Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f9a44f0e-35ca-3a7b-b848-b030707c3804.roa
File:                     f9a44f0e-35ca-3a7b-b848-b030707c3804.roa (raw, json)
Hash identifier:          knmfO65g0R1ZEsFqIDp2qiVBt5OcPLrPYQEMaq4oySI=
Subject key identifier:   91:E2:7C:07:8C:DA:0E:6A:A2:A4:28:85:1F:84:2C:32:C3:55:5E:E2
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328584B79BCBE9D5D4086BB1F2FBA20
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f9a44f0e-35ca-3a7b-b848-b030707c3804.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     5645
IP address blocks:        192.171.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:be:9d:5d:40:86:bb:1f:2f:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=50bc61c6-5578-40ca-b07b-6bd228179bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:bc:4d:5e:c4:51:12:b2:24:95:26:3d:b8:
                    5d:c5:2f:ba:1a:ff:5d:7b:c7:ad:9b:43:e3:e1:a2:
                    df:6c:81:8a:60:b7:bc:38:29:e5:65:51:51:92:02:
                    7c:23:a5:08:06:12:a5:9d:f2:38:5f:17:68:0f:20:
                    1b:79:47:35:ae:a4:80:8d:2b:e7:03:32:54:62:cd:
                    eb:8d:0c:46:19:59:23:6e:68:bc:11:c3:85:e8:bb:
                    d9:58:58:45:70:2f:08:e2:f1:96:75:41:c0:c6:14:
                    d5:36:10:b1:6d:ff:fb:37:21:5d:84:a6:ac:2a:88:
                    17:66:5c:91:8a:bc:be:a6:9b:b6:98:41:16:bc:3c:
                    0c:6e:d2:c1:42:d9:69:1f:1a:b5:f9:5f:1a:66:06:
                    35:8b:8e:c8:64:65:a7:42:05:59:1b:de:c4:f6:fe:
                    f2:fe:90:d3:4d:8c:d7:94:4d:46:17:95:91:97:cb:
                    6f:17:92:d9:7f:6e:79:09:19:0c:c2:f6:be:d1:eb:
                    ae:2a:b2:37:db:4e:7a:bb:bd:50:4e:5c:f3:4a:39:
                    48:ae:47:c5:ad:99:d0:a2:c1:cd:42:b1:5d:98:03:
                    49:08:da:dd:ca:e4:2a:f6:f7:63:86:a7:2f:57:6d:
                    40:50:47:b1:74:4c:56:dd:05:42:f9:55:05:05:73:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E2:7C:07:8C:DA:0E:6A:A2:A4:28:85:1F:84:2C:32:C3:55:5E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/f9a44f0e-35ca-3a7b-b848-b030707c3804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:93:1c:8a:f7:db:4c:60:a1:ba:a8:c3:94:6d:a3:fd:3e:23:
         d0:7e:8c:74:c7:b1:8c:f3:d1:a4:05:b7:ea:4f:3b:8d:fd:f3:
         02:a4:89:0f:06:3f:14:75:48:1e:d2:e1:14:66:38:dc:73:93:
         17:7d:b0:05:59:41:c6:44:e6:0b:47:59:09:d2:dc:0a:53:a3:
         22:ae:13:f0:5c:71:e2:65:94:6d:38:92:cd:f1:d4:a1:c8:c6:
         dc:f1:93:f0:71:56:7a:c5:3b:a9:67:0b:af:d7:88:d5:98:36:
         c7:55:8a:5b:f8:a6:47:8e:ed:98:69:5b:6b:ca:cc:7c:02:2e:
         89:00:be:4a:b9:20:c6:26:34:fc:7f:46:2d:fe:d0:27:a6:13:
         00:8e:e0:2e:77:dd:cb:d7:58:04:9d:4c:29:ba:d5:42:28:d7:
         de:1d:f3:0f:f6:55:11:06:1f:db:a0:18:19:cc:a0:ab:52:5e:
         c6:0a:05:8b:67:97:fb:f1:39:39:88:2d:f5:cb:2f:43:c8:50:
         59:d9:39:4c:8c:eb:cf:d1:8c:d8:21:cb:5c:ba:8b:97:b9:52:
         e7:d3:56:61:19:4c:c0:ef:8a:45:59:ec:a7:6c:c8:0e:ee:6a:
         ec:03:9e:17:0c:ba:03:1a:ab:7e:87:0f:6f:af:c1:db:a7:53:
         d9:3c:cf:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vL6dXUCGux8vuiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcx
MTkyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk
NTBiYzYxYzYtNTU3OC00MGNhLWIwN2ItNmJkMjI4MTc5YmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ28TV7EURKyJJUmPbhdxS+6Gv9de8etm0Pj
4aLfbIGKYLe8OCnlZVFRkgJ8I6UIBhKlnfI4XxdoDyAbeUc1rqSAjSvnAzJUYs3r
jQxGGVkjbmi8EcOF6LvZWFhFcC8I4vGWdUHAxhTVNhCxbf/7NyFdhKasKogXZlyR
iry+ppu2mEEWvDwMbtLBQtlpHxq1+V8aZgY1i47IZGWnQgVZG97E9v7y/pDTTYzX
lE1GF5WRl8tvF5LZf255CRkMwva+0euuKrI32056u71QTlzzSjlIrkfFrZnQosHN
QrFdmANJCNrdyuQq9vdjhqcvV21AUEexdExW3QVC+VUFBXN4IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJHifAeM2g5qoqQohR+ELDLDVV7iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRl
NDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzExOTIvZjlhNDRmMGUtMzVjYS0z
YTdiLWI4NDgtYjAzMDcwN2MzODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFm
MjYtNzY3ZDhhNjcxMTkyLzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3
MTE5Mi5jcmwwHwYDVR0jBBgwFoAUxgiZJ8n+iQwKmkdxsPshppvRgPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03Njdk
OGE2NzExOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwKsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCTHIr320xgobqow5Rto/0+I9B+jHTHsYzz0aQFt+pPO4398wKkiQ8G
PxR1SB7S4RRmONxzkxd9sAVZQcZE5gtHWQnS3ApToyKuE/BcceJllG04ks3x1KHI
xtzxk/BxVnrFO6lnC6/XiNWYNsdVilv4pkeO7ZhpW2vKzHwCLokAvkq5IMYmNPx/
Ri3+0CemEwCO4C533cvXWASdTCm61UIo194d8w/2VREGH9ugGBnMoKtSXsYKBYtn
l/vxOTmILfXLL0PIUFnZOUyM68/RjNghy1y6i5e5UufTVmEZTMDvikVZ7KdsyA7u
auwDnhcMugMaq36HD2+vwdunU9k8z3E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:23:14 2025 by rpki-client