Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa
File:                     da2805f3-2f45-37d2-81ac-675892bd2fa3.roa (raw, json)
Hash identifier:          S2SXclk5jdUD3ybFt0agijGFg92tWiw7b+ipkMaw2mk=
Subject key identifier:   CA:84:D4:65:C7:3C:AB:C0:A2:73:18:11:98:31:4D:B9:7D:C6:81:12
Certificate issuer:       /CN=82d0f472-6865-4d16-9252-e75f7b91368a
Certificate serial:       010D0C9F4328584A761B616B029BE01F231556C0
Authority key identifier: 91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     401382
IP address blocks:        64.190.20.0/24 maxlen: 24
                          2602:f7e7::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:61:6b:02:9b:e0:1f:23:15:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d0f472-6865-4d16-9252-e75f7b91368a
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=725eb679-9659-4e41-b246-aa8fd29377eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ba:13:c3:f8:b3:2e:38:ac:ff:9d:3f:9a:3b:
                    c8:03:e2:d6:50:f0:6a:c3:37:5c:2a:d7:26:b0:c9:
                    56:e4:1b:d4:8e:63:01:7c:19:11:91:be:63:f1:7b:
                    cc:e7:04:23:ad:4e:49:cb:6d:c4:3f:0e:a2:70:23:
                    3b:98:5e:37:32:ea:96:42:fc:72:28:35:e3:5f:14:
                    03:8d:e6:e6:8f:a5:62:a0:67:28:52:ab:32:81:9b:
                    e5:27:69:7a:84:ab:d2:00:6f:77:35:9a:10:6e:7c:
                    a2:ac:05:29:d2:5f:f1:bb:34:61:27:e2:b0:5d:07:
                    cc:4a:48:44:71:b5:de:f6:de:da:41:07:bf:af:39:
                    e1:88:a4:8a:b2:f3:6d:c8:c4:16:30:83:e3:95:54:
                    56:1e:51:2d:ec:6f:e3:cb:30:a0:34:88:0d:e6:4a:
                    88:af:54:5e:f1:c3:03:ab:c2:ac:a9:a8:7f:b8:17:
                    f5:0b:3f:c2:63:c1:78:75:47:aa:ac:28:9b:ee:ce:
                    14:cf:1c:0c:1a:05:e7:7e:8e:56:61:16:69:67:c4:
                    71:b3:14:57:36:ab:2b:04:89:17:2f:e7:e3:2d:92:
                    4d:d2:fa:da:d4:2c:2c:6e:16:a6:1e:e1:40:5e:52:
                    84:b8:d7:3e:d6:f5:52:3c:93:11:7b:30:bd:20:39:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:84:D4:65:C7:3C:AB:C0:A2:73:18:11:98:31:4D:B9:7D:C6:81:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl

            X509v3 Authority Key Identifier:
                keyid:91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.20.0/24
                IPv6:
                  2602:f7e7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f8:4d:57:a9:f2:9a:59:ae:e8:76:ef:86:e8:64:26:7a:aa:
         b9:e1:e1:5c:fc:1b:96:8e:42:fa:26:90:cf:d6:f6:f0:0d:fa:
         2b:0c:46:97:4b:9a:88:46:fc:51:e5:7c:65:58:d4:76:22:84:
         41:1f:9a:d9:d9:b3:95:de:a9:3b:fa:bb:2d:0e:e4:7c:a5:00:
         62:42:67:12:ed:4a:c0:e0:3a:bf:8d:e9:cf:55:c1:e7:77:f9:
         aa:26:b6:ef:80:04:25:82:18:91:30:f0:e2:2f:d1:dc:a7:36:
         af:9a:37:fa:ec:eb:c5:d0:db:08:d6:a9:e7:07:e4:6a:3e:52:
         a6:7c:3f:42:02:70:7f:1c:1e:69:91:4a:f7:a6:45:36:0d:84:
         d8:8d:08:78:89:dc:8b:11:8d:fc:9b:00:02:8d:4e:f6:63:7f:
         53:6e:82:1d:f5:d1:28:dd:55:bd:0c:56:c2:38:70:ac:49:90:
         09:67:0f:32:c0:51:9f:e9:92:79:3d:83:9b:05:28:82:1d:4a:
         83:76:98:f1:8c:05:14:95:01:38:75:d0:64:e1:4d:8d:bd:b9:
         37:a1:57:a4:c2:b6:4d:eb:74:12:47:58:ef:b4:31:84:c5:eb:
         31:19:16:e1:ca:30:17:f8:52:4a:9a:28:6b:20:48:25:c2:4d:
         14:6e:d4:98
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEp2G2FrApvgHyMVVsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODJkMGY0NzItNjg2NS00ZDE2LTkyNTItZTc1ZjdiOTEz
NjhhMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk
NzI1ZWI2NzktOTY1OS00ZTQxLWIyNDYtYWE4ZmQyOTM3N2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8roTw/izLjis/50/mjvIA+LWUPBqwzdcKtcm
sMlW5BvUjmMBfBkRkb5j8XvM5wQjrU5Jy23EPw6icCM7mF43MuqWQvxyKDXjXxQD
jebmj6VioGcoUqsygZvlJ2l6hKvSAG93NZoQbnyirAUp0l/xuzRhJ+KwXQfMSkhE
cbXe9t7aQQe/rznhiKSKsvNtyMQWMIPjlVRWHlEt7G/jyzCgNIgN5kqIr1Re8cMD
q8Ksqah/uBf1Cz/CY8F4dUeqrCib7s4UzxwMGgXnfo5WYRZpZ8RxsxRXNqsrBIkX
L+fjLZJN0vra1CwsbhamHuFAXlKEuNc+1vVSPJMRezC9IDnl+QIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFMqE1GXHPKvAonMYEZgxTbl9xoESMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MmQw
ZjQ3Mi02ODY1LTRkMTYtOTI1Mi1lNzVmN2I5MTM2OGEvZGEyODA1ZjMtMmY0NS0z
N2QyLTgxYWMtNjc1ODkyYmQyZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODJkMGY0NzItNjg2NS00ZDE2LTky
NTItZTc1ZjdiOTEzNjhhLzgyZDBmNDcyLTY4NjUtNGQxNi05MjUyLWU3NWY3Yjkx
MzY4YS5jcmwwHwYDVR0jBBgwFoAUkfJo9ZIoQMeG0bKiWLeu+U2evCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MmQwZjQ3Mi02ODY1LTRkMTYtOTI1Mi1lNzVm
N2I5MTM2OGEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAQL4UMA4E
AgACMAgDBgAmAvfnADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAI+E1XqfKaWa7odu+G6GQmeqq54eFc/BuW
jkL6JpDP1vbwDforDEaXS5qIRvxR5XxlWNR2IoRBH5rZ2bOV3qk7+rstDuR8pQBi
QmcS7UrA4Dq/jenPVcHnd/mqJrbvgAQlghiRMPDiL9Hcpzavmjf67OvF0NsI1qnn
B+RqPlKmfD9CAnB/HB5pkUr3pkU2DYTYjQh4idyLEY38mwACjU72Y39TboId9dEo
3VW9DFbCOHCsSZAJZw8ywFGf6ZJ5PYObBSiCHUqDdpjxjAUUlQE4ddBk4U2Nvbk3
oVekwrZN63QSR1jvtDGExesxGRbhyjAX+FJKmihrIEglwk0UbtSY
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:05 2025 by rpki-client