Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/5280a665-c90c-33ed-932d-de71f12512e9.roa
File:                     5280a665-c90c-33ed-932d-de71f12512e9.roa (raw, json)
Hash identifier:          JNOapQ0SOMsPojcSnHdOc6yeojsCDhGlgUjsR7pmsJE=
Subject key identifier:   90:D0:0E:9D:9C:DD:DE:F3:8A:A9:F8:6A:10:0A:15:D8:20:0B:5E:22
Certificate issuer:       /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial:       010D0C9F4328584AC876505FE60C9218D780E640
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/5280a665-c90c-33ed-932d-de71f12512e9.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     19151
IP address blocks:        172.110.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:50:5f:e6:0c:92:18:d7:80:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=6b9a0551-aa9e-4baf-8be1-a209478a8e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:f3:35:be:25:b0:a3:9e:3b:d8:b1:49:ea:
                    c7:1b:82:f8:4e:04:8d:35:fd:09:80:e9:40:8e:54:
                    68:17:38:9e:31:21:05:06:5e:f6:4c:2c:74:76:d6:
                    26:3e:af:67:41:91:b5:ff:3b:28:46:67:46:13:07:
                    55:f9:9b:31:c3:f1:48:37:49:1b:fb:d2:6b:42:06:
                    88:22:bd:13:ba:10:6a:39:ee:37:f2:42:ff:0d:a0:
                    dd:18:b5:66:dc:be:77:95:f1:80:1b:c9:2d:a8:5c:
                    64:21:50:30:10:51:7d:cc:04:a9:a9:d6:1b:d5:57:
                    4b:3c:d8:99:aa:1a:d0:e4:5e:97:d2:57:16:9a:e7:
                    9a:72:38:c0:ad:83:ed:1a:68:4c:11:01:47:be:cc:
                    02:71:d3:56:81:b4:cc:c2:0d:18:d4:a6:16:65:d9:
                    dd:e2:4b:0e:78:e2:76:c2:fb:2c:d0:da:c2:63:0b:
                    6e:6c:9e:5f:0b:d3:2b:be:1f:79:e8:9c:1a:d3:97:
                    80:15:bf:db:45:6c:26:cd:cc:80:b4:0f:ba:20:20:
                    d9:49:38:f3:26:66:e7:ec:a0:d9:1c:6a:b1:a3:5d:
                    24:61:ce:38:75:07:44:0c:5c:e4:71:00:4a:d4:e4:
                    95:92:c0:ca:02:11:9f:7c:aa:b6:87:2f:09:52:f8:
                    b8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D0:0E:9D:9C:DD:DE:F3:8A:A9:F8:6A:10:0A:15:D8:20:0B:5E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/5280a665-c90c-33ed-932d-de71f12512e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d0:e7:5d:32:f4:be:b9:e8:14:ab:c5:58:f2:b9:60:39:ae:
         2c:cc:04:4e:41:d9:ec:23:a8:bd:72:7e:57:85:c5:e2:5d:59:
         53:d4:94:3b:10:a0:e7:38:2b:b3:e1:37:ce:ff:33:ef:8e:35:
         94:d2:e0:2d:90:c5:57:62:a1:b0:00:cd:fb:6b:4d:0e:ab:5c:
         e4:8a:32:e0:33:60:e9:1e:be:18:93:c8:16:77:df:a1:80:90:
         a5:53:ec:1e:7d:a7:a0:a2:7a:39:e9:36:82:5c:ef:8b:a1:32:
         cc:da:cf:ca:6c:a9:96:00:af:e7:e9:0e:8f:19:8c:98:a9:5d:
         cc:2d:01:be:48:45:e8:16:2a:d9:cd:54:a4:9a:ef:47:fe:99:
         0a:d5:bd:83:77:42:22:29:13:fb:f2:c5:c2:45:1e:bf:00:33:
         9f:b4:1d:57:4a:67:3e:cf:b8:09:d3:2e:56:11:f3:11:46:c9:
         4c:e0:9a:8a:03:b2:8d:85:3e:47:58:c1:50:70:b5:94:8d:09:
         fc:63:14:0e:dc:67:b6:0e:c3:1c:41:fe:af:a5:a6:69:e2:42:
         cb:ce:e8:e7:d2:a5:87:80:15:69:bd:59:7f:71:18:dd:3c:57:
         ff:60:8c:aa:04:64:67:3c:a0:40:d6:33:91:ed:5d:fa:0e:6e:
         98:b2:21:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlBf5gySGNeA5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdmNDI2YmMtZTAxNi00ZTMxLTg0MjQtYmM3Y2I4NmE4
MDhlMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NmI5YTA1NTEtYWE5ZS00YmFmLThiZTEtYTIwOTQ3OGE4ZTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy/zNb4lsKOeO9ixSerHG4L4TgSNNf0JgOlA
jlRoFzieMSEFBl72TCx0dtYmPq9nQZG1/zsoRmdGEwdV+Zsxw/FIN0kb+9JrQgaI
Ir0TuhBqOe438kL/DaDdGLVm3L53lfGAG8ktqFxkIVAwEFF9zASpqdYb1VdLPNiZ
qhrQ5F6X0lcWmueacjjArYPtGmhMEQFHvswCcdNWgbTMwg0Y1KYWZdnd4ksOeOJ2
wvss0NrCYwtubJ5fC9Mrvh956Jwa05eAFb/bRWwmzcyAtA+6ICDZSTjzJmbn7KDZ
HGqxo10kYc44dQdEDFzkcQBK1OSVksDKAhGffKq2hy8JUvi4KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJDQDp2c3d7ziqn4ahAKFdggC14iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Y0
MjZiYy1lMDE2LTRlMzEtODQyNC1iYzdjYjg2YTgwOGUvNTI4MGE2NjUtYzkwYy0z
M2VkLTkzMmQtZGU3MWYxMjUxMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTdmNDI2YmMtZTAxNi00ZTMxLTg0
MjQtYmM3Y2I4NmE4MDhlL2E3ZjQyNmJjLWUwMTYtNGUzMS04NDI0LWJjN2NiODZh
ODA4ZS5jcmwwHwYDVR0jBBgwFoAUGw6WAE4CF+OdBPmjHZ7ZA+pr0HEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Y0MjZiYy1lMDE2LTRlMzEtODQyNC1iYzdj
Yjg2YTgwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG4vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzQ510y9L656BSrxVjyuWA5rizMBE5B2ewjqL1yfleFxeJdWVPUlDsQ
oOc4K7PhN87/M++ONZTS4C2QxVdiobAAzftrTQ6rXOSKMuAzYOkevhiTyBZ336GA
kKVT7B59p6CiejnpNoJc74uhMszaz8psqZYAr+fpDo8ZjJipXcwtAb5IRegWKtnN
VKSa70f+mQrVvYN3QiIpE/vyxcJFHr8AM5+0HVdKZz7PuAnTLlYR8xFGyUzgmooD
so2FPkdYwVBwtZSNCfxjFA7cZ7YOwxxB/q+lpmniQsvO6OfSpYeAFWm9WX9xGN08
V/9gjKoEZGc8oEDWM5HtXfoObpiyIes=
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:12:11 2025 by rpki-client