Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/58699a44-f83e-33df-b9a1-12d6e0438c99.roa
File:                     58699a44-f83e-33df-b9a1-12d6e0438c99.roa (raw, json)
Hash identifier:          jPGYvwB0O3Xgg0Wezf6jLvrqwuKu6qbftrdO0KU4tMY=
Subject key identifier:   6A:6B:50:C7:1C:43:2D:A8:7A:C3:6C:BE:13:49:D7:43:24:7F:EF:A7
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584A8B0B50B40A24E4DE514B4E80
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/58699a44-f83e-33df-b9a1-12d6e0438c99.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     398940
IP address blocks:        69.85.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:50:b4:0a:24:e4:de:51:4b:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=4fc31314-fc7b-4f64-b653-11d102ca0fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:d3:c9:d1:ca:1a:21:0a:21:c0:ca:69:4d:
                    aa:ef:ad:9b:d2:de:83:62:80:08:ff:59:58:47:c3:
                    cb:38:ab:82:29:5b:ca:81:e3:0d:68:6d:a5:1a:01:
                    87:4b:79:89:65:1a:3c:b5:9c:5e:d9:70:77:40:e7:
                    10:cf:0d:7c:69:73:78:3e:3a:52:28:c4:82:f4:24:
                    b4:98:67:61:07:e2:1e:e4:e0:cd:d9:b7:cb:11:95:
                    dc:ad:48:72:27:4b:8d:fb:df:c5:42:d7:fd:dc:ab:
                    6a:ec:fd:a2:9c:52:bd:11:6b:b0:94:ad:db:e5:c0:
                    e7:0f:d9:ff:7a:13:b6:d9:6c:97:20:8e:7d:6d:45:
                    23:08:f0:11:50:3a:55:5b:1e:fb:4c:34:9c:de:96:
                    84:7e:c8:42:04:47:db:71:45:e6:83:eb:3a:fc:43:
                    f7:fd:47:44:4e:87:bb:6e:91:31:80:81:22:2d:07:
                    7b:c0:f5:00:f1:60:41:5e:52:29:6c:e0:ee:ff:cb:
                    be:a1:26:2a:a0:10:3e:dc:ad:03:c3:e1:7f:2d:ce:
                    47:17:a4:a4:ee:1a:da:77:02:45:09:0f:79:d9:62:
                    86:83:a4:20:4c:17:c1:73:c9:7e:23:c2:ab:58:7f:
                    4c:ab:af:f9:6a:99:dd:37:a0:2f:9a:ba:a8:ba:20:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6B:50:C7:1C:43:2D:A8:7A:C3:6C:BE:13:49:D7:43:24:7F:EF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/58699a44-f83e-33df-b9a1-12d6e0438c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.85.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:d8:d1:e0:7c:59:47:eb:95:ec:13:25:f4:6b:43:c7:1c:f7:
         ce:40:b3:16:b2:18:82:a6:61:6b:a8:69:a5:58:46:aa:75:f1:
         36:e5:a3:99:48:8b:ce:ab:b0:14:db:c4:98:60:9a:cf:23:bf:
         1c:06:68:80:4c:05:5b:fc:89:48:ec:60:ee:1b:14:66:24:90:
         45:46:5e:ea:a7:45:31:1e:6d:ac:b2:c3:3d:25:cf:a0:cf:a3:
         2b:c4:da:00:62:a9:ce:e4:a5:08:b7:b9:57:1c:01:6c:9d:15:
         d5:5a:1a:89:e7:cf:ea:e3:3f:6c:51:18:57:d6:1c:4c:77:11:
         9d:77:d3:2c:9a:a7:57:1c:47:43:21:64:29:12:bd:72:51:ae:
         0c:70:54:51:92:e7:3c:05:ae:2c:b0:3d:bb:cd:d6:42:d7:1e:
         c3:15:f7:8f:e9:00:d2:3b:58:37:5e:a6:43:0d:07:a5:d3:c0:
         18:86:68:5f:a8:c3:f3:bf:6e:0f:fd:80:75:a0:3a:5d:8d:7d:
         a5:ac:94:13:01:b1:05:c4:e2:c6:14:05:fa:c9:fd:ac:50:e0:
         be:14:d6:e3:f6:7d:db:1d:7f:b5:f2:f3:40:e2:94:0f:b7:4d:
         bb:ff:28:f2:82:06:df:5e:90:f0:57:e0:b8:45:1b:86:ba:f9:
         03:01:3b:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1C0CiTk3lFLToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm
MzQyMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk
NGZjMzEzMTQtZmM3Yi00ZjY0LWI2NTMtMTFkMTAyY2EwZmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS/TydHKGiEKIcDKaU2q762b0t6DYoAI/1lY
R8PLOKuCKVvKgeMNaG2lGgGHS3mJZRo8tZxe2XB3QOcQzw18aXN4PjpSKMSC9CS0
mGdhB+Ie5ODN2bfLEZXcrUhyJ0uN+9/FQtf93Ktq7P2inFK9EWuwlK3b5cDnD9n/
ehO22WyXII59bUUjCPARUDpVWx77TDSc3paEfshCBEfbcUXmg+s6/EP3/UdEToe7
bpExgIEiLQd7wPUA8WBBXlIpbODu/8u+oSYqoBA+3K0Dw+F/Lc5HF6Sk7hradwJF
CQ952WKGg6QgTBfBc8l+I8KrWH9Mq6/5apndN6AvmrqouiAChQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGprUMccQy2oesNsvhNJ10Mkf++nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0
MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvNTg2OTlhNDQtZjgzZS0z
M2RmLWI5YTEtMTJkNmUwNDM4Yzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi
MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy
ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz
YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARVXZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKrY0eB8WUfrlewTJfRrQ8cc985AsxayGIKmYWuoaaVYRqp18Tblo5lI
i86rsBTbxJhgms8jvxwGaIBMBVv8iUjsYO4bFGYkkEVGXuqnRTEebayywz0lz6DP
oyvE2gBiqc7kpQi3uVccAWydFdVaGonnz+rjP2xRGFfWHEx3EZ130yyap1ccR0Mh
ZCkSvXJRrgxwVFGS5zwFriywPbvN1kLXHsMV94/pANI7WDdepkMNB6XTwBiGaF+o
w/O/bg/9gHWgOl2NfaWslBMBsQXE4sYUBfrJ/axQ4L4U1uP2fdsdf7Xy80DilA+3
Tbv/KPKCBt9ekPBX4LhFG4a6+QMBOzc=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:27:53 2025 by rpki-client