Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/f75491fc-4b77-3d92-8729-1a8662b1ba09.roa
File:                     f75491fc-4b77-3d92-8729-1a8662b1ba09.roa (raw, json)
Hash identifier:          CUBgxO3QJG5nRSQAPGeDI9qwJcarMXoaSTYNPtjQZfo=
Subject key identifier:   F8:7B:DC:9A:A5:F0:A6:73:28:65:D0:DD:72:10:89:87:35:F3:DD:8A
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584B13080CD289470FD782914480
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/f75491fc-4b77-3d92-8729-1a8662b1ba09.roa
Signing time:             Wed 03 Sep 2025 18:04:17 +0000
ROA not before:           Wed 03 Sep 2025 18:04:17 +0000
ROA not after:            Tue 02 Dec 2025 19:04:17 +0000
asID:                     174
IP address blocks:        206.105.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:08:0c:d2:89:47:0f:d7:82:91:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Sep  3 18:04:17 2025 GMT
            Not After : Dec  2 19:04:17 2025 GMT
        Subject: CN=641bff5e-5093-4c43-b78a-7dcdb147aec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:ab:74:8a:82:21:71:c7:a9:c7:3e:c3:57:
                    4c:04:b1:8e:c3:c4:fe:7c:06:60:69:13:5b:bc:2c:
                    d9:e4:a2:47:9b:7c:40:68:72:db:46:4f:f3:c1:d3:
                    3c:cf:0d:ac:5e:b6:62:4a:d1:5f:51:39:46:05:2e:
                    98:b8:e1:2e:24:96:00:f3:c4:28:88:99:c4:1d:19:
                    27:2d:18:83:2f:24:86:ba:51:6f:3b:d5:02:2a:d1:
                    77:91:b7:bc:46:58:17:43:5b:f0:39:f9:09:35:39:
                    fc:32:81:ac:90:0b:a7:19:14:06:3b:cd:e0:2a:51:
                    9f:ae:51:1b:4b:35:9f:3b:33:04:41:f0:52:50:36:
                    43:38:86:33:24:cc:84:8d:06:c6:ed:00:77:c6:2e:
                    e1:d0:db:73:b7:9e:ec:3e:b1:e8:95:2e:1a:fa:2b:
                    32:d3:e8:74:ea:5e:e2:e1:6c:9e:f3:b6:89:72:d4:
                    0d:0b:ee:34:ec:33:e1:cd:8b:64:1c:32:0d:cb:e8:
                    45:25:42:d7:f4:f4:13:48:33:6c:a1:fd:11:30:78:
                    52:70:61:c8:49:71:4f:eb:6d:5f:fc:6f:05:0b:64:
                    e2:77:ad:df:79:1c:38:b6:06:aa:3a:4b:2e:6f:61:
                    93:a7:38:ae:3c:a1:62:1d:71:db:22:63:35:f2:e6:
                    83:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7B:DC:9A:A5:F0:A6:73:28:65:D0:DD:72:10:89:87:35:F3:DD:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/f75491fc-4b77-3d92-8729-1a8662b1ba09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.105.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d4:50:aa:97:11:c7:c5:2a:ee:b0:2b:a0:8a:7f:1d:15:89:
         f0:c2:48:4e:cd:71:12:8c:3a:7c:b6:83:f9:8f:47:b1:49:2c:
         71:0c:d9:3f:1f:2f:65:d3:a1:34:5d:ef:71:07:a2:0d:64:18:
         e2:04:da:17:2b:c2:95:8d:2d:ad:b9:ef:1e:1b:54:0b:8c:37:
         f7:d2:f9:e7:34:36:59:cf:c6:4c:66:ac:6e:3f:29:75:00:31:
         b7:4d:ac:67:4b:18:4c:7e:d6:c8:02:e0:e1:5a:92:61:37:b2:
         70:a1:ce:17:87:2f:e3:39:02:dd:56:bb:bf:3c:7a:51:82:7a:
         c5:98:92:96:70:19:17:7d:0e:24:2a:2f:5c:12:eb:1f:08:b7:
         ce:f5:1c:ce:c6:39:39:17:36:f6:10:d3:b6:b7:7f:ea:9c:bd:
         0b:13:c0:67:d7:99:54:52:ce:c3:4c:e5:0a:f4:f7:bb:1c:50:
         6f:c1:f9:f4:f9:69:21:fd:19:fb:70:ca:33:e2:c4:d8:9f:a8:
         96:46:9b:86:f3:40:d5:bc:90:85:53:27:b2:e0:bd:30:e7:ca:
         6b:50:f2:d4:2d:cc:7c:00:10:1c:80:66:2f:a5:84:23:91:0e:
         c6:31:b7:cd:9a:f0:eb:2d:81:14:31:30:ae:3a:38:c1:8f:08:
         ec:ca:b1:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsTCAzSiUcP14KRRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy
Y2MyMB4XDTI1MDkwMzE4MDQxN1oXDTI1MTIwMjE5MDQxN1owLzEtMCsGA1UEAxMk
NjQxYmZmNWUtNTA5My00YzQzLWI3OGEtN2RjZGIxNDdhZWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfurdIqCIXHHqcc+w1dMBLGOw8T+fAZgaRNb
vCzZ5KJHm3xAaHLbRk/zwdM8zw2sXrZiStFfUTlGBS6YuOEuJJYA88QoiJnEHRkn
LRiDLySGulFvO9UCKtF3kbe8RlgXQ1vwOfkJNTn8MoGskAunGRQGO83gKlGfrlEb
SzWfOzMEQfBSUDZDOIYzJMyEjQbG7QB3xi7h0Ntzt57sPrHolS4a+isy0+h06l7i
4Wye87aJctQNC+407DPhzYtkHDINy+hFJULX9PQTSDNsof0RMHhScGHISXFP621f
/G8FC2Tid63feRw4tgaqOksub2GTpziuPKFiHXHbImM18uaDUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPh73Jql8KZzKGXQ3XIQiYc1892KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw
YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZjc1NDkxZmMtNGI3Ny0z
ZDkyLTg3MjktMWE4NjYyYjFiYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz
MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1
MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0
NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzmmwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADUUKqXEcfFKu6wK6CKfx0VifDCSE7NcRKMOny2g/mPR7FJLHEM2T8f
L2XToTRd73EHog1kGOIE2hcrwpWNLa257x4bVAuMN/fS+ec0NlnPxkxmrG4/KXUA
MbdNrGdLGEx+1sgC4OFakmE3snChzheHL+M5At1Wu788elGCesWYkpZwGRd9DiQq
L1wS6x8It871HM7GOTkXNvYQ07a3f+qcvQsTwGfXmVRSzsNM5Qr097scUG/B+fT5
aSH9GftwyjPixNifqJZGm4bzQNW8kIVTJ7LgvTDnymtQ8tQtzHwAEByAZi+lhCOR
DsYxt82a8OstgRQxMK46OMGPCOzKsdU=
-----END CERTIFICATE-----
Generated at Sat Sep 13 20:32:46 2025 by rpki-client