Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/69b92a4e-b9a8-3c7a-8d5b-32cb8f0f3252.roa
File:                     69b92a4e-b9a8-3c7a-8d5b-32cb8f0f3252.roa (raw, json)
Hash identifier:          sTOkj3kEcFeWOmQkJH0VHRAsmAUzj7PoacsclkNoIMc=
Subject key identifier:   CC:7E:3A:D7:DF:FD:A3:93:45:9A:66:93:74:5A:6A:34:4A:70:2B:0B
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584A8FF6AB406C41A6D19E5A0530
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/69b92a4e-b9a8-3c7a-8d5b-32cb8f0f3252.roa
Signing time:             Fri 18 Jul 2025 19:18:22 +0000
ROA not before:           Fri 18 Jul 2025 19:18:22 +0000
ROA not after:            Thu 16 Oct 2025 19:18:22 +0000
asID:                     14618
IP address blocks:        64.40.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8f:f6:ab:40:6c:41:a6:d1:9e:5a:05:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Jul 18 19:18:22 2025 GMT
            Not After : Oct 16 19:18:22 2025 GMT
        Subject: CN=82448c59-5e8e-4644-b7a8-1b464748ad7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0f:bb:fc:35:e7:2f:11:be:b6:1b:24:27:f5:
                    34:a7:86:ea:f2:18:45:e2:ed:46:f5:07:b8:6c:a1:
                    e5:9a:86:67:bd:2a:89:8c:37:5b:d4:4f:56:c4:e2:
                    c0:ad:c2:0a:dd:fb:10:01:3a:69:0b:a9:8b:af:a9:
                    42:6b:0e:4b:b5:54:43:55:4d:82:8b:df:b6:c0:c1:
                    ac:73:02:74:7c:b3:b6:e6:3e:ac:14:79:77:bb:f5:
                    43:25:8b:21:d4:00:7b:cb:6e:06:c2:9f:c3:80:34:
                    3d:02:2c:d1:34:ff:58:ec:04:d9:ee:dc:15:aa:02:
                    38:f2:e4:b7:8e:80:b6:24:1f:db:d4:96:41:59:c7:
                    cd:cf:5b:99:23:df:08:f7:72:ca:2f:ad:eb:a5:52:
                    89:88:02:0a:dd:d8:37:f0:05:8f:b3:ed:1b:04:95:
                    bc:97:7e:3b:8f:34:88:38:73:28:ce:21:7f:a3:1d:
                    ec:ce:44:30:27:a2:39:3d:d5:a1:ad:b5:1e:f1:40:
                    f4:fe:ea:88:2d:eb:ed:e5:0a:40:c7:fe:d7:f5:03:
                    42:66:7c:a3:b3:c7:92:b6:99:d6:90:b0:62:c7:49:
                    9c:5e:43:67:98:ca:34:43:0f:34:ea:59:14:57:27:
                    01:f4:63:27:40:1a:51:8f:52:b0:14:65:64:64:88:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7E:3A:D7:DF:FD:A3:93:45:9A:66:93:74:5A:6A:34:4A:70:2B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/69b92a4e-b9a8-3c7a-8d5b-32cb8f0f3252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:74:fe:a8:4b:94:dc:08:b8:c1:c5:2c:6c:91:07:3a:70:5d:
         3d:ee:ac:79:34:4b:b5:84:b4:cb:a9:67:8c:02:80:ac:09:bb:
