Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa
File:                     5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa (raw, json)
Hash identifier:          d/81km2Mb2tt2yO13DZzwqTSsK3NataG+kJYZGCXtBY=
Subject key identifier:   29:80:73:A3:6F:45:61:02:52:98:51:D9:2F:66:E2:A0:FB:0A:1C:FE
Certificate issuer:       /CN=b94accf0-8067-4a9a-ba69-832d3d95402d
Certificate serial:       010D0C9F4328584AE196854019B3C383432F7380
Authority key identifier: AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     8075
IP address blocks:        170.62.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:85:40:19:b3:c3:83:43:2f:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94accf0-8067-4a9a-ba69-832d3d95402d
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=e0d206b5-6092-42ef-b76a-23cee62d78fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:d4:90:97:ca:62:f5:b6:7e:11:a9:1d:5c:
                    8d:d7:c5:e1:1c:00:d6:7c:23:5f:ee:ac:7a:22:db:
                    1d:57:f7:ad:00:d0:2c:2a:be:c7:ee:8e:1a:ed:1e:
                    f2:a7:fb:40:9d:0a:f1:e5:1d:7f:7f:54:36:88:d7:
                    c0:d3:c1:2c:bd:bb:20:fb:1c:67:26:c4:b2:b5:1d:
                    d9:5f:21:68:2c:53:5d:b2:16:a3:f9:cb:3e:95:1a:
                    16:b8:91:cb:70:f8:ec:44:c0:58:3b:4f:5e:4d:86:
                    c1:b6:43:17:a3:3f:90:f8:1c:b5:8b:37:8a:93:29:
                    20:ba:24:87:99:cb:6e:97:07:c6:93:e8:82:c6:c2:
                    0e:86:10:c7:6a:5c:71:ad:e6:1d:b5:58:fc:47:02:
                    72:e3:03:92:64:a7:d9:0e:80:1f:6c:b8:11:e9:ea:
                    ee:09:07:6b:ad:45:18:47:94:62:a2:88:03:f1:b3:
                    30:67:07:bc:df:0d:f6:2a:13:a1:a4:1d:93:43:4c:
                    ca:85:47:f3:9a:60:16:f7:18:20:35:d7:2c:bf:2a:
                    41:97:07:e7:be:3b:8e:77:46:00:e9:7f:c9:34:ca:
                    a8:ab:93:a5:12:db:20:75:f0:dd:83:1c:71:19:4a:
                    9e:93:33:16:bb:87:46:64:e4:fc:00:a3:e4:7a:f4:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:80:73:A3:6F:45:61:02:52:98:51:D9:2F:66:E2:A0:FB:0A:1C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.crl

            X509v3 Authority Key Identifier:
                keyid:AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:02:c8:24:96:bb:58:db:9f:80:02:ba:ba:db:3c:a4:c4:6d:
         17:4e:14:61:f3:e1:d2:c8:a5:1c:34:44:d0:27:37:ae:27:17:
         b4:e9:ac:bf:86:1b:50:a1:c8:13:53:15:7a:62:7b:f2:d3:6b:
         fc:4d:18:d1:f6:fe:ef:00:5f:f4:f7:83:a2:c3:c6:26:ab:bf:
         d5:c0:a0:d5:aa:de:d3:73:51:83:69:9b:67:3b:44:e5:a4:4d:
         2b:b2:2c:6e:d0:7a:11:13:50:bd:81:44:f2:6f:21:e0:e6:dc:
         f8:49:fc:e9:77:a9:60:72:9d:bc:96:05:e4:87:b2:e7:85:33:
         55:0c:36:14:18:d6:a8:3b:33:7e:51:95:51:f9:11:1c:77:c4:
         1b:0c:69:e6:a3:0c:0b:b1:b3:3d:96:68:7c:79:51:9e:f0:6a:
         db:0a:38:bb:39:85:0e:87:70:3d:be:62:22:cf:4a:11:35:bf:
         6b:6e:94:36:21:1f:b9:6b:33:60:3f:0a:e4:bf:fc:f2:20:83:
         73:72:29:36:d8:61:f2:fe:94:0c:2c:65:14:1a:c8:4b:25:cc:
         b5:4a:3d:ad:27:4d:e5:9b:52:5d:92:c0:24:95:27:61:c0:9c:
         06:c2:4d:95:a4:1e:d0:81:7c:ee:d6:c6:9e:53:15:42:94:d6:
         79:ee:88:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhloVAGbPDg0Mvc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk0YWNjZjAtODA2Ny00YTlhLWJhNjktODMyZDNkOTU0
MDJkMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZTBkMjA2YjUtNjA5Mi00MmVmLWI3NmEtMjNjZWU2MmQ3OGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4LUkJfKYvW2fhGpHVyN18XhHADWfCNf7qx6
ItsdV/etANAsKr7H7o4a7R7yp/tAnQrx5R1/f1Q2iNfA08Esvbsg+xxnJsSytR3Z
XyFoLFNdshaj+cs+lRoWuJHLcPjsRMBYO09eTYbBtkMXoz+Q+By1izeKkykguiSH
mctulwfGk+iCxsIOhhDHalxxreYdtVj8RwJy4wOSZKfZDoAfbLgR6eruCQdrrUUY
R5RioogD8bMwZwe83w32KhOhpB2TQ0zKhUfzmmAW9xggNdcsvypBlwfnvjuOd0YA
6X/JNMqoq5OlEtsgdfDdgxxxGUqekzMWu4dGZOT8AKPkevQI9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmAc6NvRWECUphR2S9m4qD7Chz+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iOTRh
Y2NmMC04MDY3LTRhOWEtYmE2OS04MzJkM2Q5NTQwMmQvNWU3MjAxZmEtMGZjOS0z
YmZiLWIxNTAtY2IzZGI1MWFjNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjk0YWNjZjAtODA2Ny00YTlhLWJh
NjktODMyZDNkOTU0MDJkL2I5NGFjY2YwLTgwNjctNGE5YS1iYTY5LTgzMmQzZDk1
NDAyZC5jcmwwHwYDVR0jBBgwFoAUro4Wxs1H9wGPYo0MMyTEqaRebi4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iOTRhY2NmMC04MDY3LTRhOWEtYmE2OS04MzJk
M2Q5NTQwMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcCyCSWu1jbn4ACurrbPKTEbRdOFGHz4dLIpRw0RNAnN64nF7TprL+G
G1ChyBNTFXpie/LTa/xNGNH2/u8AX/T3g6LDxiarv9XAoNWq3tNzUYNpm2c7ROWk
TSuyLG7QehETUL2BRPJvIeDm3PhJ/Ol3qWBynbyWBeSHsueFM1UMNhQY1qg7M35R
lVH5ERx3xBsMaeajDAuxsz2WaHx5UZ7watsKOLs5hQ6HcD2+YiLPShE1v2tulDYh
H7lrM2A/CuS//PIgg3NyKTbYYfL+lAwsZRQayEslzLVKPa0nTeWbUl2SwCSVJ2HA
nAbCTZWkHtCBfO7Wxp5TFUKU1nnuiKg=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:27:26 2025 by rpki-client