhyHa1KnYTloo3FxB+hPgL9tGqjay
BqTxg9gr8Juup1QtaIZhyFcoMJ+hkdWFqFQ9x4JzU9uZuCucRtfGnSJ4nlgPwZSZ
b8TLdUsJyhboMXniK+TfStLgUTIeclM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:01 2025 by rpki-client