Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0abf65c-99eb-3dfd-a28c-350a058e609b.roa
File:                     b0abf65c-99eb-3dfd-a28c-350a058e609b.roa (raw, json)
Hash identifier:          iOoEvqu6tlh9Mmx6Ep54GYnvKfFk+sodIWbZdSeWcso=
Subject key identifier:   70:53:F9:2D:D7:1C:79:43:AC:38:FF:18:81:21:2B:3B:63:5D:51:62
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1965946CA078BC2A137A180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0abf65c-99eb-3dfd-a28c-350a058e609b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     7122
IP address blocks:        216.55.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:59:46:ca:07:8b:c2:a1:37:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=e13c62c6-e6fd-47bd-bf48-7bf33f0d4418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:53:a6:0b:39:b0:11:c2:bb:d1:11:f9:e6:
                    a5:47:3a:6a:5b:68:d0:b2:de:a4:7b:5b:7b:9d:e1:
                    c5:87:15:9c:6e:db:ea:28:f5:da:ab:97:c1:a0:3f:
                    84:b4:24:e3:f0:8b:44:47:e8:c8:71:17:52:37:db:
                    fb:55:7d:05:51:34:92:bf:83:4b:d0:d4:6d:e9:0e:
                    cf:a1:82:40:65:b9:59:0f:db:fc:3f:a0:85:28:38:
                    50:51:e4:a4:44:c5:14:9c:57:60:cb:dd:2c:47:4c:
                    c5:ec:08:0f:fc:34:de:89:0f:4a:e5:68:71:43:32:
                    d1:a3:1a:f0:21:52:ed:b2:df:6a:2f:48:c5:5e:d4:
                    a3:4e:f1:e9:0a:a4:a0:8b:fa:6e:00:7f:e3:9f:f7:
                    28:32:9f:89:94:5d:df:75:c7:34:f3:ae:79:ac:37:
                    0e:ec:7c:6e:b1:23:03:4f:8a:e6:9a:af:17:01:3c:
                    5a:19:20:94:64:2b:cf:45:bd:4d:ed:26:d0:9a:89:
                    d3:62:fd:67:52:85:65:f2:30:e2:3a:6b:cf:41:88:
                    85:c5:2b:fe:25:d0:68:09:0a:aa:68:2a:43:00:77:
                    e8:eb:0e:f6:87:18:ba:52:41:09:01:26:58:6e:9d:
                    54:b7:45:79:dc:70:1d:cf:a0:1a:a8:9b:73:2a:f3:
                    f1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:53:F9:2D:D7:1C:79:43:AC:38:FF:18:81:21:2B:3B:63:5D:51:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0abf65c-99eb-3dfd-a28c-350a058e609b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.55.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c4:e8:9c:d7:4f:82:8d:e4:9f:a5:a4:42:d5:c0:39:40:3b:
         83:a5:74:91:c7:02:0e:86:2d:d4:da:ae:d0:19:31:71:07:2f:
         21:a8:c4:ad:ce:4c:fb:79:86:9b:c1:c2:ff:c4:15:e6:22:93:
         fb:df:69:ad:fd:8c:f4:57:5a:1d:34:b9:69:24:d3:e4:bf:cb:
         f6:64:0a:f5:96:8c:65:d7:2c:b8:79:a8:56:8e:b5:47:51:c4:
         ae:39:4a:45:d6:61:0c:c2:35:36:06:d5:97:21:ea:7a:17:28:
         d9:bc:f5:1b:89:da:0d:0f:cb:d0:9f:5a:6b:b1:a1:1f:db:dd:
         4f:2e:3d:24:c1:b1:ca:85:8e:79:3a:3e:bc:3a:86:d4:60:58:
         72:61:61:00:38:1b:e2:61:18:8c:2a:3c:75:91:5f:f3:50:03:
         f2:9e:25:45:e6:79:93:79:09:cd:00:e5:d0:82:8d:94:19:8a:
         43:68:3b:49:26:9c:fe:f5:44:a7:48:be:a2:93:00:5a:ee:6d:
         06:29:16:fd:df:0a:8a:d8:b3:4f:67:6b:6b:91:96:73:bf:63:
         97:1e:29:51:8d:24:12:32:fc:cd:4e:a9:c3:96:b3:3b:ea:06:
         fc:98:35:4e:01:1a:5a:3d:52:82:86:95:c0:62:54:db:13:e7:
         30:80:a7:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlllGygeLwqE3oYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZTEzYzYyYzYtZTZmZC00N2JkLWJmNDgtN2JmMzNmMGQ0NDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVNTpgs5sBHCu9ER+ealRzpqW2jQst6ke1t7
neHFhxWcbtvqKPXaq5fBoD+EtCTj8ItER+jIcRdSN9v7VX0FUTSSv4NL0NRt6Q7P
oYJAZblZD9v8P6CFKDhQUeSkRMUUnFdgy90sR0zF7AgP/DTeiQ9K5WhxQzLRoxrw
IVLtst9qL0jFXtSjTvHpCqSgi/puAH/jn/coMp+JlF3fdcc08655rDcO7HxusSMD
T4rmmq8XATxaGSCUZCvPRb1N7SbQmonTYv1nUoVl8jDiOmvPQYiFxSv+JdBoCQqq
aCpDAHfo6w72hxi6UkEJASZYbp1Ut0V53HAdz6AaqJtzKvPxYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBT+S3XHHlDrDj/GIEhKztjXVFiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjBhYmY2NWMtOTllYi0z
ZGZkLWEyOGMtMzUwYTA1OGU2MDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2DfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/E6JzXT4KN5J+lpELVwDlAO4OldJHHAg6GLdTartAZMXEHLyGoxK3O
TPt5hpvBwv/EFeYik/vfaa39jPRXWh00uWkk0+S/y/ZkCvWWjGXXLLh5qFaOtUdR
xK45SkXWYQzCNTYG1Zch6noXKNm89RuJ2g0Py9CfWmuxoR/b3U8uPSTBscqFjnk6
Prw6htRgWHJhYQA4G+JhGIwqPHWRX/NQA/KeJUXmeZN5Cc0A5dCCjZQZikNoO0km
nP71RKdIvqKTAFrubQYpFv3fCorYs09na2uRlnO/Y5ceKVGNJBIy/M1OqcOWszvq
BvyYNU4BGlo9UoKGlcBiVNsT5zCAp3s=
-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:21 2025 by rpki-client