Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa
File:                     3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa (raw, json)
Hash identifier:          sHc14z9lcm1KnepjEKbYG0BpqLE+Jat6q0PFAX6kMec=
Subject key identifier:   F8:56:51:C6:CD:81:3C:F3:5E:7A:32:7D:DF:03:52:45:1C:01:C3:81
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965353660D4156A179AEC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        72.31.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:53:53:66:0d:41:56:a1:79:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=e529cf0f-1141-4bf9-b2b5-e582d1aef727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:87:d3:0f:50:9c:b9:f1:56:4b:2e:48:06:
                    f5:ba:42:af:d7:90:84:72:a7:00:bb:20:2f:d0:d8:
                    1f:02:e3:97:b7:94:3e:e3:6d:b7:13:02:2f:e2:18:
                    25:9d:4e:d5:f3:c5:97:c2:e0:8b:dd:a4:1e:ef:f3:
                    e7:33:18:88:fa:51:70:ad:d3:6f:58:95:86:bc:ca:
                    48:d3:d0:e8:8b:80:b1:78:47:24:77:4c:8f:f1:49:
                    68:98:58:00:d1:d7:8c:ad:30:62:c0:d8:fd:7d:d0:
                    69:c3:cf:d8:93:91:7f:4e:d3:ae:eb:e0:0b:ed:22:
                    98:0b:e2:a1:c8:7b:42:2e:2e:b6:60:46:5d:f7:d5:
                    93:14:e0:4f:ce:7b:5e:82:0c:71:e6:c7:4e:ac:83:
                    8c:12:02:50:1f:ed:20:b8:a2:22:ee:2b:cc:98:91:
                    d0:3e:32:ed:b3:1d:d0:4f:53:2f:4d:f5:24:f1:8b:
                    ab:33:f3:6f:cf:d4:c5:e2:f2:5f:ad:81:45:e4:4f:
                    49:a3:d3:f7:1c:5e:30:7c:51:38:0c:11:fb:4c:d4:
                    d4:90:59:19:f6:ee:21:94:65:e5:40:e4:9a:54:22:
                    08:f9:dd:a7:2c:99:e9:b5:4b:32:6c:6e:39:27:64:
                    e5:99:95:70:bb:2f:1e:3a:15:c8:a1:80:08:0f:59:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:56:51:C6:CD:81:3C:F3:5E:7A:32:7D:DF:03:52:45:1C:01:C3:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:7b:65:44:cd:fe:a8:1c:c6:42:8c:8b:36:e5:66:0d:7a:16:
         9b:7a:28:04:e1:6e:4a:83:17:24:58:fa:53:5f:d3:c4:c6:0b:
         b8:f1:fe:e2:90:09:b6:b2:1e:ca:aa:a2:00:d4:d9:1a:82:b7:
         b7:fa:cf:a7:cf:87:de:83:f0:71:b9:61:60:99:c0:78:ae:3c:
         0e:30:ae:88:3a:0e:ce:97:53:56:26:af:0c:ec:ae:cb:81:8c:
         37:e0:b8:de:1b:80:27:31:fa:fb:2f:d2:0e:e6:74:83:d0:5a:
         b6:dd:f3:9f:9d:d2:4c:27:68:a3:91:eb:88:87:bf:6a:a8:2c:
         08:62:15:be:78:8b:cf:db:fa:97:5f:41:fd:19:c5:84:32:55:
         af:ec:ae:27:f4:71:fa:9f:bf:d0:3d:e0:fd:61:02:d9:c5:40:
         4a:f6:d5:ea:42:84:aa:97:e0:be:61:f6:bd:89:10:24:2f:d2:
         ee:b4:f3:5d:b0:df:61:d3:02:d3:dc:fe:71:38:9b:5f:37:ce:
         2c:89:0f:b3:83:4d:d1:b7:28:c0:af:67:05:ff:79:57:b9:6a:
         72:5a:fd:dd:a0:a1:5e:82:a1:56:64:c3:9b:69:e3:09:d1:68:
         8c:ca:84:1c:96:e5:46:59:bf:e9:41:88:58:5c:e0:76:43:e6:
         b2:3a:f1:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqellNTZg1BVqF5rsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
ZTUyOWNmMGYtMTE0MS00YmY5LWIyYjUtZTU4MmQxYWVmNzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgSH0w9QnLnxVksuSAb1ukKv15CEcqcAuyAv
0NgfAuOXt5Q+4223EwIv4hglnU7V88WXwuCL3aQe7/PnMxiI+lFwrdNvWJWGvMpI
09Doi4CxeEckd0yP8UlomFgA0deMrTBiwNj9fdBpw8/Yk5F/TtOu6+AL7SKYC+Kh
yHtCLi62YEZd99WTFOBPznteggxx5sdOrIOMEgJQH+0guKIi7ivMmJHQPjLtsx3Q
T1MvTfUk8YurM/Nvz9TF4vJfrYFF5E9Jo9P3HF4wfFE4DBH7TNTUkFkZ9u4hlGXl
QOSaVCII+d2nLJnptUsybG45J2TlmZVwuy8eOhXIoYAID1lf2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPhWUcbNgTzzXnoyfd8DUkUcAcOBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvM2QwYzA4Y2MtNjA1YS0z
ZjhlLThlMDktZmE1ZmRhOGY1NDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSB/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIF7ZUTN/qgcxkKMizblZg16Fpt6KAThbkqDFyRY+lNf08TGC7jx/uKQ
CbayHsqqogDU2RqCt7f6z6fPh96D8HG5YWCZwHiuPA4wrog6Ds6XU1YmrwzsrsuB
jDfguN4bgCcx+vsv0g7mdIPQWrbd85+d0kwnaKOR64iHv2qoLAhiFb54i8/b+pdf
Qf0ZxYQyVa/srif0cfqfv9A94P1hAtnFQEr21epChKqX4L5h9r2JECQv0u60812w
32HTAtPc/nE4m183ziyJD7ODTdG3KMCvZwX/eVe5anJa/d2goV6CoVZkw5tp4wnR
aIzKhByW5UZZv+lBiFhc4HZD5rI68Ro=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:42 2025 by rpki-client