Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/92ca0afa-4e11-3ada-9566-1c4974c3a905.roa
File:                     92ca0afa-4e11-3ada-9566-1c4974c3a905.roa (raw, json)
Hash identifier:          r5K4PgqyW/5BrJWO1eDuyHlGghJikYgrtCuawJxYoLU=
Subject key identifier:   0E:D6:9F:4C:77:FB:F0:BD:79:BA:82:E4:52:F8:FF:D0:8F:57:90:42
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A97B26A9A7AEBE2A89E089DC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/92ca0afa-4e11-3ada-9566-1c4974c3a905.roa
Signing time:             Mon 21 Jul 2025 13:47:19 +0000
ROA not before:           Mon 21 Jul 2025 13:47:19 +0000
ROA not after:            Sun 19 Oct 2025 13:47:19 +0000
asID:                     33636
IP address blocks:        97.69.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:97:b2:6a:9a:7a:eb:e2:a8:9e:08:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 21 13:47:19 2025 GMT
            Not After : Oct 19 13:47:19 2025 GMT
        Subject: CN=43edd646-d488-48a0-95f4-8edab6c0ae58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:4d:13:6e:3f:96:26:01:3c:55:bb:d4:c6:
                    00:47:84:fd:dd:e4:36:23:7d:07:9a:d5:65:e5:70:
                    7c:7f:48:03:29:c1:f8:0b:2b:a7:60:de:67:d2:4d:
                    c0:63:a1:a8:20:74:8a:57:8d:27:fd:e9:b5:66:f5:
                    aa:58:39:e7:25:d9:60:a9:79:73:87:66:ef:21:ab:
                    03:96:6b:a3:57:ad:44:c6:7f:d8:b4:a6:4e:6a:70:
                    50:13:32:de:16:b7:e5:6e:82:97:d3:c2:a4:4e:0f:
                    c6:8b:d9:d0:0d:54:0a:b8:c9:4f:16:10:2c:0e:18:
                    bd:1b:b4:07:ac:3f:bd:85:72:06:7e:aa:a3:01:50:
                    af:fc:55:49:97:ea:f1:0c:98:a3:67:63:b7:6f:d4:
                    42:c8:57:4b:4a:58:13:7e:c7:01:eb:ba:09:25:fa:
                    24:39:56:48:ea:02:39:56:8f:fe:33:8b:3f:28:f2:
                    57:8e:37:21:6c:89:05:d0:b2:5c:31:e2:e8:b5:42:
                    77:ef:91:34:50:e1:bb:79:69:3f:2f:24:0c:14:78:
                    a7:22:97:a5:34:86:50:c1:15:41:a0:d2:05:1e:64:
                    25:f0:44:ec:e2:a9:ec:cb:8f:da:60:9f:b6:10:97:
                    0e:1b:13:9e:80:2b:9f:4c:d6:fb:8c:f9:dc:d2:83:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D6:9F:4C:77:FB:F0:BD:79:BA:82:E4:52:F8:FF:D0:8F:57:90:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/92ca0afa-4e11-3ada-9566-1c4974c3a905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ee:5e:0a:e5:91:83:cc:b7:6d:32:1c:ab:59:52:ce:29:30:
         f9:f6:c6:6b:90:7c:4b:0b:91:af:f6:b3:eb:a4:b9:4e:d6:51:
         c8:f5:e0:f5:c4:5f:d8:e8:96:5c:cf:e5:de:18:77:23:b3:0f:
         95:8c:ff:ae:73:a6:25:76:c8:79:39:f2:eb:78:8b:8d:55:4e:
         e7:a3:eb:c2:ac:d1:e8:5c:cc:5e:3c:bf:f9:d6:f9:32:b5:57:
         90:53:65:d8:0a:39:1b:10:61:86:9f:71:69:b7:95:4d:b4:21:
         74:f9:59:72:6f:a2:56:7e:39:ec:09:46:65:c1:6e:d6:3b:c1:
         ee:5c:5b:12:31:1e:4f:14:26:ef:b5:45:0a:d1:e1:86:3e:9f:
         b1:48:e0:e7:1d:b6:10:41:a8:ea:67:19:66:da:b3:b9:63:1c:
         3e:c1:34:90:eb:67:89:d7:c7:36:51:bb:7a:d6:d4:2d:a7:d2:
         ab:9f:1f:91:e2:fc:19:1e:b9:8f:ce:d5:41:98:ab:0d:9e:80:
         02:81:84:a2:d2:77:fb:30:dc:8e:db:06:7a:3d:71:fd:75:c9:
         4c:c5:18:9f:93:80:52:fd:26:22:e4:c1:26:3c:c0:2b:71:b5:
         89:39:d4:52:d0:4b:95:38:fc:4e:e3:e3:71:63:2f:81:b8:e1:
         46:49:e5:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqXsmqaeuviqJ4IncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyMTEzNDcxOVoXDTI1MTAxOTEzNDcxOVowLzEtMCsGA1UEAxMk
NDNlZGQ2NDYtZDQ4OC00OGEwLTk1ZjQtOGVkYWI2YzBhZTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+FNE24/liYBPFW71MYAR4T93eQ2I30HmtVl
5XB8f0gDKcH4CyunYN5n0k3AY6GoIHSKV40n/em1ZvWqWDnnJdlgqXlzh2bvIasD
lmujV61Exn/YtKZOanBQEzLeFrflboKX08KkTg/Gi9nQDVQKuMlPFhAsDhi9G7QH
rD+9hXIGfqqjAVCv/FVJl+rxDJijZ2O3b9RCyFdLSlgTfscB67oJJfokOVZI6gI5
Vo/+M4s/KPJXjjchbIkF0LJcMeLotUJ375E0UOG7eWk/LyQMFHinIpelNIZQwRVB
oNIFHmQl8ETs4qnsy4/aYJ+2EJcOGxOegCufTNb7jPnc0oO9nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA7Wn0x3+/C9ebqC5FL4/9CPV5BCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOTJjYTBhZmEtNGUxMS0z
YWRhLTk1NjYtMWM0OTc0YzNhOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYUUEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfuXgrlkYPMt20yHKtZUs4pMPn2xmuQfEsLka/2s+ukuU7WUcj14PXE
X9jollzP5d4YdyOzD5WM/65zpiV2yHk58ut4i41VTuej68Ks0ehczF48v/nW+TK1
V5BTZdgKORsQYYafcWm3lU20IXT5WXJvolZ+OewJRmXBbtY7we5cWxIxHk8UJu+1
RQrR4YY+n7FI4OcdthBBqOpnGWbas7ljHD7BNJDrZ4nXxzZRu3rW1C2n0qufH5Hi
/BkeuY/O1UGYqw2egAKBhKLSd/sw3I7bBno9cf11yUzFGJ+TgFL9JiLkwSY8wCtx
tYk51FLQS5U4/E7j43FjL4G44UZJ5bU=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:19:02 2025 by rpki-client