         be:06:dd:f0:93:4e:22:65:90:84:8d:7a:ef:69:2f:35:b6:1e:
         2d:75:1f:dd:b0:53:7d:f1:a4:c7:53:94:e7:eb:75:4d:82:82:
         39:01:49:e3:1d:f1:48:f7:4f:d5:ad:0a:ab:4d:46:03:f0:fc:
         80:cc:ee:fe:df:ba:57:95:62:d7:70:44:e1:19:b2:a5:bb:1f:
         b8:c9:31:1c:c6:52:96:a6:54:20:de:5d:9b:89:e3:9a:68:51:
         37:12:73:81:8f:be:e1:7e:59:d6:b3:f2:dd:3c:e5:c0:64:5b:
         48:a9:d0:a2:3c:c1:3d:aa:c5:98:29:ee:fd:c0:4c:6f:6b:8f:
         aa:dc:85:23:c3:99:78:d2:c4:40:81:22:bb:9d:a5:49:f3:e7:
         05:d4:27:43:07:5c:89:8a:42:e3:0c:14:c2:df:b8:71:74:d8:
         05:f6:76:54:4c:de:df:a5:54:48:8a:43:1f:b0:37:f3:c4:66:
         18:d8:51:9d:03:1e:30:4f:0c:7e:b7:ac:b2:67:c7:88:a4:9e:
         b5:7a:76:b8:43:ba:4f:07:47:da:ac:2b:67:d2:79:8f:17:f9:
         a8:a3:33:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqP9qtAbEGm0Z5aBTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUyMmQ3YWUtMTIyNC00M2ZiLTkwN2EtNjY5MGY3YmQ5
YTJlMB4XDTI1MDcxODE5MTgyMloXDTI1MTAxNjE5MTgyMlowLzEtMCsGA1UEAxMk
ODI0NDhjNTktNWU4ZS00NjQ0LWI3YTgtMWI0NjQ3NDhhZDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9g+7/DXnLxG+thskJ/U0p4bq8hhF4u1G9Qe4
bKHlmoZnvSqJjDdb1E9WxOLArcIK3fsQATppC6mLr6lCaw5LtVRDVU2Ci9+2wMGs
cwJ0fLO25j6sFHl3u/VDJYsh1AB7y24Gwp/DgDQ9AizRNP9Y7ATZ7twVqgI48uS3
joC2JB/b1JZBWcfNz1uZI98I93LKL63rpVKJiAIK3dg38AWPs+0bBJW8l347jzSI
OHMoziF/ox3szkQwJ6I5PdWhrbUe8UD0/uqILevt5QpAx/7X9QNCZnyjs8eStpnW
kLBix0mcXkNnmMo0Qw806lkUVycB9GMnQBpRj1KwFGVkZIiMvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMx+Otff/aOTRZpmk3RaajRKcCsLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZTIy
ZDdhZS0xMjI0LTQzZmItOTA3YS02NjkwZjdiZDlhMmUvNjliOTJhNGUtYjlhOC0z
YzdhLThkNWItMzJjYjhmMGYzMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWUyMmQ3YWUtMTIyNC00M2ZiLTkw
N2EtNjY5MGY3YmQ5YTJlLzVlMjJkN2FlLTEyMjQtNDNmYi05MDdhLTY2OTBmN2Jk
OWEyZS5jcmwwHwYDVR0jBBgwFoAUYLFmHyIaYxU6c0EQcq4OzNe6NGgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZTIyZDdhZS0xMjI0LTQzZmItOTA3YS02Njkw
ZjdiZDlhMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG10/qhLlNwIuMHFLGyRBzpwXT3urHk0S7WEtMupZ4wCgKwJu74G3fCT
TiJlkISNeu9pLzW2Hi11H92wU33xpMdTlOfrdU2CgjkBSeMd8Uj3T9WtCqtNRgPw
/IDM7v7fuleVYtdwROEZsqW7H7jJMRzGUpamVCDeXZuJ45poUTcSc4GPvuF+Wdaz
8t085cBkW0ip0KI8wT2qxZgp7v3ATG9rj6rchSPDmXjSxECBIrudpUnz5wXUJ0MH
XImKQuMMFMLfuHF02AX2dlRM3t+lVEiKQx+wN/PEZhjYUZ0DHjBPDH63rLJnx4ik
nrV6drhDuk8HR9qsK2fSeY8X+aijM3Q=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:53 2025 by rpki-client