Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa
File:                     017a6557-62d6-3351-a77b-bc0a23b230d3.roa (raw, json)
Hash identifier:          /YxF2YyO1ioNSNKb+kfWCBGOD3eB5iX301I7aR06vMI=
Subject key identifier:   D5:18:28:25:81:DF:5B:8A:46:F2:95:18:79:3D:9A:48:F4:65:47:DA
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584AEE26967D0164E6956EF47500
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     1742
IP address blocks:        140.247.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:96:7d:01:64:e6:95:6e:f4:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=76966112-2342-4fbf-86c9-2ff0a001f9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:d7:09:d9:44:fc:88:56:84:08:af:66:47:
                    9a:b2:40:c2:01:77:42:fa:21:70:09:c8:90:6a:19:
                    29:a8:42:17:20:e3:38:66:ac:cf:77:56:85:85:71:
                    45:4d:6e:99:ec:69:39:f1:db:19:34:f8:dc:f4:ad:
                    f3:aa:c8:21:07:77:95:92:ae:eb:5e:2d:32:e5:3d:
                    88:b9:ca:d4:f6:04:6c:9c:3a:dc:ae:2c:bd:91:f7:
                    53:cb:c9:a8:14:25:88:b0:6c:85:15:60:45:d4:7f:
                    e5:d5:cb:53:ef:b9:01:91:40:0a:3b:17:74:2b:e9:
                    bf:90:6b:6d:d5:b4:3b:93:36:fc:1a:17:5b:6b:91:
                    44:70:bc:9c:dc:5f:c5:b7:52:62:32:be:2f:84:be:
                    35:78:7d:f6:ad:b1:b9:25:51:a2:fd:b4:6c:09:47:
                    5f:f3:e9:53:07:6e:fd:d8:5e:4c:c1:86:c9:19:d8:
                    b0:89:a5:b2:d7:79:f5:08:33:32:e2:87:c2:bb:0a:
                    d5:6b:3b:aa:68:b1:8d:d2:af:d0:39:94:d4:78:b5:
                    46:fe:b1:46:fa:40:8e:bc:07:2f:62:98:32:db:10:
                    4d:d0:dc:3e:50:58:71:7e:3b:ae:fd:97:47:45:48:
                    7c:3a:2e:8e:4e:8c:3b:2d:db:30:4b:cf:5e:a6:6e:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:18:28:25:81:DF:5B:8A:46:F2:95:18:79:3D:9A:48:F4:65:47:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/017a6557-62d6-3351-a77b-bc0a23b230d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.247.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:4a:8b:9a:99:1e:9e:a8:11:b5:29:d0:fb:ef:6b:52:e9:
         27:21:db:fd:21:64:05:b4:89:89:e6:22:ab:cc:03:d8:cf:55:
         8c:d1:5b:73:80:0c:ad:46:07:37:88:77:d8:2f:11:ef:1c:21:
         ef:10:e9:b0:2a:f7:41:91:97:8c:d1:08:ff:07:cc:b8:a9:c0:
         40:c9:81:78:af:b4:42:16:d3:31:b7:4e:ec:66:dd:bc:ec:5e:
         f6:7d:90:7d:d8:88:59:e6:8e:5b:97:e5:93:bc:3c:5e:97:57:
         f2:02:50:aa:dd:8d:f6:12:95:95:26:5a:ce:46:2f:8b:72:2d:
         f4:85:fe:c9:13:9d:97:ef:e5:bb:2b:7d:ce:de:21:06:73:be:
         af:17:f2:42:0f:5f:7c:95:45:c7:7c:af:59:60:e6:fd:3d:09:
         c4:67:a0:88:4a:1a:0c:b7:5d:0f:c1:99:47:e9:00:65:31:29:
         83:6e:ce:7d:c4:a5:62:94:de:05:62:31:7e:f2:ca:34:54:65:
         01:45:87:72:ef:fd:49:14:c8:d4:f6:35:30:58:02:9a:48:91:
         44:7c:4e:af:f7:35:f7:b4:8a:4e:31:34:74:4d:2a:f0:a3:da:
         0c:eb:fb:69:61:1b:e1:13:93:82:e7:45:2b:13:ab:1b:ac:be:
         3d:ed:82:1c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEruJpZ9AWTmlW70dQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3
ZDdjMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk
NzY5NjYxMTItMjM0Mi00ZmJmLTg2YzktMmZmMGEwMDFmOWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1nXCdlE/IhWhAivZkeaskDCAXdC+iFwCciQ
ahkpqEIXIOM4ZqzPd1aFhXFFTW6Z7Gk58dsZNPjc9K3zqsghB3eVkq7rXi0y5T2I
ucrU9gRsnDrcriy9kfdTy8moFCWIsGyFFWBF1H/l1ctT77kBkUAKOxd0K+m/kGtt
1bQ7kzb8Ghdba5FEcLyc3F/Ft1JiMr4vhL41eH32rbG5JVGi/bRsCUdf8+lTB279
2F5MwYbJGdiwiaWy13n1CDMy4ofCuwrVazuqaLGN0q/QOZTUeLVG/rFG+kCOvAcv
Ypgy2xBN0Nw+UFhxfjuu/ZdHRUh8Oi6OTow7LdswS89epm7nrQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNUYKCWB31uKRvKVGHk9mkj0ZUfaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx
N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvMDE3YTY1NTctNjJkNi0z
MzUxLWE3N2ItYmMwYTIzYjIzMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli
ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm
N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0
YzBlZjdkN2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjPcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIOVKi5qZHp6oEbUp0Pvva1LpJyHb/SFkBbSJieYiq8wD2M9VjNFbc4AM
rUYHN4h32C8R7xwh7xDpsCr3QZGXjNEI/wfMuKnAQMmBeK+0QhbTMbdO7GbdvOxe
9n2QfdiIWeaOW5flk7w8XpdX8gJQqt2N9hKVlSZazkYvi3It9IX+yROdl+/luyt9
zt4hBnO+rxfyQg9ffJVFx3yvWWDm/T0JxGegiEoaDLddD8GZR+kAZTEpg27OfcSl
YpTeBWIxfvLKNFRlAUWHcu/9SRTI1PY1MFgCmkiRRHxOr/c197SKTjE0dE0q8KPa
DOv7aWEb4ROTgudFKxOrG6y+Pe2CHA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:57:41 2025 by rpki-client