Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/c14eb75a-4cb2-368b-8244-8b32d28bb241.roa
File:                     c14eb75a-4cb2-368b-8244-8b32d28bb241.roa (raw, json)
Hash identifier:          7jDBfpt639v9oxNYUeb1q20hsy7BCpmVvYf6GJyE584=
Subject key identifier:   A3:9A:13:11:8C:35:B9:15:24:1D:2D:1A:ED:1A:AA:94:16:26:56:0A
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F43285849F715114862149B352CA9A440
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/c14eb75a-4cb2-368b-8244-8b32d28bb241.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     22822
IP address blocks:        69.164.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:11:48:62:14:9b:35:2c:a9:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=4c56cc95-18e4-4fee-bdc2-cd604f54efef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:30:c6:2f:eb:d9:4e:f2:c8:cb:9a:4a:83:
                    fa:7f:df:4c:c1:e3:e3:9b:1d:72:ef:ab:8c:4c:dc:
                    6a:bc:c2:ba:73:50:11:65:19:6e:87:63:ae:19:88:
                    13:93:e4:95:73:85:53:a6:37:e7:a1:01:7f:22:5a:
                    90:27:e1:58:bc:70:87:85:f0:b8:c5:ba:5e:70:68:
                    3a:d0:29:a3:1e:13:1d:04:8c:7c:ec:60:73:e9:85:
                    a6:23:7e:48:1d:f4:51:03:56:55:fa:d7:90:9c:d0:
                    8f:d7:e7:4a:f1:02:9a:f8:16:26:bc:7e:14:07:16:
                    11:c3:86:98:23:ef:7f:8a:45:bb:74:d3:c6:98:b6:
                    5f:f2:69:44:c7:20:c6:af:a2:c9:e7:b1:c4:93:f6:
                    31:59:d5:06:e1:6d:aa:f8:cb:b2:41:b8:a1:bc:6e:
                    87:e1:7c:4c:65:11:6a:d8:b7:fc:2d:55:20:10:49:
                    85:19:01:6d:d4:9f:58:68:92:8b:2f:93:56:81:78:
                    e7:98:58:10:67:50:c0:bd:fc:40:cb:8c:ff:42:cc:
                    5a:66:09:5c:c8:c3:ed:89:49:2c:89:09:0b:bb:85:
                    64:84:41:6e:09:ac:ac:f4:42:82:3c:2f:f1:a4:2b:
                    1a:e6:c0:b2:53:44:e6:ec:08:3f:a2:fd:32:fe:d4:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9A:13:11:8C:35:B9:15:24:1D:2D:1A:ED:1A:AA:94:16:26:56:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/c14eb75a-4cb2-368b-8244-8b32d28bb241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.164.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:0a:11:46:92:23:07:c2:b3:5e:73:27:86:7d:05:2a:a2:97:
         e4:17:8d:6a:39:05:60:3d:31:8d:9a:5a:88:24:4d:2a:81:90:
         5a:2c:b5:5f:59:cb:07:44:d4:87:5c:a6:69:8f:a5:a3:bf:6c:
         d9:e8:c4:73:88:a6:5f:fc:c5:15:d8:62:23:d6:a1:b8:39:b5:
         ee:5d:c7:81:73:8d:57:ee:dc:51:3c:bc:91:34:a5:fb:2c:43:
         6d:7c:84:cf:4a:3b:22:b5:f8:27:3c:e1:14:06:f2:14:a1:a0:
         8a:aa:3e:0c:99:14:60:72:51:9b:01:1e:61:2c:5e:89:8d:36:
         8f:ee:60:a8:e7:05:e9:04:d3:19:66:a3:33:96:98:60:c3:34:
         63:8e:13:ae:f4:38:d9:8a:45:eb:e4:3d:79:ef:5d:e4:d3:8d:
         65:81:ed:04:d6:16:09:9e:53:45:55:f8:39:95:32:51:b3:48:
         19:a8:9f:4a:c4:7f:b7:6e:83:50:d2:95:ff:72:c9:eb:1a:49:
         fa:b8:5d:ee:53:aa:3f:da:fa:07:50:d3:40:85:5b:c8:27:5c:
         a9:86:dd:92:1d:20:22:2e:73:10:d1:2d:3e:c4:77:9d:a6:22:
         2b:9b:fe:76:f4:70:3d:9c:67:2e:18:4b:ef:71:2d:13:20:4b:
         6c:f0:f4:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRFIYhSbNSyppEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
NGM1NmNjOTUtMThlNC00ZmVlLWJkYzItY2Q2MDRmNTRlZmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMcwxi/r2U7yyMuaSoP6f99MwePjmx1y76uM
TNxqvMK6c1ARZRluh2OuGYgTk+SVc4VTpjfnoQF/IlqQJ+FYvHCHhfC4xbpecGg6
0CmjHhMdBIx87GBz6YWmI35IHfRRA1ZV+teQnNCP1+dK8QKa+BYmvH4UBxYRw4aY
I+9/ikW7dNPGmLZf8mlExyDGr6LJ57HEk/YxWdUG4W2q+MuyQbihvG6H4XxMZRFq
2Lf8LVUgEEmFGQFt1J9YaJKLL5NWgXjnmFgQZ1DAvfxAy4z/QsxaZglcyMPtiUks
iQkLu4VkhEFuCays9EKCPC/xpCsa5sCyU0Tm7Ag/ov0y/tQHYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOaExGMNbkVJB0tGu0aqpQWJlYKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvYzE0ZWI3NWEtNGNiMi0z
NjhiLTgyNDQtOGIzMmQyOGJiMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRaQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIKEUaSIwfCs15zJ4Z9BSqil+QXjWo5BWA9MY2aWogkTSqBkFostV9Z
ywdE1IdcpmmPpaO/bNnoxHOIpl/8xRXYYiPWobg5te5dx4FzjVfu3FE8vJE0pfss
Q218hM9KOyK1+Cc84RQG8hShoIqqPgyZFGByUZsBHmEsXomNNo/uYKjnBekE0xlm
ozOWmGDDNGOOE670ONmKRevkPXnvXeTTjWWB7QTWFgmeU0VV+DmVMlGzSBmon0rE
f7dug1DSlf9yyesaSfq4Xe5Tqj/a+gdQ00CFW8gnXKmG3ZIdICIucxDRLT7Ed52m
Iiub/nb0cD2cZy4YS+9xLRMgS2zw9Hg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:39:09 2025 by rpki-client