Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb75a0fa-7d8a-39d0-b8e5-a5b60a100adb.roa
File:                     cb75a0fa-7d8a-39d0-b8e5-a5b60a100adb.roa (raw, json)
Hash identifier:          OjqRmAhs19NZW+prMYo2+WOd9ZdwO+7awGHNv2s8eyc=
Subject key identifier:   7F:B5:90:9D:6B:49:4E:9A:12:20:5C:20:31:9B:A9:FE:41:CF:5A:EC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B6797603587C2AA9627E14CE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb75a0fa-7d8a-39d0-b8e5-a5b60a100adb.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     396982
IP address blocks:        35.201.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:60:35:87:c2:aa:96:27:e1:4c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=d6a40c72-b8d7-49f6-87c4-949c7c1069df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:be:9f:a0:2e:5e:40:10:90:a4:2c:e0:37:
                    ae:1c:b9:76:7b:1b:79:41:5c:71:24:df:60:4e:76:
                    31:11:b3:fa:7f:12:c4:76:3d:93:ab:e6:fc:b3:9f:
                    1d:5d:41:a3:1e:53:f3:78:ed:6c:f4:35:c1:8b:a1:
                    db:f1:c1:e7:5f:6e:b0:03:23:ec:7f:7c:25:02:53:
                    55:81:0a:88:cd:05:04:8b:8a:74:c1:d8:d3:68:ad:
                    c4:37:4e:ba:ef:e5:36:09:de:6f:09:cf:8a:5f:ee:
                    61:66:53:30:f9:91:ab:d0:e7:d7:0b:c3:e0:1e:94:
                    3d:bf:5d:90:00:5c:56:2c:34:96:fa:9f:50:c3:4c:
                    36:58:4a:a5:ad:04:b8:4e:a9:a9:a5:ab:26:40:0b:
                    a4:84:50:64:e0:fe:12:0e:9a:49:57:f4:35:d5:74:
                    05:09:ca:1d:c5:10:02:b2:d0:d9:46:83:98:0d:b4:
                    b4:3f:93:fe:5a:51:ae:8c:df:f5:0b:32:a8:cd:18:
                    d4:4e:8a:7d:5c:c5:8e:38:20:dd:54:1e:98:32:e8:
                    63:33:d7:fc:6b:29:a5:95:ef:59:63:fd:2b:7e:07:
                    10:32:e5:d6:d2:ec:f9:21:da:5a:78:b4:b3:bf:35:
                    b8:33:62:9f:cf:a2:fa:06:1a:0c:a6:93:4a:1d:b4:
                    c7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B5:90:9D:6B:49:4E:9A:12:20:5C:20:31:9B:A9:FE:41:CF:5A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb75a0fa-7d8a-39d0-b8e5-a5b60a100adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.201.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:66:dc:e1:87:7c:46:37:2d:4d:92:32:5a:53:92:e6:96:26:
         d4:45:5c:78:2f:3e:0e:91:56:88:80:03:e4:ba:38:fd:7b:68:
         e4:fd:b6:9f:29:bf:25:ee:38:4a:3c:ca:dd:a4:08:0e:a5:c4:
         77:f7:71:72:8e:2c:ff:50:c4:65:d1:72:d2:5c:76:13:dc:8c:
         89:ce:c4:42:72:f6:d3:20:0c:ab:41:0e:4b:36:4c:86:1a:fd:
         1b:a8:7b:e3:90:79:0c:01:dd:30:12:77:5b:88:ea:e3:a6:b5:
         df:73:c2:5c:ce:fc:ed:e6:7a:24:f7:d3:5f:7c:f6:42:4c:d3:
         13:fa:5e:93:37:9d:60:79:51:87:e0:13:61:98:1c:69:55:c0:
         88:54:4a:d9:90:ec:74:2b:c6:30:e7:c6:52:e6:aa:c6:ee:9b:
         88:61:9c:d3:c6:39:8f:90:a0:33:d0:6d:16:c6:ca:dc:3a:cd:
         3e:0d:e0:8c:b2:78:58:84:29:9a:40:31:4f:e8:23:8e:f0:41:
         93:f7:5b:56:8a:a9:ef:c6:15:20:f4:08:cb:f9:ed:ae:24:38:
         91:1b:36:12:33:65:bd:23:ad:e3:33:02:f4:1b:f5:2f:b5:21:
         32:58:6e:bc:d0:7b:30:38:70:51:75:05:9f:20:96:e4:7e:b5:
         d3:56:89:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2A1h8KqlifhTOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZDZhNDBjNzItYjhkNy00OWY2LTg3YzQtOTQ5YzdjMTA2OWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MG+n6AuXkAQkKQs4DeuHLl2ext5QVxxJN9g
TnYxEbP6fxLEdj2Tq+b8s58dXUGjHlPzeO1s9DXBi6Hb8cHnX26wAyPsf3wlAlNV
gQqIzQUEi4p0wdjTaK3EN0667+U2Cd5vCc+KX+5hZlMw+ZGr0OfXC8PgHpQ9v12Q
AFxWLDSW+p9Qw0w2WEqlrQS4TqmppasmQAukhFBk4P4SDppJV/Q11XQFCcodxRAC
stDZRoOYDbS0P5P+WlGujN/1CzKozRjUTop9XMWOOCDdVB6YMuhjM9f8aymlle9Z
Y/0rfgcQMuXW0uz5IdpaeLSzvzW4M2Kfz6L6BhoMppNKHbTHnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+1kJ1rSU6aEiBcIDGbqf5Bz1rsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2I3NWEwZmEtN2Q4YS0z
OWQwLWI4ZTUtYTViNjBhMTAwYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8ktMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhm3OGHfEY3LU2SMlpTkuaWJtRFXHgvPg6RVoiAA+S6OP17aOT9tp8p
vyXuOEo8yt2kCA6lxHf3cXKOLP9QxGXRctJcdhPcjInOxEJy9tMgDKtBDks2TIYa
/Ruoe+OQeQwB3TASd1uI6uOmtd9zwlzO/O3meiT301989kJM0xP6XpM3nWB5UYfg
E2GYHGlVwIhUStmQ7HQrxjDnxlLmqsbum4hhnNPGOY+QoDPQbRbGytw6zT4N4Iyy
eFiEKZpAMU/oI47wQZP3W1aKqe/GFSD0CMv57a4kOJEbNhIzZb0jreMzAvQb9S+1
ITJYbrzQezA4cFF1BZ8gluR+tdNWiZ4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:29:41 2025 by rpki-client