Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8de43fd-ca68-302d-95fb-85e8c4ef93a0.roa
File:                     d8de43fd-ca68-302d-95fb-85e8c4ef93a0.roa (raw, json)
Hash identifier:          Ubn9zsG3CArN5TFhuZVjmX8ZD9xn9AVq+rlQwDOTl9A=
Subject key identifier:   70:D7:4D:62:41:7E:87:C9:EB:DB:6F:5F:EA:A0:5F:5A:90:95:2B:99
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1965DA8FC157478283E8480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8de43fd-ca68-302d-95fb-85e8c4ef93a0.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     7122
IP address blocks:        170.199.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:5d:a8:fc:15:74:78:28:3e:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=e266c572-4426-4e67-9fbe-9e34e529fe55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fe:13:28:81:f3:01:7a:bc:1a:73:1e:a1:8a:
                    13:de:71:57:c2:b2:65:c4:3c:f8:25:39:c1:c4:12:
                    a3:fa:d7:d0:92:ba:ac:7d:fb:df:f6:f0:5b:5a:86:
                    2e:1a:a9:33:55:fd:46:f1:36:5a:eb:11:b5:02:5a:
                    ee:fc:7f:db:4e:44:87:27:80:39:46:86:0f:d4:30:
                    7b:62:bf:40:cf:86:d7:d5:25:75:e0:18:60:44:31:
                    75:d1:aa:7e:5d:8f:90:91:74:b7:d5:69:4f:6f:b1:
                    a9:9e:49:ac:5a:89:51:95:f0:e6:2d:8d:11:99:eb:
                    56:a3:bc:7a:51:32:19:70:0c:b8:6a:0f:ba:b1:eb:
                    b7:aa:79:0f:80:67:d6:1d:f3:37:2b:3d:4b:8c:5f:
                    db:c0:1b:46:19:9c:13:40:72:74:4b:66:4c:30:f1:
                    ee:b5:56:6f:c3:64:d7:c3:cc:ae:ad:da:01:30:d4:
                    02:2b:22:df:6b:84:e4:df:48:5d:5a:6c:13:d7:d9:
                    95:4c:cd:ab:c3:45:66:37:c6:69:5c:81:3f:66:b3:
                    04:dc:fc:e9:cb:6f:aa:49:bb:a6:74:6a:c8:20:07:
                    83:23:39:cc:07:7d:a1:62:8a:f9:24:38:a9:ab:71:
                    e0:e9:f7:6c:ae:e7:82:f5:5f:55:d7:4b:c5:1a:8b:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D7:4D:62:41:7E:87:C9:EB:DB:6F:5F:EA:A0:5F:5A:90:95:2B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8de43fd-ca68-302d-95fb-85e8c4ef93a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:62:94:00:9d:f4:08:15:4d:78:7d:d4:4a:ef:79:25:80:16:
         4e:41:e0:e7:d8:c6:87:6f:60:0c:15:00:25:ba:79:f7:37:ca:
         ff:48:09:8e:66:35:20:95:28:23:03:c3:11:7a:d0:a1:99:34:
         fa:38:68:04:f3:a0:2c:42:5e:f7:30:f1:a8:28:7c:7a:5e:67:
         e3:92:0c:08:1b:61:62:9e:91:82:52:ed:82:90:1e:83:7f:eb:
         77:4a:1b:8a:bc:00:1d:7e:8c:27:08:34:a2:13:d0:23:86:fe:
         f2:c6:28:61:75:0c:5b:a3:6b:37:ff:e2:fc:2a:a6:2c:bb:50:
         9e:f8:4d:3f:29:51:f7:07:1a:37:84:f5:98:36:9e:8a:ed:23:
         32:02:a8:29:ee:69:fd:e2:29:75:e7:b4:68:68:03:7f:47:49:
         5b:af:3d:20:d7:8c:fd:45:1d:d9:5b:0b:29:83:7f:75:61:c4:
         72:10:31:31:7c:7a:6a:ab:e2:47:dd:8c:06:49:9d:d4:78:c3:
         eb:de:50:5e:1c:08:7d:33:81:5c:b8:a4:a8:e5:e5:e1:d5:1a:
         04:e1:ab:88:08:7e:34:a5:ca:1a:13:3d:cd:94:a4:11:69:34:
         e5:b1:70:5e:43:5c:94:cb:df:69:c4:55:f5:3f:80:c0:6b:af:
         22:ea:15:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhll2o/BV0eCg+hIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZTI2NmM1NzItNDQyNi00ZTY3LTlmYmUtOWUzNGU1MjlmZTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP4TKIHzAXq8GnMeoYoT3nFXwrJlxDz4JTnB
xBKj+tfQkrqsffvf9vBbWoYuGqkzVf1G8TZa6xG1Alru/H/bTkSHJ4A5RoYP1DB7
Yr9Az4bX1SV14BhgRDF10ap+XY+QkXS31WlPb7GpnkmsWolRlfDmLY0RmetWo7x6
UTIZcAy4ag+6seu3qnkPgGfWHfM3Kz1LjF/bwBtGGZwTQHJ0S2ZMMPHutVZvw2TX
w8yurdoBMNQCKyLfa4Tk30hdWmwT19mVTM2rw0VmN8ZpXIE/ZrME3Pzpy2+qSbum
dGrIIAeDIznMB32hYor5JDipq3Hg6fdsrueC9V9V10vFGos9NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDXTWJBfofJ69tvX+qgX1qQlSuZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDhkZTQzZmQtY2E2OC0z
MDJkLTk1ZmItODVlOGM0ZWY5M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqscAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItilACd9AgVTXh91ErveSWAFk5B4OfYxodvYAwVACW6efc3yv9ICY5m
NSCVKCMDwxF60KGZNPo4aATzoCxCXvcw8agofHpeZ+OSDAgbYWKekYJS7YKQHoN/
63dKG4q8AB1+jCcINKIT0COG/vLGKGF1DFujazf/4vwqpiy7UJ74TT8pUfcHGjeE
9Zg2nortIzICqCnuaf3iKXXntGhoA39HSVuvPSDXjP1FHdlbCymDf3VhxHIQMTF8
emqr4kfdjAZJndR4w+veUF4cCH0zgVy4pKjl5eHVGgThq4gIfjSlyhoTPc2UpBFp
NOWxcF5DXJTL32nEVfU/gMBrryLqFd8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:20 2025 by rpki-client