Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/580c72b9-b982-30b9-acd9-9ad498f39ab5.roa
File:                     580c72b9-b982-30b9-acd9-9ad498f39ab5.roa (raw, json)
Hash identifier:          kMVo+zpRs+rDHZlg6M8h763jHOGmTcC5bJ9B8eHkIZo=
Subject key identifier:   AE:8C:21:2E:57:7A:66:70:00:A6:5A:1A:F3:0F:26:9F:E6:B5:5C:76
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B83820F2DEA4743C441CE9480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/580c72b9-b982-30b9-acd9-9ad498f39ab5.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     3561
IP address blocks:        69.46.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:0f:2d:ea:47:43:c4:41:ce:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=2efca902-7743-4359-b6e3-abc0c283ac8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:c4:8d:51:eb:8a:1b:46:28:3b:87:13:3d:
                    2a:a1:16:d6:d4:f7:e7:a3:02:e3:07:ca:d4:f0:14:
                    d5:a0:6b:98:78:4c:e6:a0:9b:aa:d6:28:fb:18:84:
                    90:92:a3:fb:c5:9c:48:88:cc:fe:0b:bc:3f:23:21:
                    5d:9a:ae:65:0b:f8:2a:51:45:a6:f9:7d:b3:9d:ab:
                    0d:c4:4c:95:8b:7c:99:e8:76:2d:d8:36:07:72:c3:
                    58:7c:38:fb:d8:4f:29:6d:2c:16:a3:06:12:a4:e8:
                    5f:32:8c:e1:3a:5e:7e:c8:a6:8d:61:14:9e:14:c1:
                    29:7f:96:9d:b1:a3:c0:50:73:75:cf:15:a1:7f:3e:
                    f7:b7:df:06:3d:28:17:c3:77:64:cf:bd:2f:57:80:
                    7a:1c:22:43:fe:2a:58:71:45:e1:46:a4:1f:16:c6:
                    02:88:41:b5:5c:86:bd:f5:b8:36:de:5f:b9:6a:55:
                    a5:33:16:87:93:83:33:14:65:1e:e8:97:06:6b:6e:
                    1b:47:1e:9f:4a:4f:af:f0:21:9d:77:df:ea:d8:49:
                    66:d6:f9:db:2c:dd:f0:3a:ee:fa:23:fc:d4:c4:e1:
                    6d:c9:6e:7d:9c:37:09:a2:61:52:f6:73:3e:1f:b4:
                    28:cd:b9:96:a2:c4:42:89:2d:30:88:b5:d8:4f:bf:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:21:2E:57:7A:66:70:00:A6:5A:1A:F3:0F:26:9F:E6:B5:5C:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/580c72b9-b982-30b9-acd9-9ad498f39ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.46.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2e:28:77:4a:81:7f:96:83:86:3b:41:ec:c5:3d:3f:7b:a2:
         68:25:81:39:62:de:c0:7c:e5:f0:d2:bb:c5:77:c1:9b:6f:09:
         40:3a:6e:2c:bc:5d:f0:32:ce:dc:d4:b1:20:3b:37:9e:75:56:
         3d:cd:eb:c1:72:5a:05:12:8e:07:c3:85:3a:d7:ff:e2:3f:7a:
         6d:34:e2:e8:ec:6e:d8:9a:37:d4:8b:f0:8a:85:16:65:30:53:
         d4:1e:a8:55:42:70:d1:66:26:f8:be:ae:3f:41:18:b9:73:e2:
         4f:a7:3c:90:a0:72:14:bd:79:b0:b8:c9:92:96:c9:db:41:d2:
         1f:f5:0b:79:b3:80:34:b6:5c:09:c6:0b:51:62:39:a9:7a:3f:
         40:c6:90:3b:2e:a1:bc:7a:80:d3:af:62:d4:d3:6a:55:02:93:
         bc:04:2e:3b:24:8d:b7:15:ce:89:02:d7:93:bd:e8:92:3b:09:
         24:ed:6b:ed:6e:7d:e9:19:9b:ce:b5:9f:01:66:6b:a6:6f:a9:
         46:02:8b:6a:54:00:d7:5b:bb:83:eb:ac:90:51:fb:c0:bc:bf:
         f2:0a:61:85:d8:f2:25:fc:97:bd:e9:f6:5b:fa:b1:ba:2e:92:
         13:a4:9e:19:b3:b8:5f:6b:fc:34:04:c2:72:eb:c1:90:ce:42:
         51:63:49:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDgg8t6kdDxEHOlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk
MmVmY2E5MDItNzc0My00MzU5LWI2ZTMtYWJjMGMyODNhYzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbzEjVHrihtGKDuHEz0qoRbW1PfnowLjB8rU
8BTVoGuYeEzmoJuq1ij7GISQkqP7xZxIiMz+C7w/IyFdmq5lC/gqUUWm+X2znasN
xEyVi3yZ6HYt2DYHcsNYfDj72E8pbSwWowYSpOhfMozhOl5+yKaNYRSeFMEpf5ad
saPAUHN1zxWhfz73t98GPSgXw3dkz70vV4B6HCJD/ipYcUXhRqQfFsYCiEG1XIa9
9bg23l+5alWlMxaHk4MzFGUe6JcGa24bRx6fSk+v8CGdd9/q2Elm1vnbLN3wOu76
I/zUxOFtyW59nDcJomFS9nM+H7QozbmWosRCiS0wiLXYT79J4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK6MIS5XemZwAKZaGvMPJp/mtVx2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTgwYzcyYjktYjk4Mi0z
MGI5LWFjZDktOWFkNDk4ZjM5YWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARS5BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8uKHdKgX+Wg4Y7QezFPT97omglgTli3sB85fDSu8V3wZtvCUA6biy8
XfAyztzUsSA7N551Vj3N68FyWgUSjgfDhTrX/+I/em004ujsbtiaN9SL8IqFFmUw
U9QeqFVCcNFmJvi+rj9BGLlz4k+nPJCgchS9ebC4yZKWydtB0h/1C3mzgDS2XAnG
C1FiOal6P0DGkDsuobx6gNOvYtTTalUCk7wELjskjbcVzokC15O96JI7CSTta+1u
fekZm861nwFma6ZvqUYCi2pUANdbu4PrrJBR+8C8v/IKYYXY8iX8l73p9lv6sbou
khOknhmzuF9r/DQEwnLrwZDOQlFjSeE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:30:36 2025 by rpki-client