Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/401a5b2b-96a8-3f6c-86b7-992cffe7c38e.roa
File:                     401a5b2b-96a8-3f6c-86b7-992cffe7c38e.roa (raw, json)
Hash identifier:          apyIm7vsWZbCFO/ydbkebLd7FTDF9brFt+le7ZU3HGc=
Subject key identifier:   1C:B2:71:85:B9:D3:05:0A:DA:8D:3D:6D:CB:3C:AD:08:C5:12:F5:C8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96367CDB809BD9613801F700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/401a5b2b-96a8-3f6c-86b7-992cffe7c38e.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        174.65.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:7c:db:80:9b:d9:61:38:01:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=39430539-8d5e-476d-aed1-cc139ca185bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d4:f2:a3:6c:b4:ae:a7:c0:c2:ea:a5:6f:0d:
                    97:44:5d:de:90:c2:21:62:ba:f4:e0:3d:c0:18:04:
                    c0:7b:5f:27:3f:62:f0:5c:ea:4e:f5:f0:d8:1c:1b:
                    a1:cc:2b:6a:ed:e6:d9:ee:93:67:b8:75:42:1d:53:
                    20:98:0e:15:76:7b:98:6e:80:a7:8b:e0:46:b3:13:
                    78:ef:97:b0:35:9b:81:da:05:ef:f3:3e:38:ca:94:
                    f6:c6:e5:25:35:10:83:e6:26:e9:f5:dc:d2:da:f5:
                    3b:31:cc:c5:67:50:cb:13:ae:05:1e:28:d8:e1:d0:
                    67:9d:b4:56:92:01:44:d6:02:03:a7:89:7c:97:27:
                    e7:f2:59:44:df:d8:94:ca:b8:d4:20:c8:d3:57:92:
                    10:46:ee:08:6e:62:3f:81:2b:d7:1b:95:56:10:53:
                    93:a9:b9:63:53:86:c8:62:e7:e0:a6:51:72:96:f9:
                    a0:53:61:06:01:29:77:12:e0:de:cf:e9:41:76:9d:
                    7a:2a:81:9d:7a:13:43:6e:dd:02:2d:65:ac:23:04:
                    75:27:99:71:77:ef:f6:69:c3:e2:fd:95:f4:f5:28:
                    a9:c7:58:1d:6b:f7:79:43:c7:1a:39:66:79:b0:0f:
                    e4:bc:1a:b7:cd:4d:ba:bf:03:ea:60:3a:cc:df:42:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B2:71:85:B9:D3:05:0A:DA:8D:3D:6D:CB:3C:AD:08:C5:12:F5:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/401a5b2b-96a8-3f6c-86b7-992cffe7c38e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.65.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bb:06:d3:fe:76:d5:bc:57:8f:5c:f3:80:72:e5:4c:98:48:
         d8:f6:74:2c:57:d2:11:79:5e:47:ef:59:03:ec:51:c5:8e:8d:
         5b:b8:8b:7e:e9:a6:f8:b8:34:7a:7f:32:5d:66:86:be:c3:ea:
         95:b5:15:0f:89:71:a4:04:a7:e9:03:d1:1b:b7:3e:4a:d0:98:
         bf:57:d6:ea:6c:0b:9c:3a:df:ed:cf:11:16:e8:59:d8:e6:b5:
         0c:01:69:e1:59:30:23:37:f6:d9:7c:4f:59:b4:18:7e:3b:ff:
         c5:0d:77:f0:e9:ce:23:53:34:a1:84:75:76:44:06:2b:52:a3:
         06:e8:ea:c5:3e:27:bf:ad:b3:71:67:cd:ba:43:f1:59:2b:2b:
         65:90:68:12:50:37:50:11:9f:5a:fe:35:89:58:8f:b5:9c:3a:
         8d:a2:9f:64:34:ee:a8:52:02:a2:a7:e0:81:57:fa:9c:92:c3:
         56:15:91:a8:99:cd:0e:1f:fd:12:12:3b:8e:52:03:ed:d7:ea:
         44:40:f1:8f:bf:f8:f1:e4:9e:00:84:00:f3:2c:1c:d4:ac:d8:
         33:59:d7:01:1c:2d:30:0f:e6:dd:67:06:df:fa:1b:86:20:39:
         6b:69:1e:9f:32:0f:08:91:29:3f:84:5d:a1:95:11:79:b6:ac:
         e1:f9:00:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnzbgJvZYTgB9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
Mzk0MzA1MzktOGQ1ZS00NzZkLWFlZDEtY2MxMzljYTE4NWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktTyo2y0rqfAwuqlbw2XRF3ekMIhYrr04D3A
GATAe18nP2LwXOpO9fDYHBuhzCtq7ebZ7pNnuHVCHVMgmA4VdnuYboCni+BGsxN4
75ewNZuB2gXv8z44ypT2xuUlNRCD5ibp9dzS2vU7MczFZ1DLE64FHijY4dBnnbRW
kgFE1gIDp4l8lyfn8llE39iUyrjUIMjTV5IQRu4IbmI/gSvXG5VWEFOTqbljU4bI
YufgplFylvmgU2EGASl3EuDez+lBdp16KoGdehNDbt0CLWWsIwR1J5lxd+/2acPi
/ZX09Sipx1gda/d5Q8caOWZ5sA/kvBq3zU26vwPqYDrM30IRxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFByycYW50wUK2o09bcs8rQjFEvXIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDAxYTViMmItOTZhOC0z
ZjZjLTg2YjctOTkyY2ZmZTdjMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkEqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHm7BtP+dtW8V49c84By5UyYSNj2dCxX0hF5XkfvWQPsUcWOjVu4i37p
pvi4NHp/Ml1mhr7D6pW1FQ+JcaQEp+kD0Ru3PkrQmL9X1upsC5w63+3PERboWdjm
tQwBaeFZMCM39tl8T1m0GH47/8UNd/DpziNTNKGEdXZEBitSowbo6sU+J7+ts3Fn
zbpD8VkrK2WQaBJQN1ARn1r+NYlYj7WcOo2in2Q07qhSAqKn4IFX+pySw1YVkaiZ
zQ4f/RISO45SA+3X6kRA8Y+/+PHkngCEAPMsHNSs2DNZ1wEcLTAP5t1nBt/6G4Yg
OWtpHp8yDwiRKT+EXaGVEXm2rOH5ACw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:20 2025 by rpki-client