Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa
File:                     576102ce-aaa4-376a-8685-00b6e6cb9e91.roa (raw, json)
Hash identifier:          yl3LvwqmpXYKsSKzfeKI5027F+jPw4yTzwBYPzYLQiE=
Subject key identifier:   95:E7:99:8D:BC:26:C7:CB:38:6B:EE:DF:94:D0:39:F2:FF:88:A2:87
Certificate issuer:       /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial:       010D0C9F4328584B7C87625A80BF677E57BD7840
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     393950
IP address blocks:        172.98.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:62:5a:80:bf:67:7e:57:bd:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=7eb38349-d998-4b64-a22c-74adf3d75338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:9c:e5:bd:9b:6a:12:97:6c:1f:34:3d:52:
                    ed:ea:f7:5f:0a:42:56:f3:75:de:a6:01:41:d8:dc:
                    bf:06:b0:53:95:da:3f:cb:90:d2:4b:f2:57:0f:39:
                    ce:5d:cb:81:34:04:28:df:ec:4a:44:27:06:bf:12:
                    c0:85:f4:04:ef:3a:bd:c6:c1:5b:82:e3:5f:d6:78:
                    64:ed:d4:ca:46:ed:55:0f:0e:35:19:a6:0f:62:55:
                    df:a4:46:1f:17:de:56:7b:7e:c3:8f:d0:07:1b:8a:
                    1b:ab:46:6d:e0:b3:ea:f0:07:3a:2f:30:bd:5b:c9:
                    ff:3a:cd:98:91:4c:29:c3:be:2a:7a:c4:74:af:df:
                    de:b7:90:2b:78:fd:dd:e4:78:02:ac:c5:60:d0:9b:
                    39:0c:81:49:70:76:cb:3f:93:15:3c:bc:9d:78:00:
                    64:a8:0c:80:86:e6:bd:8e:b2:f8:6e:a9:b6:7a:fb:
                    b3:07:27:7d:e0:f9:ed:e0:d2:f8:42:db:80:d1:a5:
                    f9:f4:cf:5e:fa:18:a2:ed:34:b6:db:91:ca:01:8c:
                    e8:73:7f:39:88:3c:40:f8:2b:ab:4f:88:84:1d:4e:
                    ae:e2:41:4d:e0:09:f7:e5:20:d3:1e:d7:b4:de:84:
                    01:95:5e:17:65:bf:3e:a9:38:4c:75:e9:e7:cf:dd:
                    50:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E7:99:8D:BC:26:C7:CB:38:6B:EE:DF:94:D0:39:F2:FF:88:A2:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:56:80:4a:1e:ad:40:e1:ec:f2:92:b9:dd:36:0e:e6:6c:
         3e:5b:8e:71:9a:e2:d8:70:e9:f6:d2:c6:a5:92:c6:42:2b:dd:
         65:2c:af:51:3d:58:82:44:54:8b:c8:04:1d:be:6f:9e:9e:b3:
         15:68:f1:61:d3:5b:f0:75:24:39:85:e5:de:77:e5:b4:90:e8:
         8e:ef:4a:9d:62:3c:50:1d:a0:9b:98:2c:35:bc:88:b1:f0:8e:
         0e:91:7f:d4:f0:66:9e:5a:51:7c:03:e3:86:10:f3:41:21:21:
         fc:49:03:bd:62:6e:b2:61:e3:6f:1f:e7:3d:de:97:33:02:b5:
         18:fd:bb:0a:db:1b:32:91:52:8d:55:2d:e2:87:2b:92:a8:69:
         8f:5e:99:11:54:f5:e0:62:73:79:1e:a5:88:36:f9:43:91:85:
         c5:00:2a:7f:d9:4d:92:15:04:8d:75:37:e4:8e:b0:e1:08:36:
         68:74:1c:de:9b:bb:2b:b1:5c:84:29:ea:ba:3d:03:27:46:f5:
         df:8b:af:a5:11:0c:f9:cc:41:22:f5:39:07:87:ec:d5:e0:04:
         cc:3f:35:8a:13:17:50:78:07:d2:ae:4f:c3:f5:7d:df:9d:10:
         14:98:6c:93:f8:1d:99:7f:b6:f7:3c:1d:69:8f:09:f1:ec:e6:
         81:89:63:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2JagL9nfle9eEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzM0MzMxYjUtYmEyNS00ZDJlLWFkM2EtY2U5ZmY2NTI0
ZTFmMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk
N2ViMzgzNDktZDk5OC00YjY0LWEyMmMtNzRhZGYzZDc1MzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpuc5b2bahKXbB80PVLt6vdfCkJW83XepgFB
2Ny/BrBTldo/y5DSS/JXDznOXcuBNAQo3+xKRCcGvxLAhfQE7zq9xsFbguNf1nhk
7dTKRu1VDw41GaYPYlXfpEYfF95We37Dj9AHG4obq0Zt4LPq8Ac6LzC9W8n/Os2Y
kUwpw74qesR0r9/et5AreP3d5HgCrMVg0Js5DIFJcHbLP5MVPLydeABkqAyAhua9
jrL4bqm2evuzByd94Pnt4NL4QtuA0aX59M9e+hii7TS225HKAYzoc385iDxA+Cur
T4iEHU6u4kFN4An35SDTHte03oQBlV4XZb8+qThMdennz91Q5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJXnmY28JsfLOGvu35TQOfL/iKKHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MzQz
MzFiNS1iYTI1LTRkMmUtYWQzYS1jZTlmZjY1MjRlMWYvNTc2MTAyY2UtYWFhNC0z
NzZhLTg2ODUtMDBiNmU2Y2I5ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzM0MzMxYjUtYmEyNS00ZDJlLWFk
M2EtY2U5ZmY2NTI0ZTFmLzczNDMzMWI1LWJhMjUtNGQyZS1hZDNhLWNlOWZmNjUy
NGUxZi5jcmwwHwYDVR0jBBgwFoAUtDfNtpDxLVPt3hfHzpoiRJMO6vYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MzQzMzFiNS1iYTI1LTRkMmUtYWQzYS1jZTlm
ZjY1MjRlMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErGKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPCVoBKHq1A4ezykrndNg7mbD5bjnGa4thw6fbSxqWSxkIr3WUsr1E9
WIJEVIvIBB2+b56esxVo8WHTW/B1JDmF5d535bSQ6I7vSp1iPFAdoJuYLDW8iLHw
jg6Rf9TwZp5aUXwD44YQ80EhIfxJA71ibrJh428f5z3elzMCtRj9uwrbGzKRUo1V
LeKHK5KoaY9emRFU9eBic3kepYg2+UORhcUAKn/ZTZIVBI11N+SOsOEINmh0HN6b
uyuxXIQp6ro9AydG9d+Lr6URDPnMQSL1OQeH7NXgBMw/NYoTF1B4B9KuT8P1fd+d
EBSYbJP4HZl/tvc8HWmPCfHs5oGJY6w=
-----END CERTIFICATE-----
Generated at Wed Oct 22 01:39:03 2025 by rpki-client