Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/d8719633-0456-3997-9b11-67dcf502954b.roa
File:                     d8719633-0456-3997-9b11-67dcf502954b.roa (raw, json)
Hash identifier:          dOaSGlVkJo92r37M2L71af8PLmZijx/oLaQW1Pku66g=
Subject key identifier:   00:03:88:FA:3B:83:E1:88:96:FC:92:BD:94:A5:62:6A:2D:64:90:51
Certificate issuer:       /CN=677759b4-a247-47ea-badb-bb809bc80a31
Certificate serial:       010D0C9F4328584AB3861FFC827D555F690B87E0
Authority key identifier: 49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/d8719633-0456-3997-9b11-67dcf502954b.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     14955
IP address blocks:        64.68.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:1f:fc:82:7d:55:5f:69:0b:87:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677759b4-a247-47ea-badb-bb809bc80a31
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=e74bf756-8e17-4f46-9edc-7c6a57ac0b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:bf:91:93:61:e0:c5:65:39:55:cd:29:7a:
                    52:01:74:a1:49:46:02:6b:03:a7:58:6e:22:13:55:
                    00:16:b0:44:c7:59:be:25:bb:31:78:4f:fc:b5:14:
                    cf:51:8f:20:73:61:be:0e:83:06:5d:ca:5c:4f:6c:
                    cf:c8:e6:a1:c3:6e:51:79:3f:ea:fd:57:52:c7:de:
                    25:e7:b4:77:32:00:4c:c7:5d:bd:4f:8e:38:2f:75:
                    2e:6a:c6:97:9b:c9:36:e3:cb:45:13:43:26:13:ad:
                    e8:57:c1:2f:ff:91:d0:2d:a5:71:62:87:3c:c8:64:
                    f9:f4:7b:81:60:8b:14:3d:47:a7:dc:a0:c9:23:7f:
                    94:2a:87:bf:f5:4b:14:75:4e:f6:72:ec:af:21:e5:
                    2d:26:10:8f:d5:29:02:88:93:bf:26:97:57:fe:e1:
                    cb:05:c2:46:87:70:c6:e1:91:81:7d:f8:a1:cb:f2:
                    92:52:7f:51:d0:16:c2:aa:78:92:cc:01:cd:6d:d3:
                    d6:2d:7d:37:1f:25:a5:52:3b:10:4d:20:56:d7:71:
                    86:41:cf:5a:96:d7:63:bc:4b:d2:fa:af:3b:ed:fe:
                    38:43:b8:99:ba:da:1d:ce:fd:dc:8e:77:f6:71:80:
                    4e:ce:f2:12:11:e2:0e:e1:cf:99:46:c9:87:a9:53:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:03:88:FA:3B:83:E1:88:96:FC:92:BD:94:A5:62:6A:2D:64:90:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/d8719633-0456-3997-9b11-67dcf502954b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31/677759b4-a247-47ea-badb-bb809bc80a31.crl

            X509v3 Authority Key Identifier:
                keyid:49:80:EC:5F:15:BA:62:65:1C:20:86:3E:26:3C:53:9A:71:C9:3A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/677759b4-a247-47ea-badb-bb809bc80a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:13:6e:ad:e1:5c:58:24:ff:e9:fb:06:22:ff:04:22:35:ee:
         35:1a:0a:39:59:3d:20:8e:dc:52:21:0f:48:65:d5:2a:0d:b0:
         ae:ed:a7:d2:5c:98:0c:c7:bd:7b:2a:77:6e:f5:e2:6c:5c:e3:
         94:d2:90:be:58:46:53:b5:e1:fc:ed:bb:c5:c8:16:75:d5:83:
         de:29:ca:24:b7:06:8c:ae:db:43:4f:49:2a:78:0a:a9:17:42:
         fa:dd:e0:65:27:6d:5d:20:85:f0:63:47:98:ed:ad:84:8e:79:
         b6:47:28:f1:e4:51:38:78:22:12:ba:e4:f6:55:1a:23:4e:99:
         b0:80:f1:81:c8:fe:8e:2d:83:0c:39:cf:42:06:e2:df:bf:3b:
         af:97:f2:6d:b1:b3:d8:07:a6:1e:54:54:fb:41:86:56:2d:67:
         15:df:22:0a:a7:15:b0:5f:e3:28:23:be:10:36:41:67:38:69:
         d4:15:9a:33:e8:04:32:92:8a:15:e6:e2:a4:a0:69:6a:36:cf:
         80:dc:30:d9:59:80:41:bb:64:86:04:6c:e3:73:dc:19:53:37:
         c5:2e:13:a1:44:b0:08:6a:30:47:89:ca:e2:17:3b:7f:86:b8:
         fc:28:50:4c:d4:09:8b:ab:e9:76:78:24:8c:a3:99:2e:59:9d:
         55:52:24:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhh/8gn1VX2kLh+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc3NzU5YjQtYTI0Ny00N2VhLWJhZGItYmI4MDliYzgw
YTMxMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZTc0YmY3NTYtOGUxNy00ZjQ2LTllZGMtN2M2YTU3YWMwYjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqW/kZNh4MVlOVXNKXpSAXShSUYCawOnWG4i
E1UAFrBEx1m+JbsxeE/8tRTPUY8gc2G+DoMGXcpcT2zPyOahw25ReT/q/VdSx94l
57R3MgBMx129T444L3UuasaXm8k248tFE0MmE63oV8Ev/5HQLaVxYoc8yGT59HuB
YIsUPUen3KDJI3+UKoe/9UsUdU72cuyvIeUtJhCP1SkCiJO/JpdX/uHLBcJGh3DG
4ZGBffihy/KSUn9R0BbCqniSzAHNbdPWLX03HyWlUjsQTSBW13GGQc9altdjvEvS
+q877f44Q7iZutodzv3cjnf2cYBOzvISEeIO4c+ZRsmHqVOz8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAADiPo7g+GIlvySvZSlYmotZJBRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3
NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgwOWJjODBhMzEvZDg3MTk2MzMtMDQ1Ni0z
OTk3LTliMTEtNjdkY2Y1MDI5NTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjc3NzU5YjQtYTI0Ny00N2VhLWJh
ZGItYmI4MDliYzgwYTMxLzY3Nzc1OWI0LWEyNDctNDdlYS1iYWRiLWJiODA5YmM4
MGEzMS5jcmwwHwYDVR0jBBgwFoAUSYDsXxW6YmUcIIY+JjxTmnHJOiwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82Nzc3NTliNC1hMjQ3LTQ3ZWEtYmFkYi1iYjgw
OWJjODBhMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQESgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAATbq3hXFgk/+n7BiL/BCI17jUaCjlZPSCO3FIhD0hl1SoNsK7tp9Jc
mAzHvXsqd2714mxc45TSkL5YRlO14fztu8XIFnXVg94pyiS3Boyu20NPSSp4CqkX
Qvrd4GUnbV0ghfBjR5jtrYSOebZHKPHkUTh4IhK65PZVGiNOmbCA8YHI/o4tgww5
z0IG4t+/O6+X8m2xs9gHph5UVPtBhlYtZxXfIgqnFbBf4ygjvhA2QWc4adQVmjPo
BDKSihXm4qSgaWo2z4DcMNlZgEG7ZIYEbONz3BlTN8UuE6FEsAhqMEeJyuIXO3+G
uPwoUEzUCYur6XZ4JIyjmS5ZnVVSJG8=
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:20:21 2025 by rpki-client