Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa
File:                     db042f94-eb5b-3bff-b1d0-249ded955868.roa (raw, json)
Hash identifier:          C+wRpEY5Usipl7Aol9XpGhLFY3colEenhY2tYMzBIuQ=
Subject key identifier:   DB:B0:F3:11:10:D9:7B:D5:82:9D:2B:F0:C8:2E:7B:CB:2C:CF:01:E8
Certificate issuer:       /CN=fdd167e1-80d8-4633-a835-6e5d62d964bc
Certificate serial:       010D0C9F4328584AADF103C077C870E80372E760
Authority key identifier: 80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     53597
IP address blocks:        172.102.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:03:c0:77:c8:70:e8:03:72:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd167e1-80d8-4633-a835-6e5d62d964bc
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=e7821397-c105-4529-ba34-6609586cda53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:ce:1d:7b:a5:d3:16:39:bc:ba:a4:95:6f:
                    42:ad:6e:b6:9d:c2:c5:ec:29:db:06:95:a7:4b:1b:
                    e6:d5:f0:78:08:ad:1e:16:5c:75:54:7e:f6:d6:08:
                    56:00:1a:94:1e:d9:4b:ea:d6:f9:04:37:e4:85:ea:
                    6b:f8:3b:90:92:d1:62:0f:45:c3:2d:0d:d4:dc:80:
                    67:15:7a:35:65:f7:88:8d:5b:ec:37:e8:9a:4e:af:
                    a0:87:a8:b1:37:47:f5:8e:91:8f:be:9c:c8:1e:8f:
                    12:8b:16:75:dc:ad:a6:78:72:8b:dd:c2:77:6d:de:
                    b7:15:d2:15:b6:bf:01:39:86:92:00:dd:2d:7c:0a:
                    2f:03:1b:ff:9d:ff:f0:89:e6:bc:17:fd:6e:eb:ae:
                    cb:e0:31:1a:25:c9:88:f8:16:1c:39:8c:d5:7b:be:
                    40:0e:56:12:38:ff:a7:74:e7:32:e6:e6:f5:9c:b0:
                    d9:40:64:d3:77:c4:64:17:4b:b0:e9:95:7f:38:c5:
                    6f:a8:80:e5:5d:3d:05:7b:64:05:31:6f:d8:54:33:
                    fb:7f:cf:0c:96:5d:f2:7f:8f:86:7b:8a:0b:cb:1c:
                    ec:1e:86:6b:bf:33:29:d6:37:e6:b5:d5:a1:1b:2d:
                    3b:d7:44:d6:1b:f5:8b:32:d8:19:6e:70:7a:83:b1:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B0:F3:11:10:D9:7B:D5:82:9D:2B:F0:C8:2E:7B:CB:2C:CF:01:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/db042f94-eb5b-3bff-b1d0-249ded955868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc/fdd167e1-80d8-4633-a835-6e5d62d964bc.crl

            X509v3 Authority Key Identifier:
                keyid:80:D0:6E:06:27:3C:69:F1:A4:46:65:B9:A9:38:42:AF:A0:AC:14:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdd167e1-80d8-4633-a835-6e5d62d964bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a0:55:35:15:12:5b:e8:bb:22:32:3b:8a:69:c9:3a:4f:13:
         11:38:62:6f:9c:ef:3f:b0:a9:70:f6:a7:53:7f:90:c5:ca:7d:
         8f:fd:0a:80:14:c9:60:d8:a5:84:bd:36:27:e2:df:4a:c3:48:
         cd:9d:25:59:a6:28:ef:f5:cd:eb:a9:9e:b0:70:52:88:58:f6:
         23:ba:ba:a9:c7:99:bd:e6:05:f5:a4:51:ab:37:03:5c:97:03:
         3e:2c:ba:c2:90:88:a7:7a:ab:4b:24:6f:55:7a:c0:49:5d:5d:
         97:d2:7f:58:05:ce:80:79:aa:a7:4e:56:24:f9:96:6b:8a:16:
         c3:ab:5c:95:3c:12:2b:36:1b:79:e2:26:95:a7:15:bf:76:cc:
         ce:ad:27:a1:01:ee:79:07:31:97:64:f2:13:6d:00:85:c6:52:
         a1:63:e7:3d:9b:15:b4:0b:b3:eb:ea:17:69:2e:8b:03:eb:f5:
         c9:42:eb:58:73:c0:03:4d:fb:83:32:30:98:d2:01:cd:ca:7b:
         f9:9a:17:db:d0:74:ad:3a:72:9e:5a:97:70:0f:ba:2d:08:cb:
         88:26:57:95:10:a2:7c:4a:43:29:86:9b:a4:22:cd:22:ae:b6:
         51:b2:1b:4c:86:c4:ca:7f:52:e9:1f:c0:da:3e:c9:d7:29:34:
         e9:59:77:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QPAd8hw6ANy52AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRkMTY3ZTEtODBkOC00NjMzLWE4MzUtNmU1ZDYyZDk2
NGJjMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
ZTc4MjEzOTctYzEwNS00NTI5LWJhMzQtNjYwOTU4NmNkYTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrPOHXul0xY5vLqklW9CrW62ncLF7CnbBpWn
Sxvm1fB4CK0eFlx1VH721ghWABqUHtlL6tb5BDfkhepr+DuQktFiD0XDLQ3U3IBn
FXo1ZfeIjVvsN+iaTq+gh6ixN0f1jpGPvpzIHo8SixZ13K2meHKL3cJ3bd63FdIV
tr8BOYaSAN0tfAovAxv/nf/wiea8F/1u667L4DEaJcmI+BYcOYzVe75ADlYSOP+n
dOcy5ub1nLDZQGTTd8RkF0uw6ZV/OMVvqIDlXT0Fe2QFMW/YVDP7f88Mll3yf4+G
e4oLyxzsHoZrvzMp1jfmtdWhGy0710TWG/WLMtgZbnB6g7FQeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNuw8xEQ2XvVgp0r8Mgue8sszwHoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQx
NjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVkNjJkOTY0YmMvZGIwNDJmOTQtZWI1Yi0z
YmZmLWIxZDAtMjQ5ZGVkOTU1ODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmRkMTY3ZTEtODBkOC00NjMzLWE4
MzUtNmU1ZDYyZDk2NGJjL2ZkZDE2N2UxLTgwZDgtNDYzMy1hODM1LTZlNWQ2MmQ5
NjRiYy5jcmwwHwYDVR0jBBgwFoAUgNBuBic8afGkRmW5qThCr6CsFK4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZGQxNjdlMS04MGQ4LTQ2MzMtYTgzNS02ZTVk
NjJkOTY0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGYEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKCgVTUVElvouyIyO4ppyTpPExE4Ym+c7z+wqXD2p1N/kMXKfY/9CoAU
yWDYpYS9Nifi30rDSM2dJVmmKO/1zeupnrBwUohY9iO6uqnHmb3mBfWkUas3A1yX
Az4susKQiKd6q0skb1V6wEldXZfSf1gFzoB5qqdOViT5lmuKFsOrXJU8Eis2G3ni
JpWnFb92zM6tJ6EB7nkHMZdk8hNtAIXGUqFj5z2bFbQLs+vqF2kuiwPr9clC61hz
wANN+4MyMJjSAc3Ke/maF9vQdK06cp5al3APui0Iy4gmV5UQonxKQymGm6QizSKu
tlGyG0yGxMp/UukfwNo+ydcpNOlZd3k=
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:11:14 2025 by rpki-client