Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/35835af9-a2f1-3c00-bf03-96aeacf25695.roa
File:                     35835af9-a2f1-3c00-bf03-96aeacf25695.roa (raw, json)
Hash identifier:          NFyJYkY4sB715LO0i3sxtdRljhHww1ZAj/wirvfBEcE=
Subject key identifier:   0B:35:00:C1:CD:30:63:EB:3C:93:78:9A:70:35:42:3A:D8:3F:88:37
Certificate issuer:       /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Certificate serial:       010D0C9F4328584B1C36D296A16BE9E97EA705A0
Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/35835af9-a2f1-3c00-bf03-96aeacf25695.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     46320
IP address blocks:        116.214.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d2:96:a1:6b:e9:e9:7e:a7:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=468c9c7f-a2e0-448f-a481-0bdbcf7d7423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:29:32:bb:dc:f2:2d:c0:a2:33:a1:90:09:
                    32:33:8e:50:7c:0f:ea:97:50:4b:f8:ef:56:99:92:
                    bc:43:7f:ae:1e:42:33:d3:df:69:32:ad:a5:cb:13:
                    23:ba:b0:08:e2:71:25:06:04:8a:3f:20:22:82:10:
                    42:ff:b4:f8:d9:40:a7:9d:1b:63:e6:bc:95:81:26:
                    5b:45:6f:b0:6b:68:fa:7c:b9:d6:5f:35:73:50:47:
                    74:7b:26:f7:90:ce:96:48:d1:2b:ae:ba:07:4b:10:
                    8b:ab:06:25:1d:f3:6e:9b:64:a3:7d:91:91:78:32:
                    c9:86:e9:cc:b3:cd:73:c0:9e:81:b3:0c:8c:59:9e:
                    1e:a1:80:17:b6:04:5f:d8:d3:79:26:8a:81:b3:86:
                    51:59:da:55:b3:95:4d:78:12:b7:c2:41:af:85:c7:
                    02:9b:e9:ae:e2:f4:06:da:59:49:6b:c4:7d:a0:49:
                    a7:64:11:2d:3f:e3:c1:45:31:76:c0:18:9e:30:9e:
                    5b:f4:54:d3:ce:c0:f1:05:f5:4d:10:bc:7a:d2:02:
                    bd:61:34:d0:80:a7:b9:93:29:f1:99:74:cf:60:22:
                    de:5a:86:62:38:ec:71:66:9e:3e:cf:f3:b6:e9:6e:
                    75:3a:1c:62:f0:94:9f:d9:49:72:80:56:04:c5:83:
                    34:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:35:00:C1:CD:30:63:EB:3C:93:78:9A:70:35:42:3A:D8:3F:88:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/35835af9-a2f1-3c00-bf03-96aeacf25695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.214.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:4d:91:f2:7d:24:eb:e7:ce:6d:71:9a:1b:26:9f:a4:27:06:
         54:2a:f2:68:c3:56:42:23:fd:e8:e2:c8:b5:40:17:32:e2:74:
         14:42:da:d6:fc:7a:ed:c1:50:bf:2b:6c:a4:dd:11:fa:df:51:
         6f:b9:17:3f:07:ec:6e:d7:d8:a9:3e:5e:34:3e:43:69:3f:21:
         ad:49:81:30:9d:8b:52:12:52:e5:07:6e:4c:ac:e7:10:73:7d:
         52:56:69:55:f8:6b:e9:aa:20:81:ea:33:03:17:a3:37:af:65:
         84:01:1e:28:ad:16:59:5c:e6:b2:fa:f4:3e:74:7e:c0:87:41:
         59:90:b3:e2:84:8c:d9:4c:7f:d1:0e:cc:40:30:24:63:e6:71:
         eb:d4:da:32:dc:74:b7:7f:44:6b:64:da:08:3a:7d:5c:19:6c:
         1e:31:82:fc:9d:12:ab:60:d8:86:54:39:1e:e1:60:74:69:4f:
         a6:85:d2:3e:97:a4:a6:b7:c9:c4:9d:1f:f1:58:29:95:cb:24:
         0c:0a:f1:08:04:a3:f2:97:3b:d4:fe:23:41:a3:35:a7:b7:87:
         7b:7c:28:70:72:0a:ff:03:ca:4c:4f:c7:16:3a:8e:60:0b:cc:
         0e:f8:59:60:01:81:87:3a:12:0e:31:90:82:a1:07:b8:ff:ba:
         f4:cb:50:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtKWoWvp6X6nBaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJiMTczNDMtZDJmMS00OWNlLWJhOTItMjJmMTNjZmJj
MGQwMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NDY4YzljN2YtYTJlMC00NDhmLWE0ODEtMGJkYmNmN2Q3NDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VMpMrvc8i3AojOhkAkyM45QfA/ql1BL+O9W
mZK8Q3+uHkIz099pMq2lyxMjurAI4nElBgSKPyAighBC/7T42UCnnRtj5ryVgSZb
RW+wa2j6fLnWXzVzUEd0eyb3kM6WSNErrroHSxCLqwYlHfNum2SjfZGReDLJhunM
s81zwJ6BswyMWZ4eoYAXtgRf2NN5JoqBs4ZRWdpVs5VNeBK3wkGvhccCm+mu4vQG
2llJa8R9oEmnZBEtP+PBRTF2wBieMJ5b9FTTzsDxBfVNELx60gK9YTTQgKe5kynx
mXTPYCLeWoZiOOxxZp4+z/O26W51Ohxi8JSf2UlygFYExYM0ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAs1AMHNMGPrPJN4mnA1QjrYP4g3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIx
NzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYxM2NmYmMwZDAvMzU4MzVhZjktYTJmMS0z
YzAwLWJmMDMtOTZhZWFjZjI1Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzJiMTczNDMtZDJmMS00OWNlLWJh
OTItMjJmMTNjZmJjMGQwLzcyYjE3MzQzLWQyZjEtNDljZS1iYTkyLTIyZjEzY2Zi
YzBkMC5jcmwwHwYDVR0jBBgwFoAUoybRn8spmYSXTnzi26U8HqczzBswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIxNzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYx
M2NmYmMwZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDdNZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9NkfJ9JOvnzm1xmhsmn6QnBlQq8mjDVkIj/ejiyLVAFzLidBRC2tb8
eu3BUL8rbKTdEfrfUW+5Fz8H7G7X2Kk+XjQ+Q2k/Ia1JgTCdi1ISUuUHbkys5xBz
fVJWaVX4a+mqIIHqMwMXozevZYQBHiitFllc5rL69D50fsCHQVmQs+KEjNlMf9EO
zEAwJGPmcevU2jLcdLd/RGtk2gg6fVwZbB4xgvydEqtg2IZUOR7hYHRpT6aF0j6X
pKa3ycSdH/FYKZXLJAwK8QgEo/KXO9T+I0GjNae3h3t8KHByCv8DykxPxxY6jmAL
zA74WWABgYc6Eg4xkIKhB7j/uvTLUGo=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:43:54 2025 by rpki-client