Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/22035321-9f59-3f81-a882-1edbe11b04c7.roa
File:                     22035321-9f59-3f81-a882-1edbe11b04c7.roa (raw, json)
Hash identifier:          aqALeUwifeZGpBXAYVPfsibHw84kcTz9cxUWsdy+r8U=
Subject key identifier:   95:46:86:46:E9:79:93:8E:28:28:CC:6B:B4:0B:57:AD:2B:C0:02:30
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584B64CC87E8E6F6B6F1AC9A2880
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/22035321-9f59-3f81-a882-1edbe11b04c7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14813
IP address blocks:        72.51.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:87:e8:e6:f6:b6:f1:ac:9a:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e4927060-bb4d-4308-b708-b7cb61bb61ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:6a:96:7e:af:10:26:b9:47:4a:a0:4d:5f:
                    6b:2a:8d:bb:3c:a1:92:45:ea:c5:7f:00:c6:71:db:
                    6b:4c:a9:4d:59:69:96:45:eb:77:61:8c:e0:62:d1:
                    6c:b4:49:58:af:44:e4:af:d2:21:cb:bd:c1:48:68:
                    8c:9d:91:f6:6f:43:c4:56:7b:58:99:d4:37:24:53:
                    91:f8:8a:66:2a:54:9f:d7:a8:0c:3f:50:0b:41:9e:
                    ca:6c:d7:c7:4f:19:0d:23:7a:ac:82:ab:17:48:57:
                    bd:af:86:9f:44:89:e8:91:e5:fa:71:14:3d:45:4c:
                    b2:f5:05:60:0c:ec:70:63:de:d5:f8:f1:00:0d:ba:
                    95:6e:29:73:00:8a:5e:e7:87:76:d7:60:69:16:e1:
                    d4:e8:93:cd:bd:51:88:fb:b5:5b:c6:2f:2f:60:97:
                    79:92:fd:10:ec:74:e9:d8:f4:41:09:e4:ad:eb:44:
                    d2:59:2c:ed:bc:8e:87:0a:57:26:3f:be:43:07:f2:
                    0b:5d:65:f7:c3:b6:ab:75:43:1c:16:c6:46:bb:02:
                    68:bb:4e:aa:99:39:a8:b1:14:d0:78:5a:68:77:86:
                    9a:fd:73:57:bd:0e:34:4d:52:e4:a4:33:c1:10:c8:
                    60:93:57:81:85:32:4e:c3:43:65:dc:f9:01:35:b4:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:46:86:46:E9:79:93:8E:28:28:CC:6B:B4:0B:57:AD:2B:C0:02:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/22035321-9f59-3f81-a882-1edbe11b04c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.51.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c0:63:fd:4d:02:7b:3c:cc:80:85:4f:45:a6:52:be:87:6d:
         e6:51:2b:31:ec:b3:55:9b:11:6b:2b:48:10:01:30:6c:3c:b1:
         28:27:71:b2:21:90:4d:bb:88:67:37:f6:17:d6:45:5f:1b:5a:
         d5:20:cc:0f:e3:2c:aa:02:d8:5d:97:81:87:29:66:cf:83:3d:
         30:db:78:46:1b:64:3c:6e:60:02:1b:28:61:ca:47:03:be:54:
         fd:93:ff:33:e9:64:63:db:73:9f:0d:d1:60:81:c4:ef:92:33:
         32:1b:96:02:ac:09:2a:39:f3:ea:4e:71:aa:75:5f:49:ee:96:
         c5:88:e1:74:df:5a:bc:bc:4d:b6:1a:f4:2a:11:75:2d:6a:46:
         9c:2d:35:c8:bd:59:9f:fb:90:35:78:16:53:73:e8:71:a1:35:
         b5:d8:bc:2c:a5:ba:42:fc:88:f4:6f:89:47:41:8e:0a:f7:64:
         04:5c:16:5a:04:9d:bc:c3:43:69:68:d1:50:b0:30:f9:2d:ab:
         31:05:b0:60:47:79:b6:a1:bf:07:28:7c:fb:ee:57:8b:9d:b2:
         8e:46:66:d1:8a:78:3d:e2:e4:64:c1:dc:1d:52:69:bd:6f:db:
         26:ef:80:35:0e:78:07:c2:22:8b:17:db:46:37:c7:9c:2d:67:
         f2:87:31:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzIfo5va28ayaKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZTQ5MjcwNjAtYmI0ZC00MzA4LWI3MDgtYjdjYjYxYmI2MWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2tqln6vECa5R0qgTV9rKo27PKGSRerFfwDG
cdtrTKlNWWmWRet3YYzgYtFstElYr0Tkr9Ihy73BSGiMnZH2b0PEVntYmdQ3JFOR
+IpmKlSf16gMP1ALQZ7KbNfHTxkNI3qsgqsXSFe9r4afRInokeX6cRQ9RUyy9QVg
DOxwY97V+PEADbqVbilzAIpe54d212BpFuHU6JPNvVGI+7Vbxi8vYJd5kv0Q7HTp
2PRBCeSt60TSWSztvI6HClcmP75DB/ILXWX3w7ardUMcFsZGuwJou06qmTmosRTQ
eFpod4aa/XNXvQ40TVLkpDPBEMhgk1eBhTJOw0Nl3PkBNbS4IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVGhkbpeZOOKCjMa7QLV60rwAIwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMjIwMzUzMjEtOWY1OS0z
ZjgxLWE4ODItMWVkYmUxMWIwNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDNlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTAY/1NAns8zICFT0WmUr6HbeZRKzHss1WbEWsrSBABMGw8sSgncbIh
kE27iGc39hfWRV8bWtUgzA/jLKoC2F2XgYcpZs+DPTDbeEYbZDxuYAIbKGHKRwO+
VP2T/zPpZGPbc58N0WCBxO+SMzIblgKsCSo58+pOcap1X0nulsWI4XTfWry8TbYa
9CoRdS1qRpwtNci9WZ/7kDV4FlNz6HGhNbXYvCylukL8iPRviUdBjgr3ZARcFloE
nbzDQ2lo0VCwMPktqzEFsGBHebahvwcofPvuV4udso5GZtGKeD3i5GTB3B1Sab1v
2ybvgDUOeAfCIosX20Y3x5wtZ/KHMRA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:07:51 2025 by rpki-client