Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e032ebb9-7d48-37a7-9ea8-1a0eb6e1b453.roa
File:                     e032ebb9-7d48-37a7-9ea8-1a0eb6e1b453.roa (raw, json)
Hash identifier:          RdiK87UHLJCTmwDk6axjdA1AeTmq70znLzYtrEM/8QU=
Subject key identifier:   22:CF:F9:38:3D:D8:5C:96:08:FC:5A:D9:7A:8E:94:5C:C4:0E:14:2F
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285849FE0FF62C71F3664076617300
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e032ebb9-7d48-37a7-9ea8-1a0eb6e1b453.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     19670
IP address blocks:        69.74.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:f6:2c:71:f3:66:40:76:61:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=8b900e5b-c2f7-462e-bec9-1cc256bd492a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2c:67:bf:52:68:e7:f9:59:4a:d8:a6:95:4a:
                    f4:f8:59:9a:10:7f:cf:b8:a7:e5:29:79:4e:bd:75:
                    62:09:52:aa:25:e0:06:d7:f0:77:76:12:15:fc:0a:
                    4f:dd:34:be:65:e9:60:99:cb:02:50:d7:eb:e1:56:
                    48:31:eb:b9:44:71:a2:e6:42:02:93:02:23:7d:9d:
                    9e:18:fc:88:d3:93:04:41:00:81:e3:2a:39:d5:26:
                    3c:de:ff:fb:69:0b:e6:93:22:7b:55:6b:44:3b:0f:
                    85:64:e1:99:04:a2:a7:ed:45:91:e1:40:c2:18:38:
                    06:d6:46:68:16:ee:57:14:f1:81:69:06:c3:c3:4b:
                    bc:3a:7f:d1:a2:7a:3e:72:2b:84:78:1e:fd:89:26:
                    62:2d:94:70:ee:21:65:70:dd:9d:bc:34:84:f1:6a:
                    54:d2:5b:1d:ab:96:5f:54:4e:5e:d4:2b:f9:b8:e7:
                    45:ee:6f:4a:11:1c:a7:67:1e:9b:30:c4:1a:87:40:
                    90:ca:29:4e:32:bc:c6:a7:e4:41:82:c5:f6:f9:2e:
                    ee:a6:c5:26:2f:85:ee:38:f7:03:fb:1d:3b:d2:4e:
                    f4:9f:f8:16:ae:8e:ab:84:27:8d:e2:63:66:79:3d:
                    9f:0a:cc:f6:76:5a:d9:77:86:16:28:51:1a:65:39:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CF:F9:38:3D:D8:5C:96:08:FC:5A:D9:7A:8E:94:5C:C4:0E:14:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e032ebb9-7d48-37a7-9ea8-1a0eb6e1b453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.74.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:15:ff:0f:9e:49:e6:76:f9:80:33:88:27:6c:4a:1d:d1:
         98:d4:f0:0b:fb:15:88:76:54:f6:a8:f1:4e:57:12:31:3e:bb:
         fb:d6:bf:9b:67:2a:a1:c1:f7:81:00:c2:06:6b:82:92:39:d2:
         c9:bd:b5:37:9f:b4:0c:6b:e3:be:39:1e:a7:e3:89:cf:42:3f:
         d4:33:7d:fc:18:15:aa:92:31:31:34:dd:f2:93:f0:d1:27:3b:
         bc:4d:14:b1:59:3f:b3:4f:cd:d4:1d:31:ba:76:eb:92:c6:05:
         2c:20:66:68:9b:ae:b2:90:cc:54:94:94:68:3d:63:e4:6e:2c:
         ae:4c:e8:6b:bd:06:35:fd:f9:86:9d:68:1b:20:9e:1f:fe:8c:
         47:66:7d:d5:72:b2:82:7a:45:65:93:6c:47:b0:30:d5:fd:9c:
         3c:10:a3:40:4e:19:a6:5f:1a:6d:bc:9e:03:a7:eb:23:95:dc:
         d4:c4:7c:dd:0d:18:8b:9c:5b:9e:17:b4:8a:28:3a:91:9c:d2:
         91:8a:7a:4e:89:57:7a:6a:0c:ee:de:cb:4a:e7:f5:8c:22:ef:
         9b:0c:9a:80:0b:2b:4c:e6:66:13:60:6d:55:45:e1:8a:be:07:
         2f:79:bc:ed:1a:8f:b0:d6:1b:9c:56:18:66:b9:e0:9e:22:67:
         c1:61:bf:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/YscfNmQHZhcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk
OGI5MDBlNWItYzJmNy00NjJlLWJlYzktMWNjMjU2YmQ0OTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCxnv1Jo5/lZStimlUr0+FmaEH/PuKflKXlO
vXViCVKqJeAG1/B3dhIV/ApP3TS+ZelgmcsCUNfr4VZIMeu5RHGi5kICkwIjfZ2e
GPyI05MEQQCB4yo51SY83v/7aQvmkyJ7VWtEOw+FZOGZBKKn7UWR4UDCGDgG1kZo
Fu5XFPGBaQbDw0u8On/Rono+ciuEeB79iSZiLZRw7iFlcN2dvDSE8WpU0lsdq5Zf
VE5e1Cv5uOdF7m9KERynZx6bMMQah0CQyilOMrzGp+RBgsX2+S7upsUmL4XuOPcD
+x070k70n/gWro6rhCeN4mNmeT2fCsz2dlrZd4YWKFEaZTkUUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLP+Tg92FyWCPxa2XqOlFzEDhQvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvZTAzMmViYjktN2Q0OC0z
N2E3LTllYTgtMWEwZWI2ZTFiNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUqtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfUFf8PnknmdvmAM4gnbEod0ZjU8Av7FYh2VPao8U5XEjE+u/vWv5tn
KqHB94EAwgZrgpI50sm9tTeftAxr4745Hqfjic9CP9QzffwYFaqSMTE03fKT8NEn
O7xNFLFZP7NPzdQdMbp265LGBSwgZmibrrKQzFSUlGg9Y+RuLK5M6Gu9BjX9+Yad
aBsgnh/+jEdmfdVysoJ6RWWTbEewMNX9nDwQo0BOGaZfGm28ngOn6yOV3NTEfN0N
GIucW54XtIooOpGc0pGKek6JV3pqDO7ey0rn9Ywi75sMmoALK0zmZhNgbVVF4Yq+
By95vO0aj7DWG5xWGGa54J4iZ8Fhv24=
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:46:41 2025 by rpki-client