Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/bde05709-005d-31ad-8a26-803bd42a4c25.roa
File:                     bde05709-005d-31ad-8a26-803bd42a4c25.roa (raw, json)
Hash identifier:          LNU6ayMMJUUCCu/0f38tLqddDgpt+W9g7yLLy96XC54=
Subject key identifier:   06:0B:9A:63:87:2A:01:A1:72:98:41:CD:D9:79:FE:FC:D6:12:46:6C
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F4328584AAC8B86931E2D5D3F98BD2CB0
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/bde05709-005d-31ad-8a26-803bd42a4c25.roa
Signing time:             Tue 29 Jul 2025 01:00:48 +0000
ROA not before:           Tue 29 Jul 2025 01:00:48 +0000
ROA not after:            Mon 27 Oct 2025 01:00:48 +0000
asID:                     912
IP address blocks:        64.46.32.0/20 maxlen: 24
                          64.46.48.0/20 maxlen: 24
                          69.10.128.0/20 maxlen: 24
                          69.10.144.0/20 maxlen: 24
                          192.197.212.0/24 maxlen: 24
                          192.197.213.0/24 maxlen: 24
                          209.97.192.0/20 maxlen: 24
                          209.97.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:8b:86:93:1e:2d:5d:3f:98:bd:2c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: Jul 29 01:00:48 2025 GMT
            Not After : Oct 27 01:00:48 2025 GMT
        Subject: CN=68d2dc3c-7861-4677-bc38-66a412e7e4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6e:72:fa:30:03:da:68:54:71:1d:26:31:1e:
                    05:87:cb:27:c3:b2:19:ac:c8:74:6a:e7:9f:03:2c:
                    94:1d:fe:9f:80:84:ae:7d:32:0e:29:19:6b:85:00:
                    85:c8:d6:da:d1:a8:c4:2a:75:89:29:70:4b:80:64:
                    df:3c:a9:43:d6:52:d4:67:77:2f:1f:39:1d:0d:0f:
                    7a:7b:20:f1:cc:8c:fb:a7:73:f7:7f:c8:0d:e1:7b:
                    5e:61:99:e3:79:4b:27:a3:f2:6c:36:a2:d8:06:39:
                    8e:6d:f6:bb:dc:eb:e7:2b:75:93:56:85:e4:af:af:
                    c8:80:34:66:f1:c3:1e:81:49:44:37:a9:95:0b:6d:
                    f6:f2:8e:b1:d8:31:47:49:1b:b8:31:82:82:1f:0b:
                    1a:64:1a:e9:93:28:ad:97:f0:27:0f:66:37:65:c7:
                    7d:47:c0:fb:8d:90:1b:af:b5:87:27:37:05:4f:bd:
                    c5:08:b1:8e:29:a4:74:bb:06:b9:0b:67:56:e1:98:
                    28:16:07:46:16:a3:95:ef:29:65:5f:ce:34:c3:2b:
                    10:8b:57:91:39:5c:9c:af:d5:c3:e2:a9:79:f0:a9:
                    00:e8:48:26:0a:5e:9e:e4:a5:87:64:64:2c:fc:f4:
                    da:dc:c9:18:83:c5:31:dc:ca:4f:0c:d4:6a:7e:74:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0B:9A:63:87:2A:01:A1:72:98:41:CD:D9:79:FE:FC:D6:12:46:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/bde05709-005d-31ad-8a26-803bd42a4c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.46.32.0/19
                  69.10.128.0/19
