Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/56770b39-baf1-3ca3-9e60-505abe53ada8.roa
File:                     56770b39-baf1-3ca3-9e60-505abe53ada8.roa (raw, json)
Hash identifier:          INj9TcDFc/lT8Gf6MIV2C4ikt9iB+QnWlYDb1CAC08Q=
Subject key identifier:   2C:23:AC:4D:66:BC:3B:AF:6D:DE:41:B4:F3:E2:A9:12:7B:52:F3:C0
Certificate issuer:       /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial:       010D0C9F4328584AADF11FDF920463567FA44770
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/56770b39-baf1-3ca3-9e60-505abe53ada8.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     13638
IP address blocks:        173.241.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:1f:df:92:04:63:56:7f:a4:47:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=057987b3-9b6f-4697-8a82-caca59808b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:71:a5:51:57:12:f2:32:a4:ee:53:1c:f3:9c:
                    a8:8e:a5:df:22:3e:97:fe:63:b3:de:b2:aa:50:56:
                    d7:e8:d8:e7:ea:7b:ff:9e:63:82:a6:48:a7:43:98:
                    cf:89:55:05:58:ad:23:37:73:fb:3c:e0:29:11:3e:
                    f9:9b:91:32:1a:a0:29:74:54:6c:af:3f:08:34:dc:
                    00:ac:94:1e:a3:31:52:21:e6:1c:07:03:e9:06:45:
                    2b:f5:80:35:a5:92:3b:7e:1c:f2:99:96:17:42:3e:
                    90:d0:ba:36:0d:3c:d6:a1:4f:c4:82:d7:2f:43:85:
                    9d:c0:5b:03:16:f8:be:31:60:37:9d:de:e3:75:5d:
                    8d:e1:1a:51:b5:e4:eb:a1:0d:54:f8:85:a2:9e:32:
                    7b:5e:da:b3:4b:bf:4f:73:d6:3a:94:ed:26:ec:63:
                    20:6f:6b:cf:66:c4:89:91:f7:16:64:cd:b7:53:fd:
                    43:13:7d:72:56:c2:f3:06:3e:12:88:84:32:0f:3e:
                    6a:28:8c:e2:ce:a9:22:06:5b:12:d6:1b:a1:a3:72:
                    68:3b:e2:04:54:43:0c:36:fe:13:51:5f:48:97:2e:
                    32:31:a9:75:9e:73:3d:14:dd:d0:8f:e1:2c:9c:85:
                    12:cc:15:c0:21:cd:4e:a3:8d:3b:a7:2c:13:dc:06:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:23:AC:4D:66:BC:3B:AF:6D:DE:41:B4:F3:E2:A9:12:7B:52:F3:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/56770b39-baf1-3ca3-9e60-505abe53ada8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl

            X509v3 Authority Key Identifier:
                keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a1:e3:95:15:44:15:a2:8e:91:6f:82:2d:6c:49:da:9a:91:
         11:0d:c6:c3:f2:73:98:28:36:85:56:fe:f2:b4:91:03:05:3f:
         f4:41:90:d8:59:a1:a2:0d:e5:41:20:4f:2e:96:cb:88:6a:12:
         38:ef:82:8f:a8:3d:7a:ea:95:ce:e9:20:05:3e:53:f4:6d:1f:
         80:1e:e4:0a:0d:81:79:89:89:12:72:7c:8d:46:98:1d:b0:78:
         23:29:8f:45:d7:cf:52:23:36:65:dd:09:be:75:2b:e2:18:72:
         53:86:69:e3:b4:c7:b6:2b:0a:85:ad:9d:fe:b1:e1:bc:13:e7:
         a2:08:54:e1:20:71:03:c0:ff:96:a1:7e:4a:b2:43:70:a3:13:
         67:ce:2a:e6:f5:05:98:08:d2:ed:2c:f0:c4:fa:02:4c:86:d0:
         14:ec:1c:3f:45:33:19:eb:44:25:62:35:c6:1e:18:5c:b4:0e:
         74:51:81:db:dd:05:fb:33:d7:cf:83:aa:a6:44:33:84:01:db:
         c1:7a:3f:0d:68:a9:1e:df:f8:4e:50:bd:1f:4b:05:3f:c3:21:
         34:fb:78:04:95:3b:51:dd:67:e0:90:6f:77:e6:af:09:02:71:
         3a:d0:8b:0c:76:e6:48:d9:9e:0c:63:8a:4c:1a:d4:b2:a4:ee:
         44:c6:37:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8R/fkgRjVn+kR3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4
ZmI3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
MDU3OTg3YjMtOWI2Zi00Njk3LThhODItY2FjYTU5ODA4YjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53GlUVcS8jKk7lMc85yojqXfIj6X/mOz3rKq
UFbX6Njn6nv/nmOCpkinQ5jPiVUFWK0jN3P7POApET75m5EyGqApdFRsrz8INNwA
rJQeozFSIeYcBwPpBkUr9YA1pZI7fhzymZYXQj6Q0Lo2DTzWoU/EgtcvQ4WdwFsD
Fvi+MWA3nd7jdV2N4RpRteTroQ1U+IWinjJ7XtqzS79Pc9Y6lO0m7GMgb2vPZsSJ
kfcWZM23U/1DE31yVsLzBj4SiIQyDz5qKIzizqkiBlsS1huho3JoO+IEVEMMNv4T
UV9Ily4yMal1nnM9FN3Qj+EsnIUSzBXAIc1Oo407pywT3AZwvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwjrE1mvDuvbd5BtPPiqRJ7UvPAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2
YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvNTY3NzBiMzktYmFmMS0z
Y2EzLTllNjAtNTA1YWJlNTNhZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3
NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy
OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5
MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6h45UVRBWijpFvgi1sSdqakRENxsPyc5goNoVW/vK0kQMFP/RBkNhZ
oaIN5UEgTy6Wy4hqEjjvgo+oPXrqlc7pIAU+U/RtH4Ae5AoNgXmJiRJyfI1GmB2w
eCMpj0XXz1IjNmXdCb51K+IYclOGaeO0x7YrCoWtnf6x4bwT56IIVOEgcQPA/5ah
fkqyQ3CjE2fOKub1BZgI0u0s8MT6AkyG0BTsHD9FMxnrRCViNcYeGFy0DnRRgdvd
Bfsz18+DqqZEM4QB28F6Pw1oqR7f+E5QvR9LBT/DITT7eASVO1HdZ+CQb3fmrwkC
cTrQiwx25kjZngxjikwa1LKk7kTGNwg=
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:59 2025 by rpki-client