Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/82bc106a-fab1-38b4-8c8e-c816eab0101c.roa
File:                     82bc106a-fab1-38b4-8c8e-c816eab0101c.roa (raw, json)
Hash identifier:          IIwUGOT9V0CfkGPs4tzjgcfyN3hKEx4ENQQOnim3p7U=
Subject key identifier:   4F:A1:D3:2E:D3:6C:1B:4A:0F:F0:53:C4:B2:51:C2:D3:EC:F9:AB:A4
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F432858498C39E54158EA6A80FAFB6F00
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/82bc106a-fab1-38b4-8c8e-c816eab0101c.roa
Signing time:             Wed 16 Apr 2025 18:23:39 +0000
ROA not before:           Wed 16 Apr 2025 18:23:39 +0000
ROA not after:            Tue 15 Jul 2025 18:23:39 +0000
asID:                     27539
IP address blocks:        64.68.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:39:e5:41:58:ea:6a:80:fa:fb:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Apr 16 18:23:39 2025 GMT
            Not After : Jul 15 18:23:39 2025 GMT
        Subject: CN=fdfd212e-c32f-4b64-b4fe-17e93c87c626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c6:36:c4:2e:67:52:57:69:d8:40:77:af:0d:
                    89:ed:9d:b4:ad:bc:79:f5:27:0a:0a:be:1b:4d:7a:
                    83:14:e6:2a:d8:4c:bc:8a:35:b2:a2:5b:30:cf:fc:
                    c8:40:5f:78:5f:12:0b:82:04:95:21:48:18:56:de:
                    09:f5:86:c8:aa:9d:d3:5f:50:d9:0d:88:69:40:bd:
                    ce:ff:cb:5d:ea:88:47:68:87:b7:d0:cd:a2:e3:92:
                    d3:86:63:8f:b2:3f:71:a9:07:9c:c7:6f:3d:9a:cb:
                    05:aa:0b:b4:4b:8f:76:8e:fc:49:74:ad:a3:87:2e:
                    17:b2:30:3c:0a:16:ff:a7:68:bf:a9:71:0f:b4:21:
                    e7:16:2b:e4:2a:92:12:0c:5c:49:2a:37:6e:1e:08:
                    a7:db:23:9a:8c:ac:83:b1:c2:d8:5a:e7:c7:81:8c:
                    6f:38:c3:09:57:63:31:18:2c:d1:88:26:ea:48:5a:
                    21:b0:0c:8f:fb:1d:85:fe:b3:35:17:69:ba:b5:8a:
                    78:65:2e:9b:60:cb:18:58:f4:3a:8d:c3:85:88:47:
                    3e:2f:e7:ac:ce:51:52:76:1e:82:ca:da:dc:9c:b6:
                    ce:7e:3b:99:8c:38:51:36:a6:c3:d0:38:b5:1f:f7:
                    10:e8:38:83:a1:92:fa:5d:25:be:16:4e:9f:6f:4e:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A1:D3:2E:D3:6C:1B:4A:0F:F0:53:C4:B2:51:C2:D3:EC:F9:AB:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/82bc106a-fab1-38b4-8c8e-c816eab0101c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:49:32:79:5e:90:32:c7:65:60:fe:25:0f:5d:65:ea:0b:7d:
         37:05:46:4a:27:a1:40:68:e3:a1:1e:11:66:ce:0d:80:41:93:
         d4:6d:df:8a:c2:7a:eb:8e:db:fe:72:b0:f5:7d:e0:7c:60:85:
         3c:42:fc:69:fe:7b:34:ed:2e:26:1b:92:fe:cf:a4:ef:d2:9a:
         65:6e:71:d4:21:69:50:50:11:c7:34:9f:6b:9d:92:be:dc:72:
         c3:d9:13:9c:8a:9d:68:14:9d:e5:60:f4:81:60:95:c3:b4:0d:
         90:c3:0e:1d:f3:03:38:48:b0:e8:f5:26:47:10:c2:4c:9b:1b:
         70:79:70:fc:ed:a5:c4:ba:55:c8:1f:33:35:4b:e2:5a:a9:ee:
         4e:59:0d:51:08:e5:e1:f9:74:7c:d9:70:9c:4f:8c:54:01:1f:
         8f:72:76:ee:6f:c4:81:30:4e:bc:d2:35:6b:6e:01:0a:3e:d9:
         63:85:da:3d:3a:81:f8:64:72:5e:c7:7f:fd:46:76:a0:9d:78:
         d4:9e:14:76:63:cc:a7:47:42:6f:8e:f2:03:de:66:c4:eb:67:
         9d:f4:23:e9:8e:02:9e:08:0d:1c:d7:46:7a:28:79:aa:21:7a:
         e2:0f:b6:97:b6:83:f0:56:37:a0:de:8f:48:af:7b:5b:e5:9e:
         a6:85:1e:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmMOeVBWOpqgPr7bwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli
OWI2MB4XDTI1MDQxNjE4MjMzOVoXDTI1MDcxNTE4MjMzOVowLzEtMCsGA1UEAxMk
ZmRmZDIxMmUtYzMyZi00YjY0LWI0ZmUtMTdlOTNjODdjNjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMY2xC5nUldp2EB3rw2J7Z20rbx59ScKCr4b
TXqDFOYq2Ey8ijWyolswz/zIQF94XxILggSVIUgYVt4J9YbIqp3TX1DZDYhpQL3O
/8td6ohHaIe30M2i45LThmOPsj9xqQecx289mssFqgu0S492jvxJdK2jhy4XsjA8
Chb/p2i/qXEPtCHnFivkKpISDFxJKjduHgin2yOajKyDscLYWufHgYxvOMMJV2Mx
GCzRiCbqSFohsAyP+x2F/rM1F2m6tYp4ZS6bYMsYWPQ6jcOFiEc+L+eszlFSdh6C
ytrcnLbOfjuZjDhRNqbD0Di1H/cQ6DiDoZL6XSW+Fk6fb05aKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE+h0y7TbBtKD/BTxLJRwtPs+aukMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh
NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvODJiYzEwNmEtZmFiMS0z
OGI0LThjOGUtYzgxNmVhYjAxMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4
MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5
YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk
OGRjOWI5YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5JMnlekDLHZWD+JQ9dZeoLfTcFRkonoUBo46EeEWbODYBBk9Rt34rC
euuO2/5ysPV94HxghTxC/Gn+ezTtLiYbkv7PpO/SmmVucdQhaVBQEcc0n2udkr7c
csPZE5yKnWgUneVg9IFglcO0DZDDDh3zAzhIsOj1JkcQwkybG3B5cPztpcS6Vcgf
MzVL4lqp7k5ZDVEI5eH5dHzZcJxPjFQBH49ydu5vxIEwTrzSNWtuAQo+2WOF2j06
gfhkcl7Hf/1GdqCdeNSeFHZjzKdHQm+O8gPeZsTrZ530I+mOAp4IDRzXRnooeaoh
euIPtpe2g/BWN6Dej0ive1vlnqaFHiI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:56:54 2025 by rpki-client