Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/3b2baeea-9ebf-3e73-8198-bfb726dce325.roa
File:                     3b2baeea-9ebf-3e73-8198-bfb726dce325.roa (raw, json)
Hash identifier:          3sN4tIgVCjij5ByIGaYXAbfqFxuEmbFCjHYCLopOL1Q=
Subject key identifier:   83:DC:EF:B3:6D:18:10:86:D3:5D:A1:54:25:F8:E7:B4:E5:14:63:FC
Certificate issuer:       /CN=1dd142d7-5311-487b-9c11-f16950e4d57d
Certificate serial:       010D0C9F4328584B99D77DCFEB3201810D2F7B80
Authority key identifier: 47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/3b2baeea-9ebf-3e73-8198-bfb726dce325.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     22996
IP address blocks:        173.241.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:7d:cf:eb:32:01:81:0d:2f:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd142d7-5311-487b-9c11-f16950e4d57d
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=582a3838-babb-45bf-98de-7509a4eb45e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1d:58:74:b6:a7:ce:0a:62:3e:23:ef:2b:5a:
                    31:b6:3b:d5:e6:3a:e7:b8:fd:51:45:54:1d:eb:fe:
                    e1:fc:c7:ac:8f:37:e4:5a:34:21:69:03:97:0d:5b:
                    b0:5d:16:72:ca:6d:7a:42:48:88:fa:95:b2:16:9b:
                    f0:a5:73:33:4e:c0:47:29:bc:7b:f0:9c:8f:9f:07:
                    71:6d:c9:4d:b0:e2:71:7e:23:20:d4:6d:ab:ba:37:
                    c2:4c:ff:04:cf:02:ff:2e:db:df:a3:b1:df:0e:07:
                    5a:21:b5:f2:83:de:ce:ad:a9:28:28:ea:a4:93:e6:
                    c7:77:c3:3a:e9:a8:84:5d:b9:49:f3:47:f8:32:3b:
                    d9:93:5c:de:8f:2f:87:fa:3f:1d:fb:7a:e8:e9:bd:
                    2b:95:45:73:8e:9c:c0:c3:a6:4c:f5:e3:86:2f:52:
                    f1:a5:a7:d1:43:d3:b4:ae:d4:76:29:f2:cb:79:73:
                    ed:45:a1:68:8d:41:2e:46:80:89:37:6b:48:d7:92:
                    d0:2f:6f:d4:15:6f:7d:4b:45:c7:cc:ac:84:99:1d:
                    23:e8:62:f9:69:e5:1e:1d:50:08:a2:49:ff:be:f2:
                    d2:9c:72:8e:0c:58:82:99:f4:2a:c1:fb:10:d6:31:
                    da:95:ca:47:4c:16:05:5f:f5:a0:3a:43:48:29:64:
                    17:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DC:EF:B3:6D:18:10:86:D3:5D:A1:54:25:F8:E7:B4:E5:14:63:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/3b2baeea-9ebf-3e73-8198-bfb726dce325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl

            X509v3 Authority Key Identifier:
                keyid:47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1b:55:a7:4c:c1:ff:3f:c3:44:73:a3:e2:7d:3b:4d:65:1c:
         81:a1:e5:93:8f:26:9a:e7:4b:b6:88:c1:c1:a7:43:09:0f:7b:
         95:2f:09:21:1f:33:77:9c:9d:85:d0:db:8d:7f:36:93:98:4d:
         75:7e:48:d3:2a:99:1c:1c:4d:ea:08:d9:7a:cb:23:6c:f1:2b:
         1b:a5:20:5a:b9:94:4c:57:b9:0f:6a:46:53:de:42:0b:e0:5b:
         8f:c8:ac:48:5e:9b:8a:e3:54:46:09:cf:8e:0a:b4:2a:26:09:
         6a:69:99:18:30:4e:2d:31:1b:80:2d:5c:34:94:ed:d6:2f:cb:
         60:b4:8b:a9:49:26:b8:5e:94:fb:4e:42:df:df:c7:68:ea:99:
         5a:6a:2a:a0:53:eb:9d:4a:7f:be:80:99:83:9c:4e:01:cc:12:
         0b:da:0d:b4:4a:86:b4:25:66:cd:4a:da:74:eb:50:60:86:f3:
         a7:ab:d3:1f:b6:2e:66:87:b8:cf:74:42:96:cd:44:15:3f:05:
         20:70:36:a4:f2:e4:35:4b:11:c7:d1:cc:aa:67:fb:7d:ba:ed:
         04:d4:57:c8:8d:95:70:a5:b3:52:2b:cd:21:59:7c:db:6c:ad:
         0d:5d:dd:27:09:46:96:89:76:df:c4:3e:67:9e:63:ac:a9:d9:
         00:95:6c:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ133P6zIBgQ0ve4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkMTQyZDctNTMxMS00ODdiLTljMTEtZjE2OTUwZTRk
NTdkMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
NTgyYTM4MzgtYmFiYi00NWJmLTk4ZGUtNzUwOWE0ZWI0NWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B1YdLanzgpiPiPvK1oxtjvV5jrnuP1RRVQd
6/7h/MesjzfkWjQhaQOXDVuwXRZyym16QkiI+pWyFpvwpXMzTsBHKbx78JyPnwdx
bclNsOJxfiMg1G2rujfCTP8EzwL/Ltvfo7HfDgdaIbXyg97OrakoKOqkk+bHd8M6
6aiEXblJ80f4MjvZk1zejy+H+j8d+3ro6b0rlUVzjpzAw6ZM9eOGL1LxpafRQ9O0
rtR2KfLLeXPtRaFojUEuRoCJN2tI15LQL2/UFW99S0XHzKyEmR0j6GL5aeUeHVAI
okn/vvLSnHKODFiCmfQqwfsQ1jHalcpHTBYFX/WgOkNIKWQXrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIPc77NtGBCG012hVCX457TlFGP8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZGQx
NDJkNy01MzExLTQ4N2ItOWMxMS1mMTY5NTBlNGQ1N2QvM2IyYmFlZWEtOWViZi0z
ZTczLTgxOTgtYmZiNzI2ZGNlMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWRkMTQyZDctNTMxMS00ODdiLTlj
MTEtZjE2OTUwZTRkNTdkLzFkZDE0MmQ3LTUzMTEtNDg3Yi05YzExLWYxNjk1MGU0
ZDU3ZC5jcmwwHwYDVR0jBBgwFoAURy2x5B5MCwnHXiyrNWyEEIuA9qEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZGQxNDJkNy01MzExLTQ4N2ItOWMxMS1mMTY5
NTBlNGQ1N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAbVadMwf8/w0Rzo+J9O01lHIGh5ZOPJprnS7aIwcGnQwkPe5UvCSEf
M3ecnYXQ241/NpOYTXV+SNMqmRwcTeoI2XrLI2zxKxulIFq5lExXuQ9qRlPeQgvg
W4/IrEhem4rjVEYJz44KtComCWppmRgwTi0xG4AtXDSU7dYvy2C0i6lJJrhelPtO
Qt/fx2jqmVpqKqBT651Kf76AmYOcTgHMEgvaDbRKhrQlZs1K2nTrUGCG86er0x+2
LmaHuM90QpbNRBU/BSBwNqTy5DVLEcfRzKpn+3267QTUV8iNlXCls1IrzSFZfNts
rQ1d3ScJRpaJdt/EPmeeY6yp2QCVbOY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:54:19 2025 by rpki-client