Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/83eba3f8-32a5-3d50-aa94-ea93fe318ffb.roa
File:                     83eba3f8-32a5-3d50-aa94-ea93fe318ffb.roa (raw, json)
Hash identifier:          M7FgPF9uUhSbPfl6r7CYQ3b90vsY67/jRqlcTX9/ZM8=
Subject key identifier:   23:09:8F:2B:E6:DB:66:30:88:9A:D1:A8:9D:B1:3A:AC:9C:9E:7B:05
Certificate issuer:       /CN=de0cc6bd-e920-421b-822f-9be354b0d759
Certificate serial:       010D0C9F4328584BA93264335CC7652BC7F94CF0
Authority key identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/83eba3f8-32a5-3d50-aa94-ea93fe318ffb.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     399888
IP address blocks:        45.45.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:64:33:5c:c7:65:2b:c7:f9:4c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0cc6bd-e920-421b-822f-9be354b0d759
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=a458d839-6bc5-448d-8854-67932c077224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:e4:4c:67:5c:46:17:cf:97:a9:df:e0:2a:
                    a8:e6:47:ce:30:9c:e3:66:d7:64:0f:3a:e9:c2:e5:
                    17:bb:a5:02:29:e3:ef:4f:7a:d0:5e:65:10:29:bc:
                    fd:02:4c:64:a6:8f:c7:64:d8:03:9b:10:4f:ca:54:
                    d0:31:0f:28:12:e3:61:c7:7d:2a:18:e0:fa:7d:33:
                    b2:60:93:c4:e3:80:f6:3e:40:dc:d2:87:5e:f5:6e:
                    b8:c6:d6:ae:28:79:85:3d:cc:67:1b:2b:bf:1e:a9:
                    a6:4d:10:13:71:b8:70:57:b2:e5:51:c7:e5:d1:6f:
                    31:ac:41:ba:c8:68:a7:56:ad:09:c8:f7:8d:75:f6:
                    e4:f9:8c:2e:b5:0d:d2:7b:53:48:ea:92:a9:26:53:
                    3f:1b:1f:73:2d:1f:f1:6b:6e:7a:8e:81:4b:e0:d4:
                    5c:fe:39:2b:93:d6:8a:24:61:77:39:7b:63:10:88:
                    94:87:5f:60:7e:ef:e3:2c:63:ed:f3:0e:9d:fa:59:
                    f8:6d:95:3c:68:d0:a1:38:4f:83:ea:e0:00:18:14:
                    db:8c:6c:7f:98:60:d8:dc:48:26:b9:c6:21:fa:81:
                    53:01:f1:cb:88:fa:56:f1:3c:fa:b3:57:5e:37:20:
                    ae:cb:08:7f:cf:83:ae:a7:c7:b8:55:64:86:97:a1:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:09:8F:2B:E6:DB:66:30:88:9A:D1:A8:9D:B1:3A:AC:9C:9E:7B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/83eba3f8-32a5-3d50-aa94-ea93fe318ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl

            X509v3 Authority Key Identifier:
                keyid:D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:39:31:5f:e1:c5:38:ac:80:17:9c:61:7a:33:d5:9c:49:75:
         46:1c:74:21:06:c8:bc:93:e0:1b:af:73:2a:21:c0:dc:5e:73:
         cc:b3:f4:66:cb:c3:2e:9b:ad:f3:71:1c:55:21:c7:b2:7e:1f:
         99:af:5c:35:3a:83:0b:d1:ba:7d:0a:75:c7:82:73:20:51:55:
         a3:ff:94:4d:6f:6b:52:b8:15:36:1f:19:68:71:3b:d0:c7:39:
         3e:e0:dc:96:53:50:49:c4:56:a5:87:03:86:a6:97:72:56:e1:
         3b:4e:85:1f:b5:84:2e:86:eb:45:bd:d8:17:c1:4a:06:4c:d2:
         90:16:9e:d4:13:5b:f9:5f:c2:50:6d:70:31:fe:5a:55:04:98:
         ce:30:81:5a:9f:5b:37:f7:9f:24:58:1d:1c:c2:2a:aa:9d:67:
         04:a6:0a:6f:9e:7f:95:a3:19:62:f7:06:c1:f6:4e:40:f3:2e:
         ea:0a:38:ef:2c:9f:88:00:a9:88:c7:89:c8:4d:e4:53:10:83:
         fd:7f:ce:38:b8:65:c0:c4:23:86:ba:bd:9e:ea:69:55:fe:bb:
         1a:26:54:7e:d6:bc:7e:05:18:14:53:62:83:89:91:00:64:b6:
         4f:7e:bf:c4:1d:54:82:48:7d:57:5c:15:46:6a:af:cf:b6:f7:
         70:1c:ad:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmQzXMdlK8f5TPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUwY2M2YmQtZTkyMC00MjFiLTgyMmYtOWJlMzU0YjBk
NzU5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
YTQ1OGQ4MzktNmJjNS00NDhkLTg4NTQtNjc5MzJjMDc3MjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwrkTGdcRhfPl6nf4Cqo5kfOMJzjZtdkDzrp
wuUXu6UCKePvT3rQXmUQKbz9Akxkpo/HZNgDmxBPylTQMQ8oEuNhx30qGOD6fTOy
YJPE44D2PkDc0ode9W64xtauKHmFPcxnGyu/HqmmTRATcbhwV7LlUcfl0W8xrEG6
yGinVq0JyPeNdfbk+YwutQ3Se1NI6pKpJlM/Gx9zLR/xa256joFL4NRc/jkrk9aK
JGF3OXtjEIiUh19gfu/jLGPt8w6d+ln4bZU8aNChOE+D6uAAGBTbjGx/mGDY3Egm
ucYh+oFTAfHLiPpW8Tz6s1deNyCuywh/z4Oup8e4VWSGl6Fe2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMJjyvm22YwiJrRqJ2xOqycnnsFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZTBj
YzZiZC1lOTIwLTQyMWItODIyZi05YmUzNTRiMGQ3NTkvODNlYmEzZjgtMzJhNS0z
ZDUwLWFhOTQtZWE5M2ZlMzE4ZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGUwY2M2YmQtZTkyMC00MjFiLTgy
MmYtOWJlMzU0YjBkNzU5L2RlMGNjNmJkLWU5MjAtNDIxYi04MjJmLTliZTM1NGIw
ZDc1OS5jcmwwHwYDVR0jBBgwFoAU0N8F+unbijdSc2pIZnRTxmgQcFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZTBjYzZiZC1lOTIwLTQyMWItODIyZi05YmUz
NTRiMGQ3NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFI5MV/hxTisgBecYXoz1ZxJdUYcdCEGyLyT4BuvcyohwNxec8yz9GbL
wy6brfNxHFUhx7J+H5mvXDU6gwvRun0KdceCcyBRVaP/lE1va1K4FTYfGWhxO9DH
OT7g3JZTUEnEVqWHA4aml3JW4TtOhR+1hC6G60W92BfBSgZM0pAWntQTW/lfwlBt
cDH+WlUEmM4wgVqfWzf3nyRYHRzCKqqdZwSmCm+ef5WjGWL3BsH2TkDzLuoKOO8s
n4gAqYjHichN5FMQg/1/zji4ZcDEI4a6vZ7qaVX+uxomVH7WvH4FGBRTYoOJkQBk
tk9+v8QdVIJIfVdcFUZqr8+293Acrb4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:45:20 2025 by rpki-client