Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa
File:                     c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa (raw, json)
Hash identifier:          Kgx97cAsJcz08yz+1m2S1+22fO2Gd8E5CUd9e3dDlLk=
Subject key identifier:   AA:78:33:6C:DA:5C:E3:2C:80:4F:A4:D0:48:06:4E:2D:57:69:24:EC
Certificate issuer:       /CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Certificate serial:       010D0C9F4328584AADF114867502AB13E05B9BA0
Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     13325
IP address blocks:        162.108.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:14:86:75:02:ab:13:e0:5b:9b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=3b472432-b4d3-4f75-ae68-b1b6444298f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:2f:d2:d9:77:16:e3:e7:31:5b:57:bf:a7:
                    c6:2d:62:da:c8:ab:e4:be:c8:37:8b:76:b1:4c:87:
                    ea:94:a8:3b:ec:e9:c6:93:d4:09:44:27:85:0a:5a:
                    9e:e2:e3:de:94:5c:25:29:ce:7f:6e:e7:bb:35:4d:
                    46:03:f4:61:4b:98:b2:cc:86:fd:a7:f5:b7:90:59:
                    a9:a0:8f:76:eb:63:dc:dd:dc:db:bb:b5:f9:75:0b:
                    2f:66:08:3e:0e:47:c5:1d:11:30:53:1f:ba:2d:7b:
                    12:be:b7:74:06:9c:66:cf:9f:8b:6a:fe:87:9c:4f:
                    a7:30:c8:11:72:37:f1:fb:b6:00:1b:38:cb:23:c0:
                    eb:e4:b9:7c:03:33:eb:72:53:26:c7:f6:06:53:25:
                    d7:40:a2:33:ff:e0:91:4f:6e:5c:c2:21:7d:2d:99:
                    cb:7c:a0:36:19:91:37:66:2d:30:13:e3:75:b1:09:
                    35:e6:97:b0:af:9f:f1:57:bf:6c:3c:3b:c9:98:79:
                    a1:aa:8d:6c:2e:fe:b2:0e:c3:a2:26:0c:9d:bd:78:
                    65:3b:13:67:fd:6b:3f:d7:20:68:2c:78:42:a1:e1:
                    9e:8b:72:35:f9:79:62:01:18:e0:5f:a1:ac:cf:e5:
                    f9:37:a3:de:73:87:eb:a2:51:97:a5:ff:14:1f:f0:
                    41:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:78:33:6C:DA:5C:E3:2C:80:4F:A4:D0:48:06:4E:2D:57:69:24:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/c44a7c9f-8f5f-3ecf-a9a8-70e963d0092b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl

            X509v3 Authority Key Identifier:
                keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.108.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:71:df:cb:95:7d:8c:59:96:0c:0d:3d:83:8f:dd:49:9c:f0:
         e8:35:b3:6b:a1:80:31:c1:4f:c4:56:7c:2e:0a:62:cc:1e:fe:
         9a:f8:73:03:a9:6e:7e:77:99:06:e2:33:e1:7f:03:27:fb:d0:
         b2:df:cb:61:93:82:6c:29:0c:4a:45:3a:a4:f1:b1:d2:4e:fd:
         4e:69:d4:11:9a:07:32:57:76:3a:b0:4c:c9:14:ff:ea:04:14:
         6a:1c:a2:7a:39:e2:3c:06:2a:02:90:25:7d:0a:c7:e1:73:54:
         de:c2:0f:c6:9e:29:c2:d6:3e:8e:37:fa:c8:fe:fd:4d:ff:bc:
         92:04:2c:49:ff:e9:44:20:f6:3b:ac:24:17:f2:13:b6:4a:92:
         80:0c:c5:7c:b2:3c:05:66:59:1c:da:fa:65:58:f8:73:49:d0:
         c8:16:89:84:c0:61:0b:0f:2a:91:41:18:72:b8:dd:cf:9c:bd:
         a5:ee:35:58:7e:f1:ea:39:6b:5f:13:8e:ea:8a:6b:d6:77:34:
         79:6b:2e:6c:a1:f2:12:3a:16:d4:ee:b5:92:68:43:19:2e:bc:
         36:9d:7a:89:58:dd:d3:93:a2:8b:74:c2:90:2e:01:34:be:16:
         59:b9:af:3b:c9:d3:bb:16:01:e4:3d:8b:95:d4:7a:fb:08:a8:
         96:92:1a:63
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqt8RSGdQKrE+Bbm6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy
NGZhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
M2I0NzI0MzItYjRkMy00Zjc1LWFlNjgtYjFiNjQ0NDI5OGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzAv0tl3FuPnMVtXv6fGLWLayKvkvsg3i3ax
TIfqlKg77OnGk9QJRCeFClqe4uPelFwlKc5/bue7NU1GA/RhS5iyzIb9p/W3kFmp
oI9262Pc3dzbu7X5dQsvZgg+DkfFHREwUx+6LXsSvrd0Bpxmz5+Lav6HnE+nMMgR
cjfx+7YAGzjLI8Dr5Ll8AzPrclMmx/YGUyXXQKIz/+CRT25cwiF9LZnLfKA2GZE3
Zi0wE+N1sQk15pewr5/xV79sPDvJmHmhqo1sLv6yDsOiJgydvXhlOxNn/Ws/1yBo
LHhCoeGei3I1+XliARjgX6Gsz+X5N6Pec4frolGXpf8UH/BBtwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKp4M2zaXOMsgE+k0EgGTi1XaSTsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh
ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvYzQ0YTdjOWYtOGY1Zi0z
ZWNmLWE5YTgtNzBlOTYzZDAwOTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw
ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh
MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj
ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAomwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMnHfy5V9jFmWDA09g4/dSZzw6DWza6GAMcFPxFZ8LgpizB7+mvhzA6lu
fneZBuIz4X8DJ/vQst/LYZOCbCkMSkU6pPGx0k79TmnUEZoHMld2OrBMyRT/6gQU
ahyiejniPAYqApAlfQrH4XNU3sIPxp4pwtY+jjf6yP79Tf+8kgQsSf/pRCD2O6wk
F/ITtkqSgAzFfLI8BWZZHNr6ZVj4c0nQyBaJhMBhCw8qkUEYcrjdz5y9pe41WH7x
6jlrXxOO6opr1nc0eWsubKHyEjoW1O61kmhDGS68Np16iVjd05Oii3TCkC4BNL4W
WbmvO8nTuxYB5D2LldR6+wiolpIaYw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:45:25 2025 by rpki-client