Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa
File:                     80ca88fd-748b-398c-994d-51d5dfc053ba.roa (raw, json)
Hash identifier:          HsmCsZA3z6fIQWyHsud7alGo/A3ZrC3lsuLbGxXG/Ak=
Subject key identifier:   E9:96:64:E3:34:11:F7:00:B3:13:6A:17:0F:98:75:20:B7:B0:F6:14
Certificate issuer:       /CN=8a57b69a-d683-4350-83d4-e449c0242b7d
Certificate serial:       010D0C9F4328584A71EB4EB5742592512FC8BC40
Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     55134
IP address blocks:        172.111.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:4e:b5:74:25:92:51:2f:c8:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=7bd942eb-5b76-4521-bc7c-80a835942d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cf:48:80:b1:b9:6c:02:f9:34:66:9b:a2:43:
                    90:46:7e:cb:99:41:a9:06:24:8e:e7:91:81:6b:48:
                    40:41:23:43:2a:d4:15:84:de:de:45:27:d9:ec:89:
                    ef:d0:c8:74:5b:64:26:bf:b9:7a:f1:07:dd:f4:b7:
                    27:ea:36:8e:34:0f:7b:66:15:1c:e4:9b:ef:3d:a5:
                    5c:d3:7c:f8:29:52:de:42:74:3c:d3:6b:c7:33:e9:
                    4a:b8:0b:c3:da:a1:59:da:2f:2c:17:c5:2c:ff:ca:
                    ec:41:11:90:99:f6:96:c3:46:62:83:71:e1:bf:03:
                    37:34:aa:7f:ae:88:2f:cf:8a:de:6a:12:e9:8a:8c:
                    23:3c:32:75:bf:00:a7:97:58:50:f1:c4:cc:a1:52:
                    7b:c7:fe:0b:e6:87:d4:e7:1d:9c:e6:5c:3c:c6:e4:
                    07:f7:ee:1f:0b:75:be:4a:97:bd:94:5c:25:86:31:
                    a7:00:fa:f5:a6:a0:e3:e9:12:2d:16:37:65:f4:a8:
                    82:95:d7:22:88:7d:5a:9b:ea:ba:cc:40:8d:6c:83:
                    36:87:c5:61:80:47:f1:71:ba:06:2c:cb:83:c5:ce:
                    18:e8:f1:1d:e8:91:e9:ba:20:18:2d:43:50:71:da:
                    50:cc:7d:1f:45:fa:f6:8b:1e:d0:7a:d9:45:00:60:
                    ff:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:96:64:E3:34:11:F7:00:B3:13:6A:17:0F:98:75:20:B7:B0:F6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl

            X509v3 Authority Key Identifier:
                keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:11:f1:e7:d7:c4:92:fd:ed:6a:f9:13:3f:d2:21:9c:25:
         d2:60:0f:d8:34:f3:39:ef:77:bd:f4:e4:64:79:00:2d:fc:fd:
         5a:dd:fe:64:0a:98:a4:cd:d3:67:e2:3f:b2:d9:2d:9a:6f:ef:
         ae:8b:dc:f4:d6:06:ad:08:48:82:01:06:64:96:c9:1a:4e:81:
         d1:19:35:35:c3:3e:6f:56:21:2c:dc:55:43:2e:6f:57:c7:16:
         ea:10:88:cb:bb:dc:da:33:61:9a:34:b7:e6:08:e2:25:5d:f2:
         80:ff:f8:8f:86:88:25:95:9e:f1:bd:30:4e:87:05:6a:9b:da:
         48:f6:56:f3:7b:db:dd:d4:3b:8b:9e:dc:7e:79:65:21:9f:8c:
         a3:e8:9c:46:bd:d4:0f:f9:c5:74:cd:d6:b5:ca:6b:53:06:cb:
         50:8e:b9:88:08:e1:5b:c0:84:cc:96:25:20:bf:75:45:c5:c8:
         f8:44:6a:2b:eb:25:0f:94:ba:75:d9:c3:e1:3d:90:d4:b3:0f:
         95:3d:9a:52:46:9b:24:00:80:06:6f:b5:2a:65:06:11:2e:ba:
         e5:e6:89:ba:cf:0a:75:b3:ce:4a:46:b7:5f:6f:0e:38:55:3e:
         8c:f2:0f:75:d5:28:64:be:87:a1:bf:29:20:79:3d:cd:1a:f1:
         06:da:78:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6061dCWSUS/IvEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy
YjdkMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk
N2JkOTQyZWItNWI3Ni00NTIxLWJjN2MtODBhODM1OTQyZDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs9IgLG5bAL5NGabokOQRn7LmUGpBiSO55GB
a0hAQSNDKtQVhN7eRSfZ7Inv0Mh0W2Qmv7l68Qfd9Lcn6jaONA97ZhUc5JvvPaVc
03z4KVLeQnQ802vHM+lKuAvD2qFZ2i8sF8Us/8rsQRGQmfaWw0Zig3HhvwM3NKp/
rogvz4reahLpiowjPDJ1vwCnl1hQ8cTMoVJ7x/4L5ofU5x2c5lw8xuQH9+4fC3W+
Spe9lFwlhjGnAPr1pqDj6RItFjdl9KiCldciiH1am+q6zECNbIM2h8VhgEfxcboG
LMuDxc4Y6PEd6JHpuiAYLUNQcdpQzH0fRfr2ix7QetlFAGD/QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOmWZOM0EfcAsxNqFw+YdSC3sPYUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3
YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvODBjYTg4ZmQtNzQ4Yi0z
OThjLTk5NGQtNTFkNWRmYzA1M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz
ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0
MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5
YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2hEfHn18SS/e1q+RM/0iGcJdJgD9g08znvd7305GR5AC38/Vrd/mQK
mKTN02fiP7LZLZpv766L3PTWBq0ISIIBBmSWyRpOgdEZNTXDPm9WISzcVUMub1fH
FuoQiMu73NozYZo0t+YI4iVd8oD/+I+GiCWVnvG9ME6HBWqb2kj2VvN7293UO4ue
3H55ZSGfjKPonEa91A/5xXTN1rXKa1MGy1COuYgI4VvAhMyWJSC/dUXFyPhEaivr
JQ+UunXZw+E9kNSzD5U9mlJGmyQAgAZvtSplBhEuuuXmibrPCnWzzkpGt19vDjhV
PozyD3XVKGS+h6G/KSB5Pc0a8QbaePU=
-----END CERTIFICATE-----
Generated at Sun Aug 3 00:45:05 2025 by rpki-client