Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/54d9646b-b9df-37f6-86bc-c1e3763ba6f0.roa
File:                     54d9646b-b9df-37f6-86bc-c1e3763ba6f0.roa (raw, json)
Hash identifier:          tUBLLkLUdzEYc4BXWN0ejGL9hAStmim8r0ruh2W0mOM=
Subject key identifier:   C0:73:E1:87:1D:FC:2D:72:36:10:C1:17:25:3E:F2:FC:80:E8:49:3C
Certificate issuer:       /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial:       010D0C9F4328584AEED25DAE8CAF5A94B36843C0
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/54d9646b-b9df-37f6-86bc-c1e3763ba6f0.roa
Signing time:             Thu 21 Aug 2025 18:47:01 +0000
ROA not before:           Thu 21 Aug 2025 18:47:01 +0000
ROA not after:            Wed 19 Nov 2025 19:47:01 +0000
asID:                     22239
IP address blocks:        70.42.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:d2:5d:ae:8c:af:5a:94:b3:68:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
        Validity
            Not Before: Aug 21 18:47:01 2025 GMT
            Not After : Nov 19 19:47:01 2025 GMT
        Subject: CN=4d81abd1-7ad7-46e1-9827-d5854d62070f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:7b:49:13:0f:ad:c8:d1:74:78:89:68:4b:
                    8c:fc:0d:59:4c:9e:f1:1f:00:10:a8:65:f2:0e:9d:
                    b8:13:c9:4e:fb:35:62:75:d8:39:9a:ef:4a:73:4d:
                    4a:8c:5c:7e:5c:cb:d0:d4:d5:fc:14:cf:5d:d8:f1:
                    f7:a9:d1:34:b3:fe:f8:0a:89:fb:4e:5f:66:29:01:
                    6d:59:dd:84:c9:1b:ed:0a:ff:b5:f1:86:d3:9f:84:
                    97:20:b6:c4:55:21:2f:27:f1:df:bb:0e:49:b7:b1:
                    3f:ff:3f:db:27:43:40:ed:72:67:d6:08:4e:3e:bb:
                    58:48:bd:c9:08:49:ac:83:43:c4:2b:c6:ec:6b:fc:
                    e4:2c:de:ef:34:a4:30:aa:87:27:b3:63:60:8e:e5:
                    6f:ba:58:5f:30:72:0e:26:55:34:84:46:75:d4:42:
                    85:37:01:3f:bd:ea:16:a5:89:ff:8d:c0:f0:74:1e:
                    a4:2d:f3:19:53:7a:ab:c8:f6:ad:82:0b:2d:e8:29:
                    d7:d2:31:97:4d:18:26:c8:b5:36:64:e5:50:64:16:
                    40:f6:04:19:a0:e4:e5:32:01:ba:0c:9f:c3:1b:62:
                    b2:46:a8:39:2e:a4:3d:6d:55:78:ba:81:c6:4e:49:
                    a9:2b:9b:57:ad:4d:ec:ab:1b:5b:71:0d:09:8b:b8:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:73:E1:87:1D:FC:2D:72:36:10:C1:17:25:3E:F2:FC:80:E8:49:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/54d9646b-b9df-37f6-86bc-c1e3763ba6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl

            X509v3 Authority Key Identifier:
                keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.42.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:38:9a:66:8c:c0:1a:2f:70:6a:28:a6:f7:06:82:58:d8:5c:
