Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa
File:                     1c21a477-f490-34ce-8019-0e5a15944ec6.roa (raw, json)
Hash identifier:          2LPN8f0wtDFnqx1aRK0vZxL7pODy/NQzTO6/RE5QUxQ=
Subject key identifier:   C2:8C:C1:03:7D:39:44:B7:D9:59:56:4C:64:C8:9D:94:01:66:ED:CB
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584BB45D326F8E13270DF953DEC0
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     396982
IP address blocks:        204.10.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:32:6f:8e:13:27:0d:f9:53:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=2c5eb318-2f00-4f60-af29-99d7260dbbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1a:64:d9:66:94:4a:9a:9b:17:d8:c4:0e:b1:
                    56:f2:a9:52:a4:f6:44:5e:0b:ac:cf:c5:06:a8:73:
                    c9:1f:3c:ef:a7:6a:9d:1e:f0:34:95:eb:9f:f2:3b:
                    10:21:8d:55:5a:9c:d5:ce:d8:56:f8:5c:9d:30:b0:
                    4c:c9:4d:1c:7f:35:1a:90:36:8f:fb:00:a6:be:6d:
                    d3:18:1b:7c:b9:05:ec:65:a2:f6:30:5f:a8:c8:c6:
                    bc:97:0a:ec:be:f8:d9:67:c6:ca:b9:c4:a4:9d:f3:
                    eb:a4:cb:fa:10:07:00:c0:fe:36:0c:35:b5:37:32:
                    87:50:47:f8:95:d9:2a:a1:54:7e:73:55:cd:29:d4:
                    d3:14:96:dd:15:95:56:de:7f:30:0d:7a:74:59:86:
                    0a:62:bc:2a:0f:3d:41:0b:66:a6:62:9c:e8:2c:72:
                    c0:de:26:20:8e:9f:1d:34:e3:6e:31:4a:75:e2:4a:
                    2c:98:2b:58:fd:1d:b4:e7:a2:3a:bb:b0:25:bf:6f:
                    36:e0:33:d1:cd:20:c3:bf:70:d3:97:2c:a6:d6:72:
                    53:14:5c:a1:7c:3a:68:ae:72:e0:a5:f0:4e:24:45:
                    4c:b0:34:5d:bb:7f:5e:40:6f:53:21:6b:1a:ad:36:
                    a2:ca:13:ce:88:6d:1a:45:54:68:23:25:be:a8:22:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8C:C1:03:7D:39:44:B7:D9:59:56:4C:64:C8:9D:94:01:66:ED:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:57:4b:cc:04:03:6e:59:9f:3d:aa:bb:9f:59:a8:17:aa:
         ad:b6:9b:e7:77:90:d2:b0:29:a7:6d:ec:f0:ea:f4:68:57:fd:
         3a:d7:53:6f:ca:66:01:c6:75:9d:5e:2a:01:08:a8:f4:5c:da:
         3d:bd:69:94:46:16:a3:8b:5b:94:88:ed:f8:04:66:24:ab:b4:
         94:18:22:8a:0d:14:ac:bf:1f:03:5c:7c:a1:f8:48:4d:6b:c7:
         13:a0:b1:90:ed:1a:e1:83:3b:90:36:b4:37:07:f3:79:6c:0d:
         93:13:99:dc:c0:40:fe:9e:15:a7:9d:ed:07:d8:bc:79:aa:da:
         4f:92:c4:35:57:2f:3a:42:08:98:54:4f:44:7b:bc:47:da:ea:
         0c:e6:d2:28:6a:2a:89:39:b1:53:ad:0c:c2:4a:84:56:cb:76:
         77:b7:75:d6:94:f6:6f:3d:af:c4:c0:09:83:4e:7e:ae:17:44:
         c6:c4:d4:2f:69:a1:d1:e2:19:31:55:fa:d9:34:4d:b6:c9:a7:
         0c:71:c9:84:97:ca:88:37:f7:27:e1:11:dc:59:43:41:e2:9d:
         9a:86:7e:a8:d4:eb:f5:c2:25:12:10:8f:35:18:b5:88:04:7f:
         0a:48:89:5c:1d:53:04:ee:04:fa:2e:c2:0e:45:60:55:0b:12:
         b3:91:84:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTJvjhMnDflT3sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi
ZjE0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
MmM1ZWIzMTgtMmYwMC00ZjYwLWFmMjktOTlkNzI2MGRiYmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRpk2WaUSpqbF9jEDrFW8qlSpPZEXgusz8UG
qHPJHzzvp2qdHvA0leuf8jsQIY1VWpzVzthW+FydMLBMyU0cfzUakDaP+wCmvm3T
GBt8uQXsZaL2MF+oyMa8lwrsvvjZZ8bKucSknfPrpMv6EAcAwP42DDW1NzKHUEf4
ldkqoVR+c1XNKdTTFJbdFZVW3n8wDXp0WYYKYrwqDz1BC2amYpzoLHLA3iYgjp8d
NONuMUp14kosmCtY/R2056I6u7Alv2824DPRzSDDv3DTlyym1nJTFFyhfDpornLg
pfBOJEVMsDRdu39eQG9TIWsarTaiyhPOiG0aRVRoIyW+qCJvrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKMwQN9OUS32VlWTGTInZQBZu3LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5
NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvMWMyMWE0NzctZjQ5MC0z
NGNlLTgwMTktMGU1YTE1OTQ0ZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5
OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw
YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5
ODY3MGJmMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAo0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIrHV0vMBANuWZ89qrufWagXqq22m+d3kNKwKadt7PDq9GhX/TrXU2/K
ZgHGdZ1eKgEIqPRc2j29aZRGFqOLW5SI7fgEZiSrtJQYIooNFKy/HwNcfKH4SE1r
xxOgsZDtGuGDO5A2tDcH83lsDZMTmdzAQP6eFaed7QfYvHmq2k+SxDVXLzpCCJhU
T0R7vEfa6gzm0ihqKok5sVOtDMJKhFbLdne3ddaU9m89r8TACYNOfq4XRMbE1C9p
odHiGTFV+tk0TbbJpwxxyYSXyog39yfhEdxZQ0HinZqGfqjU6/XCJRIQjzUYtYgE
fwpIiVwdUwTuBPouwg5FYFULErORhNg=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:38:47 2025 by rpki-client