Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa
File:                     a680df6e-155d-3d93-babb-124b8a696bd5.roa (raw, json)
Hash identifier:          0jAgs5449kl65uZ+3v0T4l6aImL6JtetUQALBaOYyec=
Subject key identifier:   3F:00:3F:B8:80:B8:7B:3B:64:4F:2A:FB:44:E8:02:16:CA:E7:BE:75
Certificate issuer:       /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
Certificate serial:       010D0C9F43285849C79F652BA969E10916012280
Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     46672
IP address blocks:        199.30.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:65:2b:a9:69:e1:09:16:01:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=d9846d20-ffb9-4332-a8a1-de3fed79ebf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:4c:6d:77:d8:7c:76:a5:42:35:51:10:4e:
                    dd:e5:60:b3:d1:e7:41:e4:9d:a0:01:0d:8b:d2:19:
                    b9:4c:78:0b:05:c5:6b:20:a2:be:25:5e:8c:67:ce:
                    30:68:53:0a:10:70:bc:04:9d:bd:eb:f0:00:3a:f5:
                    f5:af:6c:c8:40:88:c3:54:94:88:35:aa:04:57:68:
                    28:04:a4:78:8e:34:af:3c:2e:f9:87:49:b7:4a:1e:
                    0d:03:d5:c9:53:a1:55:f4:bf:94:32:5e:f3:26:41:
                    a0:3d:35:ee:fc:4b:81:4a:a4:2a:7a:c2:08:d6:9a:
                    3b:67:d7:c6:48:74:fd:f1:b4:04:13:63:ac:20:63:
                    e5:70:3a:f2:b6:c4:45:41:ed:dd:85:36:3b:e2:f2:
                    a9:4b:5d:d4:0f:6a:67:a9:70:f8:20:e3:53:28:b8:
                    ff:51:d1:d8:7d:23:0e:63:07:5c:5a:38:84:3d:64:
                    bb:89:f6:5a:2c:5a:f2:27:4d:7a:f8:45:41:ab:41:
                    77:bc:3c:b8:4e:e6:34:26:c8:bb:dd:c6:41:01:f8:
                    a3:04:87:3e:11:20:69:dd:e3:d3:08:42:14:0a:be:
                    23:84:49:a4:f3:93:e1:20:1f:34:b9:64:c0:bd:95:
                    a5:10:36:04:b3:a4:34:09:84:3c:ad:fc:66:c5:28:
                    fb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:00:3F:B8:80:B8:7B:3B:64:4F:2A:FB:44:E8:02:16:CA:E7:BE:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:37:95:56:f8:89:c0:d1:bf:1e:4d:01:f0:2a:40:da:74:e8:
         d9:9a:2e:cb:d5:9b:bf:f8:89:07:c3:e1:be:ed:9a:fb:16:79:
         6c:e7:d2:43:00:12:bf:57:d3:6d:5f:fc:74:33:14:51:cf:ca:
         63:8b:33:e6:8b:a2:f8:6e:38:47:dc:23:5a:69:ca:25:24:32:
         d2:d2:03:ef:45:f5:67:ad:14:06:bf:19:18:b2:20:21:8a:6a:
         49:ce:5c:28:3b:7a:3b:24:92:e9:4c:76:26:4e:70:3e:8a:8f:
         29:51:0f:3a:ee:8c:11:6a:14:f7:18:e2:03:35:ed:5a:e2:33:
         32:70:25:83:d7:e2:82:fc:a3:96:fd:88:9e:67:68:d0:95:7a:
         10:26:90:2b:65:ca:3e:d3:97:71:d8:e7:20:66:06:eb:58:ab:
         35:89:65:1c:ec:24:a0:7f:56:77:6e:8a:7c:f7:78:98:58:4e:
         dd:0f:f2:2f:a4:19:a0:9e:1c:1a:89:8e:94:1e:14:5d:5a:b5:
         c7:fb:fe:3d:3b:83:b8:35:00:aa:67:d9:aa:d8:1d:52:84:61:
         97:15:fe:99:48:0a:6d:72:8c:39:b8:96:c6:83:66:d9:2d:a9:
         46:43:31:68:98:8c:14:1f:c1:60:0a:fb:e0:39:f4:a8:69:f7:
         d8:24:29:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2UrqWnhCRYBIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh
ODE4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk
ZDk4NDZkMjAtZmZiOS00MzMyLWE4YTEtZGUzZmVkNzllYmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF9MbXfYfHalQjVREE7d5WCz0edB5J2gAQ2L
0hm5THgLBcVrIKK+JV6MZ84waFMKEHC8BJ296/AAOvX1r2zIQIjDVJSINaoEV2go
BKR4jjSvPC75h0m3Sh4NA9XJU6FV9L+UMl7zJkGgPTXu/EuBSqQqesII1po7Z9fG
SHT98bQEE2OsIGPlcDrytsRFQe3dhTY74vKpS13UD2pnqXD4IONTKLj/UdHYfSMO
YwdcWjiEPWS7ifZaLFryJ016+EVBq0F3vDy4TuY0Jsi73cZBAfijBIc+ESBp3ePT
CEIUCr4jhEmk85PhIB80uWTAvZWlEDYEs6Q0CYQ8rfxmxSj78wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8AP7iAuHs7ZE8q+0ToAhbK5751MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi
MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvYTY4MGRmNmUtMTU1ZC0z
ZDkzLWJhYmItMTI0YjhhNjk2YmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0
MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz
YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5
N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH43lVb4icDRvx5NAfAqQNp06NmaLsvVm7/4iQfD4b7tmvsWeWzn0kMA
Er9X021f/HQzFFHPymOLM+aLovhuOEfcI1ppyiUkMtLSA+9F9WetFAa/GRiyICGK
aknOXCg7ejskkulMdiZOcD6KjylRDzrujBFqFPcY4gM17VriMzJwJYPX4oL8o5b9
iJ5naNCVehAmkCtlyj7Tl3HY5yBmButYqzWJZRzsJKB/Vnduinz3eJhYTt0P8i+k
GaCeHBqJjpQeFF1atcf7/j07g7g1AKpn2arYHVKEYZcV/plICm1yjDm4lsaDZtkt
qUZDMWiYjBQfwWAK++A59Khp99gkKRM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:15:54 2025 by rpki-client