         fd:43:5d:b7:12:44:33:28:83:0b:16:e5:ac:35:a4:e0:09:ce:
         3b:24:d2:dd:c1:b8:0f:84:b7:76:39:79:8e:3f:41:4f:09:42:
         38:35:42:cd:39:8d:15:95:a4:62:eb:cd:62:42:dd:c4:7b:19:
         07:49:2a:87:44:cd:38:d4:9e:20:c0:83:43:cb:2a:2a:93:7c:
         c8:f2:3a:9d:ee:76:e0:fc:fb:3b:fe:6f:88:ee:de:77:c6:61:
         d9:6f:93:ac:c2:49:8c:53:99:03:86:9e:f5:41:37:ef:11:45:
         f7:7c:70:ea:e4:f6:75:e6:d5:eb:5c:28:ee:80:a9:4b:20:c5:
         e4:ed:ff:86:ad:3c:12:3e:81:cf:36:f1:ef:8d:a9:0e:3b:ef:
         70:24:85:20:5e:3b:8f:56:df:5a:b6:5f:ff:15:ce:6a:5d:de:
         a7:90:dd:50:c5:b9:f8:a9:46:fd:5c:8c:3e:30:2d:f7:d3:91:
         81:86:47:2b:c6:28:6e:71:c2:d8:56:51:94:9c:05:19:f7:ca:
         c0:3c:71:87:7e:12:5c:ca:55:26:53:c3:c6:09:8a:c9:67:36:
         df:94:70:b0:23:33:9b:d0:b2:41:8d:7e:b4:5f:2c:72:ed:93:
         77:ca:fe:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEru0l2ujK9alLNoQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NWMzOWEtNzE1Yy00ZGMwLTg5MWEtYjM4ZjlkN2Ni
M2U4MB4XDTI1MDgyMTE4NDcwMVoXDTI1MTExOTE5NDcwMVowLzEtMCsGA1UEAxMk
NGQ4MWFiZDEtN2FkNy00NmUxLTk4MjctZDU4NTRkNjIwNzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoB7SRMPrcjRdHiJaEuM/A1ZTJ7xHwAQqGXy
Dp24E8lO+zViddg5mu9Kc01KjFx+XMvQ1NX8FM9d2PH3qdE0s/74Con7Tl9mKQFt
Wd2EyRvtCv+18YbTn4SXILbEVSEvJ/Hfuw5Jt7E//z/bJ0NA7XJn1ghOPrtYSL3J
CEmsg0PEK8bsa/zkLN7vNKQwqocns2NgjuVvulhfMHIOJlU0hEZ11EKFNwE/veoW
pYn/jcDwdB6kLfMZU3qryPatggst6CnX0jGXTRgmyLU2ZOVQZBZA9gQZoOTlMgG6
DJ/DG2KyRqg5LqQ9bVV4uoHGTkmpK5tXrU3sqxtbcQ0Ji7hKsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMBz4Ycd/C1yNhDBFyU+8vyA6Ek8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1
YzM5YS03MTVjLTRkYzAtODkxYS1iMzhmOWQ3Y2IzZTgvNTRkOTY0NmItYjlkZi0z
N2Y2LTg2YmMtYzFlMzc2M2JhNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk3NWMzOWEtNzE1Yy00ZGMwLTg5
MWEtYjM4ZjlkN2NiM2U4LzM5NzVjMzlhLTcxNWMtNGRjMC04OTFhLWIzOGY5ZDdj
YjNlOC5jcmwwHwYDVR0jBBgwFoAU6hj3sN+eSGqwsG9FbQ9XzJUOingwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTc1YzM5YS03MTVjLTRkYzAtODkxYS1iMzhm
OWQ3Y2IzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARipTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACk4mmaMwBovcGoopvcGgljYXP1DXbcSRDMogwsW5aw1pOAJzjsk0t3B
uA+Et3Y5eY4/QU8JQjg1Qs05jRWVpGLrzWJC3cR7GQdJKodEzTjUniDAg0PLKiqT
fMjyOp3uduD8+zv+b4ju3nfGYdlvk6zCSYxTmQOGnvVBN+8RRfd8cOrk9nXm1etc
KO6AqUsgxeTt/4atPBI+gc828e+NqQ4773AkhSBeO49W31q2X/8Vzmpd3qeQ3VDF
ufipRv1cjD4wLffTkYGGRyvGKG5xwthWUZScBRn3ysA8cYd+ElzKVSZTw8YJisln
Nt+UcLAjM5vQskGNfrRfLHLtk3fK/sk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:01:30 2025 by rpki-client