Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/747358c6-73e7-338f-9998-e019b2d080af.roa
File:                     747358c6-73e7-338f-9998-e019b2d080af.roa (raw, json)
Hash identifier:          V9D54KPwT4RtPpsBtDPKL40C1cj6h2C/ZpJcyBsqpAI=
Subject key identifier:   6A:05:5E:FB:DD:2C:ED:8C:EE:92:F8:CA:E2:63:22:A8:7E:76:A1:7A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CD6A39F906CB39C65CB400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/747358c6-73e7-338f-9998-e019b2d080af.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        173.194.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:6a:39:f9:06:cb:39:c6:5c:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=bf3da17a-0237-4800-95c7-76cae2ec7740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:59:f4:8c:90:74:82:7c:81:bd:4e:a5:13:11:
                    53:c5:3c:9b:d3:c9:e9:8e:2b:b4:82:dc:e8:15:a6:
                    2f:ba:c7:9e:ff:38:77:db:6e:ff:13:ba:e5:e3:c8:
                    12:79:26:b9:ff:ce:fa:4c:6c:68:b3:92:63:31:56:
                    7d:5c:7b:42:60:fc:8e:6f:5d:ca:ca:f4:36:b1:f2:
                    b5:58:8e:80:6b:76:21:e6:b4:14:0e:84:a1:a8:c9:
                    30:60:38:dc:ce:3b:90:8e:a3:9a:56:62:8c:7f:7b:
                    f2:85:4c:ae:0f:a5:f6:d0:df:dc:db:a3:bf:07:de:
                    06:c0:3c:68:11:9f:42:ac:07:82:3c:5d:3a:cf:a9:
                    09:1d:e4:3e:81:f3:46:41:a4:07:d2:75:03:7d:d1:
                    9c:d9:5b:b3:cb:b8:6d:99:f5:1c:4c:79:96:51:e8:
                    81:db:47:fd:da:4e:cb:f0:15:7b:8d:00:d7:8c:db:
                    30:b5:bf:30:97:5f:4b:ae:82:67:c6:07:47:2b:1e:
                    22:7c:2c:15:0f:e1:0c:a9:ba:fb:ff:bb:a0:e7:38:
                    ba:7e:8f:e2:96:e7:64:da:3d:02:46:21:fc:9e:9c:
                    76:d5:5b:ab:98:d3:de:0a:88:ad:8b:34:89:61:6d:
                    3e:b9:1b:61:0f:de:21:fa:8c:68:92:81:33:29:39:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:05:5E:FB:DD:2C:ED:8C:EE:92:F8:CA:E2:63:22:A8:7E:76:A1:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/747358c6-73e7-338f-9998-e019b2d080af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:5b:94:28:8b:83:ea:6c:76:42:9a:23:92:8f:ed:a3:1f:d2:
         8c:c4:62:f3:60:0a:61:9b:41:b5:22:a2:0b:93:1e:c2:ca:cb:
         e8:61:41:ab:8b:b5:0c:e1:16:86:c2:89:17:3f:3e:e5:cd:81:
         fa:c5:2e:9b:de:67:9f:d0:6b:85:5f:82:8a:6e:00:91:31:95:
         23:bf:77:57:3b:20:ce:32:e2:40:59:13:6a:10:1f:2f:9e:b6:
         2e:f5:43:83:4e:b0:a4:2a:3f:62:90:d8:18:54:61:18:72:7e:
         fa:38:87:7b:63:51:25:7d:b5:4b:a7:fd:96:5c:93:64:6b:b2:
         76:f4:0f:ea:19:f0:1e:32:14:07:d7:e2:cb:69:92:e4:57:40:
         d4:27:56:ab:db:6f:43:56:0e:84:50:71:f8:fd:df:96:b6:a8:
         18:03:1b:f3:58:f5:53:6e:ec:bf:b3:c2:11:a5:b5:e5:03:47:
         25:17:7b:cd:66:1b:be:97:c0:0d:1f:3c:87:5f:2e:bf:f9:3d:
         b9:76:58:20:d6:da:0c:1a:72:d0:45:39:33:00:77:5c:af:bc:
         aa:12:aa:da:49:20:c1:6a:a0:10:f8:9d:42:a4:d3:e1:3c:9e:
         cc:cd:ce:f4:84:f9:f5:f3:48:78:eb:36:3d:0a:30:5b:5f:17:
         a7:eb:08:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWo5+QbLOcZctAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
YmYzZGExN2EtMDIzNy00ODAwLTk1YzctNzZjYWUyZWM3NzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1n0jJB0gnyBvU6lExFTxTyb08npjiu0gtzo
FaYvusee/zh3227/E7rl48gSeSa5/876TGxos5JjMVZ9XHtCYPyOb13KyvQ2sfK1
WI6Aa3Yh5rQUDoShqMkwYDjczjuQjqOaVmKMf3vyhUyuD6X20N/c26O/B94GwDxo
EZ9CrAeCPF06z6kJHeQ+gfNGQaQH0nUDfdGc2Vuzy7htmfUcTHmWUeiB20f92k7L
8BV7jQDXjNswtb8wl19LroJnxgdHKx4ifCwVD+EMqbr7/7ug5zi6fo/iludk2j0C
RiH8npx21VurmNPeCoitizSJYW0+uRthD94h+oxokoEzKTmU7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGoFXvvdLO2M7pL4yuJjIqh+dqF6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzQ3MzU4YzYtNzNlNy0z
MzhmLTk5OTgtZTAxOWIyZDA4MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJ3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhblCiLg+psdkKaI5KP7aMf0ozEYvNgCmGbQbUioguTHsLKy+hhQauL
tQzhFobCiRc/PuXNgfrFLpveZ5/Qa4VfgopuAJExlSO/d1c7IM4y4kBZE2oQHy+e
ti71Q4NOsKQqP2KQ2BhUYRhyfvo4h3tjUSV9tUun/ZZck2Rrsnb0D+oZ8B4yFAfX
4stpkuRXQNQnVqvbb0NWDoRQcfj935a2qBgDG/NY9VNu7L+zwhGlteUDRyUXe81m
G76XwA0fPIdfLr/5Pbl2WCDW2gwactBFOTMAd1yvvKoSqtpJIMFqoBD4nUKk0+E8
nszNzvSE+fXzSHjrNj0KMFtfF6frCI0=
-----END CERTIFICATE-----
Generated at Fri Oct 17 08:46:09 2025 by rpki-client