Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cc846770-6f1c-3121-a301-e24a6d92d8ce.roa
File:                     cc846770-6f1c-3121-a301-e24a6d92d8ce.roa (raw, json)
Hash identifier:          9fmkdhzhRFQxG/srPPh0OB73WTYj8ug480kG4KCMakI=
Subject key identifier:   73:91:24:6C:BB:20:E5:8D:DD:31:5D:25:7B:AD:0B:59:51:DF:6A:8C
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584BBFA59A6261B7BE3392749900
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cc846770-6f1c-3121-a301-e24a6d92d8ce.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     6142
IP address blocks:        64.39.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:9a:62:61:b7:be:33:92:74:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=4bdb1b8a-cfcd-4b91-b5d3-a44322814420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:b2:63:bc:86:ac:0c:2a:9e:52:e8:72:c9:
                    85:92:f2:44:4a:cf:0d:4a:54:c4:a4:db:36:4b:86:
                    e0:b8:84:0e:da:86:f7:3f:b6:d4:bb:86:c7:5e:84:
                    60:9f:fc:6c:2e:51:18:19:2a:20:5c:e0:76:ce:9d:
                    0c:ac:e1:17:3f:da:a9:96:21:00:d9:a4:0a:ae:1b:
                    d7:2f:28:a9:4f:3e:fa:75:01:ae:e4:9f:7e:1f:eb:
                    d3:07:2f:74:63:cd:a5:30:2f:8e:b4:e1:68:5e:eb:
                    d2:3d:0b:86:fd:23:83:c5:9c:ae:fe:4e:33:df:8b:
                    6f:de:f8:5f:ae:6d:74:9e:aa:50:c9:37:34:60:6c:
                    86:d9:aa:e5:b7:34:dd:13:f5:f6:e7:b3:76:17:e2:
                    36:f2:a5:a3:20:ee:54:42:67:5b:b3:b4:ca:c0:2d:
                    27:a4:04:41:ac:22:dc:25:05:ea:db:5f:d4:cf:e7:
                    44:60:c2:a8:2a:c2:3d:b7:4c:7b:df:61:2b:84:50:
                    3e:1b:54:23:13:a4:99:08:86:4e:d9:7f:3e:a0:58:
                    d0:6e:27:7e:96:98:11:05:cf:6d:91:56:4c:f9:eb:
                    f7:4d:c8:19:5a:e3:4f:f9:b7:16:63:04:d8:d5:78:
                    30:81:ba:03:ef:39:09:72:74:0b:a3:d6:7d:9b:84:
                    46:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:91:24:6C:BB:20:E5:8D:DD:31:5D:25:7B:AD:0B:59:51:DF:6A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/cc846770-6f1c-3121-a301-e24a6d92d8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:50:8e:17:d0:0d:44:61:98:94:2d:9f:82:35:c1:09:26:
         90:fa:69:40:23:c3:25:03:e6:d2:9a:54:dc:83:dc:75:80:f1:
         0a:62:92:fd:da:45:11:85:54:78:e8:97:a1:ec:db:88:c7:6b:
         9b:66:5a:5a:db:e1:d4:42:7f:e2:39:5d:ea:a1:ad:da:62:15:
         62:ba:17:8b:8c:c4:d3:3c:9b:fe:e5:02:28:4c:dd:0f:6d:6e:
         98:d8:e8:77:42:db:89:88:c5:e8:c7:9d:44:87:6c:81:4b:20:
         9b:76:32:8b:cf:48:84:23:14:35:88:41:f7:80:33:cc:d4:50:
         6b:f4:df:4f:94:d0:ee:b9:a3:03:91:ee:85:a3:12:33:76:46:
         4e:f4:cf:92:93:30:d2:e7:28:57:bf:20:4e:52:68:49:71:93:
         13:f8:a9:73:b3:79:92:7e:ca:84:d5:bd:88:c7:b6:4e:e7:35:
         c9:5b:97:0d:70:a1:f3:59:ec:54:0f:b3:38:e1:08:fb:e1:3a:
         e0:c0:28:2d:e6:f9:0e:f1:9c:d5:62:59:0d:11:b1:88:db:f1:
         31:1e:3b:3e:f0:4e:f0:db:43:20:69:1f:7d:3b:93:89:d3:ee:
         71:9b:4c:01:f6:95:09:a7:9f:16:6e:47:a8:00:fb:9a:af:81:
         8d:50:5a:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZpiYbe+M5J0mQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx
ZDQxMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk
NGJkYjFiOGEtY2ZjZC00YjkxLWI1ZDMtYTQ0MzIyODE0NDIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGyyY7yGrAwqnlLocsmFkvJESs8NSlTEpNs2
S4bguIQO2ob3P7bUu4bHXoRgn/xsLlEYGSogXOB2zp0MrOEXP9qpliEA2aQKrhvX
LyipTz76dQGu5J9+H+vTBy90Y82lMC+OtOFoXuvSPQuG/SODxZyu/k4z34tv3vhf
rm10nqpQyTc0YGyG2arltzTdE/X257N2F+I28qWjIO5UQmdbs7TKwC0npARBrCLc
JQXq21/Uz+dEYMKoKsI9t0x732ErhFA+G1QjE6SZCIZO2X8+oFjQbid+lpgRBc9t
kVZM+ev3TcgZWuNP+bcWYwTY1XgwgboD7zkJcnQLo9Z9m4RGWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHORJGy7IOWN3TFdJXutC1lR32qMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2
ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvY2M4NDY3NzAtNmYxYy0z
MTIxLWEzMDEtZTI0YTZkOTJkOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2
NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj
MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl
OGNlYzFkNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCdjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1xUI4X0A1EYZiULZ+CNcEJJpD6aUAjwyUD5tKaVNyD3HWA8Qpikv3a
RRGFVHjol6Hs24jHa5tmWlrb4dRCf+I5XeqhrdpiFWK6F4uMxNM8m/7lAihM3Q9t
bpjY6HdC24mIxejHnUSHbIFLIJt2MovPSIQjFDWIQfeAM8zUUGv030+U0O65owOR
7oWjEjN2Rk70z5KTMNLnKFe/IE5SaElxkxP4qXOzeZJ+yoTVvYjHtk7nNclblw1w
ofNZ7FQPszjhCPvhOuDAKC3m+Q7xnNViWQ0RsYjb8TEeOz7wTvDbQyBpH307k4nT
7nGbTAH2lQmnnxZuR6gA+5qvgY1QWqI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:37:00 2025 by rpki-client