Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/57a34478-7668-3c41-9e9a-6624f2728938.roa
File:                     57a34478-7668-3c41-9e9a-6624f2728938.roa (raw, json)
Hash identifier:          IwAdDBFRcs0Hg64TdxKZaSc6M4fuaI/UVAJZ0/05Dmw=
Subject key identifier:   95:BE:BC:E5:2D:BF:61:C3:04:97:BD:5C:A5:0D:33:19:D9:F2:BF:3C
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F4328584AB91BA19BD2446769AC482100
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/57a34478-7668-3c41-9e9a-6624f2728938.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        69.64.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a1:9b:d2:44:67:69:ac:48:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=d4035b09-274c-4008-8a17-bdf97197e1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:c6:3b:75:2f:a6:0f:47:5e:84:70:e9:49:
                    39:82:f9:51:af:7b:e8:d3:8f:69:e1:35:c1:a9:0c:
                    63:da:9b:5f:f9:20:9a:94:41:53:83:c2:8d:9e:32:
                    8b:7b:16:18:23:4c:3f:31:70:bc:b7:48:bb:2c:20:
                    5e:7d:6c:77:b9:d5:35:1e:ee:f8:0d:6a:85:2c:26:
                    a5:37:de:ee:bb:4f:e3:82:39:e1:88:b5:ee:e4:da:
                    27:b0:cf:9b:c7:cb:f6:7f:89:02:5c:d2:60:90:54:
                    fa:76:2d:65:4d:ee:93:96:ff:a6:9c:08:51:bd:a2:
                    f7:fa:04:bd:c7:79:c5:16:a2:51:4f:ea:73:d6:f0:
                    b0:53:9a:83:99:c6:c4:ef:44:8c:0f:85:39:a0:58:
                    6d:65:5b:ac:6b:a8:87:dd:3b:17:a5:05:e0:e6:3f:
                    e2:2a:08:17:c0:6b:58:74:b2:dc:16:8b:22:98:4d:
                    79:91:a2:af:2a:fb:38:4e:54:46:e4:1a:5f:7f:56:
                    15:09:8d:75:aa:db:c0:b7:71:79:e6:a3:11:af:c5:
                    76:b8:ef:34:d7:cc:ff:09:d6:57:df:8a:3a:09:0a:
                    55:39:d1:ca:12:1a:fd:77:a4:0d:1e:17:8a:49:e6:
                    3f:4f:3c:6b:d1:0c:44:da:37:c0:31:00:67:a4:7f:
                    71:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BE:BC:E5:2D:BF:61:C3:04:97:BD:5C:A5:0D:33:19:D9:F2:BF:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/57a34478-7668-3c41-9e9a-6624f2728938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:1b:9d:9e:f8:b5:8e:aa:3f:0f:49:f3:dd:a3:e7:e0:d8:ab:
         ae:99:85:e0:29:3c:d0:c0:46:61:4d:e7:b3:16:b8:3f:f5:5d:
         9e:df:59:f3:4c:ee:01:31:d1:20:4c:08:d6:3c:ae:49:6b:1e:
         f7:f9:c1:92:c8:c7:a4:7b:c5:07:fd:84:47:df:10:2c:84:26:
         7d:8d:35:f6:67:63:34:f8:c7:7e:00:c6:1d:af:af:f9:31:87:
         bc:1a:d5:9b:20:b1:e7:c3:43:c2:c1:ee:17:8e:49:ac:af:29:
         fe:4a:8f:50:2b:e6:55:2d:68:4b:96:0d:5e:ac:e7:df:6a:52:
         0c:02:62:b3:93:4f:26:a6:12:1d:43:71:4f:80:48:3a:ac:b0:
         3d:a2:82:5a:b7:23:81:2b:e6:c3:c9:e8:ab:08:de:99:f0:b7:
         1b:29:07:78:0e:2e:47:9a:fa:6d:98:44:16:0c:a3:51:3e:71:
         73:12:77:d6:45:76:45:fe:f4:24:cc:60:d7:6f:e3:61:61:d8:
         5f:c0:0d:40:3f:75:78:f0:a0:34:11:6b:48:9a:3e:0c:34:db:
         6c:f6:c6:30:7b:ca:80:87:5f:66:11:0b:7c:76:16:81:ff:7d:
         d1:17:70:c1:93:fe:0a:de:bd:cc:b1:e4:ad:ca:a3:b3:7d:4a:
         96:0b:6d:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G6Gb0kRnaaxIIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIyMTM2NjgtODk3My00NDcxLWExOWEtZDdlODM3NGFk
YTYzMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
ZDQwMzViMDktMjc0Yy00MDA4LThhMTctYmRmOTcxOTdlMWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqrGO3Uvpg9HXoRw6Uk5gvlRr3vo049p4TXB
qQxj2ptf+SCalEFTg8KNnjKLexYYI0w/MXC8t0i7LCBefWx3udU1Hu74DWqFLCal
N97uu0/jgjnhiLXu5NonsM+bx8v2f4kCXNJgkFT6di1lTe6Tlv+mnAhRvaL3+gS9
x3nFFqJRT+pz1vCwU5qDmcbE70SMD4U5oFhtZVusa6iH3TsXpQXg5j/iKggXwGtY
dLLcFosimE15kaKvKvs4TlRG5Bpff1YVCY11qtvAt3F55qMRr8V2uO8018z/CdZX
34o6CQpVOdHKEhr9d6QNHheKSeY/Tzxr0QxE2jfAMQBnpH9xZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJW+vOUtv2HDBJe9XKUNMxnZ8r88MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMjIx
MzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4Mzc0YWRhNjMvNTdhMzQ0NzgtNzY2OC0z
YzQxLTllOWEtNjYyNGYyNzI4OTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTIyMTM2NjgtODk3My00NDcxLWEx
OWEtZDdlODM3NGFkYTYzL2UyMjEzNjY4LTg5NzMtNDQ3MS1hMTlhLWQ3ZTgzNzRh
ZGE2My5jcmwwHwYDVR0jBBgwFoAUxMJnBDYTO2dfpfUComBVEY+E5xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMjIxMzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4
Mzc0YWRhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUCcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwbnZ74tY6qPw9J892j5+DYq66ZheApPNDARmFN57MWuD/1XZ7fWfNM
7gEx0SBMCNY8rklrHvf5wZLIx6R7xQf9hEffECyEJn2NNfZnYzT4x34Axh2vr/kx
h7wa1ZsgsefDQ8LB7heOSayvKf5Kj1Ar5lUtaEuWDV6s599qUgwCYrOTTyamEh1D
cU+ASDqssD2iglq3I4Er5sPJ6KsI3pnwtxspB3gOLkea+m2YRBYMo1E+cXMSd9ZF
dkX+9CTMYNdv42Fh2F/ADUA/dXjwoDQRa0iaPgw022z2xjB7yoCHX2YRC3x2FoH/
fdEXcMGT/grevcyx5K3Ko7N9SpYLbTQ=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:32 2025 by rpki-client