Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
File:                     e51d6345-d432-370c-9bcf-1a0a6bc53063.roa (raw, json)
Hash identifier:          cjladc5qHtuS6K0NIg12SCRU+QZSn97qXFBZkYHjfX4=
Subject key identifier:   5F:04:1D:8D:92:4A:71:36:93:A4:CE:CA:CF:3F:A4:21:5E:9B:17:1B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5243764B866B43FF008A40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     20115
IP address blocks:        172.220.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:43:76:4b:86:6b:43:ff:00:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=03419db2-038d-42ec-b303-0c1b6b592050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:a2:3f:69:8a:7b:25:8a:27:47:14:78:3a:
                    8b:07:b2:a4:0b:bf:11:79:a4:08:82:a6:be:62:9f:
                    4d:2f:bd:83:a5:4f:af:49:9a:e4:9a:fc:af:08:9b:
                    ff:df:ec:46:74:a6:68:c4:0b:6e:56:d5:8c:c8:da:
                    08:0b:fc:66:fc:49:3a:09:64:fa:21:26:2f:1e:db:
                    29:21:1c:5e:1e:6d:99:7a:c8:bc:a0:4b:7f:eb:04:
                    ae:63:39:90:89:46:81:b3:2b:67:13:0f:24:72:0c:
                    16:c4:52:48:6b:b5:6a:97:da:e7:41:1d:80:52:63:
                    b8:33:fd:c9:26:4c:a4:51:47:17:57:2d:fb:6f:25:
                    ec:f2:bf:1b:a9:64:f3:be:a6:c1:d1:79:a2:5f:72:
                    1f:0e:11:65:83:33:f3:89:6f:c3:7c:66:41:9d:b4:
                    17:f8:cf:a9:59:3f:2c:7a:01:4e:3b:a8:c3:1e:bb:
                    82:19:ac:c9:4c:6d:cf:fc:e8:4d:a8:10:41:0d:68:
                    be:5f:09:75:7e:fd:d5:e4:68:41:fc:13:a1:8e:62:
                    d3:c3:41:11:79:9e:a1:43:0e:66:1f:9a:72:01:be:
                    31:c3:46:48:2b:dd:71:51:65:16:73:eb:72:ff:58:
                    52:a9:ad:ec:d7:8f:6e:d3:63:b7:c2:75:5e:f0:08:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:04:1D:8D:92:4A:71:36:93:A4:CE:CA:CF:3F:A4:21:5E:9B:17:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.220.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:76:89:44:a5:b7:ab:5c:b8:b1:c6:98:97:d8:44:16:94:c0:
         da:58:d3:63:85:f7:d1:04:37:b1:15:9f:83:0b:62:2b:20:ba:
         fe:b6:28:69:f8:1d:d7:69:54:b0:2f:54:17:9c:80:96:05:73:
         6e:63:01:dc:8c:aa:23:57:42:9a:6f:de:b6:ec:a2:44:5e:fa:
         a6:6e:27:a2:d3:04:ee:4b:c4:36:b7:c1:92:de:67:39:dc:7f:
         76:ec:53:91:66:ac:81:af:68:14:ac:b6:5b:c7:56:e5:0b:4c:
         60:a2:e3:03:76:70:1f:cd:d0:61:39:98:c9:72:b0:7e:ce:c3:
         64:b9:9f:08:bf:d5:60:c9:bf:57:86:76:df:d4:9a:13:22:75:
         59:eb:83:42:33:49:44:d8:73:0e:03:68:21:48:6e:d9:12:53:
         8d:70:73:d4:22:df:d6:cc:19:31:d9:53:85:b1:b4:e1:b5:65:
         11:34:e6:dc:5a:a7:81:0e:a1:66:9e:21:7e:30:34:0d:e6:b6:
         14:22:6a:6d:b8:4c:b2:7b:9f:b1:ba:c2:a3:a8:ad:ed:b7:93:
         f3:c3:89:83:b2:c4:b2:64:c4:fe:9c:48:25:f4:d3:75:ac:0b:
         c7:b3:c6:c0:ef:6b:5d:c5:b0:5d:04:84:32:fd:48:2b:7a:5a:
         66:a5:b5:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkN2S4ZrQ/8AikAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
MDM0MTlkYjItMDM4ZC00MmVjLWIzMDMtMGMxYjZiNTkyMDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXyiP2mKeyWKJ0cUeDqLB7KkC78ReaQIgqa+
Yp9NL72DpU+vSZrkmvyvCJv/3+xGdKZoxAtuVtWMyNoIC/xm/Ek6CWT6ISYvHtsp
IRxeHm2Zesi8oEt/6wSuYzmQiUaBsytnEw8kcgwWxFJIa7Vql9rnQR2AUmO4M/3J
JkykUUcXVy37byXs8r8bqWTzvqbB0XmiX3IfDhFlgzPziW/DfGZBnbQX+M+pWT8s
egFOO6jDHruCGazJTG3P/OhNqBBBDWi+Xwl1fv3V5GhB/BOhjmLTw0EReZ6hQw5m
H5pyAb4xw0ZIK91xUWUWc+ty/1hSqa3s149u02O3wnVe8Ah6dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8EHY2SSnE2k6TOys8/pCFemxcbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTUxZDYzNDUtZDQzMi0z
NzBjLTliY2YtMWEwYTZiYzUzMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrNwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGt2iUSlt6tcuLHGmJfYRBaUwNpY02OF99EEN7EVn4MLYisguv62KGn4
HddpVLAvVBecgJYFc25jAdyMqiNXQppv3rbsokRe+qZuJ6LTBO5LxDa3wZLeZznc
f3bsU5FmrIGvaBSstlvHVuULTGCi4wN2cB/N0GE5mMlysH7Ow2S5nwi/1WDJv1eG
dt/UmhMidVnrg0IzSUTYcw4DaCFIbtkSU41wc9Qi39bMGTHZU4WxtOG1ZRE05txa
p4EOoWaeIX4wNA3mthQiam24TLJ7n7G6wqOore23k/PDiYOyxLJkxP6cSCX003Ws
C8ezxsDva13FsF0EhDL9SCt6WmaltVQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:32:36 2025 by rpki-client