Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/af43605a-7241-3468-99da-c1d2269cb12c.roa
File:                     af43605a-7241-3468-99da-c1d2269cb12c.roa (raw, json)
Hash identifier:          K1rMvX0LocReDA/uXo2nYtdAS2a9NoUFyxJBpUdMP8Q=
Subject key identifier:   DD:3E:75:DF:1A:00:56:2C:B8:E1:A2:AD:40:1D:FE:E6:8A:F6:26:26
Certificate issuer:       /CN=027c3693-f63b-4f3e-b9ec-ab08979ee1de
Certificate serial:       010D0C9F4328584ADA9BCE98CDD4721491C7CC60
Authority key identifier: B4:7B:5B:C6:E5:ED:28:DC:E6:69:95:3D:60:A7:3C:4E:36:BC:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/af43605a-7241-3468-99da-c1d2269cb12c.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     55285
IP address blocks:        198.73.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:ce:98:cd:d4:72:14:91:c7:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027c3693-f63b-4f3e-b9ec-ab08979ee1de
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=9f8c6641-317f-46d2-8ddf-722d60c1c1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2b:2a:7e:f3:e6:55:ab:8f:5d:7d:3a:02:48:
                    53:83:a1:d8:cf:ce:9a:39:46:b5:a7:64:d0:35:4d:
                    7f:c8:be:4b:0d:34:06:3e:20:59:b2:a9:d6:00:25:
                    6c:14:7c:4b:81:c1:cd:a2:26:66:14:f3:ad:c9:cc:
                    17:fe:f5:f7:81:3b:c1:24:d6:90:49:c7:2b:f3:be:
                    20:ab:6e:39:32:6b:49:44:71:50:a0:f4:0c:12:5d:
                    3a:8a:96:32:b5:be:c2:37:97:d1:f3:82:8f:6a:17:
                    8e:3e:ca:de:d2:55:2a:59:d9:6c:ac:c9:7e:38:3d:
                    8d:13:be:e9:26:51:48:34:df:14:2c:03:e3:0b:4a:
                    e3:8a:d2:e4:e7:5a:0d:5f:e7:0a:1b:1d:5c:33:b6:
                    36:89:a5:bb:ae:94:ea:c3:33:56:d4:f4:1d:88:e8:
                    d3:e2:91:8c:bb:9e:66:7b:09:34:e6:03:1d:e1:e4:
                    db:85:4e:87:a6:0c:27:67:e2:a5:80:4e:9b:8e:68:
                    d2:07:8c:a4:bc:df:3f:ab:a0:51:12:c6:3b:dd:22:
                    73:57:d0:df:a9:ef:8e:41:a4:11:24:41:f9:7c:c3:
                    4d:e9:df:7c:e8:7f:09:16:06:f4:79:8d:4e:a1:cd:
                    83:d4:c8:4b:69:8f:57:52:92:ae:55:be:4b:27:f9:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3E:75:DF:1A:00:56:2C:B8:E1:A2:AD:40:1D:FE:E6:8A:F6:26:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/af43605a-7241-3468-99da-c1d2269cb12c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de/027c3693-f63b-4f3e-b9ec-ab08979ee1de.crl

            X509v3 Authority Key Identifier:
                keyid:B4:7B:5B:C6:E5:ED:28:DC:E6:69:95:3D:60:A7:3C:4E:36:BC:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/027c3693-f63b-4f3e-b9ec-ab08979ee1de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:94:cd:cf:3f:f8:ba:b9:e8:c1:42:47:68:30:3a:93:f0:ff:
