Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa
File:                     09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa (raw, json)
Hash identifier:          3nf9I32CckENC8wPc4SLSBH/t7Lyi7ngiXWkhxLLnTU=
Subject key identifier:   61:AF:DA:21:9B:C0:85:46:BA:7A:C7:F4:E7:F4:B8:0E:AE:25:24:CF
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F43285849D85F9ADF9C0A4A4ADDDD0060
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        69.64.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:9a:df:9c:0a:4a:4a:dd:dd:00:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=a0aae837-aae8-4c3c-bf72-d64b854b5dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:33:ed:a8:75:0a:74:e7:0b:f0:ff:9d:8e:
                    cc:ff:1a:cb:42:32:9e:af:95:ff:51:32:b5:1b:72:
                    0e:6d:6c:50:1b:76:45:00:fb:26:f0:ce:30:1e:b2:
                    7e:0c:5a:92:0c:b5:a6:00:39:96:30:6e:36:dd:85:
                    b2:68:2d:44:fa:b5:95:9b:49:f7:cf:52:34:da:66:
                    9d:ae:ad:79:52:3b:e5:2a:74:03:2a:10:12:f8:f8:
                    96:3d:32:b9:cb:2e:54:3c:ac:61:99:ef:62:7d:e3:
                    6e:06:28:fa:24:75:24:a2:ad:27:fb:03:9b:11:d0:
                    ca:65:0e:7a:ca:14:0a:e4:11:f9:3e:85:48:e3:28:
                    3b:96:0e:6d:ef:af:18:e8:01:d0:1f:72:c3:bd:35:
                    3b:38:25:0d:10:14:46:f4:a7:b5:ca:f9:99:df:42:
                    f8:ac:2c:7d:cf:6e:3b:e1:a4:e5:64:f3:c2:a1:a5:
                    fc:ae:e0:08:4f:42:bb:98:14:c6:d9:ff:58:82:bd:
                    56:eb:41:24:83:db:cd:2f:da:29:20:d5:ce:4c:47:
                    3c:84:c2:76:29:c4:45:3f:ad:22:81:5a:c0:87:0f:
                    1f:22:06:33:11:f0:96:86:87:5f:34:23:1c:37:51:
                    7e:e3:b9:92:d0:0d:20:9c:67:9e:a2:b1:73:39:d4:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AF:DA:21:9B:C0:85:46:BA:7A:C7:F4:E7:F4:B8:0E:AE:25:24:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:f0:ab:a4:b2:08:c2:67:28:02:7c:44:5d:1b:54:c7:4a:
         78:f0:e0:02:cc:13:b3:c1:d9:95:31:36:44:37:84:06:bd:31:
         f0:df:d0:23:15:7a:8e:17:14:c2:a0:85:0a:0d:84:21:89:92:
         6f:c9:c8:dc:98:f0:74:68:8d:e1:1d:2c:08:c2:fc:87:7b:6a:
         e0:59:10:16:b9:7e:5e:3b:8a:c8:2a:50:77:d3:34:4c:54:bb:
         31:30:40:82:0a:df:b5:a2:ec:11:f5:8a:e6:00:21:72:38:1d:
         05:27:f1:0c:19:2d:35:e0:aa:e7:b2:a8:d2:a2:88:df:5b:d8:
         d3:9a:6d:a3:4e:5d:29:7b:11:6f:4d:54:4f:39:7e:80:0e:2b:
         db:e8:8a:5d:33:fe:2d:98:5e:c3:ac:be:c7:16:ad:38:c4:b5:
         1e:de:39:4a:c8:88:32:54:da:d2:62:78:f5:db:24:64:cd:0c:
         82:57:3a:9d:ff:c8:b0:7f:71:1b:74:27:92:7d:b5:3e:85:5a:
         fa:3f:67:c9:3e:c7:5f:01:e7:8b:0a:6d:b2:1c:53:be:f7:27:
         bc:68:7d:f3:18:57:9e:a2:ef:f9:19:e2:20:c5:fb:8e:95:41:
         af:1d:41:d8:5b:f1:33:6d:e7:f0:48:fd:0d:ba:a5:94:8d:a1:
         17:44:62:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5rfnApKSt3dAGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIyMTM2NjgtODk3My00NDcxLWExOWEtZDdlODM3NGFk
YTYzMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
YTBhYWU4MzctYWFlOC00YzNjLWJmNzItZDY0Yjg1NGI1ZGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZsz7ah1CnTnC/D/nY7M/xrLQjKer5X/UTK1
G3IObWxQG3ZFAPsm8M4wHrJ+DFqSDLWmADmWMG423YWyaC1E+rWVm0n3z1I02mad
rq15UjvlKnQDKhAS+PiWPTK5yy5UPKxhme9ifeNuBij6JHUkoq0n+wObEdDKZQ56
yhQK5BH5PoVI4yg7lg5t768Y6AHQH3LDvTU7OCUNEBRG9Ke1yvmZ30L4rCx9z247
4aTlZPPCoaX8ruAIT0K7mBTG2f9Ygr1W60Ekg9vNL9opINXOTEc8hMJ2KcRFP60i
gVrAhw8fIgYzEfCWhodfNCMcN1F+47mS0A0gnGeeorFzOdRA6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGGv2iGbwIVGunrH9Of0uA6uJSTPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMjIx
MzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4Mzc0YWRhNjMvMDlhYTIxZjgtZWIzYi0z
OGRhLWI4NjktYzc0MmFhZWI1YjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTIyMTM2NjgtODk3My00NDcxLWEx
OWEtZDdlODM3NGFkYTYzL2UyMjEzNjY4LTg5NzMtNDQ3MS1hMTlhLWQ3ZTgzNzRh
ZGE2My5jcmwwHwYDVR0jBBgwFoAUxMJnBDYTO2dfpfUComBVEY+E5xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMjIxMzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4
Mzc0YWRhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUCVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+C8KuksgjCZygCfERdG1THSnjw4ALME7PB2ZUxNkQ3hAa9MfDf0CMV
eo4XFMKghQoNhCGJkm/JyNyY8HRojeEdLAjC/Id7auBZEBa5fl47isgqUHfTNExU
uzEwQIIK37Wi7BH1iuYAIXI4HQUn8QwZLTXgqueyqNKiiN9b2NOabaNOXSl7EW9N
VE85foAOK9voil0z/i2YXsOsvscWrTjEtR7eOUrIiDJU2tJiePXbJGTNDIJXOp3/
yLB/cRt0J5J9tT6FWvo/Z8k+x18B54sKbbIcU773J7xoffMYV56i7/kZ4iDF+46V
Qa8dQdhb8TNt5/BI/Q26pZSNoRdEYiw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:28 2025 by rpki-client