Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad5d1f61-ecaf-3519-a263-2538dac5b78b.roa
File:                     ad5d1f61-ecaf-3519-a263-2538dac5b78b.roa (raw, json)
Hash identifier:          9hnHybC6kp2BqO5xEaUmfXo3BOruMcS/kq0GCFqSAwE=
Subject key identifier:   E6:1A:D6:7C:AF:1D:DD:14:2D:A9:7F:F8:A2:74:3D:59:9E:9D:3E:2E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A8E07F4A1E76C5EAAF7E84600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad5d1f61-ecaf-3519-a263-2538dac5b78b.roa
Signing time:             Fri 18 Jul 2025 02:41:35 +0000
ROA not before:           Fri 18 Jul 2025 02:41:35 +0000
ROA not after:            Thu 16 Oct 2025 02:41:35 +0000
asID:                     15169
IP address blocks:        172.253.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8e:07:f4:a1:e7:6c:5e:aa:f7:e8:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 18 02:41:35 2025 GMT
            Not After : Oct 16 02:41:35 2025 GMT
        Subject: CN=3e657dec-41f9-4561-96fb-1eba4a836e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:7d:00:92:d1:38:a7:b0:d7:c5:ae:38:85:
                    3c:25:94:d8:cb:88:9b:6e:d4:bd:a3:d2:7f:79:5a:
                    95:f6:18:c4:92:f8:d1:0a:2b:40:a1:8d:88:04:f3:
                    7d:a6:9f:56:53:56:a7:97:c4:d0:9a:1f:9e:75:54:
                    22:97:87:66:60:f1:e4:3e:2e:ea:29:a0:97:b8:f2:
                    db:bb:86:74:a4:dd:46:d8:42:b5:78:5f:8d:03:75:
                    35:a5:26:31:2e:77:78:15:31:69:b9:32:2b:94:2e:
                    fc:ca:7f:ae:03:0a:5f:7b:b6:88:96:ad:6f:df:c8:
                    7f:36:c7:76:50:76:e0:85:e8:39:0c:76:ca:4e:95:
                    f1:29:b5:e7:47:2e:bd:86:d2:28:0e:18:98:59:81:
                    a4:72:97:98:cb:01:ab:af:30:b1:36:f5:56:02:a2:
                    3f:14:91:32:03:7e:75:5a:55:68:de:aa:59:cb:f9:
                    8b:33:a9:26:b6:30:f9:39:96:99:ba:df:f1:39:8b:
                    fe:ef:8e:1e:05:33:9f:fd:07:17:6b:c1:a3:da:a9:
                    7f:1a:3b:e9:1b:cd:55:91:89:76:fb:06:7c:93:e3:
                    da:a4:2b:88:88:da:72:cd:4a:09:bc:b0:35:99:4e:
                    ef:0d:fd:93:6d:f1:58:5f:56:fb:31:f9:33:fd:bd:
                    02:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1A:D6:7C:AF:1D:DD:14:2D:A9:7F:F8:A2:74:3D:59:9E:9D:3E:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad5d1f61-ecaf-3519-a263-2538dac5b78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:53:84:db:89:f0:14:2c:4d:a6:79:ce:5b:f9:3b:04:18:
         24:64:f2:37:70:aa:9d:d5:1a:54:6c:31:dd:f3:09:f6:38:12:
         6c:d5:ba:6f:8b:47:c2:2b:d3:7a:8a:e6:72:1d:a3:93:bc:52:
         7f:1d:05:fc:d8:58:ef:af:43:4c:9a:de:a8:9b:42:dc:df:96:
         45:f0:62:d4:4b:fd:b9:cb:38:40:07:90:44:26:9c:9a:6d:ce:
         b8:90:7b:b8:93:f5:d0:5e:3d:e8:5c:1a:20:76:65:c0:26:d4:
         70:2c:c3:ef:2d:b5:f7:28:1f:a0:52:71:a0:9e:04:9a:13:01:
         5e:9c:ff:77:70:2f:4d:09:ae:b1:3b:53:69:45:7a:85:f1:df:
         c5:e5:3d:0e:45:79:f3:bc:74:e4:90:af:73:3a:29:81:4a:5a:
         30:40:33:02:79:a9:f9:83:53:e0:35:1c:18:22:e1:0c:45:11:
         fa:9c:63:0f:8f:74:29:0e:73:d4:33:ff:06:b1:20:61:15:8a:
         7a:56:e2:cb:e2:bb:e7:3a:89:a8:a7:f6:da:51:e4:3c:21:5c:
         22:8e:de:ec:1b:d8:23:cb:4f:ae:8e:8e:c7:3c:d9:a6:c7:db:
         97:55:f9:75:aa:b0:9e:57:68:68:48:02:4d:78:48:3e:d4:c3:
         7b:dd:20:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqOB/Sh52xeqvfoRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDcxODAyNDEzNVoXDTI1MTAxNjAyNDEzNVowLzEtMCsGA1UEAxMk
M2U2NTdkZWMtNDFmOS00NTYxLTk2ZmItMWViYTRhODM2ZTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAN9AJLROKew18WuOIU8JZTYy4ibbtS9o9J/
eVqV9hjEkvjRCitAoY2IBPN9pp9WU1anl8TQmh+edVQil4dmYPHkPi7qKaCXuPLb
u4Z0pN1G2EK1eF+NA3U1pSYxLnd4FTFpuTIrlC78yn+uAwpfe7aIlq1v38h/Nsd2
UHbgheg5DHbKTpXxKbXnRy69htIoDhiYWYGkcpeYywGrrzCxNvVWAqI/FJEyA351
WlVo3qpZy/mLM6kmtjD5OZaZut/xOYv+744eBTOf/QcXa8Gj2ql/GjvpG81VkYl2
+wZ8k+PapCuIiNpyzUoJvLA1mU7vDf2TbfFYX1b7Mfkz/b0C9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOYa1nyvHd0ULal/+KJ0PVmenT4uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWQ1ZDFmNjEtZWNhZi0z
NTE5LWEyNjMtMjUzOGRhYzViNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP2RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIV/U4TbifAULE2mec5b+TsEGCRk8jdwqp3VGlRsMd3zCfY4EmzVum+L
R8Ir03qK5nIdo5O8Un8dBfzYWO+vQ0ya3qibQtzflkXwYtRL/bnLOEAHkEQmnJpt
zriQe7iT9dBePehcGiB2ZcAm1HAsw+8ttfcoH6BScaCeBJoTAV6c/3dwL00JrrE7
U2lFeoXx38XlPQ5FefO8dOSQr3M6KYFKWjBAMwJ5qfmDU+A1HBgi4QxFEfqcYw+P
dCkOc9Qz/waxIGEVinpW4sviu+c6iain9tpR5DwhXCKO3uwb2CPLT66Ojsc82abH
25dV+XWqsJ5XaGhIAk14SD7Uw3vdIMo=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:25:49 2025 by rpki-client