Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7355733f-b374-3a9e-991e-62608414b78b.roa
File:                     7355733f-b374-3a9e-991e-62608414b78b.roa (raw, json)
Hash identifier:          rZmVp/isAL+7XVVycae+zHsC/WHXLSnmcfZS0gb/Eh0=
Subject key identifier:   DB:D1:68:C0:BF:17:2E:64:28:9B:06:46:49:53:31:9B:02:27:81:79
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584BBFA59870BE19C9E6EB20D280
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7355733f-b374-3a9e-991e-62608414b78b.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     29538
IP address blocks:        128.1.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:98:70:be:19:c9:e6:eb:20:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=daa8b106-015b-40be-aa9b-1407ab778b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:d5:b8:16:97:bc:0a:b6:66:6c:ef:a0:cf:
                    95:4d:3e:64:ce:3f:3f:09:19:9f:d1:57:d2:da:ad:
                    2a:a1:35:0e:da:40:e4:05:53:11:6c:8c:b9:01:9b:
                    62:97:28:2b:66:78:3d:17:65:30:6a:80:7f:02:26:
                    ff:5b:ce:5d:92:c1:57:45:67:6a:01:68:17:44:c3:
                    da:54:f7:b5:e0:b9:e9:02:3c:99:fc:1c:c0:e0:6d:
                    f7:1b:3d:48:d7:95:17:bb:62:01:55:19:7c:bd:1a:
                    31:80:e0:41:66:58:75:a3:a2:4c:e0:37:07:ab:88:
                    6c:3b:6a:f3:a6:07:6a:9c:81:12:32:9e:74:69:bf:
                    f3:0a:c2:7a:60:ba:79:3b:fa:f6:b8:c3:2c:c8:da:
                    39:05:2a:98:f1:3c:8e:33:3e:07:7d:d6:67:bf:2b:
                    e5:6f:e2:f8:7f:31:aa:7a:bc:b2:d9:19:35:78:77:
                    79:a9:d1:3b:93:c9:28:c0:34:40:29:f9:27:95:38:
                    1c:a4:4f:32:b2:a3:11:f7:82:ca:bb:0e:6c:0f:12:
                    c6:01:d7:eb:12:88:e7:c2:e9:d0:70:66:8a:13:75:
                    99:5f:34:0c:8d:c9:04:6c:10:24:13:c7:b8:15:9f:
                    13:0b:8f:4a:5a:4a:64:0c:fd:7b:ce:fe:3c:91:d6:
                    cb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D1:68:C0:BF:17:2E:64:28:9B:06:46:49:53:31:9B:02:27:81:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7355733f-b374-3a9e-991e-62608414b78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:59:d6:6d:20:a7:8a:57:82:89:f2:ee:ca:81:07:00:40:3f:
         d8:30:80:fb:bc:ec:68:5f:09:ce:a9:34:03:03:96:ea:a2:d5:
         26:73:ad:d1:d5:8a:0a:1b:55:59:c5:30:bb:9b:5f:ee:8c:35:
         e7:7e:11:c1:02:fe:48:29:26:45:a2:46:c7:95:fe:bd:bb:38:
         07:2b:23:8d:66:03:8c:79:0e:e1:5c:4d:0a:9c:24:83:7a:95:
         b6:01:f3:87:8b:cf:f9:fc:3d:52:a6:ef:7a:50:cf:d3:9c:93:
         dd:0b:7f:23:3d:86:4d:ad:a4:8a:3c:92:e5:d0:ef:2f:e5:9b:
         93:05:d3:f5:0f:bd:a4:9b:a7:52:76:30:ea:fb:89:e7:b8:75:
         d1:a9:0e:22:3c:f3:09:6f:95:f2:0a:91:8d:c7:98:ba:ba:37:
         eb:20:3b:f1:5c:70:a4:fd:b5:e5:f1:c6:6b:05:15:1d:9b:a5:
         5f:d9:b3:5c:8d:93:24:6d:ed:5c:2c:52:57:92:47:7b:81:ed:
         78:34:0c:a0:cb:66:9b:0d:19:72:6b:12:ad:2e:08:0a:69:44:
         ac:78:62:29:88:9a:5a:e5:71:58:c5:f0:d7:da:cd:50:ca:01:
         40:72:7c:e4:7a:8c:8d:7b:82:a7:2b:53:fe:82:b5:48:99:88:
         9b:42:25:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZhwvhnJ5usg0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk
ZGFhOGIxMDYtMDE1Yi00MGJlLWFhOWItMTQwN2FiNzc4YjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGTVuBaXvAq2ZmzvoM+VTT5kzj8/CRmf0VfS
2q0qoTUO2kDkBVMRbIy5AZtilygrZng9F2UwaoB/Aib/W85dksFXRWdqAWgXRMPa
VPe14LnpAjyZ/BzA4G33Gz1I15UXu2IBVRl8vRoxgOBBZlh1o6JM4DcHq4hsO2rz
pgdqnIESMp50ab/zCsJ6YLp5O/r2uMMsyNo5BSqY8TyOMz4HfdZnvyvlb+L4fzGq
eryy2Rk1eHd5qdE7k8kowDRAKfknlTgcpE8ysqMR94LKuw5sDxLGAdfrEojnwunQ
cGaKE3WZXzQMjckEbBAkE8e4FZ8TC49KWkpkDP17zv48kdbLDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNvRaMC/Fy5kKJsGRklTMZsCJ4F5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNzM1NTczM2YtYjM3NC0z
YTllLTk5MWUtNjI2MDg0MTRiNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxZ1m0gp4pXgony7sqBBwBAP9gwgPu87GhfCc6pNAMDluqi1SZzrdHV
igobVVnFMLubX+6MNed+EcEC/kgpJkWiRseV/r27OAcrI41mA4x5DuFcTQqcJIN6
lbYB84eLz/n8PVKm73pQz9Ock90LfyM9hk2tpIo8kuXQ7y/lm5MF0/UPvaSbp1J2
MOr7iee4ddGpDiI88wlvlfIKkY3HmLq6N+sgO/FccKT9teXxxmsFFR2bpV/Zs1yN
kyRt7VwsUleSR3uB7Xg0DKDLZpsNGXJrEq0uCAppRKx4YimImlrlcVjF8NfazVDK
AUByfOR6jI17gqcrU/6CtUiZiJtCJRY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:14 2025 by rpki-client