Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/62ca77ad-aafb-363a-98af-cd9b6cc8b404.roa
File:                     62ca77ad-aafb-363a-98af-cd9b6cc8b404.roa (raw, json)
Hash identifier:          5xC+mEsMguQIQ59qSk0jwsA0xaZj5QknFqZVKTXg5VI=
Subject key identifier:   8C:1F:43:FE:DA:E7:C2:1B:B6:AA:B7:C0:A6:E1:95:E9:2F:7C:B5:8C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE196676243CA38FC774E6F90
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/62ca77ad-aafb-363a-98af-cd9b6cc8b404.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        198.235.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:67:62:43:ca:38:fc:77:4e:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=7e5b8d58-165a-4ea6-a999-2fb146de1229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:95:46:5f:2d:90:63:22:3f:75:3b:a6:be:
                    83:da:49:70:e6:42:f7:7d:64:b2:86:2c:12:91:88:
                    ea:44:5d:90:67:c0:94:17:63:75:39:03:a2:f0:e9:
                    66:c5:ed:ec:6c:b2:06:4f:52:2b:5f:80:fc:e7:04:
                    90:0d:1f:25:10:9b:98:2a:59:ca:01:53:cd:de:f5:
                    4c:ac:0d:0f:13:9a:26:0b:7a:e9:59:53:52:f7:25:
                    c3:bc:0a:32:f0:3b:40:2e:04:c2:2c:8c:6a:26:00:
                    b9:c6:38:7c:52:4e:62:1b:6d:61:7d:86:36:ef:90:
                    7b:da:6b:6b:fd:74:52:42:01:61:5c:6d:86:f9:50:
                    52:35:76:16:94:90:7d:91:ea:de:15:3d:5f:07:12:
                    cd:83:2d:23:e9:a8:34:75:b7:74:c0:e5:44:95:e6:
                    84:ce:9a:84:fa:08:da:db:c7:c2:54:d5:81:06:48:
                    8e:0d:82:18:f0:78:5c:f4:ae:bb:6b:ce:cc:f3:3f:
                    9b:85:bd:47:b5:47:36:88:40:e3:c5:20:84:fe:10:
                    6b:bf:26:42:75:b2:ac:86:7a:25:3a:b3:29:6a:80:
                    67:53:bf:0e:00:d3:ca:8c:24:15:77:4e:e2:ca:3c:
                    b7:90:5a:17:4e:e6:87:28:c4:cd:3a:50:f4:3c:93:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1F:43:FE:DA:E7:C2:1B:B6:AA:B7:C0:A6:E1:95:E9:2F:7C:B5:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/62ca77ad-aafb-363a-98af-cd9b6cc8b404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:80:4d:a3:fc:f7:36:c7:9a:4f:da:a4:64:37:cc:88:6a:d1:
         20:49:c0:49:d1:53:00:87:3e:5e:a3:5b:c1:fe:d1:4b:c8:cb:
         60:68:f0:8e:5b:15:20:4a:f3:12:9c:5f:33:6e:bf:80:7c:a3:
         6d:5a:dd:aa:d0:f1:f0:1f:55:0f:f8:9c:f6:21:e0:ec:03:7d:
         5d:90:66:32:dd:98:85:54:c9:16:55:58:be:c3:f3:41:1f:b0:
         23:69:d1:c7:08:a9:18:91:6f:6f:b0:96:2a:32:27:4c:17:2e:
         f0:4c:06:53:f6:88:55:01:9c:a7:17:7c:bd:6c:0e:97:3b:f1:
         ef:d3:28:bd:ab:03:e1:50:33:22:65:30:64:8f:32:ad:6b:f6:
         ae:39:85:71:5a:97:50:16:b9:a1:ab:16:e2:99:fd:b3:51:f0:
         b8:ac:cd:b1:9d:03:b1:c8:ed:70:d4:bd:4a:e8:95:6e:cf:06:
         35:06:19:a1:99:0f:a3:55:7e:6f:ea:71:9c:37:df:a9:a5:85:
         e5:e3:99:1c:7e:16:f3:4a:31:95:2e:86:13:a5:11:a5:fa:04:
         b5:69:40:08:bd:4f:4b:da:a8:31:41:03:c2:f7:97:f5:f8:43:
         57:8a:8a:6a:5e:fd:9b:fa:3b:f6:dc:e4:76:88:ae:98:92:3b:
         e6:81:69:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlmdiQ8o4/HdOb5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
N2U1YjhkNTgtMTY1YS00ZWE2LWE5OTktMmZiMTQ2ZGUxMjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVeVRl8tkGMiP3U7pr6D2klw5kL3fWSyhiwS
kYjqRF2QZ8CUF2N1OQOi8Olmxe3sbLIGT1IrX4D85wSQDR8lEJuYKlnKAVPN3vVM
rA0PE5omC3rpWVNS9yXDvAoy8DtALgTCLIxqJgC5xjh8Uk5iG21hfYY275B72mtr
/XRSQgFhXG2G+VBSNXYWlJB9kereFT1fBxLNgy0j6ag0dbd0wOVEleaEzpqE+gja
28fCVNWBBkiODYIY8Hhc9K67a87M8z+bhb1HtUc2iEDjxSCE/hBrvyZCdbKshnol
OrMpaoBnU78OANPKjCQVd07iyjy3kFoXTuaHKMTNOlD0PJMaGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIwfQ/7a58Ibtqq3wKbhlekvfLWMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNjJjYTc3YWQtYWFmYi0z
NjNhLTk4YWYtY2Q5YjZjYzhiNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuvZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHOATaP89zbHmk/apGQ3zIhq0SBJwEnRUwCHPl6jW8H+0UvIy2Bo8I5b
FSBK8xKcXzNuv4B8o21a3arQ8fAfVQ/4nPYh4OwDfV2QZjLdmIVUyRZVWL7D80Ef
sCNp0ccIqRiRb2+wlioyJ0wXLvBMBlP2iFUBnKcXfL1sDpc78e/TKL2rA+FQMyJl
MGSPMq1r9q45hXFal1AWuaGrFuKZ/bNR8LiszbGdA7HI7XDUvUrolW7PBjUGGaGZ
D6NVfm/qcZw336mlheXjmRx+FvNKMZUuhhOlEaX6BLVpQAi9T0vaqDFBA8L3l/X4
Q1eKimpe/Zv6O/bc5HaIrpiSO+aBaWM=
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:25:20 2025 by rpki-client