Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/1ba40751-0f06-3933-ad79-593be6c3f6ba.roa
File:                     1ba40751-0f06-3933-ad79-593be6c3f6ba.roa (raw, json)
Hash identifier:          3woZ+285jnLR0ji1dE0w+wG4RAO83GjMVtx91uJNnQs=
Subject key identifier:   2E:71:D9:1C:80:11:ED:B7:5A:AC:50:B2:DB:57:33:33:E3:12:E0:D1
Certificate issuer:       /CN=cdc373f2-7aee-4c17-9b33-e9d993543374
Certificate serial:       010D0C9F4328584BB45D192A19BA03B8453737A8
Authority key identifier: 4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/1ba40751-0f06-3933-ad79-593be6c3f6ba.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     13825
IP address blocks:        204.48.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:19:2a:19:ba:03:b8:45:37:37:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdc373f2-7aee-4c17-9b33-e9d993543374
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=7895c995-7a30-4722-9e7c-b069852e224d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:47:5d:27:e5:7e:8a:19:65:02:d6:81:a5:
                    d8:fa:2f:61:8a:4c:bc:17:ba:cb:30:2f:7c:92:46:
                    f9:71:c4:1e:b3:d3:40:5b:92:8c:aa:7c:9f:37:6a:
                    7d:4a:c5:67:e0:a7:c2:6b:d5:56:a9:99:12:0b:41:
                    c7:bc:02:f4:98:45:11:4d:96:aa:bf:71:27:a8:f6:
                    ef:40:85:9e:7c:7c:17:1d:83:b9:36:99:d8:c3:90:
                    bd:4e:08:8b:73:68:31:0c:ae:d8:bc:29:5a:3e:b6:
                    6a:32:49:48:0a:c9:a1:c0:9e:8c:0b:dc:1d:6a:3f:
                    a0:73:1e:97:8c:1c:72:8b:87:fb:d3:1b:0f:11:ac:
                    af:41:5b:68:64:5f:9b:fe:2f:a5:7d:88:da:6d:5b:
                    49:8d:69:a1:4d:df:5a:a3:4a:5c:e5:dd:55:df:3a:
                    06:78:af:93:44:b6:6c:5d:52:f7:8b:a8:2e:ad:cd:
                    0c:0a:5a:d6:e8:c8:0a:92:64:a8:87:40:00:30:b0:
                    7e:d1:ce:e8:13:82:1f:20:aa:fe:bc:e3:4e:a6:a9:
                    10:25:05:b3:37:98:4b:1c:50:48:82:b8:36:c2:2d:
                    bd:6d:56:8a:14:4d:ac:ed:e9:4e:01:30:57:37:f2:
                    08:2e:dd:ec:e0:98:22:3e:cb:94:d3:cd:c4:c8:5b:
                    86:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:71:D9:1C:80:11:ED:B7:5A:AC:50:B2:DB:57:33:33:E3:12:E0:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/1ba40751-0f06-3933-ad79-593be6c3f6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.48.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d6:94:8d:94:c9:ba:7a:90:eb:ee:a1:62:36:03:47:ff:0a:
         ad:e6:be:71:1f:30:6e:a2:8a:21:47:0c:8c:ca:58:5a:16:7b:
         1b:b0:64:83:e8:21:00:0a:90:ec:92:a4:dd:bf:f0:9b:64:d3:
         fb:8c:ae:7d:b7:38:ee:01:51:6e:8c:4d:bd:c3:ba:3e:d6:f0:
         6c:8a:e6:ad:34:17:e4:85:5b:0b:b7:83:fe:24:8e:e7:78:62:
         23:04:67:54:4f:fc:0d:a0:f6:7c:c4:c9:b9:a5:9e:6a:21:36:
         55:7e:48:d3:8e:4a:b7:23:0d:d3:75:0f:c6:81:63:72:bb:97:
         05:a9:f6:c8:ef:07:bf:ee:2b:5c:7e:21:3e:b0:c5:d5:35:1d:
         62:5b:b2:4e:dc:14:aa:2a:e0:fb:60:ea:a7:03:b1:f1:ac:9d:
         df:4a:57:cb:c6:27:a1:51:1e:78:73:50:c5:8f:5c:3d:f4:7b:
         6d:65:2c:ac:9f:4a:30:f9:fc:48:6f:1f:20:a3:32:af:48:bf:
         c3:83:9b:06:df:57:67:55:7a:b3:b9:70:be:b6:c4:fc:19:d0:
         85:a6:50:78:b1:4e:88:31:f9:db:ce:80:f4:5f:89:0b:e4:b8:
         32:4b:3c:61:76:5d:a0:40:60:fa:34:d0:77:d6:60:af:d7:a3:
         ee:ac:8e:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRkqGboDuEU3N6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RjMzczZjItN2FlZS00YzE3LTliMzMtZTlkOTkzNTQz
Mzc0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
Nzg5NWM5OTUtN2EzMC00NzIyLTllN2MtYjA2OTg1MmUyMjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WxHXSflfooZZQLWgaXY+i9hiky8F7rLMC98
kkb5ccQes9NAW5KMqnyfN2p9SsVn4KfCa9VWqZkSC0HHvAL0mEURTZaqv3EnqPbv
QIWefHwXHYO5NpnYw5C9TgiLc2gxDK7YvClaPrZqMklICsmhwJ6MC9wdaj+gcx6X
jBxyi4f70xsPEayvQVtoZF+b/i+lfYjabVtJjWmhTd9ao0pc5d1V3zoGeK+TRLZs
XVL3i6gurc0MClrW6MgKkmSoh0AAMLB+0c7oE4IfIKr+vONOpqkQJQWzN5hLHFBI
grg2wi29bVaKFE2s7elOATBXN/IILt3s4JgiPsuU083EyFuG7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5x2RyAEe23WqxQsttXMzPjEuDRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGMz
NzNmMi03YWVlLTRjMTctOWIzMy1lOWQ5OTM1NDMzNzQvMWJhNDA3NTEtMGYwNi0z
OTMzLWFkNzktNTkzYmU2YzNmNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RjMzczZjItN2FlZS00YzE3LTli
MzMtZTlkOTkzNTQzMzc0L2NkYzM3M2YyLTdhZWUtNGMxNy05YjMzLWU5ZDk5MzU0
MzM3NC5jcmwwHwYDVR0jBBgwFoAUTaZn5yAYFLQdby3d2ZzWuorXw94wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGMzNzNmMi03YWVlLTRjMTctOWIzMy1lOWQ5
OTM1NDMzNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDA9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfWlI2Uybp6kOvuoWI2A0f/Cq3mvnEfMG6iiiFHDIzKWFoWexuwZIPo
IQAKkOySpN2/8Jtk0/uMrn23OO4BUW6MTb3Duj7W8GyK5q00F+SFWwu3g/4kjud4
YiMEZ1RP/A2g9nzEybmlnmohNlV+SNOOSrcjDdN1D8aBY3K7lwWp9sjvB7/uK1x+
IT6wxdU1HWJbsk7cFKoq4Ptg6qcDsfGsnd9KV8vGJ6FRHnhzUMWPXD30e21lLKyf
SjD5/EhvHyCjMq9Iv8ODmwbfV2dVerO5cL62xPwZ0IWmUHixTogx+dvOgPRfiQvk
uDJLPGF2XaBAYPo00HfWYK/Xo+6sjuE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:14 2025 by rpki-client