Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/c75b84f1-3d27-372d-be12-4dd1aa1548ba.roa
File:                     c75b84f1-3d27-372d-be12-4dd1aa1548ba.roa (raw, json)
Hash identifier:          xesNOeMS6weRsuqcQFjSYrMW0bfBCAS80/LgDBGb5cg=
Subject key identifier:   36:EE:E6:E5:0C:E1:FB:83:F1:E8:8C:8A:42:51:2B:0A:17:58:3C:0D
Certificate issuer:       /CN=9f4a0908-708d-490b-9f22-60855d3d69b3
Certificate serial:       010D0C9F43285849E654F00187E014CB1BBC3400
Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/c75b84f1-3d27-372d-be12-4dd1aa1548ba.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     209242
IP address blocks:        64.69.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f0:01:87:e0:14:cb:1b:bc:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=9cd094d8-cdac-4223-a017-05b18a56e86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:39:bc:b8:92:9e:04:95:05:a4:5d:d6:ef:
                    bb:35:88:63:96:2f:1d:4a:cf:73:88:43:cf:07:0a:
                    39:b2:53:74:a5:d0:d8:17:6b:6a:e9:0e:1c:55:41:
                    39:35:fe:0b:c8:ca:92:ca:cc:b6:9e:b4:59:18:ad:
                    cc:96:34:1e:2b:b4:c2:be:07:59:05:60:04:f3:e9:
                    40:5e:5d:30:52:51:91:e9:26:9e:30:b9:fe:98:98:
                    ea:0c:cc:4e:9e:98:89:84:ae:a4:f3:aa:11:ed:1e:
                    e8:b8:fd:a2:b3:b3:e0:12:c8:ea:27:32:d6:33:58:
                    04:37:20:94:4c:75:b4:8d:c7:e6:ad:ea:ac:c7:15:
                    e2:52:74:15:52:63:ff:ec:3a:d1:9b:ee:57:f4:8f:
                    fd:82:50:1f:b7:fe:21:c4:8b:61:76:e3:f3:3d:b6:
                    8c:79:d7:64:e9:43:21:1d:ad:33:51:24:8d:8d:b7:
                    3e:81:1b:c8:7a:f3:d6:50:d7:9a:8f:6b:bf:3f:cc:
                    8b:cb:b6:f4:b4:3b:88:99:26:33:5b:bc:ff:d0:1f:
                    2c:9d:2b:7b:6b:15:0b:cb:78:35:2c:7e:fd:c2:df:
                    cf:bb:9d:5e:97:e5:46:52:63:44:84:3c:1f:74:c3:
                    67:3e:73:1f:f5:2b:0e:04:8d:12:10:96:e6:03:d8:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EE:E6:E5:0C:E1:FB:83:F1:E8:8C:8A:42:51:2B:0A:17:58:3C:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/c75b84f1-3d27-372d-be12-4dd1aa1548ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ee:1e:35:e2:74:00:6f:37:25:96:54:55:a0:c9:cc:6b:ef:
         d6:48:d8:af:71:fb:ae:91:df:19:9d:f4:44:82:f7:c1:7f:bb:
         30:88:f4:56:2d:5e:f5:c9:a9:60:96:51:89:a7:77:d5:46:48:
         5c:d0:58:36:5c:67:cb:e9:56:ef:c7:2c:b2:d1:96:36:3d:45:
         9c:82:2c:0f:b5:8c:ae:19:8a:57:53:b9:61:12:00:a6:61:5a:
         29:08:19:43:1d:af:a1:8b:ed:61:d6:a3:3f:10:f7:1b:08:d9:
         1d:84:bf:1b:96:a9:68:89:36:13:82:59:84:03:c4:02:85:ad:
         e4:f2:c6:63:31:be:07:95:3a:2d:29:61:14:62:c4:7a:80:c2:
         32:ae:ab:7b:4f:4b:e4:ab:40:68:87:d8:8a:f9:ba:24:9f:13:
         9b:6e:0f:b0:a2:ed:7f:d8:62:b6:2e:71:5e:23:55:16:d0:23:
         12:5e:95:7d:d4:a3:d7:7b:15:4d:96:a9:88:00:54:8b:79:59:
         d9:4c:f8:0a:f2:33:62:cf:d8:16:09:4e:ea:c0:68:a9:c4:6d:
         59:02:7e:81:8d:da:90:3d:47:46:2f:e6:a1:63:19:b2:5f:b1:
         45:6e:c3:7f:6c:c9:01:3b:13:02:4a:77:29:ab:f5:a4:c4:ba:
         5d:f9:e3:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPABh+AUyxu8NAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY0YTA5MDgtNzA4ZC00OTBiLTlmMjItNjA4NTVkM2Q2
OWIzMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
OWNkMDk0ZDgtY2RhYy00MjIzLWEwMTctMDViMThhNTZlODZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhho5vLiSngSVBaRd1u+7NYhjli8dSs9ziEPP
Bwo5slN0pdDYF2tq6Q4cVUE5Nf4LyMqSysy2nrRZGK3MljQeK7TCvgdZBWAE8+lA
Xl0wUlGR6SaeMLn+mJjqDMxOnpiJhK6k86oR7R7ouP2is7PgEsjqJzLWM1gENyCU
THW0jcfmreqsxxXiUnQVUmP/7DrRm+5X9I/9glAft/4hxIthduPzPbaMeddk6UMh
Ha0zUSSNjbc+gRvIevPWUNeaj2u/P8yLy7b0tDuImSYzW7z/0B8snSt7axULy3g1
LH79wt/Pu51el+VGUmNEhDwfdMNnPnMf9SsOBI0SEJbmA9jAewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbu5uUM4fuD8eiMikJRKwoXWDwNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZjRh
MDkwOC03MDhkLTQ5MGItOWYyMi02MDg1NWQzZDY5YjMvYzc1Yjg0ZjEtM2QyNy0z
NzJkLWJlMTItNGRkMWFhMTU0OGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWY0YTA5MDgtNzA4ZC00OTBiLTlm
MjItNjA4NTVkM2Q2OWIzLzlmNGEwOTA4LTcwOGQtNDkwYi05ZjIyLTYwODU1ZDNk
NjliMy5jcmwwHwYDVR0jBBgwFoAUS6GvAvZX8ayMKkFOL4WEcFDagaYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZjRhMDkwOC03MDhkLTQ5MGItOWYyMi02MDg1
NWQzZDY5YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQEUYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFruHjXidABvNyWWVFWgycxr79ZI2K9x+66R3xmd9ESC98F/uzCI9FYt
XvXJqWCWUYmnd9VGSFzQWDZcZ8vpVu/HLLLRljY9RZyCLA+1jK4ZildTuWESAKZh
WikIGUMdr6GL7WHWoz8Q9xsI2R2EvxuWqWiJNhOCWYQDxAKFreTyxmMxvgeVOi0p
YRRixHqAwjKuq3tPS+SrQGiH2Ir5uiSfE5tuD7Ci7X/YYrYucV4jVRbQIxJelX3U
o9d7FU2WqYgAVIt5WdlM+AryM2LP2BYJTurAaKnEbVkCfoGN2pA9R0Yv5qFjGbJf
sUVuw39syQE7EwJKdymr9aTEul3549c=
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:00:32 2025 by rpki-client