Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa
File:                     aa7afe85-abe8-3328-9407-af87c4793bd8.roa (raw, json)
Hash identifier:          DO4Gx5sE4LPBmZQGgX2sCXh0CmoHCwn7xbTyWm1Jx9A=
Subject key identifier:   56:1E:F1:79:DE:70:2F:07:69:A8:09:50:00:E7:8B:93:ED:81:F4:B9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F629300FFDD214C91384C2C50
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        75.112.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:00:ff:dd:21:4c:91:38:4c:2c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=c34e244b-8594-4dc5-8a61-af0bd85817e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:41:2c:80:8b:8f:5b:06:71:39:bd:59:4d:
                    0a:d8:e0:c2:d2:8a:90:2f:b7:73:51:7e:e8:74:59:
                    69:9a:51:ec:e9:1a:e1:a3:f7:3b:27:07:33:b4:2f:
                    e4:5f:52:75:f5:9e:5e:30:55:53:b9:13:7d:a1:84:
                    b1:b2:eb:78:8a:4d:85:21:8d:22:0d:2c:7b:9e:ca:
                    8b:23:84:c8:d8:df:7c:7e:64:a4:05:da:bd:8e:11:
                    f0:5c:ff:4a:f9:31:5d:18:19:44:9b:6a:51:35:42:
                    d6:e8:0f:49:d8:32:26:36:ee:63:57:ec:f0:3d:bb:
                    c0:d7:83:d2:27:bd:36:d9:81:aa:db:ff:c6:6e:21:
                    79:77:62:dd:71:3a:6a:ef:3a:91:91:c4:82:e5:bb:
                    51:8e:1a:8f:15:1d:54:a2:96:ee:f6:e1:7d:a0:5d:
                    e2:c8:3e:31:d0:8e:6c:8d:ce:18:85:92:75:4a:d3:
                    ab:7b:02:ea:85:40:91:e1:7f:ec:19:01:56:28:ac:
                    d2:db:50:96:bf:81:ce:be:ce:d5:86:75:3b:67:2a:
                    e2:31:26:64:2f:76:74:48:88:27:e9:c1:13:6f:a2:
                    6a:5c:dc:01:24:b4:00:15:c6:85:64:a1:5b:0d:ea:
                    37:de:6b:5d:df:4a:0d:f5:28:ec:d6:21:b3:59:e3:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1E:F1:79:DE:70:2F:07:69:A8:09:50:00:E7:8B:93:ED:81:F4:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/aa7afe85-abe8-3328-9407-af87c4793bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.112.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:20:d2:e2:52:4d:48:c1:7e:ca:77:74:87:2f:7c:9d:28:c5:
         35:6f:14:50:ce:cc:06:c6:b5:ef:0d:14:20:2b:4c:5f:cf:eb:
         a4:fc:ea:cb:3c:b7:ff:30:93:80:8f:c6:d9:58:b9:98:a2:cd:
         f5:18:ad:f5:ac:af:b1:4a:76:bc:7f:0c:52:83:81:f5:1f:2a:
         42:d2:c8:e4:60:e3:2b:ac:50:e8:76:2d:fb:50:82:44:d3:33:
         1a:06:f4:69:09:ed:53:3d:fb:19:c6:47:c2:06:92:cd:15:10:
         71:18:99:05:3f:5c:3f:48:32:39:b0:ad:ae:20:ce:7b:8a:46:
         9f:6b:eb:a0:29:69:f2:65:4b:98:bb:2d:27:4b:d3:7e:f2:b5:
         14:46:de:ea:65:ff:f3:37:3b:05:62:21:02:25:aa:02:a6:0b:
         85:c8:68:81:47:3d:34:9a:c0:a8:ed:c3:75:17:89:dc:71:42:
         93:e4:39:ee:90:43:82:41:46:8a:49:d9:e0:9d:84:f5:82:f3:
         af:f7:33:a2:29:dd:e0:c6:14:dc:4a:a3:6f:ce:cf:c6:d4:e8:
         df:45:b6:87:a4:df:d8:59:be:53:fd:73:da:94:0e:3b:66:59:
         32:c0:7a:eb:da:34:7e:f5:df:8d:13:8a:76:ec:aa:18:08:3d:
         49:f8:62:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwD/3SFMkThMLFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
YzM0ZTI0NGItODU5NC00ZGM1LThhNjEtYWYwYmQ4NTgxN2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk71BLICLj1sGcTm9WU0K2ODC0oqQL7dzUX7o
dFlpmlHs6Rrho/c7JwcztC/kX1J19Z5eMFVTuRN9oYSxsut4ik2FIY0iDSx7nsqL
I4TI2N98fmSkBdq9jhHwXP9K+TFdGBlEm2pRNULW6A9J2DImNu5jV+zwPbvA14PS
J7022YGq2//GbiF5d2LdcTpq7zqRkcSC5btRjhqPFR1Uopbu9uF9oF3iyD4x0I5s
jc4YhZJ1StOrewLqhUCR4X/sGQFWKKzS21CWv4HOvs7VhnU7ZyriMSZkL3Z0SIgn
6cETb6JqXNwBJLQAFcaFZKFbDeo33mtd30oN9Sjs1iGzWeMzBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYe8XnecC8HaagJUADni5PtgfS5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYWE3YWZlODUtYWJlOC0z
MzI4LTk0MDctYWY4N2M0NzkzYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3AwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcg0uJSTUjBfsp3dIcvfJ0oxTVvFFDOzAbGte8NFCArTF/P66T86ss8
t/8wk4CPxtlYuZiizfUYrfWsr7FKdrx/DFKDgfUfKkLSyORg4yusUOh2LftQgkTT
MxoG9GkJ7VM9+xnGR8IGks0VEHEYmQU/XD9IMjmwra4gznuKRp9r66ApafJlS5i7
LSdL037ytRRG3upl//M3OwViIQIlqgKmC4XIaIFHPTSawKjtw3UXidxxQpPkOe6Q
Q4JBRopJ2eCdhPWC86/3M6Ip3eDGFNxKo2/Oz8bU6N9Ftoek39hZvlP9c9qUDjtm
WTLAeuvaNH71340TinbsqhgIPUn4Yvg=
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:34:32 2026 by rpki-client