Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e47e3b50-8396-3b17-93b6-04f061d6f5a6.roa
File:                     e47e3b50-8396-3b17-93b6-04f061d6f5a6.roa (raw, json)
Hash identifier:          HiUM23P2kDwaVPM/kxGD6RuXTO2k6Jev4a2HCnpA7Lw=
Subject key identifier:   C4:55:8D:EA:0E:4A:13:8C:D2:7D:D3:6E:2B:34:F3:50:A8:9A:29:47
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970A1724526CD46388BF00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e47e3b50-8396-3b17-93b6-04f061d6f5a6.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     21724
IP address blocks:        204.101.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0a:17:24:52:6c:d4:63:88:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=026cf801-6fb1-4b62-83b0-52826348905f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dc:2e:62:55:8f:c8:b4:31:50:77:c4:a7:61:
                    5f:63:35:dd:48:74:3c:64:f6:a0:12:f7:12:5e:24:
                    7f:68:73:9c:87:64:14:2d:9f:74:00:4b:0a:bc:ae:
                    b6:9b:48:47:a1:44:32:b8:6e:9e:1e:70:98:c8:cd:
                    1f:32:34:bf:4f:0b:09:e6:50:58:24:9a:40:de:8d:
                    d6:09:10:37:d4:0c:07:0b:35:ef:69:4a:ae:39:a0:
                    f2:83:80:3a:9a:9c:1c:ec:61:75:4f:bd:67:a3:33:
                    c0:30:b5:b9:25:33:0a:c8:a4:88:5a:60:32:c5:f2:
                    a9:01:72:9c:a0:06:a8:94:59:5e:58:d4:c7:5a:db:
                    df:c4:de:40:5a:28:82:99:ee:e7:6f:10:8c:61:60:
                    47:ce:0a:59:0e:d9:06:d0:3f:0f:85:f4:23:51:3a:
                    32:cb:5e:a2:7d:b1:bd:5d:04:4d:18:86:60:6d:b0:
                    53:ad:8a:83:d4:35:26:61:f0:41:d5:8d:38:9e:3d:
                    22:21:8b:77:cf:93:52:e0:a1:5b:a7:9a:28:8d:45:
                    20:f7:03:eb:1c:18:d7:2b:ec:16:5b:58:e5:89:c3:
                    c1:2f:3f:6e:e9:f0:72:fb:11:6a:46:0d:43:b7:a8:
                    5a:f8:23:1c:d2:a0:53:66:d8:f6:03:d2:e3:d8:cb:
                    01:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:55:8D:EA:0E:4A:13:8C:D2:7D:D3:6E:2B:34:F3:50:A8:9A:29:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e47e3b50-8396-3b17-93b6-04f061d6f5a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8f:fe:db:ca:be:4b:ca:91:d0:f0:7e:be:21:c2:8f:2b:97:
         d8:29:67:58:50:5a:38:ef:f7:14:2c:dc:46:53:28:47:68:b0:
         df:4d:ca:99:9b:4f:e1:a0:57:bf:a6:fd:40:82:e1:34:0f:26:
         94:98:3f:a3:57:85:ba:3d:31:70:2b:19:7b:0c:2a:5f:63:80:
         e2:22:e1:b2:bd:64:f9:3a:8e:a3:66:af:8e:94:96:95:da:00:
         88:c1:b2:1d:7b:73:7d:e9:7c:17:f2:e7:15:70:e6:2c:95:21:
         3e:cc:e3:b4:79:32:cf:ec:d7:b3:9a:39:04:7b:dc:a8:2e:2e:
         c6:34:69:92:65:05:94:17:51:c6:27:f6:8a:c0:bf:80:2c:c3:
         52:2f:ec:3b:49:ef:28:08:06:0e:38:20:65:08:46:02:34:67:
         a7:aa:47:25:68:09:b2:36:7f:4d:be:2c:89:9c:47:3d:ab:c1:
         bd:67:80:85:a4:f3:af:42:0b:8b:81:c9:18:87:e8:8f:90:59:
         57:8e:58:e1:f8:c7:b0:51:63:35:cd:72:19:be:f5:01:86:8d:
         84:22:f6:ed:f7:44:55:b8:59:33:bf:e5:57:4b:6d:d9:db:17:
         0e:9a:bb:60:32:4e:0a:b9:55:3e:82:b6:56:79:98:80:7e:70:
         b3:f9:69:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlwoXJFJs1GOIvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
MDI2Y2Y4MDEtNmZiMS00YjYyLTgzYjAtNTI4MjYzNDg5MDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dwuYlWPyLQxUHfEp2FfYzXdSHQ8ZPagEvcS
XiR/aHOch2QULZ90AEsKvK62m0hHoUQyuG6eHnCYyM0fMjS/TwsJ5lBYJJpA3o3W
CRA31AwHCzXvaUquOaDyg4A6mpwc7GF1T71nozPAMLW5JTMKyKSIWmAyxfKpAXKc
oAaolFleWNTHWtvfxN5AWiiCme7nbxCMYWBHzgpZDtkG0D8PhfQjUToyy16ifbG9
XQRNGIZgbbBTrYqD1DUmYfBB1Y04nj0iIYt3z5NS4KFbp5oojUUg9wPrHBjXK+wW
W1jlicPBLz9u6fBy+xFqRg1Dt6ha+CMc0qBTZtj2A9Lj2MsBuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRVjeoOShOM0n3Tbis081ComilHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZTQ3ZTNiNTAtODM5Ni0z
YjE3LTkzYjYtMDRmMDYxZDZmNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGUgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWP/tvKvkvKkdDwfr4hwo8rl9gpZ1hQWjjv9xQs3EZTKEdosN9Nypmb
T+GgV7+m/UCC4TQPJpSYP6NXhbo9MXArGXsMKl9jgOIi4bK9ZPk6jqNmr46UlpXa
AIjBsh17c33pfBfy5xVw5iyVIT7M47R5Ms/s17OaOQR73KguLsY0aZJlBZQXUcYn
9orAv4Asw1Iv7DtJ7ygIBg44IGUIRgI0Z6eqRyVoCbI2f02+LImcRz2rwb1ngIWk
869CC4uByRiH6I+QWVeOWOH4x7BRYzXNchm+9QGGjYQi9u33RFW4WTO/5VdLbdnb
Fw6au2AyTgq5VT6CtlZ5mIB+cLP5aQ8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:18 2025 by rpki-client