Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17d07a43-7b69-3b2e-a219-4b07aa82c3f7.roa
File:                     17d07a43-7b69-3b2e-a219-4b07aa82c3f7.roa (raw, json)
Hash identifier:          tWUcRGLVGgWHDPCM6kNU4wkGi/TUxpmIdHdH3P8Uqjo=
Subject key identifier:   FC:48:6C:9F:25:DA:E8:5D:85:CB:E5:F3:58:6E:4A:F6:D5:D0:BA:9F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE197088A582636DDB85C7300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17d07a43-7b69-3b2e-a219-4b07aa82c3f7.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     54937
IP address blocks:        205.200.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:08:8a:58:26:36:dd:b8:5c:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=6ddc2a98-c365-4bd5-b188-cf6906570df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:c8:47:5f:fa:7a:8d:28:c4:8f:99:e5:ab:
                    f3:72:25:71:38:c6:e4:55:05:89:a4:c3:0b:a2:20:
                    08:41:0e:46:9b:07:31:43:42:50:e6:33:fa:88:1a:
                    5a:64:a1:c2:d0:d9:9c:10:b4:e1:de:03:70:d8:cb:
                    e8:63:47:b8:5a:d8:fc:94:18:f6:15:80:c0:fd:4a:
                    0c:5f:4d:49:2d:4b:a2:c8:7f:42:ed:3c:84:4b:11:
                    60:34:99:77:d2:35:47:fa:cc:cb:69:6e:20:e6:d0:
                    13:e8:ba:9b:7f:e7:83:00:44:47:da:10:5c:91:bb:
                    29:45:8b:4d:4a:40:48:c5:5d:e6:81:7c:1d:53:e1:
                    89:a0:6c:18:e3:6f:d9:4f:51:b5:00:19:58:bb:a1:
                    96:35:92:50:06:3d:9c:ce:27:7a:04:56:10:3b:e4:
                    75:58:58:32:00:1f:23:97:1f:ed:7c:6a:82:87:44:
                    28:bc:e4:79:28:3e:02:54:e2:bb:9c:16:46:8a:5d:
                    fc:97:51:08:c9:8a:a8:d4:7e:15:94:ba:f6:a0:0d:
                    cb:1e:2c:1b:cc:16:3e:51:9d:74:09:b3:74:eb:a2:
                    73:b3:1b:10:12:99:e7:ae:ef:28:23:fe:fd:34:16:
                    0a:1b:1d:fe:6f:d9:3b:dd:4d:f5:f7:97:28:d1:66:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:48:6C:9F:25:DA:E8:5D:85:CB:E5:F3:58:6E:4A:F6:D5:D0:BA:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17d07a43-7b69-3b2e-a219-4b07aa82c3f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.200.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d5:58:d1:b1:de:42:ac:31:fd:76:66:c6:8e:0b:c7:73:39:
         9d:66:de:59:63:f7:45:b0:fd:c5:4a:94:c7:43:26:09:f0:ee:
         00:11:8d:3d:b5:10:fa:54:1e:59:b9:4d:1e:53:8f:15:11:68:
         99:98:62:59:09:b8:56:31:27:0b:4e:3c:16:89:18:ac:46:f8:
         dd:9e:1c:b4:d7:2e:59:d2:7b:e0:94:4a:a4:0f:8c:07:a9:73:
         2a:6e:23:05:86:e4:af:4e:4e:37:87:5b:85:92:06:07:45:e9:
         c5:d7:4c:52:f7:b2:fd:cc:72:e3:0f:94:e1:69:32:40:e2:eb:
         a0:be:c4:f4:ed:5c:f8:55:5d:f4:09:fd:f3:94:5d:bb:9d:dd:
         1b:33:84:0e:5d:e2:13:90:45:de:f8:9b:5f:71:7b:a1:0f:32:
         a0:22:b4:e0:50:32:3f:06:e2:c1:11:22:5f:af:0a:f8:91:d4:
         0b:fe:d0:fa:c9:5c:44:4d:97:1a:76:2f:ce:81:f6:b5:e1:4b:
         46:bb:18:60:3d:e1:00:df:45:b8:7a:16:8d:20:17:0d:c1:b5:
         45:84:65:8c:97:90:ff:9b:d3:25:cb:7b:66:f0:fd:35:35:03:
         47:e5:27:45:40:23:a8:e8:d5:73:8d:c2:64:d3:44:86:ba:3a:
         7e:67:db:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlwiKWCY23bhccwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
NmRkYzJhOTgtYzM2NS00YmQ1LWIxODgtY2Y2OTA2NTcwZGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKfIR1/6eo0oxI+Z5avzciVxOMbkVQWJpMML
oiAIQQ5GmwcxQ0JQ5jP6iBpaZKHC0NmcELTh3gNw2MvoY0e4Wtj8lBj2FYDA/UoM
X01JLUuiyH9C7TyESxFgNJl30jVH+szLaW4g5tAT6Lqbf+eDAERH2hBckbspRYtN
SkBIxV3mgXwdU+GJoGwY42/ZT1G1ABlYu6GWNZJQBj2czid6BFYQO+R1WFgyAB8j
lx/tfGqCh0QovOR5KD4CVOK7nBZGil38l1EIyYqo1H4VlLr2oA3LHiwbzBY+UZ10
CbN066JzsxsQEpnnru8oI/79NBYKGx3+b9k73U3195co0WYQmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxIbJ8l2uhdhcvl81huSvbV0LqfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMTdkMDdhNDMtN2I2OS0z
YjJlLWEyMTktNGIwN2FhODJjM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzchUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvVWNGx3kKsMf12ZsaOC8dzOZ1m3llj90Ww/cVKlMdDJgnw7gARjT21
EPpUHlm5TR5TjxURaJmYYlkJuFYxJwtOPBaJGKxG+N2eHLTXLlnSe+CUSqQPjAep
cypuIwWG5K9OTjeHW4WSBgdF6cXXTFL3sv3McuMPlOFpMkDi66C+xPTtXPhVXfQJ
/fOUXbud3RszhA5d4hOQRd74m19xe6EPMqAitOBQMj8G4sERIl+vCviR1Av+0PrJ
XERNlxp2L86B9rXhS0a7GGA94QDfRbh6Fo0gFw3BtUWEZYyXkP+b0yXLe2bw/TU1
A0flJ0VAI6jo1XONwmTTRIa6On5n27g=
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:21 2025 by rpki-client