Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa
File:                     0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa (raw, json)
Hash identifier:          4XhOkmAphQJ1RvZumYUFY7eHt9K5cd3aN8ebxk2HuBQ=
Subject key identifier:   94:15:BE:B4:2A:76:FF:AE:D5:61:E4:14:16:82:6C:D9:E8:91:6F:33
Certificate issuer:       /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial:       010D0C9F4328584B64CCBF0F6B4B7A1A9D5EF900
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     33322
IP address blocks:        72.1.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:bf:0f:6b:4b:7a:1a:9d:5e:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c69f4c21-9dff-4d95-afec-12020ae4aa81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:39:8c:7e:c2:2e:fa:10:4b:37:77:4a:1d:
                    e0:19:90:4c:6b:6e:32:fa:1c:20:c6:4c:2f:c9:f1:
                    ba:ca:83:e5:e1:4d:65:6c:7e:e0:0c:7e:82:e8:fa:
                    91:4a:5a:d2:a7:5a:96:37:5a:9c:53:7d:29:2f:b0:
                    3c:b5:b7:82:0a:10:3f:b5:37:e8:df:45:b9:e3:25:
                    f1:e8:35:10:9e:10:24:70:e2:98:5f:49:ce:96:95:
                    74:12:8e:d0:56:58:01:a8:f6:59:ab:52:b9:fd:f8:
                    e4:62:bc:45:41:b2:05:1d:a3:1b:43:c4:d6:82:79:
                    a0:3b:2a:b6:66:32:a8:26:7d:e8:0e:f7:51:d4:c9:
                    17:fc:c2:2f:b8:61:f6:b5:c0:f7:b4:4e:80:5a:7f:
                    a5:9d:a8:8d:d1:52:c4:cf:4e:42:b8:24:4c:fd:42:
                    66:c6:cb:07:e4:52:61:ec:2c:e2:3b:fc:12:35:31:
                    b6:a1:55:d6:32:21:db:b1:44:27:1e:fe:98:97:03:
                    f1:d9:34:d2:50:70:9f:0a:c6:20:73:ad:03:fd:45:
                    47:2c:bb:6f:8f:26:43:81:bd:f0:d8:42:1d:53:86:
                    96:9d:b5:ef:a6:fa:ef:a1:3d:dd:f9:15:cd:9d:5b:
                    df:0a:01:88:41:50:a2:a1:65:be:4c:84:eb:90:b0:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:15:BE:B4:2A:76:FF:AE:D5:61:E4:14:16:82:6C:D9:E8:91:6F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.1.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:00:2f:af:c7:ed:fc:35:c1:f0:72:8c:e7:a9:a1:5d:90:
         13:b2:69:d3:07:2c:49:76:97:51:62:42:a4:4a:d1:b6:b9:09:
         bf:28:fa:18:eb:41:7b:7c:4b:03:77:41:54:83:c2:ba:e2:7c:
         f4:41:f2:7b:17:99:ee:9e:54:30:15:2a:4c:8c:a7:c7:e9:04:
         4d:e1:90:64:18:90:6f:6f:fb:1e:a6:c7:d2:5b:76:12:be:7c:
         02:0e:e3:ac:e0:22:67:7e:47:05:4a:29:ee:50:53:2e:48:73:
         21:fe:e5:99:af:87:71:1c:33:3c:e2:1a:8f:d9:4e:90:95:00:
         d0:84:40:46:22:76:7c:13:3d:ac:f0:49:4b:54:1e:29:dd:4e:
         c5:46:a3:9e:8d:56:e9:b1:44:b0:70:47:6a:af:cb:e3:db:40:
         34:2b:e7:89:f2:5d:1c:9f:4f:f6:b1:8d:f9:8f:cc:c5:e9:ee:
         c3:5d:95:e2:61:4c:4e:f6:2a:86:8e:2e:0a:9e:d2:da:a0:58:
         b6:ce:1e:43:1a:cc:ad:94:27:b6:00:98:02:c9:9e:0d:8c:56:
         aa:95:8c:af:f9:29:a4:be:b2:bc:21:08:68:86:16:63:ae:bc:
         a0:2e:4a:76:73:a7:cf:db:65:dd:13:f4:30:b4:40:0a:ad:9c:
         06:a2:80:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzL8Pa0t6Gp1e+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx
OGJiMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
YzY5ZjRjMjEtOWRmZi00ZDk1LWFmZWMtMTIwMjBhZTRhYTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjg5jH7CLvoQSzd3Sh3gGZBMa24y+hwgxkwv
yfG6yoPl4U1lbH7gDH6C6PqRSlrSp1qWN1qcU30pL7A8tbeCChA/tTfo30W54yXx
6DUQnhAkcOKYX0nOlpV0Eo7QVlgBqPZZq1K5/fjkYrxFQbIFHaMbQ8TWgnmgOyq2
ZjKoJn3oDvdR1MkX/MIvuGH2tcD3tE6AWn+lnaiN0VLEz05CuCRM/UJmxssH5FJh
7CziO/wSNTG2oVXWMiHbsUQnHv6YlwPx2TTSUHCfCsYgc60D/UVHLLtvjyZDgb3w
2EIdU4aWnbXvpvrvoT3d+RXNnVvfCgGIQVCioWW+TITrkLDLGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJQVvrQqdv+u1WHkFBaCbNnokW8zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj
Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMGRlOGE5ZWMtYmZjNC0z
ZTgwLWI4ZmEtNjdkNzhiNWIxODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm
MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5
MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0
OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAHwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdaAC+vx+38NcHwcoznqaFdkBOyadMHLEl2l1FiQqRK0ba5Cb8o+hjr
QXt8SwN3QVSDwrrifPRB8nsXme6eVDAVKkyMp8fpBE3hkGQYkG9v+x6mx9JbdhK+
fAIO46zgImd+RwVKKe5QUy5IcyH+5Zmvh3EcMzziGo/ZTpCVANCEQEYidnwTPazw
SUtUHindTsVGo56NVumxRLBwR2qvy+PbQDQr54nyXRyfT/axjfmPzMXp7sNdleJh
TE72KoaOLgqe0tqgWLbOHkMazK2UJ7YAmALJng2MVqqVjK/5KaS+srwhCGiGFmOu
vKAuSnZzp8/bZd0T9DC0QAqtnAaigPA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:32 2025 by rpki-client