Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/b0dd3e66-26a4-3768-8ae9-9f4611f0ed64.roa
File:                     b0dd3e66-26a4-3768-8ae9-9f4611f0ed64.roa (raw, json)
Hash identifier:          FB6kc/Sa0jAqHMM1UyGx4ItCI/ndzHKch7M4d6+uvBE=
Subject key identifier:   67:51:4B:90:CE:76:60:05:79:1A:CC:0C:38:7C:EC:5A:76:B6:CA:86
Certificate issuer:       /CN=69ae5b34-c59f-40db-9452-6e21ecb81731
Certificate serial:       010D0C9F4328584AB3861FC65251499F8D026CC0
Authority key identifier: 08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/b0dd3e66-26a4-3768-8ae9-9f4611f0ed64.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     210250
IP address blocks:        67.202.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:1f:c6:52:51:49:9f:8d:02:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ae5b34-c59f-40db-9452-6e21ecb81731
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=5ef4e687-bc66-45a1-9722-ebe7bce902c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:de:6b:82:1d:31:08:36:23:0b:27:98:9d:a7:
                    8b:de:16:ba:58:60:b6:cf:9e:27:a8:61:a3:02:1e:
                    2f:bd:58:b1:7f:03:2d:14:5e:9c:dd:d9:d6:7e:d5:
                    a0:2d:ed:b3:b4:19:6a:64:92:54:a7:3d:b4:29:77:
                    45:64:ff:ca:e0:a5:cb:9e:57:77:23:08:3a:36:65:
                    4b:24:12:d4:47:51:af:91:27:02:13:21:8c:7a:d5:
                    c0:1c:02:9d:38:07:6a:d2:68:6d:fa:51:e5:5a:89:
                    38:31:02:54:c3:01:a9:c2:07:42:59:ef:6e:b4:36:
                    e0:ad:9f:08:95:03:f0:85:08:05:cd:df:80:35:ac:
                    cd:a1:cc:9f:1c:c4:e8:55:8c:70:0c:0c:cf:c6:c6:
                    98:ae:a0:86:33:6a:dc:2f:43:37:1e:59:7d:cb:5c:
                    97:cd:b1:d3:9d:da:07:a7:d9:07:10:c4:c2:35:3b:
                    2c:4c:4a:90:8b:a5:8e:c0:b5:26:95:70:07:84:59:
                    5d:24:9e:79:66:7d:1f:1b:b9:45:23:ff:44:31:6a:
                    98:a4:60:ef:42:7f:79:25:73:ed:43:b7:f9:f4:7e:
                    e8:1a:22:46:8d:ff:9c:ba:5b:a2:1c:18:81:23:85:
                    5c:6f:a9:0a:85:c6:6c:ea:b0:28:b0:19:8c:bf:02:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:51:4B:90:CE:76:60:05:79:1A:CC:0C:38:7C:EC:5A:76:B6:CA:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/b0dd3e66-26a4-3768-8ae9-9f4611f0ed64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl

            X509v3 Authority Key Identifier:
                keyid:08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:9a:d3:4e:8b:88:3e:9f:08:74:02:d5:9f:0a:c8:7d:b5:
         e6:13:00:b1:52:f1:39:f5:1b:c1:f8:28:d9:5c:26:86:db:87:
         10:ba:e5:c8:d8:b2:36:b5:10:8d:1a:48:6c:f0:f6:46:17:d2:
         80:a1:a4:4e:39:f2:f2:30:dd:9f:29:9e:6b:57:4b:61:d4:4d:
         cf:ef:90:ef:ff:35:2e:c3:93:ca:38:9e:48:f8:88:25:2d:14:
         6e:4c:39:8f:9c:3c:9e:50:5e:c5:24:19:40:ab:8d:8f:77:3d:
         fb:87:cb:12:ed:f0:ef:95:64:84:47:ee:d1:75:7c:4b:3e:a1:
         fd:e7:5e:d4:b4:85:c4:15:fb:d1:b0:c5:b0:87:9b:7c:07:4f:
         32:1c:bd:45:9a:5b:67:1c:13:fa:80:3d:4f:05:23:ce:5f:1b:
         bd:30:e8:9d:00:9a:1a:16:0c:b8:03:df:70:ca:c8:03:05:ea:
         f7:5a:29:8e:2b:1e:a8:1a:8a:61:18:99:fa:6b:9b:b6:9c:0c:
         a7:73:bb:6e:23:0a:2d:02:47:06:ac:77:c3:94:34:a9:ef:db:
         36:c9:b5:17:6e:b0:91:f9:57:50:e9:43:0a:9f:c1:2f:56:bd:
         55:8d:20:15:42:9f:80:4c:e5:42:3e:63:14:33:7f:ab:06:f1:
         e8:79:f6:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhh/GUlFJn40CbMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlhZTViMzQtYzU5Zi00MGRiLTk0NTItNmUyMWVjYjgx
NzMxMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk
NWVmNGU2ODctYmM2Ni00NWExLTk3MjItZWJlN2JjZTkwMmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot5rgh0xCDYjCyeYnaeL3ha6WGC2z54nqGGj
Ah4vvVixfwMtFF6c3dnWftWgLe2ztBlqZJJUpz20KXdFZP/K4KXLnld3Iwg6NmVL
JBLUR1GvkScCEyGMetXAHAKdOAdq0mht+lHlWok4MQJUwwGpwgdCWe9utDbgrZ8I
lQPwhQgFzd+ANazNocyfHMToVYxwDAzPxsaYrqCGM2rcL0M3Hll9y1yXzbHTndoH
p9kHEMTCNTssTEqQi6WOwLUmlXAHhFldJJ55Zn0fG7lFI/9EMWqYpGDvQn95JXPt
Q7f59H7oGiJGjf+culuiHBiBI4Vcb6kKhcZs6rAosBmMvwIj/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGdRS5DOdmAFeRrMDDh87Fp2tsqGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OWFl
NWIzNC1jNTlmLTQwZGItOTQ1Mi02ZTIxZWNiODE3MzEvYjBkZDNlNjYtMjZhNC0z
NzY4LThhZTktOWY0NjExZjBlZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjlhZTViMzQtYzU5Zi00MGRiLTk0
NTItNmUyMWVjYjgxNzMxLzY5YWU1YjM0LWM1OWYtNDBkYi05NDUyLTZlMjFlY2I4
MTczMS5jcmwwHwYDVR0jBBgwFoAUCNptqRxEgPAchKfrXaTD8Nh1GjAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OWFlNWIzNC1jNTlmLTQwZGItOTQ1Mi02ZTIx
ZWNiODE3MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8pcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbYmtNOi4g+nwh0AtWfCsh9teYTALFS8Tn1G8H4KNlcJobbhxC65cjY
sja1EI0aSGzw9kYX0oChpE458vIw3Z8pnmtXS2HUTc/vkO//NS7Dk8o4nkj4iCUt
FG5MOY+cPJ5QXsUkGUCrjY93PfuHyxLt8O+VZIRH7tF1fEs+of3nXtS0hcQV+9Gw
xbCHm3wHTzIcvUWaW2ccE/qAPU8FI85fG70w6J0AmhoWDLgD33DKyAMF6vdaKY4r
HqgaimEYmfprm7acDKdzu24jCi0CRwasd8OUNKnv2zbJtRdusJH5V1DpQwqfwS9W
vVWNIBVCn4BM5UI+YxQzf6sG8eh59sM=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:41 2025 by rpki-client