Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d85bca6-eeb6-3485-8b97-e8274f0d54a8.roa
File:                     0d85bca6-eeb6-3485-8b97-e8274f0d54a8.roa (raw, json)
Hash identifier:          IK9hosn1ERf4q3K+S7hMp8s52G6fJXiBktrwp5acJCA=
Subject key identifier:   D6:5A:6D:97:86:61:E9:2F:6A:B6:D4:FC:BF:03:7F:73:CC:C5:AB:33
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584ACD613F34BCB1723D3A844B80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d85bca6-eeb6-3485-8b97-e8274f0d54a8.roa
Signing time:             Sat 09 Aug 2025 19:17:25 +0000
ROA not before:           Sat 09 Aug 2025 19:17:25 +0000
ROA not after:            Fri 07 Nov 2025 20:17:25 +0000
asID:                     31898
IP address blocks:        132.226.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cd:61:3f:34:bc:b1:72:3d:3a:84:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug  9 19:17:25 2025 GMT
            Not After : Nov  7 20:17:25 2025 GMT
        Subject: CN=ee9f0917-14ac-4933-aa61-b79f8f6191f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d1:ec:4b:d6:2e:2e:fb:05:cf:12:95:c9:0b:
                    32:bf:7b:a0:90:e1:fe:f9:8a:1c:62:bb:26:a1:76:
                    6b:22:30:16:12:9c:12:3f:5d:ec:e3:df:10:e7:6f:
                    21:3d:5a:9e:79:e3:83:46:56:6e:4a:d3:ee:6f:0a:
                    7b:b6:cc:fe:6f:14:9f:03:52:d2:d3:73:74:15:f4:
                    d4:4a:6e:80:dc:f6:28:70:a0:42:04:80:0a:2a:5f:
                    5e:71:c2:a9:21:fa:5a:fb:29:4c:44:9d:88:bb:bc:
                    ee:2b:fc:1a:91:33:98:6d:68:9e:58:13:cb:30:f3:
                    8c:53:c1:87:e8:13:f3:01:41:55:51:6f:cb:44:da:
                    d8:f2:30:d0:e8:92:91:85:1a:69:e4:25:33:34:cf:
                    e8:5e:a7:75:82:99:7f:b2:0e:ea:f6:7c:96:21:86:
                    9d:9f:8f:3b:59:a7:4b:84:a1:f4:11:9c:94:99:fd:
                    f2:75:fb:da:b5:32:26:22:8b:6e:de:8d:b5:5b:87:
                    a7:ea:c6:fc:1b:4b:cd:44:56:34:38:7e:aa:0c:d8:
                    67:0b:c3:0d:b3:cd:03:2e:a9:1f:ed:f7:4c:53:c7:
                    2a:a3:79:06:04:7a:14:ad:4b:48:84:5a:3c:8e:70:
                    6a:12:b6:93:1e:68:a4:31:0c:6e:e6:05:fe:b8:d8:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5A:6D:97:86:61:E9:2F:6A:B6:D4:FC:BF:03:7F:73:CC:C5:AB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d85bca6-eeb6-3485-8b97-e8274f0d54a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.226.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:5e:06:a9:9a:f1:3c:f3:69:5a:7c:9e:0d:68:af:ce:a6:
         fd:3c:b6:b1:fe:b6:0a:a5:51:98:4f:64:f7:08:88:3e:1a:a9:
         12:22:39:6f:83:37:bc:b4:d1:27:78:ab:13:c7:5b:ae:59:53:
         5a:27:d0:5a:fb:0f:4f:70:09:ef:c6:e4:b6:7c:a0:bf:28:fb:
         f1:f8:f6:89:c9:c8:5c:87:0d:ac:de:00:cc:7c:10:e3:ee:34:
         61:5b:02:1a:58:54:f5:fd:1c:ac:bc:d9:e0:e8:8e:df:e9:a3:
         29:38:5b:d5:e4:2f:b4:41:db:2c:c0:e7:2a:99:72:e9:63:e3:
         9c:0e:54:05:17:e4:a7:03:ad:0c:be:f6:38:f9:27:a1:96:f0:
         c0:a0:08:50:59:ee:43:32:f7:7f:00:5c:98:b2:52:94:19:b2:
         9e:a3:59:fd:ec:55:ac:e8:6f:00:35:15:b8:53:ea:1f:13:19:
         71:69:00:cd:23:93:11:c2:e4:7f:a7:e9:55:9b:87:e7:b5:29:
         3d:22:1c:42:d2:90:9f:06:b8:47:72:56:6b:f5:2e:26:0b:ff:
         d4:e2:be:87:8c:7c:8f:1a:e2:03:21:ec:ec:f6:23:f5:8c:96:
         05:96:fc:c7:23:61:85:5b:29:28:80:58:32:19:98:d5:74:da:
         1a:c0:66:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYT80vLFyPTqES4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgwOTE5MTcyNVoXDTI1MTEwNzIwMTcyNVowLzEtMCsGA1UEAxMk
ZWU5ZjA5MTctMTRhYy00OTMzLWFhNjEtYjc5ZjhmNjE5MWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9HsS9YuLvsFzxKVyQsyv3ugkOH++YocYrsm
oXZrIjAWEpwSP13s498Q528hPVqeeeODRlZuStPubwp7tsz+bxSfA1LS03N0FfTU
Sm6A3PYocKBCBIAKKl9eccKpIfpa+ylMRJ2Iu7zuK/wakTOYbWieWBPLMPOMU8GH
6BPzAUFVUW/LRNrY8jDQ6JKRhRpp5CUzNM/oXqd1gpl/sg7q9nyWIYadn487WadL
hKH0EZyUmf3ydfvatTImIotu3o21W4en6sb8G0vNRFY0OH6qDNhnC8MNs80DLqkf
7fdMU8cqo3kGBHoUrUtIhFo8jnBqEraTHmikMQxu5gX+uNi0VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZabZeGYekvarbU/L8Df3PMxaszMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGQ4NWJjYTYtZWViNi0z
NDg1LThiOTctZTgyNzRmMGQ1NGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFhOIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMcXgapmvE882lafJ4NaK/Opv08trH+tgqlUZhPZPcIiD4aqRIiOW+D
N7y00Sd4qxPHW65ZU1on0Fr7D09wCe/G5LZ8oL8o+/H49onJyFyHDazeAMx8EOPu
NGFbAhpYVPX9HKy82eDojt/poyk4W9XkL7RB2yzA5yqZculj45wOVAUX5KcDrQy+
9jj5J6GW8MCgCFBZ7kMy938AXJiyUpQZsp6jWf3sVazobwA1FbhT6h8TGXFpAM0j
kxHC5H+n6VWbh+e1KT0iHELSkJ8GuEdyVmv1LiYL/9TivoeMfI8a4gMh7Oz2I/WM
lgWW/McjYYVbKSiAWDIZmNV02hrAZqk=
-----END CERTIFICATE-----
Generated at Wed Aug 20 03:42:44 2025 by rpki-client