Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
File:                     d3f55b78-b0db-358b-92ae-a01f4943931a.roa (raw, json)
Hash identifier:          04+DxMMbb45Zv3tadi789LxslILIDUXTWqRxbYB0beM=
Subject key identifier:   12:32:0C:20:45:88:66:D3:E4:EB:6F:82:B5:08:9F:BF:83:67:2C:C5
Certificate issuer:       /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Certificate serial:       010D0C9F4328584AE8912E9AED55859E42770CD0
Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     18705
IP address blocks:        173.247.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:2e:9a:ed:55:85:9e:42:77:0c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=13e59bbd-3a95-4b54-aee2-18e88c9b9245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:74:3a:49:69:b1:7f:a9:ef:08:a8:c4:dd:
                    0e:a9:be:51:19:98:87:0b:d6:35:60:b2:6f:89:f5:
                    d7:76:1f:4d:4f:08:4f:e4:ce:9e:8f:ff:94:4c:90:
                    f8:67:f9:2c:9b:66:13:9d:e1:f2:72:77:99:83:d2:
                    29:40:0f:ef:04:85:50:09:fd:3b:6b:04:fc:29:3b:
                    96:29:97:1e:1a:08:d4:aa:18:fb:e0:4c:2e:5d:3e:
                    5e:66:e6:59:85:0a:b0:2e:20:97:47:c7:eb:57:67:
                    fb:a6:ca:28:99:89:8f:d0:b8:61:c2:f5:62:89:72:
                    15:44:61:c3:47:89:08:36:5f:4b:6a:5a:ab:66:86:
                    79:a1:aa:f2:b8:5a:cb:f4:08:4e:22:d8:f7:f3:7d:
                    01:47:f8:4c:90:bf:c1:40:43:83:33:c4:5d:2a:11:
                    9f:33:db:ef:eb:ef:c7:ee:2a:51:76:4a:b1:c7:d0:
                    27:54:10:9c:97:d5:af:8a:46:f8:e2:db:4d:17:08:
                    37:dc:87:73:9b:0a:c7:ca:6d:ac:9d:28:d9:d3:8c:
                    f8:91:6d:97:3b:d1:29:fc:4f:60:68:8c:59:61:f5:
                    79:4e:4a:23:26:3d:78:0c:0a:36:18:a4:df:2a:7a:
                    ca:f3:13:19:77:48:c7:45:70:f2:16:f9:fe:a0:0d:
                    4c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:32:0C:20:45:88:66:D3:E4:EB:6F:82:B5:08:9F:BF:83:67:2C:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl

            X509v3 Authority Key Identifier:
                keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:14:6d:ec:86:ff:f8:08:ed:fe:b4:04:78:5d:2a:59:46:52:
         8f:c9:54:10:49:11:db:2b:86:4e:b3:98:20:52:52:48:e7:2d:
         91:b5:b2:75:ef:9a:08:e3:9d:33:b5:ca:1c:f3:1f:b2:64:bd:
         95:12:f7:e7:45:9d:a6:f7:67:05:1e:2c:8d:12:30:be:ad:21:
         c2:08:8c:27:5e:a0:7a:e2:fe:d4:de:63:62:c6:e9:70:00:99:
         b5:8f:b6:4b:16:09:3f:88:44:43:0e:08:18:27:7a:b3:ff:e1:
         e3:17:64:5d:36:a9:9f:7e:6b:18:ad:2e:83:85:8d:79:b4:86:
         0a:b7:de:55:f0:3f:8c:4b:27:83:1b:ad:ee:3d:e0:5c:62:f1:
         0f:e5:31:d4:4f:e9:d2:c9:4d:42:c2:ae:f3:1e:a5:f1:46:d5:
         cf:8a:73:ba:1c:e5:39:00:c9:31:ab:66:0d:3e:44:b6:a6:03:
         d1:6e:88:4c:55:ed:f9:75:3a:22:9f:5a:a9:02:ac:04:79:fe:
         7d:a4:52:27:ec:b5:bc:50:01:42:31:10:da:96:41:ff:ff:1d:
         d5:f9:a5:fa:fe:2e:2a:2a:6e:b4:45:b9:7c:29:b1:f5:71:61:
         cc:db:42:20:f1:3d:df:01:4f:a6:e0:e9:9e:16:9d:f9:1d:f7:
         2c:fa:77:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokS6a7VWFnkJ3DNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5
MDVkMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk
MTNlNTliYmQtM2E5NS00YjU0LWFlZTItMThlODhjOWI5MjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolB0OklpsX+p7wioxN0Oqb5RGZiHC9Y1YLJv
ifXXdh9NTwhP5M6ej/+UTJD4Z/ksm2YTneHycneZg9IpQA/vBIVQCf07awT8KTuW
KZceGgjUqhj74EwuXT5eZuZZhQqwLiCXR8frV2f7psoomYmP0LhhwvViiXIVRGHD
R4kINl9LalqrZoZ5oaryuFrL9AhOItj3830BR/hMkL/BQEODM8RdKhGfM9vv6+/H
7ipRdkqxx9AnVBCcl9Wvikb44ttNFwg33IdzmwrHym2snSjZ04z4kW2XO9Ep/E9g
aIxZYfV5TkojJj14DAo2GKTfKnrK8xMZd0jHRXDyFvn+oA1MjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBIyDCBFiGbT5OtvgrUIn7+DZyzFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk
OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvZDNmNTViNzgtYjBkYi0z
NThiLTkyYWUtYTAxZjQ5NDM5MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw
MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk
OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz
NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrfcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIUbeyG//gI7f60BHhdKllGUo/JVBBJEdsrhk6zmCBSUkjnLZG1snXv
mgjjnTO1yhzzH7JkvZUS9+dFnab3ZwUeLI0SML6tIcIIjCdeoHri/tTeY2LG6XAA
mbWPtksWCT+IREMOCBgnerP/4eMXZF02qZ9+axitLoOFjXm0hgq33lXwP4xLJ4Mb
re494Fxi8Q/lMdRP6dLJTULCrvMepfFG1c+Kc7oc5TkAyTGrZg0+RLamA9FuiExV
7fl1OiKfWqkCrAR5/n2kUifstbxQAUIxENqWQf//HdX5pfr+LioqbrRFuXwpsfVx
YczbQiDxPd8BT6bg6Z4Wnfkd9yz6d/4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:51 2025 by rpki-client