Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa
File:                     64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa (raw, json)
Hash identifier:          NJYptKp+sKXkjSbL7p2Ub3l6dfFn/7RPdO+kL7P43BI=
Subject key identifier:   35:07:91:85:B9:32:BF:16:E5:4A:3A:C6:48:01:C7:D2:51:8B:2D:06
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584A94D0CDE071DED9AA0563C300
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     55286
IP address blocks:        173.255.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:cd:e0:71:de:d9:aa:05:63:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=05c5d078-1c17-4682-945c-c524a9328260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:cb:5d:71:e5:b4:13:21:44:6a:51:fe:ee:
                    c4:b4:91:fb:04:02:2b:0d:4b:44:0e:02:75:63:26:
                    17:07:5a:37:70:70:d5:55:12:9f:90:9c:8c:df:57:
                    9a:f2:b0:12:e6:eb:ed:8d:d7:48:a9:01:17:ea:80:
                    09:a7:03:df:2f:12:7a:80:4c:72:f2:4b:b6:3b:e6:
                    ba:41:4b:dd:2d:ab:ce:93:f4:2d:47:db:6c:ff:ed:
                    71:e6:4e:bc:63:3f:2b:a4:23:24:3a:2b:96:1e:3a:
                    ea:7e:d5:46:82:28:ae:1d:a9:ad:cc:2c:4d:fc:77:
                    36:36:7d:2d:5b:24:3b:ce:93:1d:19:58:85:0e:de:
                    37:2a:27:42:3c:7b:dc:a0:fc:5d:0d:e0:47:10:93:
                    e4:cf:7a:bf:75:bd:8b:c9:e7:92:2b:54:33:20:ef:
                    c4:8b:29:1c:b7:92:62:3c:cd:66:60:38:d8:72:96:
                    31:cb:4c:09:f3:fc:6b:31:ad:c3:47:1d:9b:ab:bf:
                    ff:df:23:0b:c5:8a:6f:18:73:9b:d7:0f:68:d0:ab:
                    26:37:69:6b:e2:eb:6b:d4:2b:24:44:07:6d:99:d4:
                    5a:76:b4:e9:2e:29:46:88:3f:93:5b:00:99:dc:50:
                    06:82:75:e4:37:58:f1:a9:ad:f2:4e:b5:df:60:2a:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:07:91:85:B9:32:BF:16:E5:4A:3A:C6:48:01:C7:D2:51:8B:2D:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/64e6b2ae-03b1-35f3-a11e-91cc3ca0635b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e1:60:d1:3d:98:a6:6b:8d:ec:4f:66:05:aa:67:00:da:ed:
         5e:a8:e9:d0:f3:25:7d:46:44:27:11:c0:96:61:c0:02:df:0d:
         f3:0d:89:0b:76:f0:44:d4:18:97:0a:47:a4:24:3e:d0:e6:f9:
         04:97:a4:23:f6:32:bc:e0:2a:97:e4:f9:c7:b4:c5:1f:2a:b1:
         ab:44:36:74:77:e8:24:1a:e2:b9:cd:1f:69:1d:0a:af:21:69:
         00:66:b2:8e:73:b7:eb:ac:8a:c1:d2:12:c0:04:a6:ab:8c:3a:
         a1:fc:84:d4:c1:38:9d:ec:5e:96:ec:be:4a:1a:bf:59:9b:28:
         e8:bf:10:92:cc:c9:25:55:5e:cb:91:63:6c:24:09:bd:a2:fb:
         28:08:00:4d:f0:60:f3:8b:13:d2:5e:84:9d:62:42:30:88:47:
         ae:81:63:68:f7:f3:61:f6:8f:39:78:d6:e0:de:11:57:5b:a0:
         53:4f:fa:90:a4:55:e1:99:19:6c:55:eb:83:07:49:c6:fb:aa:
         14:b4:98:b0:30:04:f2:af:fe:34:57:4a:00:fd:a6:30:62:8c:
         29:ec:64:a6:61:95:49:86:d7:44:27:51:30:e4:3a:36:7c:40:
         de:8d:8c:18:4e:e4:aa:3c:69:d6:dd:97:82:0d:75:ae:d8:8a:
         56:ee:84:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0M3gcd7ZqgVjwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk
MDVjNWQwNzgtMWMxNy00NjgyLTk0NWMtYzUyNGE5MzI4MjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXnLXXHltBMhRGpR/u7EtJH7BAIrDUtEDgJ1
YyYXB1o3cHDVVRKfkJyM31ea8rAS5uvtjddIqQEX6oAJpwPfLxJ6gExy8ku2O+a6
QUvdLavOk/QtR9ts/+1x5k68Yz8rpCMkOiuWHjrqftVGgiiuHamtzCxN/Hc2Nn0t
WyQ7zpMdGViFDt43KidCPHvcoPxdDeBHEJPkz3q/db2LyeeSK1QzIO/Eiykct5Ji
PM1mYDjYcpYxy0wJ8/xrMa3DRx2bq7//3yMLxYpvGHOb1w9o0KsmN2lr4utr1Csk
RAdtmdRadrTpLilGiD+TWwCZ3FAGgnXkN1jxqa3yTrXfYCr4mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDUHkYW5Mr8W5Uo6xkgBx9JRiy0GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNjRlNmIyYWUtMDNiMS0z
NWYzLWExMWUtOTFjYzNjYTA2MzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7hYNE9mKZrjexPZgWqZwDa7V6o6dDzJX1GRCcRwJZhwALfDfMNiQt2
8ETUGJcKR6QkPtDm+QSXpCP2MrzgKpfk+ce0xR8qsatENnR36CQa4rnNH2kdCq8h
aQBmso5zt+usisHSEsAEpquMOqH8hNTBOJ3sXpbsvkoav1mbKOi/EJLMySVVXsuR
Y2wkCb2i+ygIAE3wYPOLE9JehJ1iQjCIR66BY2j382H2jzl41uDeEVdboFNP+pCk
VeGZGWxV64MHScb7qhS0mLAwBPKv/jRXSgD9pjBijCnsZKZhlUmG10QnUTDkOjZ8
QN6NjBhO5Ko8adbdl4INda7YilbuhLw=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:06:23 2025 by rpki-client