Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa
File:                     064a5eec-8029-3054-85ec-74c43a35dabf.roa (raw, json)
Hash identifier:          afxQ3QP9o1eF+F2H50/2AFwxR3FcwDKErEgM2B1/L8M=
Subject key identifier:   14:FE:1C:A8:20:D9:A2:6E:C0:08:16:69:AC:DF:90:5C:82:05:CB:AA
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584AD9364E6F1DCEB2B60E321300
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     20205
IP address blocks:        158.247.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:4e:6f:1d:ce:b2:b6:0e:32:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=6f4d545e-ab37-49c5-8a2b-1127d7825729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:a5:50:40:b3:e2:b0:41:c8:21:18:2c:29:
                    c0:d4:ef:5c:e5:af:27:c3:93:50:d0:92:2b:09:39:
                    0b:fb:bd:23:fb:84:8c:71:a4:8b:fc:92:5d:eb:12:
                    a5:e8:f2:4c:56:66:2c:2a:9c:fd:b2:22:be:90:a8:
                    a0:2e:77:2f:e4:56:97:0d:a3:a9:eb:c8:2a:e1:71:
                    24:0e:6c:71:55:1f:be:29:5f:53:49:c1:b7:4f:74:
                    2b:54:fd:10:5e:5f:3b:ec:3c:a5:a0:cb:14:cf:37:
                    f4:06:cb:dd:2d:8d:54:e4:d9:ed:d9:fb:58:df:6c:
                    35:94:58:92:13:9e:f2:11:3c:69:a2:f9:d0:2e:be:
                    76:84:a3:22:71:1d:a1:06:91:9d:6c:63:75:f7:a9:
                    a1:3b:02:1b:08:bb:df:5b:d5:3e:57:95:df:4a:00:
                    08:25:01:98:95:bf:f4:c1:0d:ce:c5:29:ac:50:bb:
                    40:a5:8f:1e:63:c4:d2:6b:b0:cd:3c:e7:14:30:b2:
                    33:6d:4c:0f:9d:38:0e:98:c0:8c:da:bb:54:38:25:
                    2f:46:81:3d:74:9e:cf:25:d9:74:94:50:0c:6e:d4:
                    91:5b:95:6b:89:49:aa:c8:e6:b2:d7:28:13:5e:3c:
                    12:cd:bc:c5:c4:61:c4:f8:72:3d:12:ed:e0:4e:07:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FE:1C:A8:20:D9:A2:6E:C0:08:16:69:AC:DF:90:5C:82:05:CB:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a9:e9:0b:43:33:f2:12:6c:9a:8a:35:22:0b:17:81:aa:e6:
         21:8b:ba:b1:cc:0d:68:e7:65:52:78:4b:75:bc:f8:0d:b7:16:
         38:d6:6c:c0:49:4b:43:6a:6d:dd:1a:ff:fe:66:88:f1:a3:79:
         63:bf:92:73:54:c6:f7:20:68:3b:2e:13:55:05:9a:bc:09:49:
         4f:2a:0e:97:7c:74:a7:87:61:a5:c3:a5:c6:c5:ff:b0:b7:07:
         c7:14:1b:29:f8:75:81:8a:2e:d2:2b:27:05:53:59:47:2a:5d:
         ea:cb:7b:0c:c8:ea:db:03:9f:fa:70:59:6b:d1:e7:6f:17:fa:
         5d:9b:0b:8d:22:af:c7:62:8f:b3:b9:f0:6f:f7:fa:58:fa:eb:
         4c:1a:b3:d5:c0:66:eb:d1:32:18:ea:f0:bd:fd:ab:2f:7c:04:
         37:3f:6c:a4:7c:59:9c:54:b9:c7:2a:b4:92:e8:37:e9:0b:64:
         55:a5:df:d9:f6:a0:c1:54:7b:0e:c4:8a:54:a1:43:b1:e4:4f:
         19:93:15:e9:3b:60:43:73:3f:30:6c:0b:ae:d4:5b:bf:8c:98:
         05:c5:04:39:54:77:33:8e:6f:5e:07:06:67:84:c9:02:dd:52:
         cf:89:71:df:9e:ae:92:38:e6:48:fa:4a:89:26:0a:08:90:97:
         05:4d:28:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNk5vHc6ytg4yEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNDVlOTctOTBjMi00ODNkLWE2OGItMmRkMmM4MzI2
NmEyMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk
NmY0ZDU0NWUtYWIzNy00OWM1LThhMmItMTEyN2Q3ODI1NzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooKlUECz4rBByCEYLCnA1O9c5a8nw5NQ0JIr
CTkL+70j+4SMcaSL/JJd6xKl6PJMVmYsKpz9siK+kKigLncv5FaXDaOp68gq4XEk
DmxxVR++KV9TScG3T3QrVP0QXl877DyloMsUzzf0BsvdLY1U5Nnt2ftY32w1lFiS
E57yETxpovnQLr52hKMicR2hBpGdbGN196mhOwIbCLvfW9U+V5XfSgAIJQGYlb/0
wQ3OxSmsULtApY8eY8TSa7DNPOcUMLIzbUwPnTgOmMCM2rtUOCUvRoE9dJ7PJdl0
lFAMbtSRW5VriUmqyOay1ygTXjwSzbzFxGHE+HI9Eu3gTgfV2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBT+HKgg2aJuwAgWaazfkFyCBcuqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0
NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgzMjY2YTIvMDY0YTVlZWMtODAyOS0z
MDU0LTg1ZWMtNzRjNDNhMzVkYWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWVkNDVlOTctOTBjMi00ODNkLWE2
OGItMmRkMmM4MzI2NmEyLzllZDQ1ZTk3LTkwYzItNDgzZC1hNjhiLTJkZDJjODMy
NjZhMi5jcmwwHwYDVR0jBBgwFoAU2Na/N7W2TtQdeVXNk36mXgCJn/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQy
YzgzMjY2YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnvdIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIap6QtDM/ISbJqKNSILF4Gq5iGLurHMDWjnZVJ4S3W8+A23FjjWbMBJ
S0Nqbd0a//5miPGjeWO/knNUxvcgaDsuE1UFmrwJSU8qDpd8dKeHYaXDpcbF/7C3
B8cUGyn4dYGKLtIrJwVTWUcqXerLewzI6tsDn/pwWWvR528X+l2bC40ir8dij7O5
8G/3+lj660was9XAZuvRMhjq8L39qy98BDc/bKR8WZxUuccqtJLoN+kLZFWl39n2
oMFUew7EilShQ7HkTxmTFek7YENzPzBsC67UW7+MmAXFBDlUdzOOb14HBmeEyQLd
Us+Jcd+erpI45kj6SokmCgiQlwVNKMg=
-----END CERTIFICATE-----
Generated at Thu Aug 21 03:52:31 2025 by rpki-client