Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa
File:                     57fff646-7145-32f1-a13c-3572fed83485.roa (raw, json)
Hash identifier:          5WTK6ofAyE5xFD1Fx/G3nKwqAO4uCVfw04EK0b2bBYg=
Subject key identifier:   DE:C7:1C:3E:A8:2D:1F:A3:8A:56:E4:3D:EE:B6:71:2F:50:A4:0B:27
Certificate issuer:       /CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
Certificate serial:       010D0C9F4328584B6631F094944D15FF2E86F180
Authority key identifier: CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     393397
IP address blocks:        173.195.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f0:94:94:4d:15:ff:2e:86:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=80798058-9188-4cb9-ae35-a7a80dc82937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:0c:99:8c:c6:59:ba:f9:52:21:66:bf:ee:
                    8e:f8:32:78:9d:cf:fa:c4:56:eb:c5:59:1b:26:b0:
                    97:cc:69:bc:38:a7:bb:5f:67:61:9a:2c:bb:c9:b5:
                    f1:c4:f3:a2:23:e8:fa:6d:4a:91:e7:e4:9a:1b:78:
                    91:c9:8e:18:77:ca:9f:8b:16:77:f8:39:51:8b:ee:
                    bc:a5:bf:b2:f8:d4:1b:1f:74:c6:7e:85:05:91:7a:
                    fd:6a:ab:81:17:17:89:e7:d2:9a:fb:e3:24:45:24:
                    f3:bd:ba:f2:8e:c6:55:be:bc:34:aa:63:d7:00:1d:
                    be:60:58:0a:31:66:2b:79:c8:9a:a3:ea:74:8d:5b:
                    45:ba:79:f7:19:75:5c:a9:63:5e:5d:79:94:10:8c:
                    91:af:87:b6:5f:29:65:dd:c1:89:e1:34:55:dd:4f:
                    d4:93:07:f5:d4:f6:8e:df:9a:75:f2:b2:9d:c8:26:
                    2a:e4:39:47:4f:fd:e1:36:4c:5b:ab:4e:67:a2:4e:
                    51:87:44:c3:f2:6f:ec:5f:cd:ff:d3:cc:3e:a3:be:
                    b3:a4:06:ee:26:c3:2f:16:34:9e:4d:98:77:9d:1a:
                    6e:4e:49:4c:f5:75:b3:88:18:6f:38:db:53:da:02:
                    62:f1:cc:5c:48:64:21:46:03:17:37:55:32:d0:e3:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C7:1C:3E:A8:2D:1F:A3:8A:56:E4:3D:EE:B6:71:2F:50:A4:0B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/57fff646-7145-32f1-a13c-3572fed83485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl

            X509v3 Authority Key Identifier:
                keyid:CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:4c:10:b6:9b:44:c5:2a:94:61:46:ec:4a:65:2e:00:48:4e:
         8d:42:a8:d9:50:55:9a:e5:38:25:20:fb:3d:ab:ba:40:90:6e:
         09:64:b8:71:25:96:dd:27:27:b7:7e:af:d7:0a:c5:5c:5f:fd:
         d3:6b:9b:7f:a0:95:01:9e:89:56:80:7f:49:2a:1a:f4:4c:a9:
         82:3b:6a:4e:c4:6d:4a:f6:07:c9:a2:de:d7:eb:bc:02:49:b1:
         63:a6:7d:0a:05:29:20:f5:74:d6:2a:7f:72:02:3f:8f:6b:3d:
         27:0b:63:01:2f:6d:22:5f:9e:06:ab:d8:73:e4:73:0b:f5:85:
         e1:d5:03:05:89:fa:d5:3d:2e:88:db:09:89:54:50:1a:73:60:
         67:12:1b:f8:0d:22:03:bd:a3:bc:25:30:b3:c1:1d:f7:be:07:
         2b:70:6d:9b:06:c9:8c:f5:0c:79:95:46:c4:52:db:cb:8e:98:
         53:67:2c:5e:c7:ad:e2:9f:25:74:72:cc:27:3c:ba:a0:10:ac:
         ee:5c:7e:6a:52:4c:61:9a:f3:12:a6:0b:37:e1:f7:1f:57:5c:
         ca:55:5a:7b:f9:df:cd:52:4a:3f:f1:fa:c5:a3:5b:ca:e6:ee:
         2f:99:e1:e8:a3:84:6d:77:b4:9b:4f:0e:c0:1f:53:f5:71:0b:
         b0:3e:91:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfCUlE0V/y6G8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0MWEwMTMtY2RiNy00YzFiLWFjMGEtMDJhY2YxOTIx
NWYxMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk
ODA3OTgwNTgtOTE4OC00Y2I5LWFlMzUtYTdhODBkYzgyOTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyUMmYzGWbr5UiFmv+6O+DJ4nc/6xFbrxVkb
JrCXzGm8OKe7X2dhmiy7ybXxxPOiI+j6bUqR5+SaG3iRyY4Yd8qfixZ3+DlRi+68
pb+y+NQbH3TGfoUFkXr9aquBFxeJ59Ka++MkRSTzvbryjsZVvrw0qmPXAB2+YFgK
MWYreciao+p0jVtFunn3GXVcqWNeXXmUEIyRr4e2Xyll3cGJ4TRV3U/Ukwf11PaO
35p18rKdyCYq5DlHT/3hNkxbq05nok5Rh0TD8m/sX83/08w+o76zpAbuJsMvFjSe
TZh3nRpuTklM9XWziBhvONtT2gJi8cxcSGQhRgMXN1Uy0OMU5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7HHD6oLR+jilbkPe62cS9QpAsnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMDQx
YTAxMy1jZGI3LTRjMWItYWMwYS0wMmFjZjE5MjE1ZjEvNTdmZmY2NDYtNzE0NS0z
MmYxLWExM2MtMzU3MmZlZDgzNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDA0MWEwMTMtY2RiNy00YzFiLWFj
MGEtMDJhY2YxOTIxNWYxLzAwNDFhMDEzLWNkYjctNGMxYi1hYzBhLTAyYWNmMTky
MTVmMS5jcmwwHwYDVR0jBBgwFoAUzBeILAWXiNQp58gV8djO5Qwy+4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMDQxYTAxMy1jZGI3LTRjMWItYWMwYS0wMmFj
ZjE5MjE1ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcOIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVMELabRMUqlGFG7EplLgBITo1CqNlQVZrlOCUg+z2rukCQbglkuHEl
lt0nJ7d+r9cKxVxf/dNrm3+glQGeiVaAf0kqGvRMqYI7ak7EbUr2B8mi3tfrvAJJ
sWOmfQoFKSD1dNYqf3ICP49rPScLYwEvbSJfngar2HPkcwv1heHVAwWJ+tU9Lojb
CYlUUBpzYGcSG/gNIgO9o7wlMLPBHfe+BytwbZsGyYz1DHmVRsRS28uOmFNnLF7H
reKfJXRyzCc8uqAQrO5cfmpSTGGa8xKmCzfh9x9XXMpVWnv5381SSj/x+sWjW8rm
7i+Z4eijhG13tJtPDsAfU/VxC7A+kdY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:03 2025 by rpki-client