Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa
File:                     7972f1ff-9f54-3af8-9eff-7da8a92874af.roa (raw, json)
Hash identifier:          5GYnwPwPWReDE1YToKFMfwsQtDfXYTCbHFehh9GXFg0=
Subject key identifier:   56:D4:3A:52:F9:90:C3:95:3B:FC:5A:A2:B8:9D:DF:35:38:71:64:A7
Certificate issuer:       /CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82
Certificate serial:       010D0C9F4328584A9FFB9AAF40EF1D90709ECDC0
Authority key identifier: C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     48252
IP address blocks:        104.245.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9a:af:40:ef:1d:90:70:9e:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=f6413e5e-d162-4e5f-93ee-f68463ff873a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:d2:04:f7:cd:90:fe:35:67:63:bb:26:bf:
                    54:10:c5:1b:45:f6:fa:96:3f:27:dc:69:ef:76:43:
                    cc:2d:8a:fe:ae:2b:b0:4e:91:df:0f:64:d3:a4:d8:
                    91:98:e5:c4:a9:9a:ff:3d:a4:d6:a1:51:54:0f:6a:
                    1c:fa:c9:c7:ed:8a:7e:70:fd:2f:ee:1e:49:ef:67:
                    9e:7c:61:51:02:82:c8:71:7b:39:25:d2:1f:99:a9:
                    4a:b6:1e:64:51:a8:a0:a7:d3:1e:d4:5f:c3:e6:23:
                    14:bc:49:56:b4:aa:e1:ab:01:b9:23:ae:70:cd:c3:
                    87:9b:5b:e9:b0:87:83:24:bc:47:7b:3e:71:a7:c1:
                    98:4f:13:26:12:26:0c:85:96:a4:bb:de:4f:de:de:
                    b9:dc:10:5d:ef:ac:83:c8:b4:0e:59:e6:0b:22:da:
                    81:f0:6d:81:39:00:fa:1b:0b:41:6b:cd:c8:76:a7:
                    26:d2:a2:be:a3:89:39:a9:8e:13:e3:06:ce:8e:e2:
                    d1:94:5c:24:9e:d3:7a:63:6d:45:de:b6:d8:af:9a:
                    3f:ad:79:8c:48:d5:0e:4e:1f:1c:57:a4:c5:00:c0:
                    61:59:15:22:b4:c2:9d:2b:d1:8e:6f:a1:77:b4:7e:
                    85:69:e4:95:b8:4d:87:3f:3c:f7:5a:8e:0e:e9:c2:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D4:3A:52:F9:90:C3:95:3B:FC:5A:A2:B8:9D:DF:35:38:71:64:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/7972f1ff-9f54-3af8-9eff-7da8a92874af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:46:94:d6:72:95:c7:ee:7e:82:3d:13:bc:6c:ef:21:d3:07:
         85:31:ce:ca:1c:d1:9a:f1:be:ca:40:68:32:d0:ac:de:31:5a:
         24:8d:fc:38:11:e7:7e:a8:57:81:1d:83:d7:a7:82:de:31:e9:
         e7:fe:61:34:b0:fa:a5:0c:22:4f:d1:14:06:93:2e:76:90:cd:
         5b:06:25:a1:c9:3a:37:62:89:d3:be:20:0b:c5:0b:4f:85:ac:
         d0:3b:1f:4a:4f:37:c6:46:93:a1:f4:b6:67:eb:92:bd:32:1f:
         88:12:ea:6c:f4:af:c9:25:f9:79:dc:2a:68:4c:c2:c8:a2:cc:
         31:6a:da:ae:b7:15:e1:d0:1c:bc:75:c9:4e:7f:ea:f4:31:dc:
         27:4c:a5:ab:c4:22:c6:b2:3c:4b:15:25:7c:58:6b:48:0c:80:
         3a:8e:4d:e3:9c:d6:53:a7:25:15:96:7a:41:70:05:ad:d2:78:
         e4:79:d3:59:8d:bb:af:d4:76:2f:8a:e0:c8:9b:93:d7:b0:10:
         3b:9d:20:25:08:9e:0a:81:f3:36:90:84:d6:4c:e1:df:e7:1f:
         ed:f4:a2:5d:4d:7d:34:83:03:be:63:f4:bc:f9:37:62:e1:8f:
         7a:b9:f7:e0:0c:7c:be:cc:0d:cc:6f:f6:74:ef:b7:3b:84:4d:
         ec:04:42:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+5qvQO8dkHCezcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ3Yzc3ZWMtMGFkMC00ODRiLWEwYzUtZjVjYjEyZDFk
ZTgyMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
ZjY0MTNlNWUtZDE2Mi00ZTVmLTkzZWUtZjY4NDYzZmY4NzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNbSBPfNkP41Z2O7Jr9UEMUbRfb6lj8n3Gnv
dkPMLYr+riuwTpHfD2TTpNiRmOXEqZr/PaTWoVFUD2oc+snH7Yp+cP0v7h5J72ee
fGFRAoLIcXs5JdIfmalKth5kUaigp9Me1F/D5iMUvElWtKrhqwG5I65wzcOHm1vp
sIeDJLxHez5xp8GYTxMmEiYMhZaku95P3t653BBd76yDyLQOWeYLItqB8G2BOQD6
GwtBa83Idqcm0qK+o4k5qY4T4wbOjuLRlFwkntN6Y21F3rbYr5o/rXmMSNUOTh8c
V6TFAMBhWRUitMKdK9GOb6F3tH6FaeSVuE2HPzz3Wo4O6cKy8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFbUOlL5kMOVO/xaorid3zU4cWSnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdj
NzdlYy0wYWQwLTQ4NGItYTBjNS1mNWNiMTJkMWRlODIvNzk3MmYxZmYtOWY1NC0z
YWY4LTllZmYtN2RhOGE5Mjg3NGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWQ3Yzc3ZWMtMGFkMC00ODRiLWEw
YzUtZjVjYjEyZDFkZTgyLzFkN2M3N2VjLTBhZDAtNDg0Yi1hMGM1LWY1Y2IxMmQx
ZGU4Mi5jcmwwHwYDVR0jBBgwFoAUw4Yz49c8TTQljj4eKbNU3e5RIyswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdjNzdlYy0wYWQwLTQ4NGItYTBjNS1mNWNi
MTJkMWRlODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPVwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlGlNZylcfufoI9E7xs7yHTB4Uxzsoc0ZrxvspAaDLQrN4xWiSN/DgR
536oV4Edg9engt4x6ef+YTSw+qUMIk/RFAaTLnaQzVsGJaHJOjdiidO+IAvFC0+F
rNA7H0pPN8ZGk6H0tmfrkr0yH4gS6mz0r8kl+XncKmhMwsiizDFq2q63FeHQHLx1
yU5/6vQx3CdMpavEIsayPEsVJXxYa0gMgDqOTeOc1lOnJRWWekFwBa3SeOR501mN
u6/Udi+K4Mibk9ewEDudICUIngqB8zaQhNZM4d/nH+30ol1NfTSDA75j9Lz5N2Lh
j3q59+AMfL7MDcxv9nTvtzuETewEQvs=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:22:12 2025 by rpki-client