Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/880cf9ab-e7ce-391d-a9f9-3b725d7a3993.roa
File:                     880cf9ab-e7ce-391d-a9f9-3b725d7a3993.roa (raw, json)
Hash identifier:          bpoa0y+HhLGkpWQs3hz0FCLp7xQFq87ex5AssfG/O+Q=
Subject key identifier:   21:99:FE:9A:94:E6:08:7B:4F:E0:D5:B0:FB:6E:E0:18:60:59:EE:4B
Certificate issuer:       /CN=17c62883-899d-4b86-8800-e9715d10a482
Certificate serial:       010D0C9F4328584ACE0B9727DA866094CB292500
Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/880cf9ab-e7ce-391d-a9f9-3b725d7a3993.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     3356
IP address blocks:        74.113.192.0/21 maxlen: 24
                          199.175.184.0/22 maxlen: 24
                          204.86.64.0/19 maxlen: 24
                          206.201.64.0/20 maxlen: 24
                          208.93.241.0/24 maxlen: 24
                          208.93.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:97:27:da:86:60:94:cb:29:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=b3c919a3-a21f-47d4-aef4-f9aae6c71936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:32:ac:29:a0:69:69:d7:ab:6d:95:43:2f:
                    de:d7:36:6b:d9:a9:43:2d:b5:a1:b4:b5:38:eb:2f:
                    f7:6d:e4:31:20:91:b8:bd:e0:f0:04:b6:89:89:3a:
                    89:fc:cf:4b:d2:a6:ff:c8:78:9c:f9:6e:0c:64:94:
                    3e:e7:fa:c0:3e:e2:3c:49:05:f7:66:05:c8:90:ea:
                    ac:51:0a:2c:78:9b:8a:56:94:04:4b:a0:c8:89:a3:
                    09:1c:2a:36:43:bc:d0:e5:d6:00:a8:bc:15:ee:5f:
                    2a:a5:2f:a3:22:ab:3d:ca:38:12:3b:e6:76:ce:6f:
                    72:16:10:e3:1a:23:4c:26:3f:9f:6e:70:d3:2d:1a:
                    26:a1:40:35:b0:e0:9c:ad:d3:e6:2f:c1:d3:e0:d4:
                    5d:09:12:49:fc:a3:81:bb:d3:bf:9d:43:67:64:b9:
                    1b:f8:f5:90:4d:85:a0:65:39:5f:c6:23:e9:45:c7:
                    4b:28:c7:e8:a2:de:4f:6a:03:0b:2e:8d:af:cf:0f:
                    08:37:e0:a6:9d:cf:45:88:7b:b5:64:c1:32:96:8d:
                    c3:3e:40:4f:6f:66:0e:fd:cd:05:06:f3:07:11:bb:
                    d8:f7:55:18:88:c9:8e:90:7a:b3:71:18:bf:74:4d:
                    80:0e:9d:1a:c1:4a:66:a0:98:92:0b:66:d5:a3:72:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:99:FE:9A:94:E6:08:7B:4F:E0:D5:B0:FB:6E:E0:18:60:59:EE:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/880cf9ab-e7ce-391d-a9f9-3b725d7a3993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl

            X509v3 Authority Key Identifier:
                keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.192.0/21
                  199.175.184.0/22
                  204.86.64.0/19
                  206.201.64.0/20