                  192.197.212.0/23
                  209.97.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6a:45:29:7a:e1:d4:ac:a8:19:4a:44:bc:d7:89:ae:ce:e6:
         78:87:96:c4:35:6a:aa:0c:a1:73:b0:2b:5a:73:c8:a5:80:2b:
         f1:0d:8a:bc:50:b5:22:dc:f5:86:1d:f7:92:c5:c4:25:d6:55:
         93:63:5e:91:2d:29:93:0c:52:17:4d:9d:05:25:e9:a9:94:16:
         1b:ba:c9:fb:79:1c:44:2c:9b:3e:e6:e8:a5:4d:58:dc:f0:24:
         20:47:12:d9:91:ed:3b:01:63:63:fd:f9:78:ac:1c:1d:99:f8:
         bd:72:48:23:93:3f:e5:54:fc:31:73:f4:89:66:d3:e9:f7:12:
         93:f3:bf:eb:4b:df:a5:69:4d:4a:f2:c3:f9:20:48:e6:9c:18:
         bf:08:6f:92:7d:23:b3:ab:33:6f:04:ec:cb:bf:0c:b2:3f:09:
         ba:46:62:64:0a:e9:ce:a7:b2:91:8f:82:63:37:28:e7:75:a3:
         d7:e7:fc:08:1e:2a:78:76:b3:dd:f2:5d:29:59:d5:34:21:55:
         3f:eb:9c:76:33:5f:82:5c:5e:80:14:d3:28:c6:f1:79:0f:1f:
         0e:a0:26:7b:e0:78:74:bb:1f:53:ce:c7:2b:18:1d:80:07:59:
         18:29:bf:d6:47:72:d4:e3:8f:b4:69:d6:a1:4d:fa:1b:7d:33:
         63:85:90:d1
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEqsi4aTHi1dP5i9LLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDVlYzgzNTktNGVkZS00MDM2LTg3MDItMjNlNWRkMzdh
OWJhMB4XDTI1MDcyOTAxMDA0OFoXDTI1MTAyNzAxMDA0OFowLzEtMCsGA1UEAxMk
NjhkMmRjM2MtNzg2MS00Njc3LWJjMzgtNjZhNDEyZTdlNGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW5y+jAD2mhUcR0mMR4Fh8snw7IZrMh0auef
AyyUHf6fgISufTIOKRlrhQCFyNba0ajEKnWJKXBLgGTfPKlD1lLUZ3cvHzkdDQ96
eyDxzIz7p3P3f8gN4XteYZnjeUsno/JsNqLYBjmObfa73OvnK3WTVoXkr6/IgDRm
8cMegUlEN6mVC2328o6x2DFHSRu4MYKCHwsaZBrpkyitl/AnD2Y3Zcd9R8D7jZAb
r7WHJzcFT73FCLGOKaR0uwa5C2dW4ZgoFgdGFqOV7yllX840wysQi1eROVycr9XD
4ql58KkA6EgmCl6e5KWHZGQs/PTa3MkYg8Ux3MpPDNRqfnR6gQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFAYLmmOHKgGhcphBzdl5/vzWEkZsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNWVj
ODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1ZGQzN2E5YmEvYmRlMDU3MDktMDA1ZC0z
MWFkLThhMjYtODAzYmQ0MmE0YzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDVlYzgzNTktNGVkZS00MDM2LTg3
MDItMjNlNWRkMzdhOWJhLzA1ZWM4MzU5LTRlZGUtNDAzNi04NzAyLTIzZTVkZDM3
YTliYS5jcmwwHwYDVR0jBBgwFoAUNgroAyQrusZ1eDIsFKW5XRFaAJAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNWVjODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1
ZGQzN2E5YmEuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFQC4gAwQF
RQqAAwQBwMXUAwQF0WHAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABdqRSl64dSsqBlKRLzXia7O5niHlsQ1
aqoMoXOwK1pzyKWAK/ENirxQtSLc9YYd95LFxCXWVZNjXpEtKZMMUhdNnQUl6amU
Fhu6yft5HEQsmz7m6KVNWNzwJCBHEtmR7TsBY2P9+XisHB2Z+L1ySCOTP+VU/DFz
9Ilm0+n3EpPzv+tL36VpTUryw/kgSOacGL8Ib5J9I7OrM28E7Mu/DLI/CbpGYmQK
6c6nspGPgmM3KOd1o9fn/AgeKnh2s93yXSlZ1TQhVT/rnHYzX4JcXoAU0yjG8XkP
Hw6gJnvgeHS7H1POxysYHYAHWRgpv9ZHctTjj7Rp1qFN+ht9M2OFkNE=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:28 2025 by rpki-client