Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa
File:                     5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa (raw, json)
Hash identifier:          Lc6+pix2zw8cekCkKBRbdKB1jsElujJdwF50qGVROYs=
Subject key identifier:   9D:DB:85:8B:DE:F1:CB:6B:D6:AC:6F:26:A9:81:3D:9B:7E:59:36:E8
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584A8412455BE7E5AE794FC43D80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14813
IP address blocks:        72.22.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:45:5b:e7:e5:ae:79:4f:c4:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2a39a740-1833-4f7e-b773-bd033339ba45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:de:89:51:76:ab:55:d3:49:f1:7f:71:5f:04:
                    31:c3:fe:0a:f0:a5:35:e2:11:50:b7:2e:cb:fb:cb:
                    5e:c2:e6:1f:d6:1f:b1:f1:5c:27:69:25:68:2d:56:
                    26:84:48:8b:71:a6:06:ff:00:29:53:bb:0b:62:15:
                    89:46:26:09:98:da:b4:db:40:e5:bc:ef:55:d1:26:
                    fa:c6:42:98:91:77:02:c3:29:f3:c5:ea:af:d8:12:
                    da:50:57:c9:55:45:42:dc:60:87:86:6e:a1:85:a2:
                    b4:d6:7b:85:75:21:3e:90:07:fd:4d:a9:47:d0:ba:
                    ff:ff:d3:45:a0:cb:02:f2:28:17:3c:2c:2f:77:1a:
                    9c:60:7f:23:39:e9:3b:14:1d:1c:ec:08:3a:f1:d6:
                    04:d9:a9:42:3f:b8:39:19:84:43:60:f0:76:bf:67:
                    ec:84:b9:5a:17:40:eb:47:46:f9:b0:a9:e9:65:22:
                    ca:c8:f3:b3:46:70:39:3f:0f:45:33:47:05:44:c7:
                    c8:e0:6a:67:f7:bd:79:31:b0:09:08:db:03:63:eb:
                    a6:e4:17:c7:17:05:b9:db:76:a4:9c:8e:d2:cb:d1:
                    01:5d:cb:7d:07:62:00:4a:42:66:00:27:ab:c6:6a:
                    ed:53:3e:44:f6:a6:14:34:12:3a:a9:70:d9:ec:43:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DB:85:8B:DE:F1:CB:6B:D6:AC:6F:26:A9:81:3D:9B:7E:59:36:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:19:4f:6c:9d:e0:61:74:7e:31:75:02:a0:5b:c8:79:fb:ab:
         d7:1a:15:2d:de:74:f4:9c:0b:a9:06:a4:61:3b:2b:72:a3:d6:
         71:c5:f8:4a:6b:6d:f1:72:35:20:56:4d:dd:f7:20:e5:98:a3:
         c3:51:73:f6:ab:2e:86:43:38:c1:f4:e8:fb:d6:2b:a8:ec:12:
         08:dc:60:05:08:93:10:8c:22:16:b4:95:db:ea:af:4e:4c:8c:
         84:ec:39:39:d8:ae:60:7d:f0:c2:f5:99:14:b3:03:e4:cd:a6:
         50:4f:70:00:48:0b:c9:e0:29:09:29:8e:47:18:fd:0a:7a:6d:
         a1:48:e4:96:e1:27:98:c0:b1:fb:7f:8e:8a:bf:a0:06:fd:7a:
         25:17:94:61:f7:df:37:dd:d5:76:43:08:03:8a:34:5c:56:c7:
         40:a9:2d:f9:8f:5f:b6:53:3e:0c:09:1b:2b:d2:bd:b5:e3:32:
         bb:0c:ce:6a:83:01:ef:31:f2:9d:fb:91:c5:76:57:88:08:fc:
         8b:12:d2:2d:6f:18:04:5f:9c:84:65:34:53:49:4a:3b:6c:09:
         a7:cf:b3:9a:ec:b6:e4:c9:67:55:48:72:de:99:2d:d6:81:e9:
         28:5b:c0:52:d5:6c:ff:34:53:46:bd:fb:0c:0c:da:cd:92:84:
         e9:28:cc:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkVb5+WueU/EPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MmEzOWE3NDAtMTgzMy00ZjdlLWI3NzMtYmQwMzMzMzliYTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN6JUXarVdNJ8X9xXwQxw/4K8KU14hFQty7L
+8tewuYf1h+x8VwnaSVoLVYmhEiLcaYG/wApU7sLYhWJRiYJmNq020DlvO9V0Sb6
xkKYkXcCwynzxeqv2BLaUFfJVUVC3GCHhm6hhaK01nuFdSE+kAf9TalH0Lr//9NF
oMsC8igXPCwvdxqcYH8jOek7FB0c7Ag68dYE2alCP7g5GYRDYPB2v2fshLlaF0Dr
R0b5sKnpZSLKyPOzRnA5Pw9FM0cFRMfI4Gpn9715MbAJCNsDY+um5BfHFwW523ak
nI7Sy9EBXct9B2IASkJmACerxmrtUz5E9qYUNBI6qXDZ7EPrQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ3bhYve8ctr1qxvJqmBPZt+WTboMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNWQyNzE0Y2UtMTRmYy0z
NGMyLTlhYzktZTdjMzYyMGU1YmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQZT2yd4GF0fjF1AqBbyHn7q9caFS3edPScC6kGpGE7K3Kj1nHF+Epr
bfFyNSBWTd33IOWYo8NRc/arLoZDOMH06PvWK6jsEgjcYAUIkxCMIha0ldvqr05M
jITsOTnYrmB98ML1mRSzA+TNplBPcABIC8ngKQkpjkcY/Qp6baFI5JbhJ5jAsft/
joq/oAb9eiUXlGH33zfd1XZDCAOKNFxWx0CpLfmPX7ZTPgwJGyvSvbXjMrsMzmqD
Ae8x8p37kcV2V4gI/IsS0i1vGARfnIRlNFNJSjtsCafPs5rstuTJZ1VIct6ZLdaB
6ShbwFLVbP80U0a9+wwM2s2ShOkozFc=
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:48:26 2025 by rpki-client