                  208.93.241.0-208.93.243.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:db:b5:0a:11:e7:55:83:4c:fd:e2:b9:43:ff:fb:6a:c6:b4:
         87:74:d5:16:29:ae:fa:68:05:e1:ef:34:5d:16:6d:ea:f6:05:
         bd:8f:d8:12:1c:a3:c1:a4:91:0f:64:db:bc:cd:8e:d6:73:72:
         df:36:c1:6a:01:c6:0b:38:d4:be:b3:40:a0:0f:8e:2e:fd:d2:
         78:d6:0c:4d:19:31:fc:25:af:45:40:36:e5:2e:59:00:71:65:
         a2:a0:2a:2b:2a:f7:15:f7:45:c3:9c:cf:da:7b:d0:39:2b:bb:
         e4:07:d0:0d:62:38:31:bd:b4:00:72:b3:d8:27:73:32:e9:8f:
         e6:f1:37:77:b9:0b:ae:05:bc:1c:1c:df:47:da:66:3e:3a:3f:
         22:3c:bc:3e:26:d8:b3:14:ff:49:de:c1:aa:a1:d8:f1:ce:f2:
         ed:ff:fc:42:4a:6b:4d:08:41:39:95:84:b3:fd:1c:0b:b0:9c:
         a9:cb:08:de:05:90:32:a9:c4:1c:15:0d:9b:aa:b8:99:83:2a:
         eb:be:96:5a:e6:8f:c8:ec:aa:3b:5a:e8:36:72:08:d8:d9:6c:
         e4:d4:64:be:be:6b:9b:eb:e8:7d:30:15:7f:60:e9:38:8d:0a:
         db:ba:a7:95:e8:1e:07:ed:94:ba:e0:aa:c1:94:d9:ea:1b:c2:
         c0:e8:07:1e
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWErOC5cn2oZglMspJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTdjNjI4ODMtODk5ZC00Yjg2LTg4MDAtZTk3MTVkMTBh
NDgyMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
YjNjOTE5YTMtYTIxZi00N2Q0LWFlZjQtZjlhYWU2YzcxOTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD4yrCmgaWnXq22VQy/e1zZr2alDLbWhtLU4
6y/3beQxIJG4veDwBLaJiTqJ/M9L0qb/yHic+W4MZJQ+5/rAPuI8SQX3ZgXIkOqs
UQoseJuKVpQES6DIiaMJHCo2Q7zQ5dYAqLwV7l8qpS+jIqs9yjgSO+Z2zm9yFhDj
GiNMJj+fbnDTLRomoUA1sOCcrdPmL8HT4NRdCRJJ/KOBu9O/nUNnZLkb+PWQTYWg
ZTlfxiPpRcdLKMfoot5PagMLLo2vzw8IN+Cmnc9FiHu1ZMEylo3DPkBPb2YO/c0F
BvMHEbvY91UYiMmOkHqzcRi/dE2ADp0awUpmoJiSC2bVo3KtbwIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFCGZ/pqU5gh7T+DVsPtu4BhgWe5LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xN2M2
Mjg4My04OTlkLTRiODYtODgwMC1lOTcxNWQxMGE0ODIvODgwY2Y5YWItZTdjZS0z
OTFkLWE5ZjktM2I3MjVkN2EzOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTdjNjI4ODMtODk5ZC00Yjg2LTg4
MDAtZTk3MTVkMTBhNDgyLzE3YzYyODgzLTg5OWQtNGI4Ni04ODAwLWU5NzE1ZDEw
YTQ4Mi5jcmwwHwYDVR0jBBgwFoAU3RSJnAK92EnUJKV7aIh0t2HdE4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xN2M2Mjg4My04OTlkLTRiODYtODgwMC1lOTcx
NWQxMGE0ODIuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQDSnHAAwQC
x6+4AwQFzFZAAwQEzslAMAwDBADQXfEDBALQXfAwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAadu1ChHnVYNM
/eK5Q//7asa0h3TVFimu+mgF4e80XRZt6vYFvY/YEhyjwaSRD2TbvM2O1nNy3zbB
agHGCzjUvrNAoA+OLv3SeNYMTRkx/CWvRUA25S5ZAHFloqAqKyr3FfdFw5zP2nvQ
OSu75AfQDWI4Mb20AHKz2CdzMumP5vE3d7kLrgW8HBzfR9pmPjo/Ijy8PibYsxT/
Sd7BqqHY8c7y7f/8QkprTQhBOZWEs/0cC7CcqcsI3gWQMqnEHBUNm6q4mYMq676W
WuaPyOyqO1roNnII2Nls5NRkvr5rm+vofTAVf2DpOI0K27qnlegeB+2UuuCqwZTZ
6hvCwOgHHg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:12 2025 by rpki-client