Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa
File:                     17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa (raw, json)
Hash identifier:          jdvrGZRfDsm8NcpBIZQLX/EcPJ4QY51vy4kIUy4XqLs=
Subject key identifier:   CD:C5:DA:43:CD:06:52:B9:3B:37:B0:9C:9F:0B:CB:04:DB:2F:44:08
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F4328584AD7D1261538043E16BA030AA0
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     36666
IP address blocks:        72.10.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:26:15:38:04:3e:16:ba:03:0a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=4e15afd0-5b66-4da3-84f6-d05944bb90d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:66:cd:e7:1e:55:5a:4b:ba:04:7a:7b:d1:91:
                    18:ed:d9:9c:c1:62:c7:84:e1:67:bf:9e:b5:f9:a8:
                    de:f5:fb:b0:7e:37:8e:9b:0b:df:28:03:4f:93:26:
                    f8:be:c0:bb:a9:13:c6:7b:ec:6f:bc:50:2b:7d:90:
                    46:19:45:2b:49:ff:dd:c5:1f:de:dd:34:f2:af:fd:
                    25:12:70:d9:2c:56:74:fd:02:09:38:f5:95:29:b4:
                    75:3c:21:a5:a7:f2:56:c2:75:b9:a6:c7:96:ad:73:
                    36:ea:ec:01:ba:c2:47:be:54:56:62:a2:10:d3:34:
                    53:75:f7:ff:87:3c:3d:d8:2a:cb:05:34:e6:a6:72:
                    9c:b7:22:00:e8:ef:19:03:de:25:20:ca:53:9c:19:
                    68:a4:3c:7a:34:94:27:7d:2d:04:fa:c2:4a:c3:e8:
                    5c:31:db:29:d9:00:18:70:74:37:07:8e:ff:36:43:
                    c5:79:00:22:eb:d2:f7:1f:ab:de:a1:cc:52:0a:56:
                    a7:5c:6e:2f:8e:a2:8e:31:33:b7:6f:b7:e0:a8:f2:
                    38:c7:93:8d:65:a9:71:fd:a1:37:4f:d4:c4:eb:16:
                    a0:f8:79:e4:7b:26:a8:0e:39:92:6f:b8:6c:ad:06:
                    58:50:17:fb:fa:69:16:f4:47:1d:fb:5d:41:05:37:
                    1c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C5:DA:43:CD:06:52:B9:3B:37:B0:9C:9F:0B:CB:04:DB:2F:44:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/17aebc8e-2ee6-3a66-92a8-99097ee10f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:91:41:4d:eb:80:6e:71:42:1f:22:e7:30:1d:cf:e3:83:
         cf:80:54:88:0f:2b:d5:dd:d0:dc:ce:ee:df:30:8a:f6:ee:5a:
         b2:bb:f5:4d:0a:70:44:74:0f:1c:75:89:61:77:55:29:d1:85:
         ce:d3:aa:1a:c8:a8:6e:d0:a8:12:2b:9c:61:2e:9b:13:cd:e7:
         e4:a2:71:e4:3f:12:50:f2:ed:b0:73:ab:40:67:99:83:1e:99:
         a7:69:3f:6a:bb:54:ef:0d:fc:4a:fd:e4:f4:23:1a:94:eb:88:
         10:63:59:c9:5e:5f:49:87:42:6e:eb:47:e3:c5:dc:55:27:38:
         de:8f:57:b8:cf:fc:cd:f9:69:10:d5:50:a3:f9:4c:bd:11:58:
         2e:31:82:20:6e:47:07:fb:db:44:cf:42:8f:c7:3e:4c:25:bf:
         87:20:6e:33:5c:67:5b:99:d6:6f:65:7e:dc:8c:63:8f:b3:8a:
         fa:aa:76:0c:29:f3:77:24:c4:90:de:43:1e:56:10:34:24:e5:
         d8:6e:88:89:26:c0:54:86:a3:c3:91:0d:d0:e0:71:cc:80:4f:
         1b:78:eb:a0:39:e9:70:b4:d3:56:4e:f9:9e:50:28:73:cd:f7:
         89:3b:83:0e:44:be:a1:72:d4:b4:00:76:1e:68:9b:81:09:2a:
         d1:5c:fb:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SYVOAQ+FroDCqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBlMzM4YjktMmE2My00ZGZmLTkzNzEtYzhhOGU5MzUw
ZWViMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
NGUxNWFmZDAtNWI2Ni00ZGEzLTg0ZjYtZDA1OTQ0YmI5MGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGbN5x5VWku6BHp70ZEY7dmcwWLHhOFnv561
+aje9fuwfjeOmwvfKANPkyb4vsC7qRPGe+xvvFArfZBGGUUrSf/dxR/e3TTyr/0l
EnDZLFZ0/QIJOPWVKbR1PCGlp/JWwnW5pseWrXM26uwBusJHvlRWYqIQ0zRTdff/
hzw92CrLBTTmpnKctyIA6O8ZA94lIMpTnBlopDx6NJQnfS0E+sJKw+hcMdsp2QAY
cHQ3B47/NkPFeQAi69L3H6veocxSClanXG4vjqKOMTO3b7fgqPI4x5ONZalx/aE3
T9TE6xag+HnkeyaoDjmSb7hsrQZYUBf7+mkW9Ecd+11BBTccZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3F2kPNBlK5OzewnJ8LywTbL0QIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMGUz
MzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4ZTkzNTBlZWIvMTdhZWJjOGUtMmVlNi0z
YTY2LTkyYTgtOTkwOTdlZTEwZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTBlMzM4YjktMmE2My00ZGZmLTkz
NzEtYzhhOGU5MzUwZWViL2UwZTMzOGI5LTJhNjMtNGRmZi05MzcxLWM4YThlOTM1
MGVlYi5jcmwwHwYDVR0jBBgwFoAUNDUW6fpcIavP8B9lsDFncZERP8owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMGUzMzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4
ZTkzNTBlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAqgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBMkUFN64BucUIfIucwHc/jg8+AVIgPK9Xd0NzO7t8wivbuWrK79U0K
cER0Dxx1iWF3VSnRhc7TqhrIqG7QqBIrnGEumxPN5+SiceQ/ElDy7bBzq0BnmYMe
madpP2q7VO8N/Er95PQjGpTriBBjWcleX0mHQm7rR+PF3FUnON6PV7jP/M35aRDV
UKP5TL0RWC4xgiBuRwf720TPQo/HPkwlv4cgbjNcZ1uZ1m9lftyMY4+zivqqdgwp
83ckxJDeQx5WEDQk5dhuiIkmwFSGo8ORDdDgccyATxt466A56XC001ZO+Z5QKHPN
94k7gw5EvqFy1LQAdh5om4EJKtFc+60=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:54:38 2025 by rpki-client