Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/4a4129fa-4096-36d7-890e-24309443f711.roa
File:                     4a4129fa-4096-36d7-890e-24309443f711.roa (raw, json)
Hash identifier:          1IIrkpPWHjC1wPmiXk+H/yktI6QNby+P0eoWx1ov+n8=
Subject key identifier:   E7:94:FE:D6:D5:88:70:1F:25:1D:4C:86:FD:40:DD:F5:30:B0:9B:FD
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F4328584AB220D6E7F0642980C1BD22C0
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/4a4129fa-4096-36d7-890e-24309443f711.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7794
IP address blocks:        206.131.224.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d6:e7:f0:64:29:80:c1:bd:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=e24f9e52-b3b3-4aad-b9b7-ef9a5f7d0da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:db:60:bf:3f:4e:fb:44:93:8b:f9:41:0a:
                    b5:97:fd:1e:83:82:30:32:0e:25:43:fa:fd:35:f2:
                    0d:8b:26:ad:6f:a0:7a:82:be:f5:02:34:49:c5:5a:
                    10:ac:ce:25:4b:12:a8:1b:66:86:94:6f:82:78:5e:
                    10:87:9f:9a:78:12:c4:bc:00:25:57:2f:ef:7d:88:
                    41:52:9d:ae:c9:a9:9b:a5:00:34:c7:ea:fb:a9:e7:
                    12:32:39:f3:67:17:4d:77:a7:71:18:3e:da:5f:a9:
                    56:77:7a:d1:67:c3:e5:0e:c1:ee:2c:d8:2d:58:f9:
                    a0:61:f9:2c:34:ec:74:55:5c:22:8d:46:91:ec:1b:
                    cc:99:74:9a:a4:6d:2e:44:18:85:25:65:86:a7:24:
                    d0:43:2b:5f:34:e9:2a:7b:4b:b9:2d:01:af:e9:11:
                    b8:38:14:5a:68:43:3b:0b:bf:8f:d7:d8:c0:c6:55:
                    11:df:96:d7:b9:f6:91:a5:d4:fc:1d:9f:ac:27:da:
                    f7:0e:f2:83:cc:8d:76:ba:c2:2d:3e:72:f4:4f:f4:
                    05:4a:97:a8:14:87:3e:d8:26:cd:61:c2:67:ad:7c:
                    ec:06:7e:57:6e:2f:86:37:e4:fa:6d:c1:af:af:8b:
                    c0:4a:8b:91:3a:35:ed:87:70:e9:7e:27:56:6b:d3:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:94:FE:D6:D5:88:70:1F:25:1D:4C:86:FD:40:DD:F5:30:B0:9B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/4a4129fa-4096-36d7-890e-24309443f711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.131.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:0d:10:00:ac:c5:1f:1f:d6:43:80:a8:f9:42:16:50:d8:8f:
         9f:e2:20:25:57:33:cf:da:cd:57:32:e6:3d:ce:42:4b:d7:49:
         65:85:87:46:83:f3:7d:30:6d:3c:30:2f:33:a3:b0:bc:59:d1:
         ea:1a:37:35:16:58:ca:4a:c6:0b:da:b2:43:4a:09:9f:59:f8:
         0e:5d:aa:61:ea:81:66:a1:0e:02:f5:b2:23:2e:46:e3:3d:99:
         02:a2:40:3a:c0:c8:3c:26:19:b7:f3:96:07:2a:8f:93:44:1f:
         c5:56:44:f2:9a:d0:f3:79:71:24:99:e9:ef:7c:ee:b1:f4:8c:
         e6:e4:44:8d:96:5b:d4:1e:a5:9b:23:d4:f8:41:9d:9f:86:02:
         2a:4c:9a:31:ae:98:aa:fa:97:ac:c0:ac:c0:f8:98:f6:28:59:
         89:42:26:37:e5:a7:98:ef:13:ff:53:45:d5:29:fd:87:e9:d0:
         45:6d:c2:42:cb:01:00:10:a1:87:9b:17:f1:58:e9:10:a7:d7:
         16:78:e4:e0:b3:d3:8f:9c:62:16:32:b6:c7:b6:fd:2c:05:84:
         36:9f:b9:d9:f5:46:ab:24:f7:8b:c2:5c:be:fe:4d:19:b5:36:
         74:1d:2e:e9:cb:c0:cc:f3:23:66:c3:b1:60:c8:a3:9f:8a:ae:
         75:cf:cb:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINbn8GQpgMG9IsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTlhZGNiNmQtY2MwNi00ZTJjLWI1ZGYtMjBiZmNkODMx
NzZlMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTI0ZjllNTItYjNiMy00YWFkLWI5YjctZWY5YTVmN2QwZGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnDbYL8/TvtEk4v5QQq1l/0eg4IwMg4lQ/r9
NfINiyatb6B6gr71AjRJxVoQrM4lSxKoG2aGlG+CeF4Qh5+aeBLEvAAlVy/vfYhB
Up2uyambpQA0x+r7qecSMjnzZxdNd6dxGD7aX6lWd3rRZ8PlDsHuLNgtWPmgYfks
NOx0VVwijUaR7BvMmXSapG0uRBiFJWWGpyTQQytfNOkqe0u5LQGv6RG4OBRaaEM7
C7+P19jAxlUR35bXufaRpdT8HZ+sJ9r3DvKDzI12usItPnL0T/QFSpeoFIc+2CbN
YcJnrXzsBn5Xbi+GN+T6bcGvr4vASouROjXth3DpfidWa9PvhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOeU/tbViHAfJR1Mhv1A3fUwsJv9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OWFk
Y2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJmY2Q4MzE3NmUvNGE0MTI5ZmEtNDA5Ni0z
NmQ3LTg5MGUtMjQzMDk0NDNmNzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTlhZGNiNmQtY2MwNi00ZTJjLWI1
ZGYtMjBiZmNkODMxNzZlLzU5YWRjYjZkLWNjMDYtNGUyYy1iNWRmLTIwYmZjZDgz
MTc2ZS5jcmwwHwYDVR0jBBgwFoAUr4dMVlEkbHTYFafwhupY4FRTry4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81OWFkY2I2ZC1jYzA2LTRlMmMtYjVkZi0yMGJm
Y2Q4MzE3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzoPgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANcNEACsxR8f1kOAqPlCFlDYj5/iICVXM8/azVcy5j3OQkvXSWWFh0aD
830wbTwwLzOjsLxZ0eoaNzUWWMpKxgvaskNKCZ9Z+A5dqmHqgWahDgL1siMuRuM9
mQKiQDrAyDwmGbfzlgcqj5NEH8VWRPKa0PN5cSSZ6e987rH0jObkRI2WW9QepZsj
1PhBnZ+GAipMmjGumKr6l6zArMD4mPYoWYlCJjflp5jvE/9TRdUp/Yfp0EVtwkLL
AQAQoYebF/FY6RCn1xZ45OCz04+cYhYytse2/SwFhDafudn1Rqsk94vCXL7+TRm1
NnQdLunLwMzzI2bDsWDIo5+KrnXPy8c=
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:53:55 2025 by rpki-client