Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17e1c1fe-2172-3220-8967-2591794def0c.roa
File:                     17e1c1fe-2172-3220-8967-2591794def0c.roa (raw, json)
Hash identifier:          NaGrHqqLItmVpfhrGptypKEuxZMBfpHyEL/nMRn9UnE=
Subject key identifier:   58:9D:42:55:16:D6:99:6B:D8:FF:7F:D7:F8:77:41:9C:BB:B1:36:05
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A86DB8CB947CBEDF90E56C100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17e1c1fe-2172-3220-8967-2591794def0c.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        64.9.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:8c:b9:47:cb:ed:f9:0e:56:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=8090299d-dff0-4892-9eb0-bceaeb5c99ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:66:57:6c:e7:cb:dd:44:73:6c:48:f0:43:
                    07:7c:1d:51:17:e7:ef:85:b8:13:ef:43:0a:3c:20:
                    1e:43:5e:44:1a:fd:1f:f8:65:16:d9:95:66:83:62:
                    a2:25:f7:0f:83:42:f2:b8:7d:51:1a:94:92:b1:b1:
                    6c:54:d1:ca:87:e4:3b:46:69:ad:27:74:35:ea:a2:
                    de:24:46:e6:a3:0b:66:3a:cf:70:68:af:84:7b:7f:
                    e8:56:c6:16:5d:0f:58:31:a8:4b:70:38:f3:b8:b7:
                    27:1e:83:d0:4e:e1:88:c4:4f:18:83:be:1f:4d:31:
                    e1:9f:9b:83:af:9a:40:61:c3:c9:ac:f6:67:eb:e9:
                    99:40:e6:37:a1:51:8e:12:e1:66:d3:9c:c2:cc:b2:
                    a9:7d:1e:99:9b:42:fb:e0:86:d6:10:6e:33:33:a5:
                    3a:85:7a:18:27:21:43:27:1f:35:79:d2:37:72:af:
                    47:38:c4:d1:b1:b5:26:d7:b0:4e:79:b4:48:b0:88:
                    83:d1:34:68:b9:46:63:03:34:24:de:6a:53:1d:4c:
                    c0:c5:e9:59:dc:70:bf:30:f1:e8:17:bd:a6:30:13:
                    c4:82:b1:e2:99:cf:08:9a:68:58:17:77:43:31:b3:
                    17:77:40:5e:a0:c0:93:47:61:c1:39:ec:2e:93:89:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9D:42:55:16:D6:99:6B:D8:FF:7F:D7:F8:77:41:9C:BB:B1:36:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/17e1c1fe-2172-3220-8967-2591794def0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:d4:b9:af:64:c0:4e:d5:6f:37:f4:57:c4:87:75:77:6f:df:
         6b:a6:45:31:0f:1b:b3:12:a4:d4:85:39:55:a4:48:35:d8:a6:
         de:b9:2d:85:b6:43:11:76:75:1a:b6:41:52:1c:78:48:4b:5a:
         a2:45:5f:be:e7:64:db:16:ec:7d:69:b5:51:b3:b2:27:80:ad:
         ef:97:07:bd:08:0f:36:ca:01:e5:9a:de:76:84:b6:5b:9d:97:
         63:30:b3:7d:31:2d:5a:c5:d6:3e:80:ef:1d:0a:52:cf:94:f4:
         b6:4b:33:23:0a:24:ee:aa:3f:99:ec:09:5a:7f:68:3a:12:43:
         b3:59:cd:a9:8a:61:8a:14:e7:57:c3:7a:de:28:ad:56:75:31:
         99:14:82:86:18:7c:80:61:a2:fa:27:8c:72:10:1a:9a:bd:c6:
         26:85:af:43:f9:01:da:b9:b3:72:f3:03:aa:d0:95:5c:89:29:
         b9:42:23:98:a5:5d:90:ee:12:5b:b3:68:6b:1e:71:a5:8d:e7:
         0e:97:8f:03:9b:2e:17:aa:ca:20:3e:f8:39:09:7b:1a:47:f8:
         ae:19:c6:e2:00:d1:8f:7e:70:b9:d5:4a:63:7c:df:51:e3:fa:
         a4:1e:20:9c:64:cc:fe:d9:4f:6c:7f:d3:f1:2b:e1:30:6a:92:
         33:53:e1:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG24y5R8vt+Q5WwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
ODA5MDI5OWQtZGZmMC00ODkyLTllYjAtYmNlYWViNWM5OWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwZmV2zny91Ec2xI8EMHfB1RF+fvhbgT70MK
PCAeQ15EGv0f+GUW2ZVmg2KiJfcPg0LyuH1RGpSSsbFsVNHKh+Q7RmmtJ3Q16qLe
JEbmowtmOs9waK+Ee3/oVsYWXQ9YMahLcDjzuLcnHoPQTuGIxE8Yg74fTTHhn5uD
r5pAYcPJrPZn6+mZQOY3oVGOEuFm05zCzLKpfR6Zm0L74IbWEG4zM6U6hXoYJyFD
Jx81edI3cq9HOMTRsbUm17BOebRIsIiD0TRouUZjAzQk3mpTHUzAxelZ3HC/MPHo
F72mMBPEgrHimc8ImmhYF3dDMbMXd0BeoMCTR2HBOewuk4lcnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFidQlUW1plr2P9/1/h3QZy7sTYFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMTdlMWMxZmUtMjE3Mi0z
MjIwLTg5NjctMjU5MTc5NGRlZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAn8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfUua9kwE7Vbzf0V8SHdXdv32umRTEPG7MSpNSFOVWkSDXYpt65LYW2
QxF2dRq2QVIceEhLWqJFX77nZNsW7H1ptVGzsieAre+XB70IDzbKAeWa3naEtlud
l2Mws30xLVrF1j6A7x0KUs+U9LZLMyMKJO6qP5nsCVp/aDoSQ7NZzamKYYoU51fD
et4orVZ1MZkUgoYYfIBhovonjHIQGpq9xiaFr0P5Adq5s3LzA6rQlVyJKblCI5il
XZDuEluzaGsecaWN5w6XjwObLheqyiA++DkJexpH+K4ZxuIA0Y9+cLnVSmN831Hj
+qQeIJxkzP7ZT2x/0/Er4TBqkjNT4Vg=
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:26:19 2025 by rpki-client