Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/8501162b-5976-3f78-a723-759699eb71bc.roa
File:                     8501162b-5976-3f78-a723-759699eb71bc.roa (raw, json)
Hash identifier:          952qqZ2d6Rl6TUoW3nw3yJY20uLZOHYsMAI3rCAvZlQ=
Subject key identifier:   D4:60:34:83:03:27:11:85:70:17:03:FC:CF:3C:0C:68:F9:FA:BC:4C
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F432858498C3B1D1E2E68BB485B670980
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/8501162b-5976-3f78-a723-759699eb71bc.roa
Signing time:             Wed 16 Apr 2025 18:26:06 +0000
ROA not before:           Wed 16 Apr 2025 18:26:06 +0000
ROA not after:            Tue 15 Jul 2025 18:26:06 +0000
asID:                     27539
IP address blocks:        64.68.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:3b:1d:1e:2e:68:bb:48:5b:67:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Apr 16 18:26:06 2025 GMT
            Not After : Jul 15 18:26:06 2025 GMT
        Subject: CN=df7780d8-85d3-48b8-88c8-fb04dea79d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:5d:3e:f6:5a:67:77:c5:30:ac:3f:91:79:
                    73:4e:32:79:aa:41:47:fb:01:cb:b7:cf:63:d5:40:
                    13:5b:05:cd:1e:62:69:a6:dc:db:79:a9:57:4c:03:
                    63:f4:8f:0e:ed:53:30:5f:5d:f7:f1:79:69:ce:aa:
                    7b:c6:df:48:81:69:96:e4:c8:dc:01:d4:d1:e2:d4:
                    88:47:e8:81:12:9f:ed:8d:4a:37:84:d0:fb:a2:17:
                    7a:99:e1:92:5d:52:f3:83:f2:af:db:5f:23:b5:73:
                    27:68:90:c6:c6:97:4a:0a:d5:f5:ce:28:50:29:af:
                    43:84:25:8c:41:d0:71:e6:00:7e:1d:59:13:f3:a9:
                    ac:04:92:f2:27:23:02:36:ae:eb:7f:68:f3:0c:ae:
                    0b:5d:5b:ea:3b:f2:aa:8b:25:9c:b9:cf:20:48:13:
                    97:9b:6b:d7:b3:63:98:42:e2:37:d0:f1:d2:73:e0:
                    d4:0f:18:00:33:85:ff:36:27:51:7d:3e:f4:c7:c5:
                    5b:d0:e0:83:50:94:c1:d0:77:a9:08:9c:30:0f:e1:
                    d2:61:b7:d5:33:9f:89:56:d7:ed:fa:7e:e2:6c:ee:
                    c4:58:dc:1b:a1:2d:94:2f:15:85:ba:1e:0c:cf:19:
                    99:df:63:24:e5:97:aa:4a:89:17:7b:81:4c:ac:20:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:60:34:83:03:27:11:85:70:17:03:FC:CF:3C:0C:68:F9:FA:BC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/8501162b-5976-3f78-a723-759699eb71bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:85:84:ee:08:70:67:8e:47:61:e2:fc:c5:97:2b:35:3f:dc:
         87:ad:28:ec:b8:20:48:dd:86:b1:dc:72:c3:bb:cd:3a:1c:da:
         62:0a:0e:d6:cd:db:7c:8a:28:17:25:a7:bf:47:f0:9e:17:50:
         6e:94:49:1a:65:6d:2e:18:84:f8:1e:b0:52:f0:0b:94:e7:e0:
         d8:a6:52:ea:77:9f:7d:b3:67:c6:7e:0a:24:14:6e:d6:00:f1:
         6e:13:bc:ac:94:e3:00:f4:d0:29:0c:ec:19:ee:ca:a7:09:31:
         5c:2d:85:09:85:57:98:f9:b7:7f:33:07:32:2b:ab:07:9c:9e:
         46:64:d0:be:59:aa:d9:1a:78:e2:c5:08:1d:6b:fa:94:2f:dd:
         9d:d2:74:79:e2:53:bc:33:98:c7:d9:a0:03:74:19:56:c6:aa:
         4f:b9:1a:0d:78:54:21:95:f9:4f:99:54:55:d9:41:c9:92:20:
         ec:fe:28:9c:c7:33:28:80:19:66:c9:55:ef:ff:42:95:65:13:
         41:f2:58:0f:4d:e5:46:1a:99:fc:7e:3c:6a:7b:11:65:39:fa:
         52:25:84:c3:d8:c1:cf:9a:f5:42:1e:17:28:92:84:76:6e:6a:
         84:f6:60:91:91:cd:ac:ee:4f:3f:33:b9:a6:b6:dc:d5:7d:96:
         0d:90:36:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmMOx0eLmi7SFtnCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli
OWI2MB4XDTI1MDQxNjE4MjYwNloXDTI1MDcxNTE4MjYwNlowLzEtMCsGA1UEAxMk
ZGY3NzgwZDgtODVkMy00OGI4LTg4YzgtZmIwNGRlYTc5ZDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnktdPvZaZ3fFMKw/kXlzTjJ5qkFH+wHLt89j
1UATWwXNHmJpptzbealXTANj9I8O7VMwX1338Xlpzqp7xt9IgWmW5MjcAdTR4tSI
R+iBEp/tjUo3hND7ohd6meGSXVLzg/Kv218jtXMnaJDGxpdKCtX1zihQKa9DhCWM
QdBx5gB+HVkT86msBJLyJyMCNq7rf2jzDK4LXVvqO/KqiyWcuc8gSBOXm2vXs2OY
QuI30PHSc+DUDxgAM4X/NidRfT70x8Vb0OCDUJTB0HepCJwwD+HSYbfVM5+JVtft
+n7ibO7EWNwboS2ULxWFuh4MzxmZ32Mk5ZeqSokXe4FMrCCuDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRgNIMDJxGFcBcD/M88DGj5+rxMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh
NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvODUwMTE2MmItNTk3Ni0z
Zjc4LWE3MjMtNzU5Njk5ZWI3MWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4
MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5
YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk
OGRjOWI5YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEQKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmFhO4IcGeOR2Hi/MWXKzU/3IetKOy4IEjdhrHccsO7zToc2mIKDtbN
23yKKBclp79H8J4XUG6USRplbS4YhPgesFLwC5Tn4NimUup3n32zZ8Z+CiQUbtYA
8W4TvKyU4wD00CkM7BnuyqcJMVwthQmFV5j5t38zBzIrqwecnkZk0L5ZqtkaeOLF
CB1r+pQv3Z3SdHniU7wzmMfZoAN0GVbGqk+5Gg14VCGV+U+ZVFXZQcmSIOz+KJzH
MyiAGWbJVe//QpVlE0HyWA9N5UYamfx+PGp7EWU5+lIlhMPYwc+a9UIeFyiShHZu
aoT2YJGRzazuTz8zuaa23NV9lg2QNmU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:52:46 2025 by rpki-client