Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/6c21457d-757c-3af5-9ddb-f65189535c9d.roa
File:                     6c21457d-757c-3af5-9ddb-f65189535c9d.roa (raw, json)
Hash identifier:          KJn/Bm8LW1e7Su44AQhga6RLC3f1lu4C3CrcXSMETyk=
Subject key identifier:   FD:88:59:FB:6E:FE:95:12:13:D8:C3:7D:1B:E4:38:2A:66:17:C3:A0
Certificate issuer:       /CN=b9442e36-28bb-4dc7-852f-f37ff2d3582e
Certificate serial:       010D0C9F4328584AB91B8D0E314E89CD53499140
Authority key identifier: 4E:45:B4:4C:5C:42:EF:45:7D:B8:CF:8D:99:39:53:BC:12:A3:8B:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/6c21457d-757c-3af5-9ddb-f65189535c9d.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     393682
IP address blocks:        104.245.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/b9442e36-28bb-4dc7-852f-f37ff2d3582e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/b9442e36-28bb-4dc7-852f-f37ff2d3582e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:8d:0e:31:4e:89:cd:53:49:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9442e36-28bb-4dc7-852f-f37ff2d3582e
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=db0b1100-1772-4806-9b85-78ec9794c06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:6e:6c:3a:50:4e:18:18:86:9b:fb:82:85:
                    aa:97:62:92:cd:c4:52:49:86:cb:49:1d:bc:1a:4f:
                    c0:bb:96:03:9e:a4:b6:ca:18:48:e8:35:7c:2c:d3:
                    c3:9e:d5:4c:df:53:f1:1b:57:e3:ca:a4:c7:aa:08:
                    2e:19:52:fd:3b:41:b9:c5:c6:17:a4:c8:df:f7:d7:
                    bf:76:76:54:d0:d6:9b:d4:3b:a5:55:d8:33:58:a2:
                    13:b0:48:14:34:ba:98:a8:81:9d:fe:09:44:b9:e5:
                    a6:6d:9b:2d:05:62:16:e7:07:c1:4e:a4:c8:af:29:
                    96:5d:be:cf:46:d6:4d:27:11:72:fb:f7:23:a6:88:
                    da:6f:5e:30:7b:a9:84:ff:5b:72:f4:15:51:a1:05:
                    b4:6b:07:18:99:05:ca:da:aa:2f:4c:23:c8:bf:69:
                    97:a1:86:3e:3e:e8:2f:16:a9:a6:6a:d4:89:d3:b0:
                    41:5e:89:d5:96:82:d0:db:bf:bc:33:0f:ea:4e:4b:
                    09:08:8e:45:c6:03:d9:e3:8b:e8:8d:e1:29:3b:ee:
                    5d:21:60:48:64:92:6e:8b:b9:03:54:25:6c:0a:91:
                    0c:34:fc:93:72:ff:09:03:8c:8f:dc:de:1c:2d:8f:
                    b5:77:f8:3d:45:95:5a:04:8f:5b:58:3b:50:1b:5b:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:88:59:FB:6E:FE:95:12:13:D8:C3:7D:1B:E4:38:2A:66:17:C3:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/6c21457d-757c-3af5-9ddb-f65189535c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e/b9442e36-28bb-4dc7-852f-f37ff2d3582e.crl

            X509v3 Authority Key Identifier:
