Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/9ff58937-8920-3750-8282-e2d8d83e6c23.roa
File:                     9ff58937-8920-3750-8282-e2d8d83e6c23.roa (raw, json)
Hash identifier:          TyoOY6xZPOFt6dUAH/cgROt/YruQPqSgO8zYLBhnGcI=
Subject key identifier:   3E:CC:F0:AC:DD:E7:25:AA:7C:BE:8A:4B:DF:1F:43:2C:4B:1A:AB:28
Certificate issuer:       /CN=84052649-3401-4ba6-ad82-6f310741b104
Certificate serial:       010D0C9F4328584A936B5AABE00BB6772AF73200
Authority key identifier: C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/9ff58937-8920-3750-8282-e2d8d83e6c23.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     396004
IP address blocks:        69.195.151.0/24 maxlen: 24
                          69.195.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5a:ab:e0:0b:b6:77:2a:f7:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84052649-3401-4ba6-ad82-6f310741b104
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=bdfa971b-7733-4e03-a7bd-abb192b3fb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:3a:e3:e6:bb:1c:62:74:5b:83:22:2c:1a:
                    0f:64:33:1b:0e:87:e7:db:db:ae:10:9a:02:be:a5:
                    2c:25:aa:82:16:52:5e:7f:a7:d0:fa:85:d6:35:4c:
                    46:37:54:1c:98:19:5b:12:7b:7a:a4:e8:52:8b:dc:
                    3a:ba:2d:89:21:62:08:96:34:95:05:68:21:77:d9:
                    86:1b:9a:b9:a2:be:88:31:ce:d3:ca:d5:9f:c5:be:
                    a5:48:40:fc:0d:44:ec:0f:80:99:f9:cb:5e:1a:79:
                    60:81:7f:a0:5c:d9:4a:52:0b:db:a0:a3:4c:2e:f2:
                    5e:9e:7b:7d:82:e5:31:8a:88:61:a5:d0:12:99:81:
                    7a:5a:d8:4f:de:e7:57:58:27:e8:e5:5e:ad:e7:f7:
                    78:33:86:2f:96:53:a6:80:8b:dc:ce:06:cb:52:ba:
                    06:d6:ef:0c:a0:00:d3:a5:7a:63:3a:e3:89:28:5d:
                    a5:4d:7d:6d:f5:0a:f0:0d:c1:aa:2a:1d:cd:4a:d3:
                    a3:ce:b2:1f:ae:1e:f5:13:68:e6:f6:26:ec:73:b7:
                    72:85:25:49:28:0f:e6:31:5a:42:70:a7:f1:e2:27:
                    13:ba:f6:f0:cb:cd:25:6f:9c:b7:70:ad:62:5d:5e:
                    73:88:9a:a7:02:b1:0e:82:20:26:48:98:36:27:71:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CC:F0:AC:DD:E7:25:AA:7C:BE:8A:4B:DF:1F:43:2C:4B:1A:AB:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/9ff58937-8920-3750-8282-e2d8d83e6c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl

            X509v3 Authority Key Identifier:
                keyid:C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.195.151.0/24
                  69.195.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:1d:b6:fd:ba:11:2a:75:48:23:de:29:bf:c7:f1:8e:d7:c7:
         c6:57:ab:0d:5a:02:1b:61:d5:75:7c:13:6b:0c:59:e6:6d:96:
         39:4c:65:d0:79:18:cc:47:df:fb:61:2b:d4:ad:bd:9f:dd:e4:
         f3:23:7d:c3:59:f8:47:c9:87:76:f2:87:28:09:c1:0c:36:e5:
         9a:ad:9b:2e:11:80:0d:52:b1:70:e0:e8:5b:e5:76:e4:c8:f6:
         62:94:b9:dc:d9:d5:a2:02:e9:36:dc:23:53:a1:19:70:ee:c3:
         2b:a7:c0:72:0d:af:6e:ce:dc:2a:08:0f:4b:12:0e:35:22:ff:
         74:97:21:34:4b:07:93:c1:ae:28:cb:aa:f4:df:73:dd:13:c5:
         0f:04:0e:d4:a7:ed:c3:47:3d:b7:dd:48:5e:3a:70:f7:f1:0d:
         3a:3f:82:0c:03:ba:d7:66:4a:ab:3e:f3:f1:b6:c0:ba:31:b3:
         de:4f:45:cf:1b:5f:dc:ec:aa:07:af:e0:7f:5b:b0:e7:85:e0:
         db:58:9c:06:f1:f4:23:b1:74:37:ab:2f:40:9d:a0:52:10:f2:
         d6:fa:73:33:4d:5d:53:ed:a1:35:a6:4d:5d:68:46:c5:5d:18:
         43:aa:b4:77:4a:e9:fd:7a:51:db:b4:e6:69:80:95:8a:b0:6b:
         b1:e8:04:f3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqTa1qr4Au2dyr3MgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQwNTI2NDktMzQwMS00YmE2LWFkODItNmYzMTA3NDFi
MTA0MB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk
YmRmYTk3MWItNzczMy00ZTAzLWE3YmQtYWJiMTkyYjNmYjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNo64+a7HGJ0W4MiLBoPZDMbDofn29uuEJoC
vqUsJaqCFlJef6fQ+oXWNUxGN1QcmBlbEnt6pOhSi9w6ui2JIWIIljSVBWghd9mG
G5q5or6IMc7TytWfxb6lSED8DUTsD4CZ+cteGnlggX+gXNlKUgvboKNMLvJennt9
guUxiohhpdASmYF6WthP3udXWCfo5V6t5/d4M4YvllOmgIvczgbLUroG1u8MoADT
pXpjOuOJKF2lTX1t9QrwDcGqKh3NStOjzrIfrh71E2jm9ibsc7dyhSVJKA/mMVpC
cKfx4icTuvbwy80lb5y3cK1iXV5ziJqnArEOgiAmSJg2J3E9NwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFD7M8Kzd5yWqfL6KS98fQyxLGqsoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1
MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMxMDc0MWIxMDQvOWZmNTg5MzctODkyMC0z
NzUwLTgyODItZTJkOGQ4M2U2YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODQwNTI2NDktMzQwMS00YmE2LWFk
ODItNmYzMTA3NDFiMTA0Lzg0MDUyNjQ5LTM0MDEtNGJhNi1hZDgyLTZmMzEwNzQx
YjEwNC5jcmwwHwYDVR0jBBgwFoAUxX6Uv/iI2K38KlbO/GLK91AHs6owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84NDA1MjY0OS0zNDAxLTRiYTYtYWQ4Mi02ZjMx
MDc0MWIxMDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQARcOXAwQA
RcOaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAcdtv26ESp1SCPeKb/H8Y7Xx8ZXqw1aAhth1XV8E2sMWeZt
ljlMZdB5GMxH3/thK9StvZ/d5PMjfcNZ+EfJh3byhygJwQw25Zqtmy4RgA1SsXDg
6FvlduTI9mKUudzZ1aIC6TbcI1OhGXDuwyunwHINr27O3CoID0sSDjUi/3SXITRL
B5PBrijLqvTfc90TxQ8EDtSn7cNHPbfdSF46cPfxDTo/ggwDutdmSqs+8/G2wLox
s95PRc8bX9zsqgev4H9bsOeF4NtYnAbx9COxdDerL0CdoFIQ8tb6czNNXVPtoTWm
TV1oRsVdGEOqtHdK6f16Udu05mmAlYqwa7HoBPM=
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:54 2025 by rpki-client