Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/158c2c47-6aff-33c7-92b4-1e7faa79dfa3.roa
File:                     158c2c47-6aff-33c7-92b4-1e7faa79dfa3.roa (raw, json)
Hash identifier:          5vWeQ0Idx4QN+qoPAqcsb+Bhtwswk0E+5o/icLcuo0E=
Subject key identifier:   5D:80:C0:1D:94:97:C6:D7:CD:21:5E:87:6C:06:38:63:5E:2A:86:47
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584B153C1F65BB40FF4FDA6D5980
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/158c2c47-6aff-33c7-92b4-1e7faa79dfa3.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     23520
IP address blocks:        69.79.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:1f:65:bb:40:ff:4f:da:6d:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=05a850a5-7c2e-4f21-9165-10d8e69cbf23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:f2:b1:5a:51:84:06:f7:9a:a3:67:a9:5b:
                    98:3f:7f:81:3a:9b:62:e8:f9:5f:b3:a4:38:ac:c4:
                    c4:90:1b:8b:b9:e7:d5:06:e7:6e:6b:f1:9b:e0:1c:
                    f1:d3:ec:28:f7:b8:9d:46:cb:82:32:c4:e9:81:53:
                    96:98:a9:cd:bc:9e:03:36:6f:98:64:50:eb:11:cf:
                    58:23:af:8f:a2:4e:d2:fa:be:0e:a3:11:30:7d:50:
                    ad:2d:9b:4f:7e:06:35:50:f4:fd:d0:70:f8:d0:dc:
                    12:c7:6e:24:9e:06:63:db:85:94:a9:43:d5:82:7d:
                    3f:2a:6b:56:d7:f6:5d:a8:84:92:4b:d0:e4:56:76:
                    95:90:bc:f8:e2:19:f3:0c:c1:c9:ba:b4:dd:71:17:
                    50:6d:fc:7f:82:83:7b:37:d0:3d:68:6f:b4:ad:e5:
                    06:b7:b1:cf:d5:27:62:05:6a:c1:77:f5:e8:49:6a:
                    9a:6c:63:0c:86:aa:a2:b4:3b:fb:55:e7:a8:67:f2:
                    3e:af:37:0d:54:47:87:62:cd:8e:c5:fb:fe:23:49:
                    3b:03:4d:34:b7:55:3d:c2:ec:5d:a8:dc:a0:a4:b9:
                    5b:f4:cc:6a:fc:d6:1c:d5:f9:1d:61:cb:e5:38:00:
                    63:4f:66:66:71:21:3e:43:2e:47:64:99:77:1d:f3:
                    09:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:80:C0:1D:94:97:C6:D7:CD:21:5E:87:6C:06:38:63:5E:2A:86:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/158c2c47-6aff-33c7-92b4-1e7faa79dfa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.79.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:db:ff:cd:8c:58:85:df:9d:23:dd:f2:47:18:8a:d1:5e:09:
         8e:4c:da:b5:21:9f:1f:f0:6b:62:66:07:9e:dc:d5:b2:2e:18:
         dd:10:fb:8a:1f:85:31:d0:c6:a1:46:6c:16:c5:80:5a:4e:8a:
         2e:a9:e3:33:7d:3e:2f:3c:6c:34:38:db:0f:c9:7f:20:44:e2:
         d8:14:52:6f:d3:74:cc:b6:75:8a:f8:2f:b0:c9:aa:9b:f5:b0:
         39:44:c9:7c:7d:14:9c:44:09:99:23:fa:fc:9d:2e:37:14:17:
         09:03:f7:3a:93:05:f5:f3:d6:70:3b:e8:1c:7d:21:b3:92:b6:
         75:95:61:9c:e7:af:af:b3:ba:d3:ba:40:00:81:c6:9b:76:ad:
         b5:78:fb:10:08:2f:b9:27:06:35:8a:3b:70:cd:73:ef:2e:74:
         ff:d0:e1:ca:38:f0:e7:1c:36:c4:c1:61:c2:ee:23:54:80:66:
         26:df:dd:36:84:9a:a5:f5:3c:6f:28:ca:9d:54:3b:ef:6a:34:
         6a:12:93:56:66:3c:5f:5a:5d:55:9a:81:9f:ca:d5:28:2e:88:
         9d:da:69:6c:0c:9b:a0:fd:73:10:7d:64:79:9a:ca:37:18:fc:
         52:02:2e:58:11:ac:f1:9d:6e:c2:41:74:a9:30:1a:50:c3:2b:
         19:29:ad:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPB9lu0D/T9ptWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk
MDVhODUwYTUtN2MyZS00ZjIxLTkxNjUtMTBkOGU2OWNiZjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+HysVpRhAb3mqNnqVuYP3+BOpti6Plfs6Q4
rMTEkBuLuefVBudua/Gb4Bzx0+wo97idRsuCMsTpgVOWmKnNvJ4DNm+YZFDrEc9Y
I6+Pok7S+r4OoxEwfVCtLZtPfgY1UPT90HD40NwSx24kngZj24WUqUPVgn0/KmtW
1/ZdqISSS9DkVnaVkLz44hnzDMHJurTdcRdQbfx/goN7N9A9aG+0reUGt7HP1Sdi
BWrBd/XoSWqabGMMhqqitDv7VeeoZ/I+rzcNVEeHYs2Oxfv+I0k7A000t1U9wuxd
qNygpLlb9Mxq/NYc1fkdYcvlOABjT2ZmcSE+Qy5HZJl3HfMJFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2AwB2Ul8bXzSFeh2wGOGNeKoZHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvMTU4YzJjNDctNmFmZi0z
M2M3LTkyYjQtMWU3ZmFhNzlkZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARU8gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbb/82MWIXfnSPd8kcYitFeCY5M2rUhnx/wa2JmB57c1bIuGN0Q+4of
hTHQxqFGbBbFgFpOii6p4zN9Pi88bDQ42w/JfyBE4tgUUm/TdMy2dYr4L7DJqpv1
sDlEyXx9FJxECZkj+vydLjcUFwkD9zqTBfXz1nA76Bx9IbOStnWVYZznr6+zutO6
QACBxpt2rbV4+xAIL7knBjWKO3DNc+8udP/Q4co48OccNsTBYcLuI1SAZibf3TaE
mqX1PG8oyp1UO+9qNGoSk1ZmPF9aXVWagZ/K1SguiJ3aaWwMm6D9cxB9ZHmayjcY
/FICLlgRrPGdbsJBdKkwGlDDKxkprWI=
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:00:35 2025 by rpki-client