Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f1792cc0-d152-3096-97c2-0a67d1db4022.roa
File:                     f1792cc0-d152-3096-97c2-0a67d1db4022.roa (raw, json)
Hash identifier:          /xgzo+2DIjCV4olA88R9MUttCrpLKELBt+EgwNWX/BE=
Subject key identifier:   61:E9:F4:92:6B:43:9A:F4:33:FA:E5:32:3F:D6:87:76:EB:4E:39:0D
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584A1F90255E50906EC02AF5BF80
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f1792cc0-d152-3096-97c2-0a67d1db4022.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     62240
IP address blocks:        64.22.82.0/24 maxlen: 24
                          64.22.106.0/24 maxlen: 24
                          207.210.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:25:5e:50:90:6e:c0:2a:f5:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=cf6938ca-9d77-491a-bdef-5a408dc4249a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:55:21:af:4c:1e:f9:67:6c:83:b8:57:8a:
                    6a:6c:4b:f2:51:3d:96:87:06:33:f2:09:ec:23:f7:
                    e8:3b:dc:c5:a8:27:39:3a:b8:d8:f7:fa:5f:e9:6d:
                    0a:6a:96:99:d6:c1:8f:3f:39:53:ef:a4:da:c8:02:
                    a0:f3:62:03:24:14:b0:e9:92:c5:f5:53:96:c8:be:
                    3e:f2:15:28:37:83:89:84:9f:86:bb:5d:d8:a1:1f:
                    c3:65:df:e2:60:4b:b6:d8:45:a3:8e:ea:51:3b:20:
                    be:8a:e3:b2:5b:3b:bb:e8:84:dd:58:6f:47:cd:65:
                    eb:9e:2d:a9:7a:04:16:c2:4b:c7:c2:16:41:17:8c:
                    85:d6:39:81:4c:92:da:af:8e:97:28:d2:e1:b2:2e:
                    6c:98:24:04:0c:ef:0b:40:0a:d8:51:14:2b:07:67:
                    b7:ce:40:37:08:ce:15:11:11:d0:83:6e:88:f0:d1:
                    30:38:20:89:e9:21:82:30:89:0b:25:dd:91:79:d0:
                    fe:73:7c:86:ff:0f:01:d0:8a:b0:52:fb:67:de:a6:
                    63:6a:c7:51:80:ab:87:0b:3f:db:c5:47:85:6b:1a:
                    8e:d3:31:0c:bd:8e:70:b4:b6:ac:9c:50:48:49:e9:
                    05:d3:4d:15:21:e8:85:42:6b:9b:e8:fb:2b:4e:e9:
                    b5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E9:F4:92:6B:43:9A:F4:33:FA:E5:32:3F:D6:87:76:EB:4E:39:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/f1792cc0-d152-3096-97c2-0a67d1db4022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.82.0/24
                  64.22.106.0/24
                  207.210.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:16:ae:0b:8f:2d:e3:bc:65:66:53:d8:f7:b8:bc:12:da:cb:
         30:75:b2:26:ee:40:9f:bc:b7:e4:fb:b8:b2:fd:e8:0a:77:8e:
         8a:80:43:46:55:c2:4c:a5:73:86:c6:46:69:07:c4:a3:7e:a7:
         f2:2f:5f:1d:86:51:dd:84:23:ec:58:47:52:15:d5:76:66:e3:
         42:06:0c:8d:84:b6:96:65:53:ad:88:8a:91:82:6b:4b:67:de:
         82:cd:4f:4f:59:07:a8:39:cc:59:03:f1:37:e8:aa:1c:38:ba:
         a5:94:52:a3:ec:31:f5:a1:57:16:7f:72:f3:1f:13:d5:40:9b:
         3b:98:3e:72:79:d8:6a:3d:28:32:1f:3a:14:9d:9e:d3:90:90:
         40:3b:c0:af:66:5c:b4:3d:ee:05:09:fc:7e:1e:fe:29:c3:7e:
         9c:1e:a4:9a:4b:2c:70:74:4d:7b:07:7e:f7:33:69:ae:66:3b:
         a9:11:cf:df:0c:d9:0e:e4:7c:06:7e:65:88:af:31:34:8e:ff:
         38:af:c3:2e:ca:20:30:20:49:2c:20:8f:c7:b8:76:29:fc:9f:
         6d:7e:28:30:e1:07:3b:d9:27:0c:22:8a:c2:7b:ad:e2:67:f0:
         cc:a6:da:91:8d:09:ed:a5:d6:dd:e3:d0:5b:37:18:e1:aa:9b:
         44:9f:88:b1
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEofkCVeUJBuwCr1v4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
Y2Y2OTM4Y2EtOWQ3Ny00OTFhLWJkZWYtNWE0MDhkYzQyNDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HxVIa9MHvlnbIO4V4pqbEvyUT2WhwYz8gns
I/foO9zFqCc5OrjY9/pf6W0KapaZ1sGPPzlT76TayAKg82IDJBSw6ZLF9VOWyL4+
8hUoN4OJhJ+Gu13YoR/DZd/iYEu22EWjjupROyC+iuOyWzu76ITdWG9HzWXrni2p
egQWwkvHwhZBF4yF1jmBTJLar46XKNLhsi5smCQEDO8LQArYURQrB2e3zkA3CM4V
ERHQg26I8NEwOCCJ6SGCMIkLJd2RedD+c3yG/w8B0IqwUvtn3qZjasdRgKuHCz/b
xUeFaxqO0zEMvY5wtLasnFBISekF000VIeiFQmub6PsrTum1HQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFGHp9JJrQ5r0M/rlMj/Wh3brTjkNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZjE3OTJjYzAtZDE1Mi0z
MDk2LTk3YzItMGE2N2QxZGI0MDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQBZSAwQA
QBZqAwQAz9JEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAAIWrguPLeO8ZWZT2Pe4vBLayzB1sibuQJ+8t+T7
uLL96Ap3joqAQ0ZVwkylc4bGRmkHxKN+p/IvXx2GUd2EI+xYR1IV1XZm40IGDI2E
tpZlU62IipGCa0tn3oLNT09ZB6g5zFkD8Tfoqhw4uqWUUqPsMfWhVxZ/cvMfE9VA
mzuYPnJ52Go9KDIfOhSdntOQkEA7wK9mXLQ97gUJ/H4e/inDfpwepJpLLHB0TXsH
fvczaa5mO6kRz98M2Q7kfAZ+ZYivMTSO/zivwy7KIDAgSSwgj8e4din8n21+KDDh
BzvZJwwiisJ7reJn8Mym2pGNCe2l1t3j0Fs3GOGqm0SfiLE=
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:59:23 2025 by rpki-client