Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/247b305d-f301-3381-b5e2-e46af1dea532.roa
File:                     247b305d-f301-3381-b5e2-e46af1dea532.roa (raw, json)
Hash identifier:          8WhQSGZ1FMCMLX/cjAg/8rM0STkFc+vtckC+5rXO1mA=
Subject key identifier:   BA:C9:4D:D9:89:BC:1A:34:70:70:0F:E4:7E:D9:18:66:CF:F4:CF:C9
Certificate issuer:       /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
Certificate serial:       010D0C9F4328584AB650E25AA508D755AD755500
Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/247b305d-f301-3381-b5e2-e46af1dea532.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     6360
IP address blocks:        132.160.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e2:5a:a5:08:d7:55:ad:75:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=39cb233c-ef9c-4b46-852b-6daadedc6514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:f2:fd:91:68:ff:02:7a:a7:da:97:af:8d:
                    3f:ec:1f:84:9d:68:09:d6:6c:8a:34:3e:e9:36:e5:
                    0c:28:27:e2:ff:1e:c7:b3:92:ab:19:6d:0a:b3:dd:
                    15:79:d2:76:df:dc:d1:78:3d:3f:b8:88:33:ef:29:
                    5a:7e:d8:6a:25:9d:22:4c:db:f9:64:91:20:95:6c:
                    7c:59:84:e3:4c:9d:28:1b:dd:0f:0c:c2:9f:dc:f6:
                    5d:10:be:a6:9d:b8:5c:41:0a:c4:d1:44:e4:7d:14:
                    39:af:71:48:42:c5:8b:4d:fa:6a:d0:d5:49:27:b5:
                    69:fd:fc:98:41:31:82:0e:5b:f0:8a:af:89:eb:24:
                    3a:2b:1c:5c:31:e2:d0:7b:f0:65:4f:98:7c:be:06:
                    9c:19:63:35:23:9a:ca:3a:45:4b:9f:ed:a0:90:2c:
                    fc:cd:10:d8:91:3e:7a:be:3b:e5:c5:7d:b1:51:ae:
                    49:ae:f4:19:5f:e5:45:a3:c6:8a:ba:e4:68:0c:41:
                    ef:5a:67:8e:00:89:f4:04:42:ab:14:35:07:b6:98:
                    73:ac:17:76:73:61:48:73:35:3e:a4:d5:47:d8:24:
                    2c:58:85:cd:5c:ef:ab:1a:96:87:44:da:82:e8:6b:
                    51:42:f8:63:2e:53:1b:bd:83:18:17:16:fa:ef:e5:
                    db:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C9:4D:D9:89:BC:1A:34:70:70:0F:E4:7E:D9:18:66:CF:F4:CF:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/247b305d-f301-3381-b5e2-e46af1dea532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl

            X509v3 Authority Key Identifier:
                keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.160.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:86:06:b1:a8:8d:66:91:9b:16:44:b8:08:b8:41:5e:7d:10:
         79:0e:b6:75:a8:97:5b:06:c9:9c:70:76:0c:07:36:d3:99:82:
         88:e8:db:a2:34:ed:d5:5c:75:2e:65:06:88:6e:91:a8:e9:d8:
         6b:8d:5b:e3:90:80:1f:38:d6:f5:2d:00:1c:87:9d:57:8a:c7:
         96:d5:c9:f7:a6:4c:b5:4c:97:ef:39:c2:12:2a:b4:e3:29:d0:
         e7:d8:b6:0b:d0:0f:70:6f:8f:56:7b:01:5c:4c:ba:6f:b3:95:
         98:1a:07:83:a3:cc:a0:17:52:08:b3:90:ca:31:30:ec:e3:c4:
         e8:32:d0:bb:50:4b:40:4d:e5:a2:9c:cf:50:2b:47:57:9d:ea:
         91:47:c3:57:51:71:a8:35:83:54:35:a8:a4:cf:92:42:b5:9c:
         54:6c:da:0c:a4:9d:a2:c9:b0:83:03:d0:dd:aa:07:e6:4c:a4:
         02:e0:0c:18:06:75:16:d1:3a:4f:38:de:ab:67:63:51:98:85:
         6e:11:07:e4:9a:ca:48:50:a0:08:40:4b:4e:db:71:3f:81:1b:
         9a:f5:9e:f8:db:e4:11:14:a6:f9:64:35:7b:94:bf:22:14:7c:
         50:ef:6c:b5:91:2a:16:07:81:36:75:59:e1:f2:d1:bf:5a:42:
         0a:de:2f:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UOJapQjXVa11VQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz
Nzc2MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
MzljYjIzM2MtZWY5Yy00YjQ2LTg1MmItNmRhYWRlZGM2NTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG/y/ZFo/wJ6p9qXr40/7B+EnWgJ1myKND7p
NuUMKCfi/x7Hs5KrGW0Ks90VedJ239zReD0/uIgz7ylafthqJZ0iTNv5ZJEglWx8
WYTjTJ0oG90PDMKf3PZdEL6mnbhcQQrE0UTkfRQ5r3FIQsWLTfpq0NVJJ7Vp/fyY
QTGCDlvwiq+J6yQ6KxxcMeLQe/BlT5h8vgacGWM1I5rKOkVLn+2gkCz8zRDYkT56
vjvlxX2xUa5JrvQZX+VFo8aKuuRoDEHvWmeOAIn0BEKrFDUHtphzrBd2c2FIczU+
pNVH2CQsWIXNXO+rGpaHRNqC6GtRQvhjLlMbvYMYFxb67+Xb+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLrJTdmJvBo0cHAP5H7ZGGbP9M/JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj
NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvMjQ3YjMwNWQtZjMwMS0z
MzgxLWI1ZTItZTQ2YWYxZGVhNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1
OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh
Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj
OGMxYTM3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHhKAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOGBrGojWaRmxZEuAi4QV59EHkOtnWol1sGyZxwdgwHNtOZgojo26I0
7dVcdS5lBohukajp2GuNW+OQgB841vUtAByHnVeKx5bVyfemTLVMl+85whIqtOMp
0OfYtgvQD3Bvj1Z7AVxMum+zlZgaB4OjzKAXUgizkMoxMOzjxOgy0LtQS0BN5aKc
z1ArR1ed6pFHw1dRcag1g1Q1qKTPkkK1nFRs2gyknaLJsIMD0N2qB+ZMpALgDBgG
dRbROk843qtnY1GYhW4RB+SaykhQoAhAS07bcT+BG5r1nvjb5BEUpvlkNXuUvyIU
fFDvbLWRKhYHgTZ1WeHy0b9aQgreL3k=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:12 2025 by rpki-client