Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00d8018e-ea3e-312b-8d45-42a7efd473f5.roa
File:                     00d8018e-ea3e-312b-8d45-42a7efd473f5.roa (raw, json)
Hash identifier:          ByGn9BArrPEuO+JGRAL+7x1m8nvoegxpqO9BiRJ/i8I=
Subject key identifier:   58:29:32:F9:12:28:C8:2A:B8:FB:24:36:E7:78:7D:C6:F7:03:97:43
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962A9FA95CA7BBE1BB4D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00d8018e-ea3e-312b-8d45-42a7efd473f5.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        71.44.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2a:9f:a9:5c:a7:bb:e1:bb:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=ab3acb05-964b-4f8a-b560-74192678f94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:55:6a:1e:95:9b:f2:6b:4e:2f:90:59:f5:
                    4a:19:50:8a:bc:84:bc:cd:3e:73:07:be:14:29:b0:
                    de:56:0f:da:53:31:28:bd:aa:23:06:f2:c8:20:51:
                    d1:6e:f4:8d:fc:44:5e:d4:3e:a7:1c:46:60:ef:ea:
                    4c:2e:95:84:c5:64:57:c2:3d:c5:07:97:34:10:e1:
                    93:81:ea:a8:61:bc:b8:91:5d:b9:e3:5a:23:f3:96:
                    28:e6:e0:db:1b:62:bc:a5:15:52:8f:e4:9f:71:72:
                    77:27:50:2d:00:c4:62:40:64:74:5c:bb:c6:bb:b0:
                    2f:7f:7a:85:cf:27:c4:ce:31:3c:e5:66:6b:a9:2c:
                    dc:e3:47:00:8d:40:7d:eb:93:fc:98:bc:39:4a:ac:
                    4e:f8:37:7c:b6:f1:73:5f:cf:6d:6c:c0:d3:79:bb:
                    47:21:27:ee:fc:04:1b:e3:19:8f:7f:78:b9:98:62:
                    d2:bc:d0:59:85:6f:58:42:6e:e8:e7:8a:77:e7:64:
                    fd:af:9c:c3:44:b5:af:b8:6a:21:b1:cc:02:bd:61:
                    18:0d:e8:f2:58:2f:08:e9:95:f1:bd:92:f9:cd:7c:
                    33:d0:70:a3:00:9a:f9:c2:c3:18:f1:5a:ad:f7:e4:
                    ac:0c:e6:50:54:18:76:5f:91:1f:56:bd:88:0a:13:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:29:32:F9:12:28:C8:2A:B8:FB:24:36:E7:78:7D:C6:F7:03:97:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00d8018e-ea3e-312b-8d45-42a7efd473f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a6:4b:97:37:d2:b3:f8:53:44:90:9f:c3:11:0e:7b:5e:45:
         65:89:b2:6b:88:b7:cc:82:8c:20:cc:c3:e1:f6:65:52:e3:39:
         b9:7f:3c:d8:4b:10:46:66:b5:6b:a6:13:eb:57:0e:1f:3c:bf:
         5c:a5:44:b1:e6:06:03:10:7a:be:c6:83:db:5b:65:bd:64:e3:
         f3:d8:c0:f2:74:b7:b1:15:f4:c6:a8:a5:95:7e:2a:f7:04:ca:
         e1:f7:60:3d:26:5a:b5:60:c3:52:ba:c1:25:81:d3:ee:04:ed:
         75:1a:06:5f:25:a4:79:f8:68:0c:98:84:c1:75:25:e7:56:66:
         6d:0b:9c:b9:4b:8f:c2:49:56:92:91:ce:89:12:58:30:69:88:
         5b:f0:fe:67:84:89:7e:0f:ca:c3:2f:26:bd:68:ce:76:4f:a4:
         47:f6:6d:a0:b2:88:bd:d9:c5:c0:0d:b4:cb:b8:bf:bc:bd:ba:
         81:4a:2b:15:c3:2c:b5:6c:ab:74:67:86:94:98:2b:8e:13:06:
         a3:2f:97:0b:56:6f:43:35:a5:9f:45:b1:23:ac:ba:76:b8:fe:
         1a:5e:e2:7f:91:f7:41:4e:63:83:39:17:2a:45:53:8b:17:43:
         01:48:8a:b1:a2:1e:56:7b:60:1f:24:b6:b7:d1:be:a9:5d:99:
         32:fa:f4:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeliqfqVynu+G7TQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
YWIzYWNiMDUtOTY0Yi00ZjhhLWI1NjAtNzQxOTI2NzhmOTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1xVah6Vm/JrTi+QWfVKGVCKvIS8zT5zB74U
KbDeVg/aUzEovaojBvLIIFHRbvSN/ERe1D6nHEZg7+pMLpWExWRXwj3FB5c0EOGT
geqoYby4kV2541oj85Yo5uDbG2K8pRVSj+SfcXJ3J1AtAMRiQGR0XLvGu7Avf3qF
zyfEzjE85WZrqSzc40cAjUB965P8mLw5SqxO+Dd8tvFzX89tbMDTebtHISfu/AQb
4xmPf3i5mGLSvNBZhW9YQm7o54p352T9r5zDRLWvuGohscwCvWEYDejyWC8I6ZXx
vZL5zXwz0HCjAJr5wsMY8Vqt9+SsDOZQVBh2X5EfVr2IChMevQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgpMvkSKMgquPskNud4fcb3A5dDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMDBkODAxOGUtZWEzZS0z
MTJiLThkNDUtNDJhN2VmZDQ3M2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRyxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSmS5c30rP4U0SQn8MRDnteRWWJsmuIt8yCjCDMw+H2ZVLjObl/PNhL
EEZmtWumE+tXDh88v1ylRLHmBgMQer7Gg9tbZb1k4/PYwPJ0t7EV9MaopZV+KvcE
yuH3YD0mWrVgw1K6wSWB0+4E7XUaBl8lpHn4aAyYhMF1JedWZm0LnLlLj8JJVpKR
zokSWDBpiFvw/meEiX4PysMvJr1oznZPpEf2baCyiL3ZxcANtMu4v7y9uoFKKxXD
LLVsq3RnhpSYK44TBqMvlwtWb0M1pZ9FsSOsuna4/hpe4n+R90FOY4M5FypFU4sX
QwFIirGiHlZ7YB8ktrfRvqldmTL69L8=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:34 2025 by rpki-client