Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa
File:                     d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa (raw, json)
Hash identifier:          ZTG2Nn+Qa+EiKErm/pjvSEN2lgU4mRuNAW8nhMd61WY=
Subject key identifier:   DC:BD:5B:24:3F:43:72:B9:B5:B0:D7:2E:71:4E:C1:32:E3:71:8D:CE
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584AC5AB860C9B0D58CEA1B5D540
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     27471
IP address blocks:        148.64.24.0/24 maxlen: 24
                          148.64.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:86:0c:9b:0d:58:ce:a1:b5:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=023f039b-e1eb-4e46-b9fd-5dd23f20c652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:4d:93:1f:f7:c8:dd:3a:c8:6d:d0:46:26:
                    45:8d:29:55:c9:cc:75:a0:b9:59:fa:ab:ec:89:14:
                    3d:57:c6:cf:50:81:ae:27:80:bd:60:90:53:0c:12:
                    56:96:29:1e:d3:50:27:63:e3:be:a4:30:d3:5b:3f:
                    39:1e:54:a6:13:6c:5d:bd:d5:b8:d2:48:21:75:70:
                    3d:99:50:4f:b8:e0:5a:8d:8b:b7:39:8d:17:54:01:
                    13:a5:a8:35:a5:10:ad:74:56:8f:21:f3:d7:96:16:
                    c1:b2:b0:38:b2:b3:86:ab:99:62:94:84:f0:f2:f9:
                    2c:6e:3f:b3:d9:2e:61:82:2c:85:de:dd:f6:12:3a:
                    49:05:b5:02:9b:70:bd:02:f4:b8:35:08:1e:92:24:
                    9c:af:98:25:2e:17:8d:e0:0a:59:cd:52:cb:72:3f:
                    62:d8:2c:ca:64:d7:33:89:44:af:d4:ec:51:3b:b1:
                    84:88:db:81:c1:46:af:1f:b3:a1:c9:96:34:73:ee:
                    f9:d5:15:19:72:a5:77:b6:2a:5a:a0:ed:2f:2a:4f:
                    be:2d:7f:84:e0:e2:b4:c3:6a:0d:78:d1:8e:d1:c7:
                    00:8a:8d:07:9b:54:63:d1:8b:e9:89:c6:63:5d:68:
                    f6:f4:b2:5d:1c:c8:41:b0:cf:9a:88:59:d3:05:c0:
                    d9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BD:5B:24:3F:43:72:B9:B5:B0:D7:2E:71:4E:C1:32:E3:71:8D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/d06bb805-d96a-3412-bcf9-7f09d8d1d58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.64.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:f7:77:c2:04:fc:3b:6e:28:fb:29:7f:2d:47:1a:a4:6a:
         f4:bc:37:f9:9c:e4:93:85:76:e0:58:62:00:e7:12:6d:ea:dd:
         4f:34:fd:46:56:33:c7:ce:60:78:9d:d6:b7:cf:3f:9f:e6:db:
         f2:00:46:b3:2c:99:29:9e:9d:4e:d3:54:67:4b:6c:d1:b9:a5:
         72:9c:dd:c6:91:4c:b6:18:27:95:58:ab:bd:e8:86:cf:09:60:
         a6:6f:dd:a0:ae:f9:68:26:ee:fa:66:41:85:03:27:38:f5:7b:
         11:e3:6b:e8:e2:d1:6d:f0:e3:82:39:88:eb:e7:f6:80:ed:28:
         ab:10:f3:14:73:1d:21:fe:3d:3d:ab:fc:b8:f7:30:ee:45:51:
         a7:19:66:34:a6:c1:00:22:ea:97:26:3a:1b:bd:28:c3:c2:d6:
         6d:d3:f6:8d:2f:1e:70:80:a0:24:34:ba:ce:68:62:81:e9:68:
         ed:7b:f2:e4:1d:27:42:57:8e:86:db:dc:f4:0c:2a:7e:7b:f6:
         78:78:d0:e4:44:b2:3e:14:30:e8:ee:5a:b3:7c:d7:a3:0b:1f:
         92:60:bf:92:12:dd:55:5d:bb:6b:fc:70:8b:b2:6d:fd:ef:95:
         5d:6f:8c:3c:ee:00:9c:a3:ab:ae:eb:03:3f:8c:49:22:21:40:
         ca:c7:5c:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4YMmw1YzqG11UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
MDIzZjAzOWItZTFlYi00ZTQ2LWI5ZmQtNWRkMjNmMjBjNjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS5Nkx/3yN06yG3QRiZFjSlVycx1oLlZ+qvs
iRQ9V8bPUIGuJ4C9YJBTDBJWlike01AnY+O+pDDTWz85HlSmE2xdvdW40kghdXA9
mVBPuOBajYu3OY0XVAETpag1pRCtdFaPIfPXlhbBsrA4srOGq5lilITw8vksbj+z
2S5hgiyF3t32EjpJBbUCm3C9AvS4NQgekiScr5glLheN4ApZzVLLcj9i2CzKZNcz
iUSv1OxRO7GEiNuBwUavH7OhyZY0c+751RUZcqV3tipaoO0vKk++LX+E4OK0w2oN
eNGO0ccAio0Hm1Rj0YvpicZjXWj29LJdHMhBsM+aiFnTBcDZfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNy9WyQ/Q3K5tbDXLnFOwTLjcY3OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvZDA2YmI4MDUtZDk2YS0z
NDEyLWJjZjktN2YwOWQ4ZDFkNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlEAYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMO93fCBPw7bij7KX8tRxqkavS8N/mc5JOFduBYYgDnEm3q3U80/UZW
M8fOYHid1rfPP5/m2/IARrMsmSmenU7TVGdLbNG5pXKc3caRTLYYJ5VYq73ohs8J
YKZv3aCu+Wgm7vpmQYUDJzj1exHja+ji0W3w44I5iOvn9oDtKKsQ8xRzHSH+PT2r
/Lj3MO5FUacZZjSmwQAi6pcmOhu9KMPC1m3T9o0vHnCAoCQ0us5oYoHpaO178uQd
J0JXjobb3PQMKn579nh40OREsj4UMOjuWrN816MLH5Jgv5IS3VVdu2v8cIuybf3v
lV1vjDzuAJyjq67rAz+MSSIhQMrHXFk=
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:03:05 2025 by rpki-client