Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa
File:                     69e7bb45-303a-3a64-b6aa-813f620b77b9.roa (raw, json)
Hash identifier:          BIXmF3ukIN9jCM5+Ohjjj0DcMZDlrv/8xjZcDyJGcKg=
Subject key identifier:   BA:8F:DA:E5:D6:0B:7C:30:1C:4A:0F:54:D0:73:EF:05:8E:98:42:00
Certificate issuer:       /CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
Certificate serial:       010D0C9F43285849E22518339992E3D346235640
Authority key identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     11260
IP address blocks:        67.58.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:18:33:99:92:e3:d3:46:23:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=0617e729-3525-496c-96f2-4f055f3dca48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:ae:c0:71:84:e4:14:fa:65:9b:94:b8:02:
                    dc:ee:9b:03:2a:d7:b9:d5:36:3e:33:17:49:17:7e:
                    2b:a9:71:03:40:7d:71:d1:0f:b3:0f:d7:b0:13:c9:
                    99:80:30:bf:35:e5:98:bf:4c:8c:12:2e:1e:99:9e:
                    31:88:29:98:0e:6e:eb:32:45:d8:78:a2:73:84:71:
                    2a:8c:1a:36:79:d2:db:31:52:6d:50:ff:27:ab:46:
                    f2:38:34:dd:5a:13:4d:7e:03:7b:79:39:8e:cc:a8:
                    cc:77:c3:d0:c0:b4:75:49:54:96:02:2f:cb:02:fe:
                    06:f2:e3:53:93:c4:0d:3f:0c:41:41:ee:10:6f:73:
                    af:06:f5:2e:c8:0d:2d:18:11:3f:0e:53:8f:b2:c3:
                    d9:3a:59:63:2a:68:a7:a1:42:14:e7:bc:23:7a:87:
                    21:aa:e1:df:f3:fb:a2:b7:04:a2:55:66:07:4f:8e:
                    2f:61:ad:43:3a:c5:fa:27:bd:0e:6a:aa:88:51:97:
                    a9:3c:18:54:79:0b:fc:d6:76:1a:3f:7e:29:f6:34:
                    44:1f:c0:cd:da:63:91:12:77:68:d1:c2:4c:8e:2b:
                    22:8d:7c:4b:15:87:b8:a2:a6:a6:84:45:13:db:9a:
                    c2:2e:bd:e5:7e:b7:fc:4a:e5:60:b5:3a:e7:38:a7:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:DA:E5:D6:0B:7C:30:1C:4A:0F:54:D0:73:EF:05:8E:98:42:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/69e7bb45-303a-3a64-b6aa-813f620b77b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl

            X509v3 Authority Key Identifier:
                keyid:95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.58.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5d:cd:2b:96:9b:d0:0d:59:c6:cc:40:68:01:b6:8e:8a:65:
         ac:b9:45:44:b3:2d:9d:10:d5:72:c3:b6:e8:06:ea:3d:86:c2:
         cc:19:d2:57:b1:3e:e1:e2:36:82:89:9f:c5:b7:a3:0a:7b:4c:
         c8:43:07:1b:6a:33:57:ca:1e:6a:48:c8:cd:2a:76:70:27:6d:
         e8:43:4e:c7:37:6f:73:9d:a3:65:77:db:ff:71:79:52:73:2d:
         08:d5:ca:f2:e4:0f:50:49:5b:1b:2f:7a:e4:66:f1:8a:05:59:
         37:ae:23:5c:7c:f9:4b:70:76:79:7b:25:6e:d1:f7:b2:e1:0c:
         52:f6:11:79:2c:18:f4:82:c1:1d:3e:68:05:e5:a0:b7:c7:56:
         d6:72:9e:fc:f7:2b:7a:e5:86:02:4c:ac:68:71:ff:58:5d:fb:
         23:0a:00:0b:fb:5c:b2:27:7e:f3:d7:33:74:e0:40:96:ec:9f:
         a9:dc:bb:f4:fd:21:17:1c:b5:3c:8e:94:3f:f8:cd:a1:92:ed:
         ee:5e:a3:c1:3f:bd:23:08:0b:9c:b8:36:cf:00:a7:d1:d5:1e:
         90:f4:43:6e:5c:d2:0a:7b:43:d0:2c:4f:60:bd:81:d6:cc:64:
         57:50:0c:57:08:33:9c:69:2e:54:5a:64:f1:30:48:95:2a:22:
         4b:ac:4e:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJRgzmZLj00YjVkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhNDhhZDAtZjYxMy00YzY2LWIwN2EtNjQ3M2Q4YTVh
YTI2MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
MDYxN2U3MjktMzUyNS00OTZjLTk2ZjItNGYwNTVmM2RjYTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtSuwHGE5BT6ZZuUuALc7psDKte51TY+MxdJ
F34rqXEDQH1x0Q+zD9ewE8mZgDC/NeWYv0yMEi4emZ4xiCmYDm7rMkXYeKJzhHEq
jBo2edLbMVJtUP8nq0byODTdWhNNfgN7eTmOzKjMd8PQwLR1SVSWAi/LAv4G8uNT
k8QNPwxBQe4Qb3OvBvUuyA0tGBE/DlOPssPZOlljKminoUIU57wjeochquHf8/ui
twSiVWYHT44vYa1DOsX6J70OaqqIUZepPBhUeQv81nYaP34p9jREH8DN2mOREndo
0cJMjisijXxLFYe4oqamhEUT25rCLr3lfrf8SuVgtTrnOKfakQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqP2uXWC3wwHEoPVNBz7wWOmEIAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iY2E0
OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhhNWFhMjYvNjllN2JiNDUtMzAzYS0z
YTY0LWI2YWEtODEzZjYyMGI3N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmNhNDhhZDAtZjYxMy00YzY2LWIw
N2EtNjQ3M2Q4YTVhYTI2L2JjYTQ4YWQwLWY2MTMtNGM2Ni1iMDdhLTY0NzNkOGE1
YWEyNi5jcmwwHwYDVR0jBBgwFoAUlVtTPU6qo+ng50X9/OZIWSdLLRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iY2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDcz
ZDhhNWFhMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQzrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxdzSuWm9ANWcbMQGgBto6KZay5RUSzLZ0Q1XLDtugG6j2GwswZ0lex
PuHiNoKJn8W3owp7TMhDBxtqM1fKHmpIyM0qdnAnbehDTsc3b3Odo2V32/9xeVJz
LQjVyvLkD1BJWxsveuRm8YoFWTeuI1x8+Utwdnl7JW7R97LhDFL2EXksGPSCwR0+
aAXloLfHVtZynvz3K3rlhgJMrGhx/1hd+yMKAAv7XLInfvPXM3TgQJbsn6ncu/T9
IRcctTyOlD/4zaGS7e5eo8E/vSMIC5y4Ns8Ap9HVHpD0Q25c0gp7Q9AsT2C9gdbM
ZFdQDFcIM5xpLlRaZPEwSJUqIkusThc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:02 2025 by rpki-client