Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa
File:                     1dafa895-ce97-3c2b-9067-e9ff7279b148.roa (raw, json)
Hash identifier:          Vgh0dnwekVa1H3k2bOAyVHiAD8zGgFl20+jy7AhxBbQ=
Subject key identifier:   F8:16:12:0B:08:85:0B:74:D4:6F:1F:38:02:05:8A:B0:37:96:F9:60
Certificate issuer:       /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
Certificate serial:       010D0C9F4328584AA6F62D127D63E632A2862F40
Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     46672
IP address blocks:        199.30.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2d:12:7d:63:e6:32:a2:86:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=bcae83a1-bb2d-4355-a97c-7a81f46ec109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:2e:74:f0:b9:fc:8b:18:78:d0:ec:72:b2:
                    d4:d8:48:5e:45:71:ff:de:aa:02:27:13:5b:f3:a6:
                    98:1b:6f:8f:25:74:20:14:0a:25:0d:26:d1:04:9a:
                    e5:e2:0e:ef:15:32:89:61:57:b1:99:74:ee:cd:85:
                    5b:72:f0:77:3f:11:02:b9:67:63:b0:83:75:a9:aa:
                    89:6f:56:57:42:23:fb:6e:2a:24:94:ba:d2:de:39:
                    1c:25:a3:09:65:c9:0e:0a:96:35:61:bf:89:9c:1e:
                    b6:9d:b0:d3:45:dc:d3:5a:df:80:62:dc:c7:4f:d0:
                    b3:a7:ff:d3:e1:7e:0a:78:d6:0a:aa:b4:e2:cc:63:
                    39:07:f0:31:90:cb:fd:53:e1:da:85:94:17:12:17:
                    fd:62:7e:8d:2b:a4:20:55:39:74:cd:75:ca:ab:42:
                    08:98:7b:1a:6e:f8:7d:3f:c5:4c:4f:f9:a9:21:6e:
                    bc:4f:ef:95:c4:b3:71:f7:ad:0c:08:91:e2:e9:cb:
                    30:47:cf:9a:e2:0f:ec:d6:7f:7a:ac:06:fd:65:6e:
                    de:75:ec:21:a3:76:8d:53:0c:ad:75:84:ed:b8:85:
                    79:93:e6:dc:d2:e9:57:59:cf:27:95:12:b9:ce:be:
                    91:38:ef:46:5c:ce:03:22:d7:10:1b:ec:49:32:b7:
                    3c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:16:12:0B:08:85:0B:74:D4:6F:1F:38:02:05:8A:B0:37:96:F9:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/1dafa895-ce97-3c2b-9067-e9ff7279b148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fe:4a:98:fa:ab:88:4f:e6:59:1d:ef:53:85:67:51:70:4b:
         f5:23:45:33:2e:d7:3e:14:44:ea:91:cb:d0:31:35:ca:27:96:
         3b:a6:ee:be:7f:73:d2:36:27:2f:cb:5e:14:a3:df:de:b7:e8:
         73:9f:4f:05:d3:d7:28:cd:61:10:23:bb:c9:3c:b4:36:d2:ff:
         09:c2:66:93:a4:82:a9:ed:06:89:48:27:0e:af:ff:e5:37:97:
         98:dc:01:1b:d9:1c:8d:8a:28:a4:5d:4f:65:e9:bf:6d:18:c5:
         a7:07:5e:dd:b0:bf:2b:25:81:50:31:b3:2f:12:7d:e3:a0:79:
         99:b0:30:ed:2d:c8:60:9f:ba:6a:70:96:7c:bf:c5:df:bf:20:
         39:e3:f4:e8:be:99:c1:cf:04:5a:35:db:b4:3b:69:8a:02:b1:
         57:3a:30:73:d2:ac:c2:45:5f:61:ec:2d:22:86:47:67:9a:74:
         bf:19:7c:2a:2c:35:6d:9a:0b:84:3a:70:84:31:f5:1d:04:fe:
         b2:c3:38:81:05:7a:80:41:fe:2a:52:fa:3a:65:98:2a:51:19:
         81:db:da:6c:2d:99:c6:9d:30:ef:94:29:12:4b:63:c7:01:da:
         de:ff:e2:59:3c:ba:8b:7a:1d:a0:71:48:96:87:da:8f:43:33:
         66:f6:29:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9i0SfWPmMqKGL0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh
ODE4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
YmNhZTgzYTEtYmIyZC00MzU1LWE5N2MtN2E4MWY0NmVjMTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3MudPC5/IsYeNDscrLU2EheRXH/3qoCJxNb
86aYG2+PJXQgFAolDSbRBJrl4g7vFTKJYVexmXTuzYVbcvB3PxECuWdjsIN1qaqJ
b1ZXQiP7bioklLrS3jkcJaMJZckOCpY1Yb+JnB62nbDTRdzTWt+AYtzHT9Czp//T
4X4KeNYKqrTizGM5B/AxkMv9U+HahZQXEhf9Yn6NK6QgVTl0zXXKq0IImHsabvh9
P8VMT/mpIW68T++VxLNx960MCJHi6cswR8+a4g/s1n96rAb9ZW7edewho3aNUwyt
dYTtuIV5k+bc0ulXWc8nlRK5zr6ROO9GXM4DItcQG+xJMrc8EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPgWEgsIhQt01G8fOAIFirA3lvlgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi
MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMWRhZmE4OTUtY2U5Ny0z
YzJiLTkwNjctZTlmZjcyNzliMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0
MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz
YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5
N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxx6CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGz+Spj6q4hP5lkd71OFZ1FwS/UjRTMu1z4UROqRy9AxNconljum7r5/
c9I2Jy/LXhSj39636HOfTwXT1yjNYRAju8k8tDbS/wnCZpOkgqntBolIJw6v/+U3
l5jcARvZHI2KKKRdT2Xpv20YxacHXt2wvyslgVAxsy8SfeOgeZmwMO0tyGCfumpw
lny/xd+/IDnj9Oi+mcHPBFo127Q7aYoCsVc6MHPSrMJFX2HsLSKGR2eadL8ZfCos
NW2aC4Q6cIQx9R0E/rLDOIEFeoBB/ipS+jplmCpRGYHb2mwtmcadMO+UKRJLY8cB
2t7/4lk8uot6HaBxSJaH2o9DM2b2Ke0=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:15:23 2025 by rpki-client