Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa
File:                     c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa (raw, json)
Hash identifier:          ApsDFCBVwye03kpTZOus9Kvx1WCPgU4LGWSikVxPCS8=
Subject key identifier:   C3:A5:BE:6A:DF:31:0C:7D:50:FE:B2:1E:E5:9B:97:7F:BA:A9:82:E0
Certificate issuer:       /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial:       010D0C9F4328584ACE0B9EDB7657201F4E680BC0
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     11924
IP address blocks:        64.79.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:9e:db:76:57:20:1f:4e:68:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=630e576e-4498-4882-b27d-fe4d80041ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:56:e9:99:9b:b3:c9:c8:f5:9a:9e:08:2b:
                    77:1b:66:9d:28:c7:81:5c:13:ac:62:f5:54:17:e3:
                    63:7f:67:fe:da:59:3b:4a:fd:c5:da:b9:f3:45:9c:
                    5d:8b:c4:50:a3:1c:39:fd:4d:66:1e:77:57:63:97:
                    71:a1:29:e1:10:5f:84:9a:e5:a2:6c:66:ab:b3:5a:
                    f8:3d:4d:a7:22:52:0e:0c:93:ce:f8:27:38:ef:f5:
                    63:9c:8e:33:7c:a3:cd:36:49:da:df:4c:fc:64:eb:
                    c3:73:6d:f7:0e:33:76:32:9e:d8:b3:bf:45:b7:1c:
                    be:c2:15:2f:d4:6b:22:af:23:52:5a:1f:81:57:87:
                    83:47:a7:70:c2:b4:0e:fb:c8:3f:73:6b:cf:5c:07:
                    00:0a:5d:19:bd:f9:88:e6:ec:e0:30:10:c5:3b:4a:
                    98:94:54:1b:02:a3:79:33:7e:ac:f5:9e:28:5b:dc:
                    ee:0d:b7:e9:49:bb:35:58:87:26:60:04:5e:41:c4:
                    23:e5:3d:4f:c1:e5:b1:79:ff:5e:bf:74:18:17:09:
                    0b:75:9b:27:49:7a:ae:7e:17:29:65:28:e7:3f:4e:
                    65:ee:17:f8:a2:bc:78:8d:b3:a8:12:8c:d4:ad:c9:
                    fe:db:64:39:8b:a0:50:ba:34:c7:d4:64:34:46:44:
                    b7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A5:BE:6A:DF:31:0C:7D:50:FE:B2:1E:E5:9B:97:7F:BA:A9:82:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/c477d60d-a0ed-3063-9bc0-a2c23851e6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl

            X509v3 Authority Key Identifier:
                keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:e3:c5:1e:de:bf:12:9a:30:21:3c:7d:ee:d2:10:d2:9a:
         d2:c3:fb:5d:fb:8e:6a:92:82:e7:97:d0:19:b4:78:5a:cb:b9:
         79:f0:2e:44:04:2d:7a:1d:0a:7e:30:49:47:61:6e:90:07:64:
         ab:8b:c9:57:8d:12:03:92:6a:86:b9:f1:04:dd:b9:5e:7e:ea:
         61:1b:3c:ff:c9:1e:32:a4:a2:08:8b:64:60:51:79:7a:99:8f:
         cd:73:44:6b:60:50:84:ec:04:df:d4:71:b6:11:ea:a9:eb:00:
         9f:d1:74:8b:1b:d1:72:0a:30:b4:ae:db:f5:1a:56:ec:2e:45:
         8e:6a:35:bd:2a:3a:60:38:55:a1:4c:60:e8:55:7e:ce:22:bf:
         b3:56:72:b6:b0:d0:16:a8:83:18:4a:05:5e:ac:ef:c4:ee:59:
         2c:5c:8d:bf:27:84:ff:05:12:23:f1:48:bd:7c:78:7f:e2:ff:
         1f:35:1d:fd:70:4b:c5:17:6f:88:75:cb:03:e9:97:07:80:c5:
         fd:9b:4c:00:32:00:97:66:89:8d:48:b9:e2:bb:d2:5e:f5:ad:
         3a:ba:9a:d6:82:2f:75:ed:0e:3c:7c:69:8e:c7:1c:50:ed:e2:
         89:5f:f2:c4:ae:97:1d:72:7f:6a:d9:59:87:b5:c7:40:6c:b8:
         98:c5:ae:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC57bdlcgH05oC8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjE2YjFlZDItNDkxZi00ZWQ3LWJlOTktNTliMjAzMTBj
NDc1MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
NjMwZTU3NmUtNDQ5OC00ODgyLWIyN2QtZmU0ZDgwMDQxYWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2NW6Zmbs8nI9ZqeCCt3G2adKMeBXBOsYvVU
F+Njf2f+2lk7Sv3F2rnzRZxdi8RQoxw5/U1mHndXY5dxoSnhEF+EmuWibGars1r4
PU2nIlIODJPO+Cc47/VjnI4zfKPNNkna30z8ZOvDc233DjN2Mp7Ys79Ftxy+whUv
1GsiryNSWh+BV4eDR6dwwrQO+8g/c2vPXAcACl0ZvfmI5uzgMBDFO0qYlFQbAqN5
M36s9Z4oW9zuDbfpSbs1WIcmYAReQcQj5T1PweWxef9ev3QYFwkLdZsnSXqufhcp
ZSjnP05l7hf4orx4jbOoEozUrcn+22Q5i6BQujTH1GQ0RkS3TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOlvmrfMQx9UP6yHuWbl3+6qYLgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMTZi
MWVkMi00OTFmLTRlZDctYmU5OS01OWIyMDMxMGM0NzUvYzQ3N2Q2MGQtYTBlZC0z
MDYzLTliYzAtYTJjMjM4NTFlNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjE2YjFlZDItNDkxZi00ZWQ3LWJl
OTktNTliMjAzMTBjNDc1L2YxNmIxZWQyLTQ5MWYtNGVkNy1iZTk5LTU5YjIwMzEw
YzQ3NS5jcmwwHwYDVR0jBBgwFoAUEGObLEoCatgzyXEiJFJcgL5sq9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mMTZiMWVkMi00OTFmLTRlZDctYmU5OS01OWIy
MDMxMGM0NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQE8gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLS48Ue3r8SmjAhPH3u0hDSmtLD+137jmqSgueX0Bm0eFrLuXnwLkQE
LXodCn4wSUdhbpAHZKuLyVeNEgOSaoa58QTduV5+6mEbPP/JHjKkogiLZGBReXqZ
j81zRGtgUITsBN/UcbYR6qnrAJ/RdIsb0XIKMLSu2/UaVuwuRY5qNb0qOmA4VaFM
YOhVfs4iv7NWcraw0BaogxhKBV6s78TuWSxcjb8nhP8FEiPxSL18eH/i/x81Hf1w
S8UXb4h1ywPplweAxf2bTAAyAJdmiY1IueK70l71rTq6mtaCL3XtDjx8aY7HHFDt
4olf8sSulx1yf2rZWYe1x0BsuJjFrqQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:56:28 2025 by rpki-client