Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/8e2f8cc9-5142-37fb-9672-203558a41e8e.roa
File:                     8e2f8cc9-5142-37fb-9672-203558a41e8e.roa (raw, json)
Hash identifier:          ailmMOe1KAdGDHzczL2evxw8Y+wLkm4loyILuEwoD3w=
Subject key identifier:   C3:1D:8A:EB:0D:44:74:0F:A0:64:4D:3A:DC:29:CE:33:D1:BE:13:58
Certificate issuer:       /CN=e56bf41b-dd67-437e-9f01-30ef0b12f925
Certificate serial:       010D0C9F4328584A8146550B0CD2C3AB56EB56A0
Authority key identifier: AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/8e2f8cc9-5142-37fb-9672-203558a41e8e.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        160.79.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:55:0b:0c:d2:c3:ab:56:eb:56:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56bf41b-dd67-437e-9f01-30ef0b12f925
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=1c8bd68b-4d48-45dc-bb6d-a95dbb8494b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:97:9c:2d:f5:cb:63:02:1f:9a:ca:f0:3a:
                    7c:07:6d:53:a9:48:40:d2:ae:e5:0d:25:5c:55:3a:
                    a1:4b:60:c3:2f:eb:a9:ae:4f:04:e9:24:f5:04:d7:
                    c4:8c:a0:7e:d9:ae:16:ab:97:fe:93:ca:e6:41:2e:
                    aa:40:dc:8a:95:50:2d:1a:9f:12:b6:e9:6a:f1:27:
                    d7:61:63:71:ad:85:39:44:34:62:fa:b4:a4:52:37:
                    5e:6a:e4:08:fa:54:93:e7:e3:b7:dd:b0:e2:37:a4:
                    45:33:98:4d:58:b7:f6:9f:27:14:7c:5e:76:79:1f:
                    67:88:79:e0:ce:a4:df:83:f1:41:b3:90:b5:b1:1e:
                    f4:ae:cd:8b:97:4d:59:27:99:be:f2:ed:78:38:aa:
                    14:28:db:f6:a3:9f:a9:84:ee:66:d9:b7:f3:3f:8e:
                    3f:49:1a:ac:62:83:47:1b:7f:5f:b4:d1:47:d5:94:
                    ed:3a:e1:16:b8:2c:78:c3:e6:7b:9d:12:7e:4d:b1:
                    a4:8f:9f:d2:ff:23:47:75:58:2a:6c:5f:0c:61:3b:
                    cb:dd:fc:75:2a:11:e5:38:d5:92:78:a9:97:56:7d:
                    df:1e:23:d4:bf:f2:91:22:82:e9:84:3f:67:64:21:
                    a2:08:36:30:8a:5c:13:56:cb:19:a3:43:a1:cc:c5:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1D:8A:EB:0D:44:74:0F:A0:64:4D:3A:DC:29:CE:33:D1:BE:13:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/8e2f8cc9-5142-37fb-9672-203558a41e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.crl

            X509v3 Authority Key Identifier:
                keyid:AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:bd:c4:65:30:02:dd:44:33:66:e6:01:91:7a:a6:98:f6:f0:
         71:a1:91:a4:9b:65:a7:c6:81:b2:b1:ab:2b:e0:b8:cc:e9:e9:
         10:c9:60:dd:36:cc:e6:1c:34:e8:27:76:2e:7b:60:77:1d:ca:
         ad:5a:ac:16:44:e5:97:90:8d:ea:02:e6:ef:08:4b:66:63:bf:
         aa:41:13:6e:8d:2f:e1:65:58:79:73:ff:8e:fe:f2:93:5e:77:
         a5:be:b2:1b:9c:6c:1e:62:46:41:4d:7b:31:9c:8c:31:8a:8f:
         d6:b4:a0:87:d3:36:66:47:7b:a6:91:75:bd:40:80:7b:c6:2b:
         77:69:60:89:cf:6e:44:81:7f:c8:60:08:02:89:56:f5:14:8a:
         55:5c:b2:74:89:28:23:ca:80:f3:9d:50:50:2e:66:34:13:4f:
         7f:de:69:09:be:8e:f7:2b:4c:4e:d2:09:87:aa:0f:d6:88:b5:
         3f:c4:ce:22:0c:54:4e:ac:e7:ea:2e:88:47:56:a7:4b:fe:a7:
         0a:f8:a0:3b:cb:c9:20:b0:5e:fe:c8:e4:dd:1e:1f:ce:49:c8:
         d9:70:c0:33:86:62:0c:45:2a:77:74:1c:9e:0d:f3:84:8a:43:
         30:28:03:fb:18:ff:fa:18:01:8e:48:e8:8c:d9:91:80:1e:50:
         49:a3:27:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlULDNLDq1brVqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTU2YmY0MWItZGQ2Ny00MzdlLTlmMDEtMzBlZjBiMTJm
OTI1MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
MWM4YmQ2OGItNGQ0OC00NWRjLWJiNmQtYTk1ZGJiODQ5NGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQaXnC31y2MCH5rK8Dp8B21TqUhA0q7lDSVc
VTqhS2DDL+uprk8E6ST1BNfEjKB+2a4Wq5f+k8rmQS6qQNyKlVAtGp8Stulq8SfX
YWNxrYU5RDRi+rSkUjdeauQI+lST5+O33bDiN6RFM5hNWLf2nycUfF52eR9niHng
zqTfg/FBs5C1sR70rs2Ll01ZJ5m+8u14OKoUKNv2o5+phO5m2bfzP44/SRqsYoNH
G39ftNFH1ZTtOuEWuCx4w+Z7nRJ+TbGkj5/S/yNHdVgqbF8MYTvL3fx1KhHlONWS
eKmXVn3fHiPUv/KRIoLphD9nZCGiCDYwilwTVssZo0OhzMWcWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMdiusNRHQPoGRNOtwpzjPRvhNYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lNTZi
ZjQxYi1kZDY3LTQzN2UtOWYwMS0zMGVmMGIxMmY5MjUvOGUyZjhjYzktNTE0Mi0z
N2ZiLTk2NzItMjAzNTU4YTQxZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTU2YmY0MWItZGQ2Ny00MzdlLTlm
MDEtMzBlZjBiMTJmOTI1L2U1NmJmNDFiLWRkNjctNDM3ZS05ZjAxLTMwZWYwYjEy
ZjkyNS5jcmwwHwYDVR0jBBgwFoAUrudGwq3A/BlUEVOlW6p/dYDowmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lNTZiZjQxYi1kZDY3LTQzN2UtOWYwMS0zMGVm
MGIxMmY5MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoE+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE29xGUwAt1EM2bmAZF6ppj28HGhkaSbZafGgbKxqyvguMzp6RDJYN02
zOYcNOgndi57YHcdyq1arBZE5ZeQjeoC5u8IS2Zjv6pBE26NL+FlWHlz/47+8pNe
d6W+shucbB5iRkFNezGcjDGKj9a0oIfTNmZHe6aRdb1AgHvGK3dpYInPbkSBf8hg
CAKJVvUUilVcsnSJKCPKgPOdUFAuZjQTT3/eaQm+jvcrTE7SCYeqD9aItT/EziIM
VE6s5+ouiEdWp0v+pwr4oDvLySCwXv7I5N0eH85JyNlwwDOGYgxFKnd0HJ4N84SK
QzAoA/sY//oYAY5I6IzZkYAeUEmjJ3o=
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:24:51 2025 by rpki-client