Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa
File:                     45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa (raw, json)
Hash identifier:          +9+ei3GYNNnzXRFISFc8yyxxxZzSW4xR+JvWpGUIF9c=
Subject key identifier:   A7:ED:14:1A:03:30:3D:6E:61:59:FF:07:B5:1E:20:C8:0A:57:D7:B1
Certificate issuer:       /CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c
Certificate serial:       010D0C9F4328584AF0F134ACC0BC5A573A3566C0
Authority key identifier: D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     32787
IP address blocks:        192.169.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:34:ac:c0:bc:5a:57:3a:35:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=9bc6e936-cc15-4853-9b7c-45395a0e7b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:33:05:b1:0f:85:f1:28:9a:23:2a:d3:7b:
                    a8:ba:72:ef:3a:b9:62:e9:f4:35:69:15:00:f9:9a:
                    8f:b8:a0:25:20:2c:74:41:f6:8c:1f:fd:19:1a:44:
                    6c:a3:46:1b:de:ad:c6:d3:90:57:fd:23:83:0f:59:
                    af:cb:b7:a7:8c:df:b5:5f:24:ca:80:3c:69:b8:7e:
                    a2:78:d9:7b:20:c9:84:14:67:24:3b:4a:4d:a7:01:
                    c7:20:8b:45:d8:e9:4d:4e:fa:80:86:0d:ca:85:56:
                    9a:ca:4d:18:9e:38:b6:a6:83:df:53:ae:22:a3:3f:
                    e9:a4:43:3c:71:ab:50:19:da:77:78:77:99:5d:72:
                    71:31:76:9d:1c:4c:a5:45:e3:26:6f:5a:05:6a:42:
                    f0:c1:06:a7:3b:5c:cc:72:45:9f:bc:fa:19:ad:8f:
                    28:4d:8f:20:63:47:83:ca:30:84:d5:96:e6:bd:6d:
                    2d:80:9c:df:07:b5:cc:76:04:5f:f5:2d:27:63:72:
                    51:a1:4b:16:49:14:d8:a6:f5:b2:06:12:92:6f:7b:
                    5f:cb:68:97:86:c7:96:8f:fd:c4:e1:03:f6:e0:28:
                    bc:ab:9c:fc:d0:4f:b6:20:3c:6e:70:94:67:18:30:
                    c5:22:90:43:d9:3e:53:4b:b9:b6:17:1f:21:d7:aa:
                    14:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:ED:14:1A:03:30:3D:6E:61:59:FF:07:B5:1E:20:C8:0A:57:D7:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/45ab7ed7-1307-36c3-847b-e2b9013c4f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl

            X509v3 Authority Key Identifier:
                keyid:D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.169.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3c:e1:18:db:40:7e:65:97:5e:7e:ea:8e:51:79:fd:69:cd:
         50:bf:2d:d1:13:8e:8a:db:82:cb:01:58:8c:d6:74:b0:30:7c:
         5f:bf:4a:ee:bb:2d:5c:b5:42:13:89:f5:5f:46:96:eb:a2:17:
         f7:ce:7b:8d:02:27:75:c5:45:ff:16:46:92:ee:a7:bd:11:53:
         38:44:a4:82:1a:31:a6:6b:7a:b0:18:17:a3:77:70:df:58:87:
         e5:0c:47:29:36:8a:cb:10:04:de:a7:43:fa:53:2e:06:62:c2:
         14:1c:de:c7:61:fb:9c:be:9a:8f:c0:9f:fb:7f:5a:ed:9a:08:
         28:84:1d:92:7d:b3:5d:39:a1:bb:f9:49:5d:27:01:59:6f:4a:
         0d:7a:16:2a:7b:65:91:c6:ee:c7:be:66:3a:c4:6f:10:9f:93:
         f7:3c:11:3a:e5:4f:38:07:dd:f4:42:95:63:a4:25:b8:32:8f:
         36:e5:f5:3c:4f:47:38:93:79:29:07:d3:60:58:20:8a:2a:fd:
         7e:59:fc:e4:91:97:2a:9e:d6:96:9f:17:85:d7:21:a1:fa:bb:
         ac:a3:ca:5d:a7:1d:6e:1a:d1:db:25:7f:dd:28:58:c6:87:dc:
         0d:44:bd:61:4b:2a:e1:ef:b6:b9:c2:39:fb:cc:a6:57:98:56:
         29:75:91:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TSswLxaVzo1ZsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWNjZmUyNjYtMDYwOS00OWNkLWIyYmEtNjcxYTY0ZWZk
YzdjMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
OWJjNmU5MzYtY2MxNS00ODUzLTliN2MtNDUzOTVhMGU3YjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnMzBbEPhfEomiMq03uounLvOrli6fQ1aRUA
+ZqPuKAlICx0QfaMH/0ZGkRso0Yb3q3G05BX/SODD1mvy7enjN+1XyTKgDxpuH6i
eNl7IMmEFGckO0pNpwHHIItF2OlNTvqAhg3KhVaayk0Ynji2poPfU64ioz/ppEM8
catQGdp3eHeZXXJxMXadHEylReMmb1oFakLwwQanO1zMckWfvPoZrY8oTY8gY0eD
yjCE1ZbmvW0tgJzfB7XMdgRf9S0nY3JRoUsWSRTYpvWyBhKSb3tfy2iXhseWj/3E
4QP24Ci8q5z80E+2IDxucJRnGDDFIpBD2T5TS7m2Fx8h16oUQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKftFBoDMD1uYVn/B7UeIMgKV9exMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xY2Nm
ZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFhNjRlZmRjN2MvNDVhYjdlZDctMTMwNy0z
NmMzLTg0N2ItZTJiOTAxM2M0ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWNjZmUyNjYtMDYwOS00OWNkLWIy
YmEtNjcxYTY0ZWZkYzdjLzFjY2ZlMjY2LTA2MDktNDljZC1iMmJhLTY3MWE2NGVm
ZGM3Yy5jcmwwHwYDVR0jBBgwFoAU0vlps9WA6dWmnzmbJ4no4nNpERkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xY2NmZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFh
NjRlZmRjN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKkFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAw84RjbQH5ll15+6o5Ref1pzVC/LdETjorbgssBWIzWdLAwfF+/Su67
LVy1QhOJ9V9GluuiF/fOe40CJ3XFRf8WRpLup70RUzhEpIIaMaZrerAYF6N3cN9Y
h+UMRyk2issQBN6nQ/pTLgZiwhQc3sdh+5y+mo/An/t/Wu2aCCiEHZJ9s105obv5
SV0nAVlvSg16Fip7ZZHG7se+ZjrEbxCfk/c8ETrlTzgH3fRClWOkJbgyjzbl9TxP
RziTeSkH02BYIIoq/X5Z/OSRlyqe1pafF4XXIaH6u6yjyl2nHW4a0dslf90oWMaH
3A1EvWFLKuHvtrnCOfvMpleYVil1kcQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:53 2025 by rpki-client