Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/55a98cb1-5eea-3533-bf72-72797bf95b64.roa
File:                     55a98cb1-5eea-3533-bf72-72797bf95b64.roa (raw, json)
Hash identifier:          P2FoV+IRb85lWpphm/wG8Okw417/mzYwNulOQcvpEiY=
Subject key identifier:   B4:96:9E:F0:FF:5F:3A:AD:6C:2B:53:83:21:C3:47:A0:CF:14:23:2C
Certificate issuer:       /CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
Certificate serial:       010D0C9F4328584A7FE08DB91C2A82E372379BE0
Authority key identifier: 9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/55a98cb1-5eea-3533-bf72-72797bf95b64.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     400633
IP address blocks:        64.119.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:8d:b9:1c:2a:82:e3:72:37:9b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=0f4501c9-5f44-4651-9ab0-4df4b6217c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7c:3e:d3:e4:a2:55:26:05:68:32:40:34:8f:
                    b7:82:c9:b3:fb:2a:72:5b:1f:9e:50:96:a0:12:9c:
                    ad:e8:c0:77:2f:0a:5d:4a:b1:cf:ea:55:74:cc:1a:
                    6c:ad:54:7c:8a:52:91:18:01:cc:c4:0b:3f:d0:88:
                    a5:7e:fb:66:90:76:9f:7b:cb:46:4a:4b:78:a4:c3:
                    21:50:a7:6b:3d:b8:37:56:48:cd:1e:a8:f5:08:2f:
                    d4:68:bf:2d:28:26:fe:e7:3d:df:25:9b:9e:ab:f7:
                    90:4e:14:8b:19:dc:a6:81:20:0f:da:e0:0a:a0:5c:
                    c2:21:36:a3:32:8d:47:0c:ea:a7:a0:8c:34:4b:3d:
                    b8:a4:81:dc:36:b2:12:01:0f:3a:68:1c:21:80:b4:
                    e2:0c:36:22:c2:18:06:3d:bc:0f:76:1b:45:d3:26:
                    82:f2:0f:65:be:f2:18:b5:f9:bd:58:06:86:ba:96:
                    1f:92:22:cc:87:56:49:90:c9:ad:f1:41:43:f0:e1:
                    d0:dd:62:79:c7:b3:54:74:9a:10:cc:6e:c7:4f:6b:
                    b5:ef:0b:5c:f6:7a:02:9e:6d:0b:87:c4:31:1d:97:
                    b2:45:e9:eb:3f:9c:64:ad:fa:0f:e4:32:4d:46:e5:
                    1e:a1:8c:5e:92:41:5c:2b:ad:90:78:12:f6:c6:97:
                    04:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:96:9E:F0:FF:5F:3A:AD:6C:2B:53:83:21:C3:47:A0:CF:14:23:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/55a98cb1-5eea-3533-bf72-72797bf95b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl

            X509v3 Authority Key Identifier:
                keyid:9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.119.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b3:f5:e0:df:b1:19:fb:5c:6b:b8:b7:50:c9:c6:0d:8e:00:
         05:29:53:e9:55:6a:91:64:90:9b:76:72:69:51:5b:9a:db:7a:
         1a:c1:6a:f2:07:39:2c:43:13:9b:55:bc:87:59:7b:6a:67:64:
         c3:d6:26:d6:08:de:fc:4b:11:bd:36:ea:5e:67:52:6e:f1:f7:
         00:38:9c:fc:d9:be:3e:cb:d7:a5:29:30:95:a9:c0:49:73:0f:
         c5:8a:59:9b:7d:94:68:77:a2:91:36:a8:7d:d0:12:17:81:4b:
         fa:d9:83:77:4c:a9:77:b1:ee:7f:bc:39:bc:c8:02:f1:ae:8a:
         c0:bb:9a:39:0c:2e:69:05:bc:27:87:07:1b:08:bc:14:5f:5e:
         cf:ab:64:6a:17:dd:30:bf:e3:93:66:7e:da:f5:90:9a:56:e8:
         e4:e5:cd:d5:9f:72:f0:dc:c2:97:cd:09:5f:0b:34:e3:5b:35:
         8c:b9:8b:47:ab:49:64:e0:d4:16:bc:88:32:fd:a3:64:fb:6f:
         7f:93:8f:e9:a4:57:53:a8:0f:0e:13:8e:36:74:41:db:98:21:
         16:a7:f6:26:45:2f:38:23:f2:44:9e:13:4f:74:ba:6f:25:a5:
         b5:9a:18:9a:0d:f7:dc:62:fe:c1:e2:45:69:60:f9:7a:c7:bc:
         33:4b:1f:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4I25HCqC43I3m+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY1Zjc3NDItOThmNy00MWNhLTljNTctNWI5MDJiYzRi
MTg2MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk
MGY0NTAxYzktNWY0NC00NjUxLTlhYjAtNGRmNGI2MjE3YzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hw+0+SiVSYFaDJANI+3gsmz+ypyWx+eUJag
Epyt6MB3LwpdSrHP6lV0zBpsrVR8ilKRGAHMxAs/0IilfvtmkHafe8tGSkt4pMMh
UKdrPbg3VkjNHqj1CC/UaL8tKCb+5z3fJZueq/eQThSLGdymgSAP2uAKoFzCITaj
Mo1HDOqnoIw0Sz24pIHcNrISAQ86aBwhgLTiDDYiwhgGPbwPdhtF0yaC8g9lvvIY
tfm9WAaGupYfkiLMh1ZJkMmt8UFD8OHQ3WJ5x7NUdJoQzG7HT2u17wtc9noCnm0L
h8QxHZeyRenrP5xkrfoP5DJNRuUeoYxekkFcK62QeBL2xpcEcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLSWnvD/XzqtbCtTgyHDR6DPFCMsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZjVm
Nzc0Mi05OGY3LTQxY2EtOWM1Ny01YjkwMmJjNGIxODYvNTVhOThjYjEtNWVlYS0z
NTMzLWJmNzItNzI3OTdiZjk1YjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmY1Zjc3NDItOThmNy00MWNhLTlj
NTctNWI5MDJiYzRiMTg2L2JmNWY3NzQyLTk4ZjctNDFjYS05YzU3LTViOTAyYmM0
YjE4Ni5jcmwwHwYDVR0jBBgwFoAUnXppW5JWwGHhkQNScKNQYZA2d2IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZjVmNzc0Mi05OGY3LTQxY2EtOWM1Ny01Yjkw
MmJjNGIxODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQHcwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCz9eDfsRn7XGu4t1DJxg2OAAUpU+lVapFkkJt2cmlRW5rbehrBavIH
OSxDE5tVvIdZe2pnZMPWJtYI3vxLEb026l5nUm7x9wA4nPzZvj7L16UpMJWpwElz
D8WKWZt9lGh3opE2qH3QEheBS/rZg3dMqXex7n+8ObzIAvGuisC7mjkMLmkFvCeH
BxsIvBRfXs+rZGoX3TC/45Nmftr1kJpW6OTlzdWfcvDcwpfNCV8LNONbNYy5i0er
SWTg1Ba8iDL9o2T7b3+Tj+mkV1OoDw4TjjZ0QduYIRan9iZFLzgj8kSeE090um8l
pbWaGJoN99xi/sHiRWlg+XrHvDNLH0U=
-----END CERTIFICATE-----
Generated at Wed Aug 6 19:32:17 2025 by rpki-client