Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/257e3931-d768-3013-94c0-1b65b52ad059.roa
File:                     257e3931-d768-3013-94c0-1b65b52ad059.roa (raw, json)
Hash identifier:          Z3clSUwXLzZVkFHIZ/9ImK864BR0UbXnzEO9BIqs/Is=
Subject key identifier:   E3:00:1B:D5:EB:48:E7:95:57:D8:35:2F:FE:FD:43:B3:0E:E6:75:3D
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584AAB2648F578C8B7812938D9E0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/257e3931-d768-3013-94c0-1b65b52ad059.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     42
IP address blocks:        72.0.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:48:f5:78:c8:b7:81:29:38:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=2ad4c4c6-e66a-4877-92a9-08818b42142b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5a:5b:65:97:84:31:53:a0:d5:4a:bf:ea:f9:
                    8c:c2:0b:3e:ab:41:7b:a3:d9:5f:7b:19:aa:10:46:
                    39:a8:36:b5:3a:88:99:ce:fa:cb:57:33:d9:e8:d2:
                    94:c8:39:e3:42:31:fe:f4:d7:42:2d:e2:25:6a:92:
                    2a:81:6e:a1:01:dd:44:9b:f9:39:10:28:db:60:34:
                    a8:e9:f1:81:1d:f8:94:18:e3:28:c7:a1:ad:4a:36:
                    db:7b:2a:22:c1:df:71:a2:83:ee:ff:e3:5d:ba:84:
                    6e:ae:26:8f:38:1e:cc:72:96:4d:e5:72:bf:84:12:
                    1b:9c:ad:6e:30:ed:53:a8:97:6a:6f:7e:e3:c6:6b:
                    c8:61:f0:52:60:04:ec:78:df:21:e8:70:a2:99:ab:
                    88:15:6b:10:cb:c0:d2:b8:bd:95:b6:b6:bd:ab:c7:
                    2f:d9:e9:4b:75:c1:ca:52:13:da:8d:a7:4a:fe:bf:
                    68:1e:bb:e0:bc:b7:75:de:48:02:a1:f2:d9:fd:02:
                    e9:f4:52:d1:e5:fb:96:d6:4a:05:f2:b7:bb:52:7f:
                    d9:69:68:f6:f1:cf:dc:a7:1f:c7:51:4d:bd:8a:12:
                    80:66:b4:10:79:35:ee:56:8b:4d:c5:94:d5:7a:4e:
                    15:50:e6:36:52:ba:6c:f0:c3:32:6e:da:e0:49:e5:
                    93:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:1B:D5:EB:48:E7:95:57:D8:35:2F:FE:FD:43:B3:0E:E6:75:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/257e3931-d768-3013-94c0-1b65b52ad059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.0.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:14:51:8e:80:9d:0c:78:ce:e7:65:96:0c:76:49:1c:46:89:
         c3:68:69:66:57:fb:be:15:9e:c0:46:07:c9:09:fa:9e:8f:f0:
         cb:d5:05:01:5e:90:8e:25:b7:ce:7a:46:5c:05:97:54:cf:73:
         43:12:93:ad:d2:f1:5f:12:f7:10:fe:d2:2f:91:51:e8:14:aa:
         9f:26:2e:db:1d:26:d2:2b:e8:63:84:c5:d7:51:f9:54:5c:43:
         cc:f6:cf:bc:39:37:32:a4:f3:a1:0d:d2:56:c5:29:2a:2e:22:
         e0:af:40:3b:81:7b:65:c9:b4:6d:21:cb:e6:79:5a:76:42:49:
         df:99:23:8d:dc:e4:7c:d6:20:84:13:6a:39:0e:f7:bc:e4:95:
         5b:a8:74:69:2f:9e:f7:e6:c3:e0:5c:2b:db:01:ec:ab:97:83:
         2e:df:53:77:21:af:6f:17:e3:ec:31:32:87:c0:d0:1a:dd:f4:
         77:bb:be:20:a2:d4:8e:3b:4c:41:1b:96:25:e9:b4:2a:f8:40:
         f1:92:d4:c5:ce:03:fb:e9:52:f0:cc:28:1f:43:24:a3:74:d0:
         c2:c3:10:a1:c0:d7:f7:79:e6:02:d6:5a:99:b5:99:af:75:b5:
         39:36:97:84:2d:58:10:41:b5:42:a5:28:2f:0a:00:53:60:37:
         29:44:58:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJkj1eMi3gSk42eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MmFkNGM0YzYtZTY2YS00ODc3LTkyYTktMDg4MThiNDIxNDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FpbZZeEMVOg1Uq/6vmMwgs+q0F7o9lfexmq
EEY5qDa1OoiZzvrLVzPZ6NKUyDnjQjH+9NdCLeIlapIqgW6hAd1Em/k5ECjbYDSo
6fGBHfiUGOMox6GtSjbbeyoiwd9xooPu/+NduoRuriaPOB7McpZN5XK/hBIbnK1u
MO1TqJdqb37jxmvIYfBSYATseN8h6HCimauIFWsQy8DSuL2Vtra9q8cv2elLdcHK
UhPajadK/r9oHrvgvLd13kgCofLZ/QLp9FLR5fuW1koF8re7Un/ZaWj28c/cpx/H
UU29ihKAZrQQeTXuVotNxZTVek4VUOY2Urps8MMybtrgSeWTQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMAG9XrSOeVV9g1L/79Q7MO5nU9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMjU3ZTM5MzEtZDc2OC0z
MDEzLTk0YzAtMWI2NWI1MmFkMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAAwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJkUUY6AnQx4zudllgx2SRxGicNoaWZX+74VnsBGB8kJ+p6P8MvVBQFe
kI4lt856RlwFl1TPc0MSk63S8V8S9xD+0i+RUegUqp8mLtsdJtIr6GOExddR+VRc
Q8z2z7w5NzKk86EN0lbFKSouIuCvQDuBe2XJtG0hy+Z5WnZCSd+ZI43c5HzWIIQT
ajkO97zklVuodGkvnvfmw+BcK9sB7KuXgy7fU3chr28X4+wxMofA0Brd9He7viCi
1I47TEEbliXptCr4QPGS1MXOA/vpUvDMKB9DJKN00MLDEKHA1/d55gLWWpm1ma91
tTk2l4QtWBBBtUKlKC8KAFNgNylEWP0=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:08 2025 by rpki-client