Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/081c02bc-82f7-3545-a8ca-5870207f5ad5.roa
File:                     081c02bc-82f7-3545-a8ca-5870207f5ad5.roa (raw, json)
Hash identifier:          bCPN7lpMr6lHP+ZIgsN1DWwJylEQo0GmJaiUjKPJw68=
Subject key identifier:   AC:30:7E:11:A4:82:69:AD:AA:3D:89:FD:52:BC:9A:16:E7:00:30:70
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5ABA563B64B147106737A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/081c02bc-82f7-3545-a8ca-5870207f5ad5.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        172.64.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:a5:63:b6:4b:14:71:06:73:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=41facd75-6162-4a8f-9335-88cd45f8b173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:26:2d:a6:43:7c:d7:73:88:52:b5:dc:57:ee:
                    21:03:36:1d:00:eb:09:3a:b1:97:1d:00:43:84:70:
                    ef:70:2f:58:7e:cb:b9:23:92:32:78:30:0c:51:3e:
                    10:6c:96:55:0b:01:44:c9:16:29:65:53:93:5a:fd:
                    92:ad:b5:03:f0:c6:de:77:77:34:e0:14:72:ce:53:
                    e5:48:8e:ad:0e:b1:43:bb:97:46:89:33:fa:a9:79:
                    e8:70:5e:80:9c:be:41:1c:8e:5c:8d:21:d5:b1:ec:
                    b1:c3:44:3f:37:73:da:e7:19:22:91:27:f1:08:d0:
                    d3:9c:97:07:e7:1f:92:2e:f8:16:b5:3c:ef:1f:3f:
                    ef:ea:90:0d:40:ab:48:dc:03:35:ec:0c:d7:8a:24:
                    94:8d:61:55:4c:cd:f6:b1:7a:6c:dc:41:e9:d7:c0:
                    74:73:e9:1a:ca:db:7f:df:95:08:ea:27:a7:5e:c3:
                    3e:96:be:e2:5f:d7:70:da:b0:26:92:6c:fd:91:79:
                    3a:15:6d:e0:51:b5:79:a5:40:c4:12:2e:83:a5:7a:
                    87:f6:90:fa:03:81:0e:0b:f6:db:c7:bd:27:c3:5e:
                    40:c2:be:58:6c:95:09:54:92:94:24:91:02:09:2e:
                    b7:06:20:49:a4:16:ca:5e:0a:cf:b5:53:9b:a9:45:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:30:7E:11:A4:82:69:AD:AA:3D:89:FD:52:BC:9A:16:E7:00:30:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/081c02bc-82f7-3545-a8ca-5870207f5ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:39:84:62:a2:b9:7d:e0:4c:0f:a2:d7:03:5d:3a:d2:75:ac:
         78:06:d6:38:71:29:d9:76:32:c2:52:9f:18:e1:fe:75:c0:29:
         29:6f:60:00:7e:f4:e4:75:a3:ad:7d:90:e7:7e:fa:e8:e4:c1:
         3e:42:e8:c7:15:03:67:4b:e2:3f:39:db:d8:87:b4:34:b0:e4:
         f7:4e:d1:18:58:a0:fc:a2:92:46:86:8d:58:a8:80:f2:47:86:
         2c:4e:17:09:5c:fc:fe:1f:37:59:d5:b5:03:4f:05:01:7a:01:
         cc:8d:cc:cc:2c:36:29:9a:08:dd:8d:8b:b0:ae:7b:6f:bb:95:
         0b:c6:0b:76:c3:66:04:aa:5e:4f:93:3d:02:08:d5:b3:56:ce:
         54:b8:f1:00:66:b7:03:a4:9d:9b:b1:d2:61:f1:00:48:d7:3f:
         a5:d7:60:84:dd:1c:62:8f:e5:48:85:14:3f:e7:0e:4b:3b:98:
         91:04:1a:52:47:89:3e:7e:f6:97:0e:5b:10:56:34:4c:4c:76:
         9b:53:85:dd:82:bb:e4:27:d0:2d:6e:ba:80:4e:d6:b6:93:3c:
         33:5e:05:e6:53:76:72:a8:27:2c:10:41:20:83:02:46:e3:db:
         d4:fb:77:99:60:d8:85:ba:3a:f8:a6:29:a3:8e:91:8e:d9:0e:
         fb:5d:2b:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6VjtksUcQZzeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
NDFmYWNkNzUtNjE2Mi00YThmLTkzMzUtODhjZDQ1ZjhiMTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CYtpkN813OIUrXcV+4hAzYdAOsJOrGXHQBD
hHDvcC9Yfsu5I5IyeDAMUT4QbJZVCwFEyRYpZVOTWv2SrbUD8Mbed3c04BRyzlPl
SI6tDrFDu5dGiTP6qXnocF6AnL5BHI5cjSHVseyxw0Q/N3Pa5xkikSfxCNDTnJcH
5x+SLvgWtTzvHz/v6pANQKtI3AM17AzXiiSUjWFVTM32sXps3EHp18B0c+kaytt/
35UI6ienXsM+lr7iX9dw2rAmkmz9kXk6FW3gUbV5pUDEEi6DpXqH9pD6A4EOC/bb
x70nw15Awr5YbJUJVJKUJJECCS63BiBJpBbKXgrPtVObqUWAnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKwwfhGkgmmtqj2J/VK8mhbnADBwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDgxYzAyYmMtODJmNy0z
NTQ1LWE4Y2EtNTg3MDIwN2Y1YWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGY5hGKiuX3gTA+i1wNdOtJ1rHgG1jhxKdl2MsJSnxjh/nXAKSlvYAB+
9OR1o619kOd++ujkwT5C6McVA2dL4j8529iHtDSw5PdO0RhYoPyikkaGjViogPJH
hixOFwlc/P4fN1nVtQNPBQF6AcyNzMwsNimaCN2Ni7Cue2+7lQvGC3bDZgSqXk+T
PQII1bNWzlS48QBmtwOknZux0mHxAEjXP6XXYITdHGKP5UiFFD/nDks7mJEEGlJH
iT5+9pcOWxBWNExMdptThd2Cu+Qn0C1uuoBO1raTPDNeBeZTdnKoJywQQSCDAkbj
29T7d5lg2IW6OvimKaOOkY7ZDvtdK3Y=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:35:02 2025 by rpki-client