Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa
File:                     821b4c9f-d1f4-39de-bddb-539d083748cb.roa (raw, json)
Hash identifier:          etpJvrP4kt7lydZB+gPJmAnApG5+Y6G34q1TXZtFspQ=
Subject key identifier:   D2:20:4C:92:DC:52:FD:F1:E7:E8:4C:34:B3:0C:83:57:08:A5:85:2C
Certificate issuer:       /CN=084cdd3f-c178-4428-8992-9e1b2922de98
Certificate serial:       010D0C9F4328584AAB264FDA9123F151B1EADC00
Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        72.1.32.0/21 maxlen: 21
                          72.1.40.0/22 maxlen: 22
                          72.1.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4f:da:91:23:f1:51:b1:ea:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=fddb71ab-3751-473d-ad82-71f15a6a10c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:cf:32:14:1d:48:52:17:ce:3b:02:aa:9c:
                    81:3d:01:4e:99:c5:3d:10:27:7d:50:2d:13:9c:7c:
                    60:b6:a0:a0:a5:d6:56:57:56:de:85:b4:73:77:e8:
                    6f:1e:8d:26:b7:91:e3:12:0a:ec:34:17:7e:78:32:
                    a2:2a:a8:4e:29:78:43:9e:aa:b6:40:e4:79:da:e9:
                    be:69:60:b6:8e:1a:11:1e:ee:bd:c5:af:07:f4:32:
                    65:31:8b:8f:74:d6:b5:29:6f:6d:7e:8a:6a:de:93:
                    dd:c2:e3:71:c8:3b:b1:9f:d4:0b:af:86:8c:a7:bb:
                    1f:c3:7b:c1:57:ec:c1:af:2d:f8:e5:ec:1b:a4:73:
                    18:38:0e:10:09:02:f4:41:45:70:f5:c9:db:f0:e9:
                    fb:1c:8a:3c:2a:20:d6:e9:83:0c:a5:11:c4:a0:c8:
                    3c:b2:5c:9e:54:fb:5d:fd:c1:81:a3:46:65:d4:c9:
                    a5:d8:2e:af:1e:c9:2b:a1:81:9c:35:62:d2:25:cb:
                    ba:96:e0:42:46:6b:f5:78:4e:26:ec:2a:a0:5d:44:
                    7a:cf:77:0e:d9:df:cf:d7:7f:0d:91:92:f2:e2:75:
                    ae:5f:62:bc:15:73:ad:fc:85:6f:9f:9c:21:66:35:
                    5b:8a:3d:cc:a7:10:f3:4f:66:12:33:0c:03:f8:f8:
                    00:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:20:4C:92:DC:52:FD:F1:E7:E8:4C:34:B3:0C:83:57:08:A5:85:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/821b4c9f-d1f4-39de-bddb-539d083748cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.32.0-72.1.45.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3d:40:21:bc:9a:33:d7:45:07:cb:db:53:fb:c3:86:f4:cc:
         47:45:5d:41:3d:5f:fd:c5:ca:be:f4:67:da:9c:15:f4:30:0a:
         2f:18:b0:18:6d:0c:0f:27:00:5e:98:9d:8f:d8:96:49:50:5a:
         f6:2d:c5:b0:41:c2:4e:25:01:54:39:b1:c7:ed:f0:58:5d:63:
         ae:33:ea:a5:93:e5:2b:f6:3d:16:f5:ee:08:94:03:90:8a:9f:
         20:31:c3:8b:7d:43:7c:1d:43:37:58:10:b5:4f:51:5c:5f:f8:
         4c:36:b8:45:6a:6f:39:4d:6d:01:0f:3f:ea:71:8a:5b:94:4f:
         f9:1e:87:8c:bd:eb:d5:04:c0:74:32:22:9a:f6:10:b0:b6:18:
         f4:05:af:03:8a:33:00:ec:10:b1:16:15:8c:3e:3a:ef:25:c5:
         88:bd:0e:e3:17:12:b3:d5:60:52:87:69:9d:bd:dc:a1:54:da:
         4a:a9:81:0e:b0:0f:f2:2b:06:66:9d:a4:0a:d1:28:ab:e1:a9:
         92:55:16:c8:01:6e:49:46:52:4f:74:7a:ab:3d:95:eb:f6:b7:
         0e:0a:c1:0d:45:e3:8c:43:0c:e2:ca:97:1a:f0:af:ff:92:e4:
         38:e3:d7:49:c7:5d:55:62:8d:4a:d0:2f:75:d5:a4:14:32:68:
         22:79:10:9d
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEqrJk/akSPxUbHq3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDg0Y2RkM2YtYzE3OC00NDI4LTg5OTItOWUxYjI5MjJk
ZTk4MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ZmRkYjcxYWItMzc1MS00NzNkLWFkODItNzFmMTVhNmExMGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy7PMhQdSFIXzjsCqpyBPQFOmcU9ECd9UC0T
nHxgtqCgpdZWV1behbRzd+hvHo0mt5HjEgrsNBd+eDKiKqhOKXhDnqq2QOR52um+
aWC2jhoRHu69xa8H9DJlMYuPdNa1KW9tfopq3pPdwuNxyDuxn9QLr4aMp7sfw3vB
V+zBry345ewbpHMYOA4QCQL0QUVw9cnb8On7HIo8KiDW6YMMpRHEoMg8slyeVPtd
/cGBo0Zl1Mml2C6vHskroYGcNWLSJcu6luBCRmv1eE4m7CqgXUR6z3cO2d/P138N
kZLy4nWuX2K8FXOt/IVvn5whZjVbij3MpxDzT2YSMwwD+PgAUQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFNIgTJLcUv3x5+hMNLMMg1cIpYUsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wODRj
ZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFiMjkyMmRlOTgvODIxYjRjOWYtZDFmNC0z
OWRlLWJkZGItNTM5ZDA4Mzc0OGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDg0Y2RkM2YtYzE3OC00NDI4LTg5
OTItOWUxYjI5MjJkZTk4LzA4NGNkZDNmLWMxNzgtNDQyOC04OTkyLTllMWIyOTIy
ZGU5OC5jcmwwHwYDVR0jBBgwFoAUa7qSaWoduYwL8eLYAcm3oYXsfmUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wODRjZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFi
MjkyMmRlOTguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVIASAD
BAFIASwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAVj1AIbyaM9dFB8vbU/vDhvTMR0VdQT1f/cXKvvRn2pwV
9DAKLxiwGG0MDycAXpidj9iWSVBa9i3FsEHCTiUBVDmxx+3wWF1jrjPqpZPlK/Y9
FvXuCJQDkIqfIDHDi31DfB1DN1gQtU9RXF/4TDa4RWpvOU1tAQ8/6nGKW5RP+R6H
jL3r1QTAdDIimvYQsLYY9AWvA4ozAOwQsRYVjD467yXFiL0O4xcSs9VgUodpnb3c
oVTaSqmBDrAP8isGZp2kCtEoq+GpklUWyAFuSUZST3R6qz2V6/a3DgrBDUXjjEMM
4sqXGvCv/5LkOOPXScddVWKNStAvddWkFDJoInkQnQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:31 2025 by rpki-client