Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8f8b343e-0750-3368-bcbb-039169786d12.roa
File:                     8f8b343e-0750-3368-bcbb-039169786d12.roa (raw, json)
Hash identifier:          QA4FVhIlXIpZQ74f9o4tiz6If/A0VmPXC41giY4UDjw=
Subject key identifier:   F2:48:1D:02:B7:4F:C1:7F:99:7C:4A:79:86:4A:B9:73:18:47:ED:F2
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285849DF5A64799B35B5D87BE75FC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8f8b343e-0750-3368-bcbb-039169786d12.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     16509
IP address blocks:        68.64.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:64:79:9b:35:b5:d8:7b:e7:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=deaafadf-efea-4534-8421-68af498a706a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:84:ee:d8:4a:f7:6e:23:7e:2b:58:0a:63:
                    88:bc:89:f4:a9:f4:78:a8:dd:9c:91:4e:f8:fa:1a:
                    63:14:e4:eb:54:e2:e2:3f:1f:08:b2:8d:78:36:9a:
                    5b:3e:79:77:24:d0:ed:16:bf:ff:0c:e4:c1:5c:35:
                    66:50:c3:6e:12:21:c0:85:20:10:2f:b9:66:6a:a5:
                    66:1b:71:ff:07:19:2b:a0:38:09:6b:03:82:b7:09:
                    bf:df:6c:97:08:ff:86:bd:86:84:bb:4a:9d:50:8a:
                    5a:43:57:3e:fb:d8:97:76:55:41:8c:8b:47:0e:50:
                    28:4c:2c:b3:f7:81:90:55:aa:a7:05:aa:0f:76:f1:
                    f3:6e:f2:1f:c4:52:09:cd:f8:f4:1f:98:49:ac:bc:
                    45:63:b8:3b:d8:b9:76:22:38:58:74:f0:27:f4:25:
                    06:06:2e:cb:11:0a:b8:4d:b7:93:45:f3:3c:11:5e:
                    e7:3f:49:a3:d6:25:c9:34:08:89:9f:3d:76:78:38:
                    2e:df:3b:39:1e:a6:33:55:c5:12:77:8e:c9:6a:30:
                    88:95:d3:c1:8d:6f:dd:ed:32:11:de:35:31:15:c7:
                    f9:37:fc:fe:a7:1c:9f:48:71:44:11:2f:b2:0b:4b:
                    6b:08:76:7c:9e:f3:3d:46:bb:76:88:48:72:e4:e6:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:48:1D:02:B7:4F:C1:7F:99:7C:4A:79:86:4A:B9:73:18:47:ED:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8f8b343e-0750-3368-bcbb-039169786d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:5e:90:76:17:4d:72:d4:8d:39:3e:3a:9d:dc:75:50:a4:
         71:9e:55:92:34:e2:72:15:b7:cd:63:1a:84:0b:d0:54:ce:4f:
         7e:e6:d2:45:fc:db:ef:62:bc:39:86:8e:ea:7a:90:ad:43:ba:
         1a:fe:c2:87:a5:d6:b1:c3:7c:df:c1:c0:c8:9b:1d:d8:e5:11:
         ba:64:a3:41:39:31:53:1e:ff:93:2e:bd:34:aa:df:c8:5a:5c:
         b0:e3:36:50:d6:84:c9:89:dc:63:c8:29:99:6f:68:f4:f0:29:
         7f:3a:74:a5:41:56:c3:ba:7a:5b:c4:f1:73:7d:47:77:d8:16:
         4d:2f:7b:2a:ad:0d:b8:e0:a2:ba:68:5b:f7:0b:a7:7f:e9:33:
         a6:96:2a:52:cf:9b:05:8a:7a:c4:19:e9:4c:6b:a8:ae:8f:64:
         95:24:68:37:70:cf:13:79:34:b5:6c:29:d0:c2:eb:68:1d:90:
         03:36:50:61:24:79:27:08:c7:ed:58:40:6c:c6:d8:36:b1:dd:
         9f:9f:f7:e9:80:ea:e3:1c:d6:9e:6d:b3:b8:e1:ba:c1:77:e1:
         6d:8d:4a:a9:5d:1f:a6:18:ab:ff:ca:28:e8:97:1c:13:41:88:
         d3:a7:ac:00:fc:41:e9:8e:dc:92:be:7b:9a:e7:61:89:c0:31:
         f8:42:1c:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWmR5mzW12HvnX8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk
ZGVhYWZhZGYtZWZlYS00NTM0LTg0MjEtNjhhZjQ5OGE3MDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IWE7thK924jfitYCmOIvIn0qfR4qN2ckU74
+hpjFOTrVOLiPx8Iso14NppbPnl3JNDtFr//DOTBXDVmUMNuEiHAhSAQL7lmaqVm
G3H/BxkroDgJawOCtwm/32yXCP+GvYaEu0qdUIpaQ1c++9iXdlVBjItHDlAoTCyz
94GQVaqnBaoPdvHzbvIfxFIJzfj0H5hJrLxFY7g72Ll2IjhYdPAn9CUGBi7LEQq4
TbeTRfM8EV7nP0mj1iXJNAiJnz12eDgu3zs5HqYzVcUSd47JajCIldPBjW/d7TIR
3jUxFcf5N/z+pxyfSHFEES+yC0trCHZ8nvM9Rrt2iEhy5OaKCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJIHQK3T8F/mXxKeYZKuXMYR+3yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOGY4YjM0M2UtMDc1MC0z
MzY4LWJjYmItMDM5MTY5Nzg2ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPoXpB2F01y1I05Pjqd3HVQpHGeVZI04nIVt81jGoQL0FTOT37m0kX8
2+9ivDmGjup6kK1Duhr+woel1rHDfN/BwMibHdjlEbpko0E5MVMe/5MuvTSq38ha
XLDjNlDWhMmJ3GPIKZlvaPTwKX86dKVBVsO6elvE8XN9R3fYFk0veyqtDbjgorpo
W/cLp3/pM6aWKlLPmwWKesQZ6UxrqK6PZJUkaDdwzxN5NLVsKdDC62gdkAM2UGEk
eScIx+1YQGzG2Dax3Z+f9+mA6uMc1p5ts7jhusF34W2NSqldH6YYq//KKOiXHBNB
iNOnrAD8QemO3JK+e5rnYYnAMfhCHAQ=
-----END CERTIFICATE-----
Generated at Sat Jun 14 07:02:30 2025 by rpki-client