Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa
File:                     650dd2fc-99af-35a3-81ca-030219a24999.roa (raw, json)
Hash identifier:          eqZ3SGl9mjWyo4gyX1AFi32OT1tUpNhMoadC8PhqbEU=
Subject key identifier:   B4:6E:AC:C2:97:F8:6E:D3:3E:51:56:01:2C:8E:5F:35:68:EA:C8:A3
Certificate issuer:       /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Certificate serial:       010D0C9F4328584AC2E0F05CD27418EB42CFD8C0
Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     19905
IP address blocks:        64.58.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f0:5c:d2:74:18:eb:42:cf:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=e1fde136-2085-478d-aff1-0e953a569ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:e9:0b:ed:36:ef:8d:07:25:72:97:9c:5e:
                    c8:b6:d1:cf:d8:1f:72:76:a3:d3:57:13:f2:66:60:
                    85:77:0e:56:92:ea:7d:70:7f:72:7a:4e:df:ed:93:
                    3a:d7:55:f1:06:e2:66:a2:5e:f6:3b:af:ee:9d:36:
                    39:9e:78:d6:eb:2f:b7:bc:53:d2:7f:60:7f:9f:fb:
                    f7:13:e9:fa:1a:44:de:94:b7:7e:ff:ad:d9:44:f8:
                    ad:a4:fc:e9:bd:cd:95:4f:99:df:6c:7c:ad:3c:1f:
                    8f:6a:35:1e:a4:29:75:a4:5f:c8:ef:16:0a:e0:5e:
                    47:6b:f5:88:b6:72:9e:79:c6:c1:08:cb:10:c2:42:
                    1e:d5:5d:19:4a:e6:d0:f6:14:62:c7:5f:a3:4e:ff:
                    7f:fd:0b:2f:7f:15:bd:3a:a9:66:d3:bc:17:5d:e5:
                    84:dc:07:6b:da:9e:9f:54:d9:8d:ec:f1:55:c4:e6:
                    d7:45:7f:f6:46:99:f5:f7:29:e8:61:e7:93:f8:b5:
                    a7:d2:a7:c7:ce:02:d9:76:0d:00:cb:77:73:af:ee:
                    b8:18:8f:b7:4a:95:84:87:9a:b4:5d:0e:25:41:eb:
                    0a:e3:9e:bc:ad:c6:3b:c3:f3:9a:5b:65:59:5a:ac:
                    f8:70:28:80:fb:2e:d2:38:c8:26:d3:29:6f:54:73:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6E:AC:C2:97:F8:6E:D3:3E:51:56:01:2C:8E:5F:35:68:EA:C8:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.58.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:99:67:14:19:b9:b3:96:88:d2:8e:d6:79:b6:f7:89:3f:
         9c:ad:da:2b:0e:1c:a5:8e:f6:1a:3d:14:a1:18:60:6a:af:7d:
         93:3e:0d:e2:95:2e:60:e7:65:13:6f:ad:69:a0:d4:b3:b8:94:
         9c:70:be:3d:93:2b:ce:a5:f7:96:34:58:94:2c:be:03:4e:67:
         30:1c:0d:00:b4:40:35:43:8b:81:e5:ad:4f:ef:76:f2:eb:87:
         04:00:ad:31:6b:b8:8b:d0:73:7b:5c:9e:ea:76:9d:5f:ca:7c:
         15:e0:c9:be:c0:46:0b:6f:f4:98:af:d0:04:61:10:9d:41:6f:
         7b:18:f7:6f:a2:ef:6a:d8:30:1b:db:02:52:aa:60:f1:52:3a:
         fa:73:c1:2c:a2:f2:87:f9:ae:eb:8e:88:02:d1:8f:4f:da:26:
         d4:6e:7d:39:92:4f:f6:08:ae:ca:62:50:34:b6:88:d1:d3:16:
         b2:4b:33:e5:68:60:60:f2:03:0d:5e:45:56:58:c2:c7:c8:3c:
         c9:50:43:a3:b4:1e:f8:9f:05:f2:e2:bd:8f:2e:69:46:79:22:
         3e:c6:cd:f2:71:39:99:37:9a:74:b4:7f:a3:7b:c2:9a:c5:57:
         c7:5f:3b:00:73:6e:93:25:ee:36:02:12:f4:30:9f:07:7b:bf:
         34:ad:d3:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PBc0nQY60LP2MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0
OTQwMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZTFmZGUxMzYtMjA4NS00NzhkLWFmZjEtMGU5NTNhNTY5Y2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLjpC+02740HJXKXnF7IttHP2B9ydqPTVxPy
ZmCFdw5Wkup9cH9yek7f7ZM611XxBuJmol72O6/unTY5nnjW6y+3vFPSf2B/n/v3
E+n6GkTelLd+/63ZRPitpPzpvc2VT5nfbHytPB+PajUepCl1pF/I7xYK4F5Ha/WI
tnKeecbBCMsQwkIe1V0ZSubQ9hRix1+jTv9//QsvfxW9Oqlm07wXXeWE3Adr2p6f
VNmN7PFVxObXRX/2Rpn19ynoYeeT+LWn0qfHzgLZdg0Ay3dzr+64GI+3SpWEh5q0
XQ4lQesK4568rcY7w/OaW2VZWqz4cCiA+y7SOMgm0ylvVHMVjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRurMKX+G7TPlFWASyOXzVo6sijMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy
OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvNjUwZGQyZmMtOTlhZi0z
NWEzLTgxY2EtMDMwMjE5YTI0OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0
ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1
NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0
ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDowMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXGmWcUGbmzlojSjtZ5tveJP5yt2isOHKWO9ho9FKEYYGqvfZM+DeKV
LmDnZRNvrWmg1LO4lJxwvj2TK86l95Y0WJQsvgNOZzAcDQC0QDVDi4HlrU/vdvLr
hwQArTFruIvQc3tcnup2nV/KfBXgyb7ARgtv9Jiv0ARhEJ1Bb3sY92+i72rYMBvb
AlKqYPFSOvpzwSyi8of5ruuOiALRj0/aJtRufTmST/YIrspiUDS2iNHTFrJLM+Vo
YGDyAw1eRVZYwsfIPMlQQ6O0HvifBfLivY8uaUZ5Ij7GzfJxOZk3mnS0f6N7wprF
V8dfOwBzbpMl7jYCEvQwnwd7vzSt0+w=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:30 2025 by rpki-client