Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e3e7572-8ecf-31a6-96d5-97a74059f252.roa
File:                     0e3e7572-8ecf-31a6-96d5-97a74059f252.roa (raw, json)
Hash identifier:          FTR7nCh63qQAxwGPHOxZRoMms+QF6RZtSbhGm1K429Y=
Subject key identifier:   48:2D:58:B8:E0:06:3D:B7:2F:41:08:A4:DF:EA:DC:5F:E5:55:8D:DD
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B8AA2DD19B05ABAC9AFB46B40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e3e7572-8ecf-31a6-96d5-97a74059f252.roa
Signing time:             Thu 16 Oct 2025 14:17:24 +0000
ROA not before:           Thu 16 Oct 2025 14:17:24 +0000
ROA not after:            Wed 14 Jan 2026 15:17:24 +0000
asID:                     55154
IP address blocks:        172.94.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:a2:dd:19:b0:5a:ba:c9:af:b4:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 16 14:17:24 2025 GMT
            Not After : Jan 14 15:17:24 2026 GMT
        Subject: CN=bdbc1fb5-5282-4223-894b-640f41d077db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:4b:76:98:dd:9c:ca:e2:4f:ed:77:ee:49:
                    d6:f4:60:73:96:a6:e2:1c:39:3e:a0:8e:dd:6f:b3:
                    33:20:9c:03:00:ce:2d:99:8e:9e:fb:55:2b:f9:87:
                    ef:43:c1:f5:b9:b8:c6:f0:38:1b:a3:52:67:35:c9:
                    9f:53:dc:eb:d9:26:c0:f5:83:6b:9e:84:a4:0e:ea:
                    75:34:a0:16:a5:e1:9c:fc:bb:89:f7:56:20:ce:54:
                    13:03:f8:55:6c:cd:79:8f:20:05:58:70:e4:f6:0f:
                    e4:6a:4b:43:48:e0:0d:1d:7c:cd:69:95:a0:dc:f7:
                    17:06:61:46:5a:26:9d:e3:fc:c3:b1:ee:f6:99:46:
                    4c:f1:fe:ce:80:32:26:31:b0:ae:8b:6b:e8:73:e4:
                    7f:b5:71:61:0b:27:85:0e:4f:a0:e4:59:11:a3:c9:
                    14:e2:16:ac:2e:d0:01:fd:89:72:02:08:0d:b3:31:
                    fb:1a:14:16:bc:dd:d2:7b:6e:e5:90:99:82:5a:63:
                    41:0d:6d:a7:e8:6f:b5:ad:11:bd:90:37:0e:4a:c5:
                    d9:c3:8e:0a:2e:46:f6:bd:81:a1:0e:01:b9:2c:a5:
                    94:72:1c:97:76:d8:fe:98:67:e5:ef:af:7a:be:e3:
                    a5:ff:1f:60:b7:3b:95:d0:f3:87:6c:6c:24:c2:7d:
                    65:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2D:58:B8:E0:06:3D:B7:2F:41:08:A4:DF:EA:DC:5F:E5:55:8D:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e3e7572-8ecf-31a6-96d5-97a74059f252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:84:5d:ed:89:4a:cb:32:53:78:33:20:d3:64:77:12:d8:07:
         99:fa:04:ea:ca:a9:25:fc:53:2f:a7:60:80:29:7a:4e:21:73:
         7d:56:ec:7d:a7:fb:84:01:3c:1f:4f:f1:97:20:35:8d:2a:ad:
         a7:2f:5c:4a:e7:b0:66:0b:2e:2b:3d:67:fd:56:cd:fd:b6:36:
         64:c0:20:6b:18:69:7c:54:c0:b8:77:b3:68:57:4b:89:09:e6:
         67:5a:21:1c:c5:b0:23:f7:60:cb:0f:e4:a3:6f:5c:2e:01:db:
         5f:37:98:bf:c9:26:8f:b8:4d:13:c5:b7:15:13:61:f6:a8:f1:
         cf:45:d8:35:f4:36:a3:ee:6b:2c:7c:cd:2f:95:ed:d2:55:1f:
         7c:d8:8c:82:b9:13:48:8e:94:e0:e8:f1:65:5e:4c:e7:7d:b8:
         ed:98:c8:be:df:2c:c4:82:03:75:90:b1:b4:2b:75:73:a6:7c:
         e4:e7:e3:b5:b1:e4:f4:c7:d6:ed:cf:14:23:31:40:44:5e:e4:
         d8:eb:36:c3:c6:86:d5:8a:1d:f5:d9:cf:06:2a:72:54:84:f9:
         8c:25:94:c2:38:8b:ee:cc:f5:5f:93:d1:64:18:35:82:26:5b:
         c7:ce:c6:d9:2e:1e:e6:bd:72:79:a0:e9:c2:9d:f0:87:ea:73:
         b7:79:19:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKot0ZsFq6ya+0a0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MTAxNjE0MTcyNFoXDTI2MDExNDE1MTcyNFowLzEtMCsGA1UEAxMk
YmRiYzFmYjUtNTI4Mi00MjIzLTg5NGItNjQwZjQxZDA3N2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSVLdpjdnMriT+137knW9GBzlqbiHDk+oI7d
b7MzIJwDAM4tmY6e+1Ur+YfvQ8H1ubjG8Dgbo1JnNcmfU9zr2SbA9YNrnoSkDup1
NKAWpeGc/LuJ91YgzlQTA/hVbM15jyAFWHDk9g/kaktDSOANHXzNaZWg3PcXBmFG
Wiad4/zDse72mUZM8f7OgDImMbCui2voc+R/tXFhCyeFDk+g5FkRo8kU4hasLtAB
/YlyAggNszH7GhQWvN3Se27lkJmCWmNBDW2n6G+1rRG9kDcOSsXZw44KLkb2vYGh
DgG5LKWUchyXdtj+mGfl7696vuOl/x9gtzuV0POHbGwkwn1lkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgtWLjgBj23L0EIpN/q3F/lVY3dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGUzZTc1NzItOGVjZi0z
MWE2LTk2ZDUtOTdhNzQwNTlmMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACmEXe2JSssyU3gzINNkdxLYB5n6BOrKqSX8Uy+nYIApek4hc31W7H2n
+4QBPB9P8ZcgNY0qracvXErnsGYLLis9Z/1Wzf22NmTAIGsYaXxUwLh3s2hXS4kJ
5mdaIRzFsCP3YMsP5KNvXC4B2183mL/JJo+4TRPFtxUTYfao8c9F2DX0NqPuayx8
zS+V7dJVH3zYjIK5E0iOlODo8WVeTOd9uO2YyL7fLMSCA3WQsbQrdXOmfOTn47Wx
5PTH1u3PFCMxQERe5NjrNsPGhtWKHfXZzwYqclSE+YwllMI4i+7M9V+T0WQYNYIm
W8fOxtkuHua9cnmg6cKd8Ifqc7d5GcQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:10:38 2025 by rpki-client