                keyid:4E:45:B4:4C:5C:42:EF:45:7D:B8:CF:8D:99:39:53:BC:12:A3:8B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9442e36-28bb-4dc7-852f-f37ff2d3582e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:27:24:23:08:b8:f0:02:21:78:ea:02:95:86:fc:00:01:49:
         d2:2c:92:d9:ca:d2:97:b3:32:6d:12:99:21:53:9c:14:8b:96:
         77:d8:51:c4:41:d3:b1:e6:09:df:16:2e:27:0c:15:2f:63:fa:
         e7:3d:05:7c:14:b4:1c:8c:0a:1a:a1:7d:54:f5:35:ca:93:32:
         ae:49:b3:b5:0f:e5:bd:10:be:8c:21:f1:c1:c5:9d:d3:d9:e6:
         41:8d:e2:fd:a4:ad:ed:a4:a8:c0:aa:04:42:31:fc:e0:2c:d5:
         05:44:7c:b7:81:2c:8a:37:7c:a2:bb:b4:c1:07:a1:97:cd:d3:
         7d:f6:97:33:67:d2:fd:09:92:05:a7:e0:da:8c:cd:2c:19:27:
         71:43:37:f9:ed:7e:37:e2:05:be:47:d5:b3:f3:16:1e:d6:de:
         30:db:00:58:f3:d2:92:58:c3:d0:c5:ae:9d:0b:2d:f4:37:14:
         04:e2:a0:de:52:1d:27:7a:2d:93:ed:86:1e:0a:11:2b:08:80:
         6c:fb:74:63:0c:2d:36:13:56:4a:e2:e3:21:45:a5:d5:b0:a7:
         d3:25:5b:ba:50:aa:3c:99:ad:e1:19:a6:0f:d6:71:4c:5b:d6:
         83:f8:a3:2e:7d:1f:94:26:2d:ab:e2:b2:a4:09:00:6d:71:20:
         ee:6c:6f:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G40OMU6JzVNJkUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk0NDJlMzYtMjhiYi00ZGM3LTg1MmYtZjM3ZmYyZDM1
ODJlMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
ZGIwYjExMDAtMTc3Mi00ODA2LTliODUtNzhlYzk3OTRjMDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrJubDpQThgYhpv7goWql2KSzcRSSYbLSR28
Gk/Au5YDnqS2yhhI6DV8LNPDntVM31PxG1fjyqTHqgguGVL9O0G5xcYXpMjf99e/
dnZU0Nab1DulVdgzWKITsEgUNLqYqIGd/glEueWmbZstBWIW5wfBTqTIrymWXb7P
RtZNJxFy+/cjpojab14we6mE/1ty9BVRoQW0awcYmQXK2qovTCPIv2mXoYY+Pugv
FqmmatSJ07BBXonVloLQ27+8Mw/qTksJCI5FxgPZ44vojeEpO+5dIWBIZJJui7kD
VCVsCpEMNPyTcv8JA4yP3N4cLY+1d/g9RZVaBI9bWDtQG1tTPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP2IWftu/pUSE9jDfRvkOCpmF8OgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOTQ0
MmUzNi0yOGJiLTRkYzctODUyZi1mMzdmZjJkMzU4MmUvNmMyMTQ1N2QtNzU3Yy0z
YWY1LTlkZGItZjY1MTg5NTM1YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjk0NDJlMzYtMjhiYi00ZGM3LTg1
MmYtZjM3ZmYyZDM1ODJlL2I5NDQyZTM2LTI4YmItNGRjNy04NTJmLWYzN2ZmMmQz
NTgyZS5jcmwwHwYDVR0jBBgwFoAUTkW0TFxC70V9uM+NmTlTvBKji9kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOTQ0MmUzNi0yOGJiLTRkYzctODUyZi1mMzdm
ZjJkMzU4MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALYnJCMIuPACIXjqApWG/AABSdIsktnK0pezMm0SmSFTnBSLlnfYUcRB
07HmCd8WLicMFS9j+uc9BXwUtByMChqhfVT1NcqTMq5Js7UP5b0Qvowh8cHFndPZ
5kGN4v2kre2kqMCqBEIx/OAs1QVEfLeBLIo3fKK7tMEHoZfN0332lzNn0v0JkgWn
4NqMzSwZJ3FDN/ntfjfiBb5H1bPzFh7W3jDbAFjz0pJYw9DFrp0LLfQ3FATioN5S
HSd6LZPthh4KESsIgGz7dGMMLTYTVkri4yFFpdWwp9MlW7pQqjyZreEZpg/WcUxb
1oP4oy59H5QmLavisqQJAG1xIO5sb9g=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:23 2025 by rpki-client