Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/62d1f131-ea9f-3506-be42-82e2442a4039.roa
File:                     62d1f131-ea9f-3506-be42-82e2442a4039.roa (raw, json)
Hash identifier:          zNf2D0U9gWsCab/42BmqbkPLxhwPDbcbmhJlvNZlkcY=
Subject key identifier:   65:64:10:A7:51:54:31:02:40:64:53:79:4E:7B:45:FF:32:37:0D:F6
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849A1EF71167346F62720095480
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/62d1f131-ea9f-3506-be42-82e2442a4039.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     11404
IP address blocks:        69.1.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:71:16:73:46:f6:27:20:09:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=7ccb753c-3eb0-48d7-8b73-6373bfd92f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8b:d5:ef:ab:7c:5f:a1:5f:fb:be:04:6b:8d:
                    49:dd:aa:72:45:b6:1f:b0:a4:7a:df:0e:09:4e:26:
                    6f:ad:6f:6a:27:5b:2a:b3:c9:37:2f:99:4b:fa:75:
                    f7:7f:bb:9f:fe:92:33:ad:b0:84:d1:eb:c1:2c:23:
                    d7:92:e6:e9:c4:8d:80:e5:14:38:ce:0e:89:43:a1:
                    f2:fa:76:13:b4:d1:48:0e:6a:b6:c4:b8:05:2b:d7:
                    28:4a:d5:5c:6e:fc:93:d2:56:2c:38:e0:5e:a0:c7:
                    fa:3e:b0:d5:d9:53:ef:7c:36:52:d9:94:be:96:76:
                    5a:04:60:dc:a8:73:1b:d3:2c:ad:f8:40:35:41:5b:
                    b1:ab:d2:6c:27:71:88:ad:e0:2e:25:5a:fe:36:c9:
                    79:ab:65:2b:5a:df:b1:ae:28:d2:57:da:c0:cb:0f:
                    fe:bd:7e:a8:a2:7a:84:fd:de:f7:41:75:eb:b6:82:
                    2d:e2:2b:6c:90:d2:da:fc:09:16:0b:b4:0e:08:0e:
                    f3:fc:43:67:f8:e5:52:90:dd:28:bd:77:66:2d:a0:
                    44:1b:c3:bc:e2:e2:dd:d9:6a:0b:44:55:f6:fc:af:
                    92:fa:ca:e9:6b:8b:e8:99:a0:c7:89:f2:9e:c6:1d:
                    0d:65:49:e3:c6:11:e9:d4:26:74:f7:4e:81:38:f5:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:64:10:A7:51:54:31:02:40:64:53:79:4E:7B:45:FF:32:37:0D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/62d1f131-ea9f-3506-be42-82e2442a4039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:46:98:e7:41:24:1c:6c:f1:97:c6:ed:48:77:56:52:bb:c7:
         ad:89:85:c0:4a:c3:44:e4:39:54:3e:80:f3:14:6f:1b:03:0d:
         8e:5e:8a:18:2b:00:b3:2b:78:b0:5a:c8:d7:fb:5b:df:82:cd:
         a4:03:c2:7b:28:d5:a0:0e:ef:04:11:bb:30:a0:8e:bc:1e:a1:
         76:9f:95:b7:88:a3:6f:ea:e1:fa:c1:7c:d6:48:4f:0d:ef:b3:
         05:74:76:61:f6:a5:28:02:72:ba:a7:6d:e7:3b:12:92:c3:68:
         32:6c:83:f3:22:99:d1:6c:10:5c:b9:85:d1:f9:81:aa:c5:b9:
         a4:54:9c:cf:a7:e9:f8:ae:91:af:be:60:25:72:88:92:d4:58:
         45:50:79:14:7a:e8:e6:99:25:b0:ee:65:a1:c8:fd:f6:db:2b:
         db:84:4c:aa:d9:5c:85:bb:26:59:fa:5b:b3:d7:ee:e0:c0:7e:
         74:cc:a0:9a:76:75:37:7f:4a:6c:a4:eb:05:4f:fc:12:db:6a:
         3f:fc:90:9b:2c:0b:56:3d:0f:db:f7:d6:6c:02:c0:30:b4:67:
         96:b8:a0:75:ae:50:3a:01:ce:01:92:32:3b:d9:01:be:8f:d1:
         f0:ba:a9:20:4d:79:11:8d:a3:34:60:65:43:99:95:6e:00:df:
         8d:ba:fb:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73EWc0b2JyAJVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk
N2NjYjc1M2MtM2ViMC00OGQ3LThiNzMtNjM3M2JmZDkyZjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmovV76t8X6Ff+74Ea41J3apyRbYfsKR63w4J
TiZvrW9qJ1sqs8k3L5lL+nX3f7uf/pIzrbCE0evBLCPXkubpxI2A5RQ4zg6JQ6Hy
+nYTtNFIDmq2xLgFK9coStVcbvyT0lYsOOBeoMf6PrDV2VPvfDZS2ZS+lnZaBGDc
qHMb0yyt+EA1QVuxq9JsJ3GIreAuJVr+Nsl5q2UrWt+xrijSV9rAyw/+vX6oonqE
/d73QXXrtoIt4itskNLa/AkWC7QOCA7z/ENn+OVSkN0ovXdmLaBEG8O84uLd2WoL
RFX2/K+S+srpa4vomaDHifKexh0NZUnjxhHp1CZ0906BOPX7lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVkEKdRVDECQGRTeU57Rf8yNw32MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNjJkMWYxMzEtZWE5Zi0z
NTA2LWJlNDItODJlMjQ0MmE0MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQF5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZGmOdBJBxs8ZfG7Uh3VlK7x62JhcBKw0TkOVQ+gPMUbxsDDY5eihgr
ALMreLBayNf7W9+CzaQDwnso1aAO7wQRuzCgjrweoXaflbeIo2/q4frBfNZITw3v
swV0dmH2pSgCcrqnbec7EpLDaDJsg/MimdFsEFy5hdH5garFuaRUnM+n6fiuka++
YCVyiJLUWEVQeRR66OaZJbDuZaHI/fbbK9uETKrZXIW7Jln6W7PX7uDAfnTMoJp2
dTd/Smyk6wVP/BLbaj/8kJssC1Y9D9v31mwCwDC0Z5a4oHWuUDoBzgGSMjvZAb6P
0fC6qSBNeRGNozRgZUOZlW4A3426+9w=
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:05:53 2025 by rpki-client