Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa
File:                     4f57b72f-fafb-32a5-8dd0-753f1f879774.roa (raw, json)
Hash identifier:          /wwa3tffJw1hBQF22N8mJ9zfAvPe8hJQaM0zd6Pd0zI=
Subject key identifier:   62:53:86:01:B3:BE:3C:C5:29:2A:70:9E:30:D2:0F:08:22:32:34:6F
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F4328584AC2E106338D21756A30984000
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     395425
IP address blocks:        72.42.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:06:33:8d:21:75:6a:30:98:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=788a7921-43b4-4d66-8455-ed0e8264399b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bf:09:47:5b:c2:6c:0e:d0:f7:45:ca:1a:c7:
                    40:1b:f0:4d:be:c2:05:d3:83:6f:81:aa:31:b1:66:
                    05:3f:c6:a2:53:76:55:4a:dd:79:63:bd:c4:64:9d:
                    83:46:85:d3:10:8f:8c:65:11:b5:56:cd:a1:6a:f1:
                    eb:89:9b:73:08:29:1e:51:04:19:39:64:a7:68:e5:
                    7c:dd:cf:54:0b:28:8c:16:ff:ce:d8:8e:0b:e4:7a:
                    ab:b9:cf:78:ac:45:d4:77:06:97:cf:c3:81:09:67:
                    37:82:f2:c3:d8:2d:84:77:b4:ba:b2:bf:b6:c5:b2:
                    76:2a:38:05:29:62:eb:6e:f2:bf:b0:4b:6a:65:f5:
                    62:36:08:93:39:6f:5c:46:4d:17:af:75:42:d6:ba:
                    9e:a3:19:14:83:71:02:2a:58:1e:9f:9a:bd:f2:12:
                    bc:07:62:b5:cb:36:55:f4:71:7e:2d:c6:93:b4:5a:
                    2d:6d:ce:b1:71:ef:44:ff:0f:26:70:74:1e:89:f5:
                    75:ec:55:1d:a3:b6:3e:fe:2b:bd:01:5c:5d:92:5b:
                    3e:99:d0:1c:e6:36:a9:05:55:e6:5f:31:25:0a:17:
                    9e:84:9c:97:19:0e:32:82:85:fb:db:ba:90:51:1b:
                    22:0c:71:1c:5c:61:23:fa:ee:a3:ff:ed:13:72:84:
                    5a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:53:86:01:B3:BE:3C:C5:29:2A:70:9E:30:D2:0F:08:22:32:34:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:cf:b4:2b:14:da:6c:00:df:09:a4:de:f7:22:ce:88:3f:91:
         5e:a2:b1:e5:ff:3e:ed:4c:ef:ed:78:10:7d:92:38:b4:5b:75:
         a6:7f:7b:48:b8:6b:a8:43:b2:31:ca:a3:c9:85:fd:4d:d8:2e:
         82:9d:06:2b:40:6e:77:65:cf:fc:ad:7f:5b:ec:13:cf:c3:94:
         66:0b:53:a8:b1:18:ee:97:ae:10:a9:a9:29:ed:54:f4:3f:fe:
         c4:41:86:9d:57:06:8a:d9:c2:a1:7d:88:9e:fb:fc:19:cb:88:
         9b:0d:56:10:38:04:46:32:59:6c:e5:a7:c2:55:ee:c8:61:ae:
         9c:da:2d:ce:0f:eb:7e:65:4a:b0:c1:34:9a:37:f2:57:ad:a9:
         aa:0a:a5:ee:68:e8:36:20:e1:01:fa:ab:31:b0:b9:02:6c:5b:
         2b:30:a9:88:38:1a:32:29:14:7f:97:4f:1d:1e:9c:46:66:6f:
         00:ef:f4:0a:6e:b2:a2:69:3a:81:f0:dd:e5:2c:f0:fd:07:d9:
         6c:17:db:11:41:c7:17:e1:ec:d3:04:eb:76:1a:2b:72:bd:7a:
         c8:1a:71:42:8c:60:90:2d:a0:00:e4:54:c0:27:b3:3a:0d:b2:
         8c:a1:bf:21:50:b0:8e:9c:c0:c6:83:05:c7:8e:31:51:00:a5:
         e4:42:87:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4QYzjSF1ajCYQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJl
OTg0MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
Nzg4YTc5MjEtNDNiNC00ZDY2LTg0NTUtZWQwZTgyNjQzOTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh78JR1vCbA7Q90XKGsdAG/BNvsIF04Nvgaox
sWYFP8aiU3ZVSt15Y73EZJ2DRoXTEI+MZRG1Vs2havHriZtzCCkeUQQZOWSnaOV8
3c9UCyiMFv/O2I4L5Hqruc94rEXUdwaXz8OBCWc3gvLD2C2Ed7S6sr+2xbJ2KjgF
KWLrbvK/sEtqZfViNgiTOW9cRk0Xr3VC1rqeoxkUg3ECKlgen5q98hK8B2K1yzZV
9HF+LcaTtFotbc6xce9E/w8mcHQeifV17FUdo7Y+/iu9AVxdkls+mdAc5japBVXm
XzElCheehJyXGQ4ygoX727qQURsiDHEcXGEj+u6j/+0TcoRacwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGJThgGzvjzFKSpwnjDSDwgiMjRvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5
N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvNGY1N2I3MmYtZmFmYi0z
MmE1LThkZDAtNzUzZjFmODc5Nzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWM2OTdjOWQtMzI1YS00NjBmLWFi
MmYtOGNmNzFiMWJlOTg0L2VjNjk3YzlkLTMyNWEtNDYwZi1hYjJmLThjZjcxYjFi
ZTk4NC5jcmwwHwYDVR0jBBgwFoAUEjvZdTKrj92cHFYpzjLx33slhhkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3
MWIxYmU5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCriMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3PtCsU2mwA3wmk3vcizog/kV6iseX/Pu1M7+14EH2SOLRbdaZ/e0i4
a6hDsjHKo8mF/U3YLoKdBitAbndlz/ytf1vsE8/DlGYLU6ixGO6XrhCpqSntVPQ/
/sRBhp1XBorZwqF9iJ77/BnLiJsNVhA4BEYyWWzlp8JV7shhrpzaLc4P635lSrDB
NJo38letqaoKpe5o6DYg4QH6qzGwuQJsWyswqYg4GjIpFH+XTx0enEZmbwDv9Apu
sqJpOoHw3eUs8P0H2WwX2xFBxxfh7NME63YaK3K9esgacUKMYJAtoADkVMAnszoN
soyhvyFQsI6cwMaDBceOMVEApeRCh18=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:27 2025 by rpki-client