Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/70aeabb9-78e4-3a83-a5ee-5ea7b3049a54.roa
File:                     70aeabb9-78e4-3a83-a5ee-5ea7b3049a54.roa (raw, json)
Hash identifier:          gRnPx1JMM6wrPNs5HzlM4Hk5fx4Q0QohR4kp4HDAxKA=
Subject key identifier:   81:C9:79:C9:2F:E8:B1:37:AE:7D:2B:BD:6F:CB:D2:68:71:F1:5B:57
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584AF5212D81D5D85D1623CB9800
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/70aeabb9-78e4-3a83-a5ee-5ea7b3049a54.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     198949
IP address blocks:        45.42.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2d:81:d5:d8:5d:16:23:cb:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=9ba89043-cc2b-4736-b25b-5915fc296a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:2a:5e:a7:54:71:90:4d:e6:7f:f6:9e:4c:
                    42:fa:bc:ad:ec:c9:44:67:b5:80:58:b5:74:31:9c:
                    76:ad:b6:35:5e:b8:3b:7c:87:db:f6:cf:93:59:e7:
                    7e:01:65:31:52:ac:d8:e5:83:78:80:9d:8d:a3:17:
                    d3:49:cb:1b:80:2c:03:f0:25:97:f9:82:d0:1c:c6:
                    b5:65:e2:ca:45:8f:30:78:2b:a6:ee:6c:e1:19:e0:
                    f6:a0:7b:a6:bf:93:d7:ea:ad:d8:c5:a6:04:89:9c:
                    0b:a2:f8:e8:3a:ba:c1:d2:84:84:38:60:4c:17:55:
                    e1:89:ee:c8:b2:47:49:c3:5a:21:78:18:be:76:60:
                    ed:5d:e8:93:2e:0e:12:c4:0b:e3:1f:11:27:e8:99:
                    6f:52:11:03:a6:1e:19:f7:b9:c4:77:cc:41:bd:e5:
                    71:97:59:b4:ba:23:79:43:5d:5d:b9:53:14:fd:7d:
                    6c:ff:24:67:b6:e4:80:ef:4d:45:ec:65:99:d6:c3:
                    d3:07:61:49:f9:20:86:3e:82:cc:7d:71:40:7d:0a:
                    03:f2:16:f2:9b:0c:5f:ae:06:50:a1:a2:f8:4a:ba:
                    ac:42:18:0e:60:a8:34:e7:db:ec:81:d0:8a:03:59:
                    99:17:e1:1e:6b:45:d4:df:79:fd:ad:cc:97:3b:21:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C9:79:C9:2F:E8:B1:37:AE:7D:2B:BD:6F:CB:D2:68:71:F1:5B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/70aeabb9-78e4-3a83-a5ee-5ea7b3049a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ac:c1:70:84:2d:34:3f:cd:2a:cc:a7:e3:d9:60:5d:92:31:
         ed:b6:27:04:6e:2f:71:8f:40:7f:b6:06:d5:27:52:d8:e6:0f:
         0b:b3:b5:fc:d5:4a:84:40:4c:54:ca:b8:4d:d2:42:0e:38:6f:
         a8:7d:7e:43:00:1c:b9:75:60:10:7e:ce:6a:e0:04:46:65:e3:
         2a:e7:f0:fd:a5:cd:e9:4e:04:d7:7e:d3:8c:c4:f0:32:fc:ad:
         22:3e:5d:75:dc:5e:56:c6:78:2a:2f:81:26:2b:a2:1b:99:45:
         fd:e7:d8:a6:eb:d2:be:a4:01:ee:13:e2:11:31:28:90:1e:c2:
         36:3c:69:2c:e2:30:b9:c7:42:5b:2a:88:d7:1c:b5:ba:0d:ce:
         33:21:cb:34:94:24:36:5a:01:23:0b:d3:28:78:15:8c:95:b7:
         4e:98:05:bb:5d:96:21:f7:18:2b:40:36:12:e1:d5:81:e6:2a:
         22:c0:fd:0b:8c:5f:ba:54:ff:b5:0a:8e:3a:bc:fb:96:64:ea:
         d9:34:41:9f:c9:74:98:22:bb:b2:f2:d2:ec:06:51:f2:29:fb:
         d6:83:03:c6:12:fc:ca:38:be:26:59:31:69:8e:10:f7:6c:7d:
         c8:be:d1:5f:ff:e8:b8:b1:2f:04:4d:d1:03:74:4e:d4:82:c4:
         5f:21:01:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IS2B1dhdFiPLmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5
NzdmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
OWJhODkwNDMtY2MyYi00NzM2LWIyNWItNTkxNWZjMjk2YTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN8qXqdUcZBN5n/2nkxC+ryt7MlEZ7WAWLV0
MZx2rbY1Xrg7fIfb9s+TWed+AWUxUqzY5YN4gJ2NoxfTScsbgCwD8CWX+YLQHMa1
ZeLKRY8weCum7mzhGeD2oHumv5PX6q3YxaYEiZwLovjoOrrB0oSEOGBMF1Xhie7I
skdJw1oheBi+dmDtXeiTLg4SxAvjHxEn6JlvUhEDph4Z97nEd8xBveVxl1m0uiN5
Q11duVMU/X1s/yRntuSA701F7GWZ1sPTB2FJ+SCGPoLMfXFAfQoD8hbymwxfrgZQ
oaL4SrqsQhgOYKg059vsgdCKA1mZF+Eea0XU33n9rcyXOyFatwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIHJeckv6LE3rn0rvW/L0mhx8VtXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm
ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNzBhZWFiYjktNzhlNC0z
YTgzLWE1ZWUtNWVhN2IzMDQ5YTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj
MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5
OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk
ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqswXCELTQ/zSrMp+PZYF2SMe22JwRuL3GPQH+2BtUnUtjmDwuztfzV
SoRATFTKuE3SQg44b6h9fkMAHLl1YBB+zmrgBEZl4yrn8P2lzelOBNd+04zE8DL8
rSI+XXXcXlbGeCovgSYrohuZRf3n2Kbr0r6kAe4T4hExKJAewjY8aSziMLnHQlsq
iNcctboNzjMhyzSUJDZaASML0yh4FYyVt06YBbtdliH3GCtANhLh1YHmKiLA/QuM
X7pU/7UKjjq8+5Zk6tk0QZ/JdJgiu7Ly0uwGUfIp+9aDA8YS/Mo4viZZMWmOEPds
fci+0V//6LixLwRN0QN0TtSCxF8hAR0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:08:06 2025 by rpki-client