Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a1c3c8f8-94e2-39bf-9a26-aa33ca143521.roa
File:                     a1c3c8f8-94e2-39bf-9a26-aa33ca143521.roa (raw, json)
Hash identifier:          YY5b/bNufM0pHXqXXdTcVW9SOmMqYL4Hb+Lw435q2Xg=
Subject key identifier:   F4:28:6C:D3:6B:A7:0A:4B:55:C3:B9:0B:1B:F7:DC:5B:67:78:55:0B
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584A5FC5DAC7B78ED7CE52EF2080
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a1c3c8f8-94e2-39bf-9a26-aa33ca143521.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     18817
IP address blocks:        216.12.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:da:c7:b7:8e:d7:ce:52:ef:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=b7b7e7c6-9637-4dd7-9a5b-ac45b3294605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:b2:dc:eb:ff:04:6b:ce:1e:27:c5:3a:ff:
                    b7:f5:56:51:c0:62:5d:39:32:39:16:f7:6b:d6:50:
                    e7:a5:ba:da:85:18:0b:ce:53:d0:b5:34:4d:fc:4a:
                    0c:7c:21:fd:b9:3c:b9:2d:25:b3:7a:f3:31:4c:81:
                    96:3c:5c:3c:f2:f3:2d:bf:25:3a:1f:29:e9:0c:e0:
                    22:f0:d0:7c:ea:56:31:21:ea:d7:f8:8e:e9:d1:a2:
                    6b:f1:e9:61:8e:e6:a6:87:fa:19:e0:2b:86:98:5e:
                    0d:af:57:3b:68:d6:bf:86:3f:f1:10:4d:34:25:3f:
                    42:38:11:b7:08:e7:53:64:b9:08:77:c3:44:48:da:
                    7a:6a:f9:f0:5d:46:a4:b6:25:36:95:12:f0:a2:bb:
                    1d:0a:95:13:09:78:e0:a2:f9:67:d8:ea:1e:0c:61:
                    55:03:16:a4:20:75:52:90:9d:da:f2:93:b1:64:ed:
                    eb:6b:0f:a4:ea:a6:c7:97:13:07:af:c4:7b:a2:da:
                    be:7b:ea:0c:3a:1c:8f:66:40:37:cb:bb:dc:c9:93:
                    3d:78:f5:85:32:9d:ac:8d:16:45:50:32:39:64:f6:
                    99:bb:cf:a8:4d:f5:ca:90:1d:29:5c:8a:2c:05:72:
                    65:a1:91:5a:b1:1f:ec:11:3e:92:8b:e2:75:fe:47:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:28:6C:D3:6B:A7:0A:4B:55:C3:B9:0B:1B:F7:DC:5B:67:78:55:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a1c3c8f8-94e2-39bf-9a26-aa33ca143521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.12.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:78:4e:05:c1:50:75:48:42:dd:35:f0:57:e4:77:66:cf:5a:
         5f:23:07:7b:8e:fc:8d:e3:0c:4c:32:ea:0b:b6:9a:d0:34:7d:
         4f:69:32:a2:4b:e5:14:0a:c2:23:38:32:2b:76:fa:cd:0b:14:
         1f:a5:00:4a:8a:34:b5:bb:9c:fd:a1:35:bf:4e:51:d7:15:67:
         7c:7d:57:14:2d:fb:ed:88:4b:14:08:d8:eb:5b:bb:01:39:5d:
         df:9b:0e:da:98:e6:5f:a6:5a:1a:4d:6f:e2:a1:b8:c4:46:2f:
         61:45:d1:30:4a:f7:83:43:3f:88:be:6a:22:70:0c:d2:b6:6c:
         79:ed:91:3d:75:c6:d8:2b:b5:2a:a6:98:e3:d6:03:fa:d4:31:
         63:5b:a1:8e:12:03:cc:96:10:51:8c:83:64:83:2e:93:d6:ff:
         01:9d:2d:cf:a2:35:48:31:7d:6f:69:d4:68:d4:e1:94:6d:cb:
         c3:b1:17:78:bc:c3:df:50:07:0a:ee:a1:55:66:d0:4c:4a:f6:
         cf:0a:0b:1c:89:1c:3b:3e:dd:71:f5:b6:cd:fb:aa:7e:76:89:
         28:41:c6:c7:40:3b:81:92:e2:a3:d3:90:8b:56:ec:82:0a:08:
         f2:e0:00:62:83:93:69:17:f3:e6:5a:1c:d6:02:78:3a:fb:0d:
         05:ae:b2:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdrHt47XzlLvIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk
YjdiN2U3YzYtOTYzNy00ZGQ3LTlhNWItYWM0NWIzMjk0NjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn66y3Ov/BGvOHifFOv+39VZRwGJdOTI5Fvdr
1lDnpbrahRgLzlPQtTRN/EoMfCH9uTy5LSWzevMxTIGWPFw88vMtvyU6HynpDOAi
8NB86lYxIerX+I7p0aJr8elhjuamh/oZ4CuGmF4Nr1c7aNa/hj/xEE00JT9COBG3
COdTZLkId8NESNp6avnwXUaktiU2lRLworsdCpUTCXjgovln2OoeDGFVAxakIHVS
kJ3a8pOxZO3raw+k6qbHlxMHr8R7otq+e+oMOhyPZkA3y7vcyZM9ePWFMp2sjRZF
UDI5ZPaZu8+oTfXKkB0pXIosBXJloZFasR/sET6Si+J1/kcYqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQobNNrpwpLVcO5Cxv33FtneFULMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYTFjM2M4ZjgtOTRlMi0z
OWJmLTlhMjYtYWEzM2NhMTQzNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AywMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJx4TgXBUHVIQt018Ffkd2bPWl8jB3uO/I3jDEwy6gu2mtA0fU9pMqJL
5RQKwiM4Mit2+s0LFB+lAEqKNLW7nP2hNb9OUdcVZ3x9VxQt++2ISxQI2OtbuwE5
Xd+bDtqY5l+mWhpNb+KhuMRGL2FF0TBK94NDP4i+aiJwDNK2bHntkT11xtgrtSqm
mOPWA/rUMWNboY4SA8yWEFGMg2SDLpPW/wGdLc+iNUgxfW9p1GjU4ZRty8OxF3i8
w99QBwruoVVm0ExK9s8KCxyJHDs+3XH1ts37qn52iShBxsdAO4GS4qPTkItW7IIK
CPLgAGKDk2kX8+ZaHNYCeDr7DQWuslk=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:03 2025 by rpki-client