Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/5834bc55-35d7-3fe9-977a-8f2a30096757.roa
File:                     5834bc55-35d7-3fe9-977a-8f2a30096757.roa (raw, json)
Hash identifier:          if2f8EBVC+qEohgOtyeGattZ/yQyIQdnZeDK0TfBcAU=
Subject key identifier:   EF:E2:65:FA:D0:62:1E:0E:54:25:55:A5:A4:86:2B:BD:88:C2:36:E8
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328584B328C376809FA8078FF8A58C0
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/5834bc55-35d7-3fe9-977a-8f2a30096757.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     35950
IP address blocks:        204.156.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:37:68:09:fa:80:78:ff:8a:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=ce40ea5a-b262-4406-803b-c10e9bdbbcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:37:97:cd:ac:b6:98:85:92:15:a4:34:2c:
                    64:e5:16:e7:c4:41:50:33:aa:11:cc:00:96:2d:45:
                    e4:05:20:9a:88:28:6e:1c:67:18:33:f4:18:97:92:
                    05:28:de:ef:06:04:fa:8e:94:64:6d:3d:b7:96:43:
                    7d:8b:c3:57:5d:c8:f2:07:12:b3:87:14:31:ad:46:
                    53:4a:34:81:ca:9f:75:92:9e:72:82:25:01:86:77:
                    de:3e:21:0a:ae:15:9f:0f:40:09:d7:f8:d1:9e:13:
                    90:22:4f:2d:1f:cb:de:3c:b8:c2:20:4d:c1:e1:33:
                    f8:3f:81:95:1d:db:9c:f2:98:2f:b3:85:d4:e3:88:
                    65:4d:e8:9b:39:62:b4:06:f0:09:7f:13:41:d8:c2:
                    0e:78:9b:68:cb:b2:9b:78:9d:73:e6:af:11:43:c0:
                    f0:0f:00:8c:35:ec:02:2d:fb:29:d6:bc:00:e6:b7:
                    e1:4a:c3:c5:61:b7:d4:f9:99:9f:f9:ec:43:20:c6:
                    52:d6:82:6c:5d:29:6d:24:ac:2f:62:11:95:27:0e:
                    89:a0:b2:05:94:9c:d0:7e:ac:d4:63:7c:71:dc:ae:
                    1a:2a:c2:1d:d3:4f:01:22:ff:40:8f:3a:05:f0:1e:
                    12:6c:1e:73:26:ef:8f:9a:c6:ab:b2:65:2a:d7:44:
                    06:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E2:65:FA:D0:62:1E:0E:54:25:55:A5:A4:86:2B:BD:88:C2:36:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/5834bc55-35d7-3fe9-977a-8f2a30096757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:49:87:4d:f2:24:e8:fb:45:cf:6b:7f:9d:6d:01:44:6f:77:
         77:01:5f:d2:97:c0:55:95:d1:41:b7:ab:89:7e:03:74:a7:5a:
         f4:40:c7:da:2c:e2:7d:d5:e0:56:e6:15:3f:31:1d:ba:90:03:
         ad:95:ff:47:c2:3c:10:b5:92:88:9a:c5:be:20:76:2d:3b:09:
         f2:03:ce:f1:28:32:c2:09:b4:95:35:2a:99:d1:b9:fb:67:09:
         8f:e0:6f:98:a3:c9:1e:20:04:01:2f:70:c4:af:bf:38:97:5a:
         46:eb:96:d9:71:e2:ac:3c:19:6a:18:7c:d0:02:d8:24:46:d7:
         da:7c:87:23:3d:3c:ab:7f:cd:8e:56:af:12:59:cf:e7:46:c8:
         27:09:bf:8a:40:75:15:30:c6:fc:42:43:37:bc:62:ae:be:2b:
         90:c0:c5:2f:b6:74:85:62:c9:4d:e7:fc:30:e3:57:95:8d:24:
         86:a1:22:b3:05:a1:59:68:c4:b3:98:6e:a2:c0:a8:c5:ee:9f:
         8b:a3:66:86:02:c5:58:98:6d:35:a7:f8:58:ba:be:c2:e7:f3:
         0f:43:d2:16:6b:de:8b:97:ed:9e:5e:08:df:7d:d2:3d:b0:5a:
         e5:94:90:b5:6a:a5:7a:22:79:a6:34:d7:d1:8a:c8:41:a2:0c:
         7e:92:d4:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDdoCfqAeP+KWMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JjNzM0ODMtNjAzNC00ZGMwLWJiZjUtZTRkODJiZjI4
YWY5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
Y2U0MGVhNWEtYjI2Mi00NDA2LTgwM2ItYzEwZTliZGJiY2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkA3l82stpiFkhWkNCxk5RbnxEFQM6oRzACW
LUXkBSCaiChuHGcYM/QYl5IFKN7vBgT6jpRkbT23lkN9i8NXXcjyBxKzhxQxrUZT
SjSByp91kp5ygiUBhnfePiEKrhWfD0AJ1/jRnhOQIk8tH8vePLjCIE3B4TP4P4GV
Hduc8pgvs4XU44hlTeibOWK0BvAJfxNB2MIOeJtoy7KbeJ1z5q8RQ8DwDwCMNewC
Lfsp1rwA5rfhSsPFYbfU+Zmf+exDIMZS1oJsXSltJKwvYhGVJw6JoLIFlJzQfqzU
Y3xx3K4aKsId008BIv9AjzoF8B4SbB5zJu+PmsarsmUq10QGEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/iZfrQYh4OVCVVpaSGK72IwjboMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3
MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4MmJmMjhhZjkvNTgzNGJjNTUtMzVkNy0z
ZmU5LTk3N2EtOGYyYTMwMDk2NzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JjNzM0ODMtNjAzNC00ZGMwLWJi
ZjUtZTRkODJiZjI4YWY5L2NiYzczNDgzLTYwMzQtNGRjMC1iYmY1LWU0ZDgyYmYy
OGFmOS5jcmwwHwYDVR0jBBgwFoAUXtsNbM5NizgqaOXw+ekRwi1IZsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4
MmJmMjhhZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJxHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5Jh03yJOj7Rc9rf51tAURvd3cBX9KXwFWV0UG3q4l+A3SnWvRAx9os
4n3V4FbmFT8xHbqQA62V/0fCPBC1koiaxb4gdi07CfIDzvEoMsIJtJU1KpnRuftn
CY/gb5ijyR4gBAEvcMSvvziXWkbrltlx4qw8GWoYfNAC2CRG19p8hyM9PKt/zY5W
rxJZz+dGyCcJv4pAdRUwxvxCQze8Yq6+K5DAxS+2dIViyU3n/DDjV5WNJIahIrMF
oVloxLOYbqLAqMXun4ujZoYCxViYbTWn+Fi6vsLn8w9D0hZr3ouX7Z5eCN990j2w
WuWUkLVqpXoieaY019GKyEGiDH6S1LU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:26 2025 by rpki-client