         dd:9d:aa:9f:10:32:f8:45:e3:40:6f:5d:7e:c4:e5:0c:4b:3f:
         9e:3b:fc:9d:69:22:77:93:4d:45:5b:7a:8d:62:49:9e:3c:1f:
         c6:35:d8:8b:d6:b5:bf:b3:89:32:3b:e3:46:2f:fb:bd:1d:c0:
         0f:8c:8e:75:83:f7:85:ab:e6:96:77:50:cf:5c:77:f9:0e:11:
         a7:52:5a:15:61:c5:ff:0d:a7:90:2a:4b:ee:2d:dd:05:27:3d:
         7d:d6:21:72:3d:60:dd:44:c9:d1:c2:05:3c:52:99:52:4b:a9:
         bb:ca:a8:54:93:30:88:fd:00:af:27:cc:bc:38:38:30:c7:5d:
         f9:0c:4b:64:8c:e7:06:06:bb:7c:3a:d3:b3:61:35:1b:33:b3:
         59:2f:f3:39:6d:87:a1:7d:95:16:a4:23:1a:6c:b3:db:6e:a2:
         2f:64:59:ef:13:6f:bb:b9:83:89:9e:74:75:b0:ee:96:e9:e1:
         6a:57:57:d3:56:3c:73:4c:67:0e:aa:73:5b:5d:54:9c:99:54:
         a5:7a:9d:1f:9f:22:32:83:3a:d0:04:7c:e3:24:ec:32:9d:39:
         8b:33:f1:5b:97:49:56:23:ef:5e:10:74:69:06:f9:aa:b0:0d:
         aa:de:fc:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram86YzdRyFJHHzGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDI3YzM2OTMtZjYzYi00ZjNlLWI5ZWMtYWIwODk3OWVl
MWRlMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk
OWY4YzY2NDEtMzE3Zi00NmQyLThkZGYtNzIyZDYwYzFjMWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSsqfvPmVauPXX06AkhTg6HYz86aOUa1p2TQ
NU1/yL5LDTQGPiBZsqnWACVsFHxLgcHNoiZmFPOtycwX/vX3gTvBJNaQSccr874g
q245MmtJRHFQoPQMEl06ipYytb7CN5fR84KPaheOPsre0lUqWdlsrMl+OD2NE77p
JlFINN8ULAPjC0rjitLk51oNX+cKGx1cM7Y2iaW7rpTqwzNW1PQdiOjT4pGMu55m
ewk05gMd4eTbhU6HpgwnZ+KlgE6bjmjSB4ykvN8/q6BREsY73SJzV9Dfqe+OQaQR
JEH5fMNN6d986H8JFgb0eY1Ooc2D1MhLaY9XUpKuVb5LJ/mz6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0+dd8aAFYsuOGirUAd/uaK9iYmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMjdj
MzY5My1mNjNiLTRmM2UtYjllYy1hYjA4OTc5ZWUxZGUvYWY0MzYwNWEtNzI0MS0z
NDY4LTk5ZGEtYzFkMjI2OWNiMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDI3YzM2OTMtZjYzYi00ZjNlLWI5
ZWMtYWIwODk3OWVlMWRlLzAyN2MzNjkzLWY2M2ItNGYzZS1iOWVjLWFiMDg5Nzll
ZTFkZS5jcmwwHwYDVR0jBBgwFoAUtHtbxuXtKNzmaZU9YKc8Tja83aIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMjdjMzY5My1mNjNiLTRmM2UtYjllYy1hYjA4
OTc5ZWUxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxkk4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2Uzc8/+Lq56MFCR2gwOpPw/92dqp8QMvhF40BvXX7E5QxLP547/J1p
IneTTUVbeo1iSZ48H8Y12IvWtb+ziTI740Yv+70dwA+MjnWD94Wr5pZ3UM9cd/kO
EadSWhVhxf8Np5AqS+4t3QUnPX3WIXI9YN1EydHCBTxSmVJLqbvKqFSTMIj9AK8n
zLw4ODDHXfkMS2SM5wYGu3w607NhNRszs1kv8zlth6F9lRakIxpss9tuoi9kWe8T
b7u5g4medHWw7pbp4WpXV9NWPHNMZw6qc1tdVJyZVKV6nR+fIjKDOtAEfOMk7DKd
OYsz8VuXSVYj714QdGkG+aqwDare/No=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:34:42 2025 by rpki-client