Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc7ac620-0bc6-311a-a988-6df1c3bc3ed4.roa
File:                     cc7ac620-0bc6-311a-a988-6df1c3bc3ed4.roa (raw, json)
Hash identifier:          tDGuNHydfbMyptaL0PBufPITVfdj318NugdVu2xvYLo=
Subject key identifier:   D9:9D:94:6B:FB:B2:4D:51:A4:7A:4A:FB:57:74:68:9E:B7:56:89:90
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA932551DFE056C80C1A1F540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc7ac620-0bc6-311a-a988-6df1c3bc3ed4.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     24319
IP address blocks:        72.246.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:55:1d:fe:05:6c:80:c1:a1:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=caba5e2e-5bfc-4bb3-a83e-b5d5249b8851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:94:a0:9a:ae:19:96:ac:e3:a3:3e:d1:e5:
                    ca:db:dd:8f:87:25:cf:fd:e7:ea:aa:fa:03:10:d5:
                    2a:b4:e8:dc:c5:54:3d:43:be:1f:92:09:9f:51:76:
                    d8:38:63:24:5c:f6:77:d6:4b:35:25:0a:6c:82:f5:
                    da:1e:4d:7a:18:1f:c0:95:20:88:a3:13:3f:5c:3c:
                    5c:47:d8:f6:64:b4:74:e7:57:4c:74:f2:85:3f:4a:
                    35:1d:e4:87:4d:9d:02:66:62:7d:47:8e:0e:3e:66:
                    9c:7f:37:85:88:c7:65:b6:c5:9d:22:b8:5c:ac:c1:
                    1a:65:6a:4b:6c:31:11:c1:b0:65:08:ed:4a:c8:8c:
                    8c:e1:c3:55:2a:d9:9b:b8:dc:4a:7f:92:b7:50:a5:
                    25:f1:1f:8a:02:7c:cd:f3:b4:79:cd:76:e4:57:3e:
                    56:45:f8:a4:84:62:6e:ef:7b:89:ed:d6:8f:5e:d9:
                    84:87:d4:ad:eb:80:21:33:ed:f1:e9:4c:26:ad:c9:
                    5a:94:8e:f0:75:19:e2:b9:db:43:ac:ca:c5:b9:bf:
                    be:24:b8:b1:35:1a:cc:41:0e:8a:bd:90:7f:32:e3:
                    31:3a:34:06:78:84:89:ab:e5:64:34:3b:72:ae:57:
                    f4:b3:2b:88:07:37:b2:e0:e7:7c:f1:cb:3b:77:ba:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9D:94:6B:FB:B2:4D:51:A4:7A:4A:FB:57:74:68:9E:B7:56:89:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc7ac620-0bc6-311a-a988-6df1c3bc3ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ca:37:13:bd:36:b8:76:fe:b4:17:23:fe:56:c4:7c:63:77:
         5d:88:3e:19:5c:e7:a1:9c:58:46:db:73:ec:87:b7:6f:16:f8:
         59:2f:cd:f1:2e:3a:65:f2:9c:7a:ae:18:23:57:4d:4d:3e:9f:
         de:6b:de:50:dd:11:6d:ec:54:05:20:e8:57:bd:16:c4:1c:b7:
         60:79:6a:f2:33:8b:e9:90:a9:f4:07:42:49:9b:a9:14:dc:78:
         45:90:89:ae:27:df:24:6f:77:15:01:b2:dc:5c:3d:f2:b9:45:
         57:6d:16:8d:e3:35:8b:9d:76:c0:0a:fe:b6:54:2b:da:00:fe:
         46:b0:d3:9f:0b:58:7d:3d:27:7d:dd:85:2e:21:15:dc:89:fb:
         50:c2:1b:d3:3a:92:cc:32:1f:a7:f9:22:70:02:8e:44:35:d1:
         e2:a7:4b:95:44:db:c0:ad:c9:29:e6:0a:05:27:9c:9c:a1:74:
         66:49:26:29:08:b8:42:ec:80:c5:b2:93:95:c2:16:c5:ac:4b:
         f3:25:76:4c:3e:d4:f8:19:7e:45:a9:bf:4e:f5:a3:6e:55:70:
         b8:e3:6b:ac:9e:3e:51:c8:12:7b:bf:17:55:83:7b:94:16:cc:
         2d:79:a3:5c:ec:e9:4e:50:b7:b3:36:9b:bd:ec:8c:2f:d6:ef:
         8e:6e:ac:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlUd/gVsgMGh9UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
Y2FiYTVlMmUtNWJmYy00YmIzLWE4M2UtYjVkNTI0OWI4ODUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgWUoJquGZas46M+0eXK292PhyXP/efqqvoD
ENUqtOjcxVQ9Q74fkgmfUXbYOGMkXPZ31ks1JQpsgvXaHk16GB/AlSCIoxM/XDxc
R9j2ZLR051dMdPKFP0o1HeSHTZ0CZmJ9R44OPmacfzeFiMdltsWdIrhcrMEaZWpL
bDERwbBlCO1KyIyM4cNVKtmbuNxKf5K3UKUl8R+KAnzN87R5zXbkVz5WRfikhGJu
73uJ7daPXtmEh9St64AhM+3x6UwmrclalI7wdRniudtDrMrFub++JLixNRrMQQ6K
vZB/MuMxOjQGeISJq+VkNDtyrlf0syuIBzey4Od88cs7d7om4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNmdlGv7sk1RpHpK+1d0aJ63VomQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2M3YWM2MjAtMGJjNi0z
MTFhLWE5ODgtNmRmMWMzYmMzZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPb1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATKNxO9Nrh2/rQXI/5WxHxjd12IPhlc56GcWEbbc+yHt28W+FkvzfEu
OmXynHquGCNXTU0+n95r3lDdEW3sVAUg6Fe9FsQct2B5avIzi+mQqfQHQkmbqRTc
eEWQia4n3yRvdxUBstxcPfK5RVdtFo3jNYuddsAK/rZUK9oA/kaw058LWH09J33d
hS4hFdyJ+1DCG9M6kswyH6f5InACjkQ10eKnS5VE28CtySnmCgUnnJyhdGZJJikI
uELsgMWyk5XCFsWsS/Mldkw+1PgZfkWpv071o25VcLjja6yePlHIEnu/F1WDe5QW
zC15o1zs6U5Qt7M2m73sjC/W745urMQ=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:18:36 2025 by rpki-client