Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/077580d3-ad92-31cd-b303-fd2226c504fd.roa
File:                     077580d3-ad92-31cd-b303-fd2226c504fd.roa (raw, json)
Hash identifier:          J2CGA/z2gsN1j6va9aLa3CGWWvfftghSFSdetcHlwMc=
Subject key identifier:   93:F0:24:4F:AA:3E:13:E5:11:79:51:AA:7A:40:D8:E8:2D:FD:28:14
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584A747F0904DE9DA11B68287DC0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/077580d3-ad92-31cd-b303-fd2226c504fd.roa
Signing time:             Tue 08 Jul 2025 23:10:29 +0000
ROA not before:           Tue 08 Jul 2025 23:10:29 +0000
ROA not after:            Mon 06 Oct 2025 23:10:29 +0000
asID:                     46432
IP address blocks:        65.110.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:7f:09:04:de:9d:a1:1b:68:28:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jul  8 23:10:29 2025 GMT
            Not After : Oct  6 23:10:29 2025 GMT
        Subject: CN=02a5d9cb-d9ab-4c75-86a8-8f143da8deca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6c:41:51:c8:67:7a:7c:72:a3:01:b8:b5:7b:
                    5a:2e:1e:4c:f5:4e:49:74:f0:c1:f4:ae:47:bb:47:
                    fa:ee:c6:63:20:bf:d9:1a:ca:f1:9d:9a:6f:e9:8c:
                    12:94:81:c1:90:be:3b:45:8e:f1:b1:86:43:fa:9c:
                    17:60:94:95:0f:c3:d2:ec:91:2c:37:e7:7b:05:59:
                    f1:f2:75:d2:7a:c7:c5:c7:aa:26:d1:ae:05:7d:c8:
                    53:35:c5:97:eb:c3:90:44:13:6c:5c:4a:33:b2:9e:
                    63:01:3b:b8:a3:9d:95:2c:55:e9:14:c2:85:3b:5d:
                    db:26:23:d8:16:97:05:4a:f0:c9:d8:eb:d0:32:12:
                    11:0a:80:58:65:43:fe:da:06:df:81:4e:a4:f8:09:
                    d6:33:91:3f:1b:2a:ba:b5:2e:ff:53:2f:3d:7e:fc:
                    5d:dd:17:d4:7c:18:e9:ad:7e:25:25:e5:40:e9:f7:
                    0e:65:a8:18:af:c6:04:63:21:2f:e2:66:0d:9f:2b:
                    88:fd:5d:3c:51:22:1b:e8:2e:39:2b:c7:2d:cb:6c:
                    0c:86:03:c4:24:48:ef:a0:b4:9a:90:6c:f3:78:67:
                    d2:ae:d3:f5:06:b7:27:ee:c2:fc:af:a6:c4:f7:2f:
                    39:0e:e8:2d:35:d3:83:84:83:af:1f:61:1a:23:3f:
                    47:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F0:24:4F:AA:3E:13:E5:11:79:51:AA:7A:40:D8:E8:2D:FD:28:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/077580d3-ad92-31cd-b303-fd2226c504fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9e:e5:20:b3:39:98:f5:35:21:86:8e:ff:80:e3:d3:53:32:
         02:0d:41:1a:2a:75:34:e0:8d:8c:cc:90:3f:a8:bb:77:3d:5d:
         84:84:55:17:17:41:68:8e:a6:e0:89:f7:04:74:ad:31:a8:a4:
         71:a1:c6:09:f2:1a:8b:b7:0a:22:b8:2f:62:d0:72:22:6b:9a:
         2e:d8:8b:37:bd:71:aa:48:b9:e7:07:1e:79:88:26:56:bc:91:
         40:87:d7:f9:63:c7:d3:05:cc:ab:1a:08:78:aa:93:3f:25:77:
         53:3b:f7:30:e0:23:26:40:a4:b4:00:6d:83:14:ad:fe:00:74:
         bc:df:d1:c5:9d:aa:e8:81:fa:27:8b:c9:a8:38:b2:5e:98:f0:
         32:d6:84:e7:a4:39:8d:ea:06:f6:ca:ea:4e:fd:16:8d:65:9a:
         09:29:14:45:1b:82:d1:a6:3a:96:b7:ed:5f:fe:43:26:03:ae:
         eb:77:e3:2f:a1:f7:c8:6d:3a:11:a9:ba:a2:84:d4:7c:f3:9d:
         ed:46:46:d0:94:dc:25:58:14:1d:be:16:ff:90:99:e5:f1:11:
         60:eb:1b:cc:6a:ee:e6:2d:0a:7b:6e:2d:4a:23:45:41:6e:30:
         ae:5a:7e:79:85:1f:16:09:76:ba:65:c4:67:29:e2:df:b9:59:
         25:f0:26:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp0fwkE3p2hG2gofcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI1MDcwODIzMTAyOVoXDTI1MTAwNjIzMTAyOVowLzEtMCsGA1UEAxMk
MDJhNWQ5Y2ItZDlhYi00Yzc1LTg2YTgtOGYxNDNkYThkZWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmxBUchnenxyowG4tXtaLh5M9U5JdPDB9K5H
u0f67sZjIL/ZGsrxnZpv6YwSlIHBkL47RY7xsYZD+pwXYJSVD8PS7JEsN+d7BVnx
8nXSesfFx6om0a4FfchTNcWX68OQRBNsXEozsp5jATu4o52VLFXpFMKFO13bJiPY
FpcFSvDJ2OvQMhIRCoBYZUP+2gbfgU6k+AnWM5E/Gyq6tS7/Uy89fvxd3RfUfBjp
rX4lJeVA6fcOZagYr8YEYyEv4mYNnyuI/V08USIb6C45K8cty2wMhgPEJEjvoLSa
kGzzeGfSrtP1Brcn7sL8r6bE9y85DugtNdODhIOvH2EaIz9HgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPwJE+qPhPlEXlRqnpA2Ogt/SgUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvMDc3NTgwZDMtYWQ5Mi0z
MWNkLWIzMDMtZmQyMjI2YzUwNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+e5SCzOZj1NSGGjv+A49NTMgINQRoqdTTgjYzMkD+ou3c9XYSEVRcX
QWiOpuCJ9wR0rTGopHGhxgnyGou3CiK4L2LQciJrmi7Yize9capIuecHHnmIJla8
kUCH1/ljx9MFzKsaCHiqkz8ld1M79zDgIyZApLQAbYMUrf4AdLzf0cWdquiB+ieL
yag4sl6Y8DLWhOekOY3qBvbK6k79Fo1lmgkpFEUbgtGmOpa37V/+QyYDrut34y+h
98htOhGpuqKE1Hzzne1GRtCU3CVYFB2+Fv+QmeXxEWDrG8xq7uYtCntuLUojRUFu
MK5afnmFHxYJdrplxGcp4t+5WSXwJnk=
-----END CERTIFICATE-----
Generated at Wed Jul 9 11:42:36 2025 by rpki-client