Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa
File:                     c491c12d-818f-3600-85d3-2274f8c724f7.roa (raw, json)
Hash identifier:          Dp242GkYSBMil8e2rt3BjUjaxL/qTnLlo1PCp+PRuH8=
Subject key identifier:   B3:C4:1C:FE:61:3F:12:6E:80:6C:19:9F:DD:F9:D7:CF:89:DE:89:D6
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A88409AE8EF792B7FC9C51880
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     22652
IP address blocks:        107.161.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:9a:e8:ef:79:2b:7f:c9:c5:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=fe2e1556-738c-4d4b-a2f3-51d3e1415aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:65:90:ae:70:84:6a:43:70:07:37:89:9e:24:
                    a6:b5:de:0e:ba:7c:6e:ee:01:e8:a7:fe:3c:a3:43:
                    d4:dd:8f:c8:99:f3:d0:1c:18:6f:ab:73:29:48:20:
                    b4:35:1d:3e:46:22:e6:31:a4:f6:fd:cc:2d:95:d8:
                    a7:86:cb:e5:bd:4d:80:d5:fb:99:d0:b6:60:b1:be:
                    58:fd:47:76:2c:b6:66:b4:c7:11:96:f3:80:29:9e:
                    ce:20:9e:6e:cb:db:bb:bd:e4:b9:04:ec:3a:80:64:
                    47:ab:34:b8:0b:fb:e3:28:2a:4a:12:97:ca:c1:aa:
                    77:27:36:3e:97:c9:13:a9:af:38:83:2d:db:45:08:
                    3f:c4:60:0f:bc:d9:76:67:52:d1:35:1a:d7:34:d3:
                    61:f9:69:f5:5b:a1:e6:d0:e7:aa:9c:2c:9b:31:73:
                    f9:2b:92:67:45:2c:bb:04:d3:a8:88:d1:1a:4a:32:
                    ca:47:31:b9:c8:26:e1:59:fe:15:41:56:d3:b7:de:
                    17:b1:11:76:10:29:a4:1f:e1:99:82:53:e3:67:d9:
                    23:f0:74:0b:87:c5:18:8b:79:0b:aa:bc:1f:e1:2d:
                    db:79:dd:7b:8e:aa:65:72:f4:db:99:92:68:2c:02:
                    6c:58:27:bc:84:11:cd:9c:42:07:5e:a3:43:02:b0:
                    d4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C4:1C:FE:61:3F:12:6E:80:6C:19:9F:DD:F9:D7:CF:89:DE:89:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9e:79:c6:9a:a8:28:a6:d6:8f:78:7a:09:6c:85:f3:00:6d:
         15:4e:62:b0:7c:da:f3:b7:63:e7:60:5c:b4:5c:4c:a4:eb:3e:
         8c:08:0c:34:0c:6b:8f:d8:d4:33:76:f1:9b:89:b5:6f:cf:77:
         38:59:2a:dc:70:21:cb:26:fd:35:2a:9a:3c:1a:51:77:71:62:
         12:48:4b:79:bd:54:d5:41:01:d6:c6:16:49:d1:e4:5a:fb:a8:
         38:19:8d:40:35:ad:a8:29:75:c5:ee:04:fe:fa:fb:01:6c:39:
         bb:5d:3e:d2:e3:61:f6:b2:f2:b2:e6:18:d2:4d:90:4f:21:98:
         bc:25:8f:07:a2:66:0b:cc:8c:2d:5a:82:a5:9e:ca:a2:22:e5:
         a0:2c:06:e4:27:29:eb:7c:d6:7b:ad:32:dd:26:04:c6:01:81:
         84:49:60:ac:1a:d6:58:2e:6f:9c:31:3d:df:5f:cc:91:66:38:
         40:f7:5f:08:cf:a2:a9:4c:ae:a3:95:2e:d8:be:a3:9a:b2:fd:
         e8:51:97:2e:2d:06:13:24:23:88:83:36:a3:48:4b:4b:13:d2:
         06:eb:fb:77:64:65:a1:2d:aa:a7:52:4e:c6:91:67:05:1d:ef:
         4a:47:ea:66:39:71:68:47:df:7f:7d:46:5f:9a:79:5d:c6:ea:
         92:6b:80:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJro73krf8nFGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk
ZmUyZTE1NTYtNzM4Yy00ZDRiLWEyZjMtNTFkM2UxNDE1YWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWWQrnCEakNwBzeJniSmtd4Ounxu7gHop/48
o0PU3Y/ImfPQHBhvq3MpSCC0NR0+RiLmMaT2/cwtldinhsvlvU2A1fuZ0LZgsb5Y
/Ud2LLZmtMcRlvOAKZ7OIJ5uy9u7veS5BOw6gGRHqzS4C/vjKCpKEpfKwap3JzY+
l8kTqa84gy3bRQg/xGAPvNl2Z1LRNRrXNNNh+Wn1W6Hm0OeqnCybMXP5K5JnRSy7
BNOoiNEaSjLKRzG5yCbhWf4VQVbTt94XsRF2ECmkH+GZglPjZ9kj8HQLh8UYi3kL
qrwf4S3bed17jqplcvTbmZJoLAJsWCe8hBHNnEIHXqNDArDUeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLPEHP5hPxJugGwZn93518+J3onWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYzQ5MWMxMmQtODE4Zi0z
NjAwLTg1ZDMtMjI3NGY4YzcyNGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa6EAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCeecaaqCim1o94eglshfMAbRVOYrB82vO3Y+dgXLRcTKTrPowIDDQM
a4/Y1DN28ZuJtW/PdzhZKtxwIcsm/TUqmjwaUXdxYhJIS3m9VNVBAdbGFknR5Fr7
qDgZjUA1ragpdcXuBP76+wFsObtdPtLjYfay8rLmGNJNkE8hmLwljweiZgvMjC1a
gqWeyqIi5aAsBuQnKet81nutMt0mBMYBgYRJYKwa1lgub5wxPd9fzJFmOED3XwjP
oqlMrqOVLti+o5qy/ehRly4tBhMkI4iDNqNIS0sT0gbr+3dkZaEtqqdSTsaRZwUd
70pH6mY5cWhH3399Rl+aeV3G6pJrgLw=
-----END CERTIFICATE-----
Generated at Mon Jul 28 22:15:14 2025 by rpki-client