Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa
File:                     ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa (raw, json)
Hash identifier:          15dLQDQjF6bOC3xgnZ7d7E3uW+0f51/OhzHGFHgZPuc=
Subject key identifier:   91:41:93:6C:A0:FA:63:0A:9B:FA:BC:B8:7D:69:83:BA:92:90:9F:5F
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584B583C8F531DB2C59F6F53F940
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     8987
IP address blocks:        170.72.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:8f:53:1d:b2:c5:9f:6f:53:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=488aca14-2f1c-46d1-a500-d1a74d7d5279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:97:eb:a5:a0:f9:07:88:72:5e:92:cf:a0:
                    b8:73:68:79:e5:e0:d1:b6:89:aa:43:87:24:52:2d:
                    a8:d9:8e:22:c0:23:e5:7f:8b:05:2e:32:73:24:1b:
                    50:eb:74:1c:09:c4:a0:d9:d0:13:e8:f1:03:37:47:
                    1b:01:d4:fe:9b:65:a6:f1:1d:2a:ce:e3:00:1c:de:
                    fc:92:f4:0d:e3:18:55:9a:fd:5a:1f:b5:66:e6:82:
                    f5:1b:db:87:48:d0:44:90:03:e6:08:9a:a9:9e:1f:
                    87:e2:2f:83:2f:20:d2:6c:27:56:41:de:d6:bb:01:
                    11:54:2b:d3:8a:de:d0:64:cd:58:ca:e5:73:82:76:
                    6d:2e:9d:83:13:87:0f:f6:4b:84:43:82:b7:69:b1:
                    f0:c1:23:93:26:78:55:de:0d:3d:b0:16:0c:44:3f:
                    2f:0c:f5:64:ba:49:51:05:44:75:ad:7c:c5:75:d5:
                    ab:00:36:b3:eb:cc:24:d2:f4:25:68:32:26:54:a0:
                    87:76:da:15:22:96:5a:c3:dd:f7:9b:7d:8c:f5:c2:
                    ef:70:e7:da:a6:71:99:4a:bf:cf:cd:7a:0b:38:29:
                    e9:70:2d:5a:5f:32:88:c3:b7:82:6f:36:59:1e:9f:
                    aa:f9:41:35:59:0b:b5:36:70:16:80:99:6f:90:fd:
                    0f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:41:93:6C:A0:FA:63:0A:9B:FA:BC:B8:7D:69:83:BA:92:90:9F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:21:77:dd:ea:df:57:05:e8:c4:74:69:ca:9f:84:1e:b1:ae:
         cb:98:04:46:ee:0e:72:66:f6:5a:80:8e:fb:cf:11:7f:f2:28:
         e6:17:4c:12:91:84:49:17:bc:51:bf:31:ee:01:72:99:d4:59:
         18:17:83:31:92:ce:65:80:bb:d9:ca:af:bc:1f:1e:ff:ad:ed:
         d5:eb:30:f2:b6:d7:b7:4c:5e:35:c0:06:ef:c5:c8:5c:4a:75:
         6b:fe:d5:fe:a8:dd:ae:fe:33:a5:b0:fb:31:d9:ab:f4:be:fe:
         57:38:67:90:93:ec:b0:e8:ce:f9:f8:6d:d5:cd:b6:d6:6d:bf:
         d5:d1:52:a6:81:91:b2:39:bc:10:ec:27:40:12:10:ad:b2:cf:
         1b:b9:05:e7:e3:41:a4:13:d4:1a:8f:2f:5e:f1:34:7b:2c:1c:
         21:f6:7b:d7:3c:27:27:b7:b4:05:f2:0c:3b:ce:7b:b3:ee:2c:
         07:32:67:ec:dc:7d:9b:35:38:4c:8b:e0:e9:9f:02:64:89:6e:
         70:e4:e4:f8:39:93:76:9c:20:56:7d:f4:a1:d1:4e:ad:93:21:
         13:9d:db:3f:c4:e5:0c:31:4a:57:93:1f:b4:6a:65:20:21:99:
         de:6d:0e:a3:50:73:e9:9c:77:59:a0:ba:d1:e7:0a:b7:45:fd:
         7f:3f:38:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI9THbLFn29T+UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
NDg4YWNhMTQtMmYxYy00NmQxLWE1MDAtZDFhNzRkN2Q1Mjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFqX66Wg+QeIcl6Sz6C4c2h55eDRtomqQ4ck
Ui2o2Y4iwCPlf4sFLjJzJBtQ63QcCcSg2dAT6PEDN0cbAdT+m2Wm8R0qzuMAHN78
kvQN4xhVmv1aH7Vm5oL1G9uHSNBEkAPmCJqpnh+H4i+DLyDSbCdWQd7WuwERVCvT
it7QZM1YyuVzgnZtLp2DE4cP9kuEQ4K3abHwwSOTJnhV3g09sBYMRD8vDPVkuklR
BUR1rXzFddWrADaz68wk0vQlaDImVKCHdtoVIpZaw933m32M9cLvcOfapnGZSr/P
zXoLOCnpcC1aXzKIw7eCbzZZHp+q+UE1WQu1NnAWgJlvkP0P5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFBk2yg+mMKm/q8uH1pg7qSkJ9fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvY2NjNzU1ZTAtNjQ5ZC0z
YTllLWE1ZjctMzA2NDUwMDdiYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqkjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0hd93q31cF6MR0acqfhB6xrsuYBEbuDnJm9lqAjvvPEX/yKOYXTBKR
hEkXvFG/Me4BcpnUWRgXgzGSzmWAu9nKr7wfHv+t7dXrMPK217dMXjXABu/FyFxK
dWv+1f6o3a7+M6Ww+zHZq/S+/lc4Z5CT7LDozvn4bdXNttZtv9XRUqaBkbI5vBDs
J0ASEK2yzxu5BefjQaQT1BqPL17xNHssHCH2e9c8Jye3tAXyDDvOe7PuLAcyZ+zc
fZs1OEyL4OmfAmSJbnDk5Pg5k3acIFZ99KHRTq2TIROd2z/E5QwxSleTH7RqZSAh
md5tDqNQc+mcd1mgutHnCrdF/X8/OK8=
-----END CERTIFICATE-----
Generated at Thu Oct 16 03:13:45 2025 by rpki-client