Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3d3b4fbb-82d5-364a-bcc3-cb3da8b1df58.roa
File:                     3d3b4fbb-82d5-364a-bcc3-cb3da8b1df58.roa (raw, json)
Hash identifier:          bFf0C/cYLROzri9Cy6hS/UAjIWFeemIu7NMeRVdbn7A=
Subject key identifier:   51:BF:B4:8F:F8:0D:26:CC:02:9E:03:6D:7E:38:9A:53:9B:31:56:8D
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584A90A0B4A99876596D1E7DE680
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3d3b4fbb-82d5-364a-bcc3-cb3da8b1df58.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     31898
IP address blocks:        67.217.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b4:a9:98:76:59:6d:1e:7d:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=e8e20c53-9ae2-4d2f-9aa5-5f0e147969d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:77:4c:d2:de:f9:75:99:95:2a:fa:36:bd:
                    1e:de:b0:d8:4d:51:3d:67:f7:cf:ae:88:54:91:fa:
                    27:41:2d:85:d2:09:73:1c:7f:5b:e8:88:81:21:bb:
                    1c:52:7f:d5:fc:d0:75:47:7c:bb:7f:77:b1:ca:42:
                    56:70:0d:4f:a6:9b:b7:75:f4:8d:6e:9d:b9:5c:d8:
                    22:53:98:6c:59:6a:32:f9:85:de:f0:06:9d:1b:c1:
                    5c:0e:95:5e:29:9f:cc:f6:bc:5b:89:61:e5:47:5a:
                    ba:5e:b3:5e:35:4b:63:d4:2a:bd:90:5f:5d:8c:ee:
                    ba:cb:e9:84:bc:95:1f:37:39:02:33:e6:4b:f4:6c:
                    41:4c:85:6e:8a:ce:17:1d:c8:33:5d:76:81:1c:5d:
                    f6:40:11:e0:1c:48:22:7c:85:59:c4:3b:b8:a4:9e:
                    89:da:df:40:08:b1:a2:7f:a5:98:be:19:c2:43:ab:
                    4d:a2:56:4a:ca:3f:cd:a6:4a:e1:9d:03:c6:1a:35:
                    e5:cf:99:0b:9e:0d:8a:6e:86:00:79:ef:c1:4e:ec:
                    de:6f:13:2d:35:32:28:42:70:0c:6e:70:75:2a:f1:
                    d3:93:b2:0d:bb:0f:b5:b2:d6:00:2f:e0:30:97:97:
                    a1:8e:7b:ae:41:aa:da:9c:e0:75:53:8d:b0:79:77:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BF:B4:8F:F8:0D:26:CC:02:9E:03:6D:7E:38:9A:53:9B:31:56:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3d3b4fbb-82d5-364a-bcc3-cb3da8b1df58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:36:47:c1:5c:a7:ed:01:8d:b1:f1:dc:2e:20:71:fa:f3:cb:
         d8:c7:cb:5c:b4:b7:d1:d9:34:42:a6:d2:0c:35:ec:e9:96:d4:
         6f:8e:20:3f:6a:c5:8e:f4:7d:67:7b:be:2f:08:cc:38:26:ea:
         b2:71:f0:af:27:54:bc:5e:6b:5c:8d:e2:3f:57:4d:0c:79:f4:
         15:29:fa:b0:0b:6a:5a:0e:0e:5d:e6:f6:15:6b:86:84:d3:fb:
         06:46:69:8a:57:7f:89:da:8d:12:40:95:6f:c9:8a:c7:4d:6e:
         62:5e:7e:b8:16:1e:c7:b8:e9:34:67:5f:1e:82:50:59:83:b6:
         b0:f2:bc:a5:dc:1c:e9:51:07:fb:6f:57:da:ca:eb:7e:9c:b4:
         82:8c:c1:d2:ab:68:1d:e1:57:f8:2b:88:f5:b0:0f:ce:d5:0f:
         9b:2b:2f:12:54:fd:9c:fd:70:cf:7a:39:c3:b4:14:ba:34:82:
         d5:ac:10:27:55:69:2c:29:9b:a1:3a:cb:bf:b6:11:a3:f1:90:
         2f:41:dc:38:dd:6e:da:55:42:39:38:46:e4:6b:6e:1b:98:2f:
         a3:75:ba:87:b3:c6:2d:eb:5f:e6:25:e2:4a:d1:fb:15:a3:59:
         89:28:86:3b:a5:f0:7e:37:22:a9:b6:09:12:4a:0b:25:74:c9:
         75:7e:93:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLSpmHZZbR595oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
ZThlMjBjNTMtOWFlMi00ZDJmLTlhYTUtNWYwZTE0Nzk2OWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub93TNLe+XWZlSr6Nr0e3rDYTVE9Z/fProhU
kfonQS2F0glzHH9b6IiBIbscUn/V/NB1R3y7f3exykJWcA1Pppu3dfSNbp25XNgi
U5hsWWoy+YXe8AadG8FcDpVeKZ/M9rxbiWHlR1q6XrNeNUtj1Cq9kF9djO66y+mE
vJUfNzkCM+ZL9GxBTIVuis4XHcgzXXaBHF32QBHgHEgifIVZxDu4pJ6J2t9ACLGi
f6WYvhnCQ6tNolZKyj/NpkrhnQPGGjXlz5kLng2KboYAee/BTuzebxMtNTIoQnAM
bnB1KvHTk7INuw+1stYAL+Awl5ehjnuuQaranOB1U42weXcXqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFG/tI/4DSbMAp4DbX44mlObMVaNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvM2QzYjRmYmItODJkNS0z
NjRhLWJjYzMtY2IzZGE4YjFkZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI02R8Fcp+0BjbHx3C4gcfrzy9jHy1y0t9HZNEKm0gw17OmW1G+OID9q
xY70fWd7vi8IzDgm6rJx8K8nVLxea1yN4j9XTQx59BUp+rALaloODl3m9hVrhoTT
+wZGaYpXf4najRJAlW/JisdNbmJefrgWHse46TRnXx6CUFmDtrDyvKXcHOlRB/tv
V9rK636ctIKMwdKraB3hV/griPWwD87VD5srLxJU/Zz9cM96OcO0FLo0gtWsECdV
aSwpm6E6y7+2EaPxkC9B3DjdbtpVQjk4RuRrbhuYL6N1uoezxi3rX+Yl4krR+xWj
WYkohjul8H43Iqm2CRJKCyV0yXV+k3w=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:33 2025 by rpki-client