Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7cfc0d9d-fc36-3797-b6d9-957f69acc6eb.roa
File:                     7cfc0d9d-fc36-3797-b6d9-957f69acc6eb.roa (raw, json)
Hash identifier:          lX5/PJtKAGJWjwOuRZLNjOmf4fYDz3z3pFg09W/olgQ=
Subject key identifier:   53:CA:C8:40:C9:BC:D4:BF:5C:F8:A8:E2:57:18:99:4D:C4:53:E7:10
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B80B777D51B788DB246FD4010
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7cfc0d9d-fc36-3797-b6d9-957f69acc6eb.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     397201
IP address blocks:        216.87.145.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:77:d5:1b:78:8d:b2:46:fd:40:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=93c2e531-d89e-45bc-8488-b633202dd373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:de:ea:83:1d:f4:27:7e:e7:94:7b:2d:ed:d4:
                    9a:2d:6a:b2:ff:7e:65:9e:09:53:d1:b4:05:4f:ad:
                    f6:31:60:cc:80:29:59:82:e6:b1:2f:2f:a9:a9:22:
                    e2:6d:fb:55:8b:3d:08:78:f3:d2:7d:ed:9d:72:9e:
                    55:39:05:51:82:1e:28:5d:95:8e:b0:b8:3f:96:e1:
                    95:b3:4a:db:37:60:0b:4a:6c:69:67:39:8e:7a:30:
                    69:d6:03:00:d3:8a:02:39:da:7c:c3:bb:74:0a:cb:
                    c4:48:9f:46:7f:68:44:53:da:5a:a2:37:56:dc:4c:
                    a1:f7:fb:1e:50:e2:d2:3c:88:aa:3d:a6:9f:3f:ac:
                    01:9f:69:8c:a3:a7:32:4c:6e:0a:44:c0:e4:e4:1e:
                    60:00:a0:6d:ae:12:65:b4:da:5c:ea:f4:07:63:a0:
                    6c:45:62:2f:06:97:c6:a6:f1:53:d4:24:3b:f4:94:
                    67:61:a5:56:3a:ad:13:2c:af:7b:7d:f6:83:c1:cd:
                    fc:4c:30:1e:f1:a7:f7:b0:93:a2:cf:0d:b1:cd:dd:
                    d4:a4:27:01:cc:89:1e:78:cd:98:e4:42:01:33:4c:
                    e1:71:3d:91:20:54:54:c2:2a:08:36:90:63:7f:05:
                    48:7f:22:71:f1:99:79:a6:88:80:1f:11:f2:d1:ee:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CA:C8:40:C9:BC:D4:BF:5C:F8:A8:E2:57:18:99:4D:C4:53:E7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7cfc0d9d-fc36-3797-b6d9-957f69acc6eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ae:db:17:c0:b0:8d:85:d5:23:2d:79:f2:e4:cf:ea:ac:b6:
         8d:37:57:06:1f:fa:5c:45:62:33:77:fe:15:fd:09:60:41:ac:
         a6:f1:31:2e:78:22:44:37:4e:4f:dc:fd:fb:44:0d:bf:4c:71:
         d6:fa:2e:65:29:44:7d:cf:4e:2b:d7:96:f7:96:23:1d:62:c5:
         3d:1a:83:52:97:bf:a7:43:fc:08:bd:5f:3d:0a:24:7f:dd:0f:
         3d:54:f5:7e:a9:8f:8d:df:3d:81:10:b9:d5:f1:1c:7f:aa:ea:
         40:7e:43:d7:da:d5:5d:b3:40:3e:97:cf:b6:36:25:d7:f5:65:
         82:44:8d:18:fd:f8:07:bb:00:76:2c:7a:90:9e:e3:dc:9c:93:
         43:96:88:68:76:74:64:63:56:30:f0:ce:13:b6:86:39:c8:86:
         9c:fb:6c:81:5c:58:ad:ac:9b:bb:25:e6:f3:93:6b:58:86:7b:
         af:44:3b:ac:e1:91:15:d7:f8:33:0e:a7:78:cc:05:df:57:fe:
         1a:d4:f6:f5:7e:46:17:bc:9f:bd:93:d5:ea:41:16:5e:ff:70:
         ea:9a:8e:22:43:30:42:02:08:45:b7:51:bd:1e:e8:7e:90:ee:
         36:f2:32:5b:e4:9f:e1:3e:61:d9:e5:17:2a:74:85:01:0b:cf:
         8d:33:07:35
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt3fVG3iNskb9QBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
OTNjMmU1MzEtZDg5ZS00NWJjLTg0ODgtYjYzMzIwMmRkMzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd7qgx30J37nlHst7dSaLWqy/35lnglT0bQF
T632MWDMgClZguaxLy+pqSLibftViz0IePPSfe2dcp5VOQVRgh4oXZWOsLg/luGV
s0rbN2ALSmxpZzmOejBp1gMA04oCOdp8w7t0CsvESJ9Gf2hEU9paojdW3Eyh9/se
UOLSPIiqPaafP6wBn2mMo6cyTG4KRMDk5B5gAKBtrhJltNpc6vQHY6BsRWIvBpfG
pvFT1CQ79JRnYaVWOq0TLK97ffaDwc38TDAe8af3sJOizw2xzd3UpCcBzIkeeM2Y
5EIBM0zhcT2RIFRUwioINpBjfwVIfyJx8Zl5poiAHxHy0e53YQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFPKyEDJvNS/XPio4lcYmU3EU+cQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2NmYzBkOWQtZmMzNi0z
Nzk3LWI2ZDktOTU3ZjY5YWNjNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBlrtsXwLCNhdUjLXny5M/qrLaNN1cGH/pcRWIzd/4V/QlgQaym8TEu
eCJEN05P3P37RA2/THHW+i5lKUR9z04r15b3liMdYsU9GoNSl7+nQ/wIvV89CiR/
3Q89VPV+qY+N3z2BELnV8Rx/qupAfkPX2tVds0A+l8+2NiXX9WWCRI0Y/fgHuwB2
LHqQnuPcnJNDlohodnRkY1Yw8M4TtoY5yIac+2yBXFitrJu7Jebzk2tYhnuvRDus
4ZEV1/gzDqd4zAXfV/4a1Pb1fkYXvJ+9k9XqQRZe/3Dqmo4iQzBCAghFt1G9Huh+
kO428jJb5J/hPmHZ5RcqdIUBC8+NMwc1
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:05 2025 by rpki-client