Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f0ef4621-4322-37c8-91e9-239fa3cd5974.roa
File:                     f0ef4621-4322-37c8-91e9-239fa3cd5974.roa (raw, json)
Hash identifier:          0ZTr4ZjQ2Qmf/XnY76OKbY1bP0aYQqZZX2/URyWTxNE=
Subject key identifier:   BD:CB:A5:0A:73:24:4F:85:46:40:8E:21:14:6C:1C:F4:9D:41:7D:9F
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584A2EEABBB7674A22E9A7B44B40
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f0ef4621-4322-37c8-91e9-239fa3cd5974.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     212238
IP address blocks:        64.224.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:bb:b7:67:4a:22:e9:a7:b4:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=38de8f83-098f-48b6-b97a-5f8165fea551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:f7:74:1c:4a:42:0a:f4:4c:df:09:76:64:
                    72:77:0e:34:94:e3:de:6f:84:11:f3:d7:94:e9:8f:
                    2a:71:3c:56:a2:b7:c0:1e:d7:ba:86:c5:1f:0d:d3:
                    99:ea:28:6b:50:5c:26:68:a8:92:23:89:71:40:db:
                    8b:6b:15:bb:5a:a7:b2:b5:70:50:a3:b8:b4:23:83:
                    97:03:83:28:41:60:91:49:d7:da:73:77:68:33:1f:
                    a6:0d:60:0d:4c:c5:3f:8c:8f:0f:a3:e1:17:5c:55:
                    3a:a1:8d:b9:d0:13:a9:3d:d1:35:b5:42:9d:81:e8:
                    0a:9e:0d:4d:6b:67:2a:5b:2b:16:3e:49:54:f6:fa:
                    83:e8:c9:7a:20:5c:54:61:24:8c:11:33:bd:e3:20:
                    a7:bd:cc:51:46:6b:a5:01:0b:5e:57:23:7d:61:fe:
                    27:e3:b2:df:d1:6b:78:ac:b0:8f:45:a1:49:d5:9e:
                    b0:82:87:13:c6:d8:c3:92:5c:b1:61:42:de:a2:27:
                    0e:0a:01:38:04:e0:a9:91:d9:61:f4:ed:e7:b7:ee:
                    0b:df:fe:d8:9a:24:90:63:b8:cb:12:90:5a:a6:fc:
                    88:c8:93:8e:07:c0:4b:71:11:98:17:71:98:1f:f6:
                    ef:b3:4f:cc:e6:cb:aa:f9:88:ad:3e:81:87:ec:90:
                    93:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CB:A5:0A:73:24:4F:85:46:40:8E:21:14:6C:1C:F4:9D:41:7D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/f0ef4621-4322-37c8-91e9-239fa3cd5974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.224.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b8:7f:f4:ef:1e:6c:74:c5:be:8e:58:cd:7b:c6:13:6b:fd:
         88:f4:24:a9:53:69:7f:88:4d:26:84:23:e6:79:78:6a:85:ac:
         ed:53:d6:bb:c9:d2:4b:b1:82:9c:50:33:26:f7:a1:5e:38:07:
         6f:b0:84:6e:df:54:9f:3c:b2:34:cd:36:c9:38:3c:89:d1:fc:
         96:b4:b4:ec:2b:60:63:db:b3:bb:27:61:4c:e2:82:ba:64:90:
         b3:2c:58:d8:e3:a1:10:b8:41:db:eb:b6:3c:51:3b:0d:f7:be:
         96:b6:49:fd:52:b5:cf:d9:e1:c8:de:fa:d0:c6:c6:de:5a:c3:
         34:df:53:91:7c:85:34:5f:5f:c3:7b:5f:bf:ab:aa:22:38:7b:
         b5:5c:ed:94:e8:00:8c:b3:62:c0:2a:dd:7b:e8:b4:1d:ec:79:
         df:1f:28:e2:bf:8b:30:ae:99:20:eb:2e:96:ff:55:65:8e:c4:
         84:1d:2d:84:5e:8a:30:b9:3e:6c:f3:36:5f:3a:19:d4:0e:fb:
         17:82:19:3d:cc:9c:09:f7:8b:a6:a2:81:31:45:c8:6c:a7:95:
         a5:f6:f3:90:8a:91:49:bd:79:8d:c5:43:52:fd:dd:b1:fe:b6:
         ec:72:4d:68:97:a1:dc:ac:bb:35:5f:96:3f:df:66:7c:10:e7:
         60:33:87:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6ru3Z0oi6ae0S0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk
MzhkZThmODMtMDk4Zi00OGI2LWI5N2EtNWY4MTY1ZmVhNTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3n3dBxKQgr0TN8JdmRydw40lOPeb4QR89eU
6Y8qcTxWorfAHte6hsUfDdOZ6ihrUFwmaKiSI4lxQNuLaxW7WqeytXBQo7i0I4OX
A4MoQWCRSdfac3doMx+mDWANTMU/jI8Po+EXXFU6oY250BOpPdE1tUKdgegKng1N
a2cqWysWPklU9vqD6Ml6IFxUYSSMETO94yCnvcxRRmulAQteVyN9Yf4n47Lf0Wt4
rLCPRaFJ1Z6wgocTxtjDklyxYULeoicOCgE4BOCpkdlh9O3nt+4L3/7YmiSQY7jL
EpBapvyIyJOOB8BLcRGYF3GYH/bvs0/M5suq+YitPoGH7JCTdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL3LpQpzJE+FRkCOIRRsHPSdQX2fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZjBlZjQ2MjEtNDMyMi0z
N2M4LTkxZTktMjM5ZmEzY2Q1OTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOARMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJO4f/TvHmx0xb6OWM17xhNr/Yj0JKlTaX+ITSaEI+Z5eGqFrO1T1rvJ
0kuxgpxQMyb3oV44B2+whG7fVJ88sjTNNsk4PInR/Ja0tOwrYGPbs7snYUzigrpk
kLMsWNjjoRC4QdvrtjxROw33vpa2Sf1Stc/Z4cje+tDGxt5awzTfU5F8hTRfX8N7
X7+rqiI4e7Vc7ZToAIyzYsAq3XvotB3sed8fKOK/izCumSDrLpb/VWWOxIQdLYRe
ijC5PmzzNl86GdQO+xeCGT3MnAn3i6aigTFFyGynlaX285CKkUm9eY3FQ1L93bH+
tuxyTWiXodysuzVflj/fZnwQ52AzhwM=
-----END CERTIFICATE-----
Generated at Sat Jun 14 04:22:00 2025 by rpki-client