Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c2b440f-18d8-3a64-86a4-afcaa33859e6.roa
File:                     4c2b440f-18d8-3a64-86a4-afcaa33859e6.roa (raw, json)
Hash identifier:          YHobe5NMl1dG+VA08aCARpZPQDcFsC8MsGu6tXqoJOM=
Subject key identifier:   09:C0:35:85:E2:BD:43:39:55:5C:26:A5:D3:4E:8F:87:50:92:06:04
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52171FCD1CC26CFEEBB600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c2b440f-18d8-3a64-86a4-afcaa33859e6.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     17359
IP address blocks:        199.255.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:17:1f:cd:1c:c2:6c:fe:eb:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=8112c7f0-25fc-45e1-9ce7-2d0eb17b4e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:42:10:63:ef:97:0e:f7:d0:f4:85:4e:07:
                    42:a0:31:fb:a6:7f:57:90:13:a9:c9:36:4e:9b:4c:
                    98:52:9c:1d:35:b9:b0:43:75:0f:b4:5a:5a:5c:c6:
                    65:30:0a:9a:1c:f6:af:38:80:ed:99:06:e0:d8:26:
                    15:b8:c3:05:38:af:28:5f:d1:bc:e1:f9:cd:22:41:
                    da:db:a0:e3:ee:68:01:2e:a4:2d:bc:09:dd:05:bc:
                    eb:95:cd:49:c0:11:95:86:e7:37:54:7f:17:09:12:
                    3f:5c:5c:4c:67:7b:15:2b:e7:b5:7a:71:d8:3a:bc:
                    48:a4:6a:f6:49:e3:33:b7:74:71:a7:45:a5:ab:1c:
                    59:5b:c4:ff:2b:9e:90:c1:ee:3b:ac:97:a5:bf:2f:
                    31:4f:70:63:4d:ae:10:08:58:e1:8f:13:ac:66:1b:
                    09:40:12:67:7e:67:da:0d:04:41:b2:97:08:5b:ce:
                    45:71:d5:b3:6f:eb:23:e0:97:ab:3c:b5:d5:c3:f1:
                    55:c8:24:ae:10:4d:50:a2:a6:3a:2b:f2:52:5e:3a:
                    bf:af:07:7c:bb:b3:ad:f1:ad:0c:85:c9:ea:c3:0c:
                    c6:65:7a:3c:dc:09:39:3a:6f:4c:c1:c2:2c:de:af:
                    b6:19:4f:ae:83:4b:ab:35:81:72:a8:fd:56:e6:94:
                    c6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C0:35:85:E2:BD:43:39:55:5C:26:A5:D3:4E:8F:87:50:92:06:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c2b440f-18d8-3a64-86a4-afcaa33859e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:70:4a:44:e2:26:cd:e5:b6:d1:2b:28:f6:d5:dc:f7:09:44:
         79:a2:de:d4:75:8c:07:7a:30:fd:5b:c6:72:87:1e:25:fd:a3:
         ac:cd:df:5c:8a:f0:e0:c5:02:aa:3b:fc:ba:a4:bc:3d:98:52:
         51:b5:e8:cb:59:04:5e:1e:17:78:ee:b2:07:09:d6:b4:6e:80:
         c8:58:55:5e:77:34:e8:a9:bb:88:fa:67:af:6a:d8:81:ad:5f:
         74:a5:cb:78:3c:14:d2:f2:69:0e:e8:ad:25:a2:5a:6b:f3:04:
         5c:5e:e7:bd:aa:2c:e0:66:3b:91:16:cb:50:5d:4f:23:05:0a:
         9f:c3:53:bc:75:a8:82:ca:dd:4c:c6:95:2c:1f:87:5f:0a:f8:
         ce:c0:89:5f:23:74:ca:0d:f3:74:0a:14:82:d4:c9:5c:c0:8d:
         c3:aa:66:9e:0c:62:59:5b:07:2f:91:56:0c:c2:cd:88:6f:a9:
         64:10:11:4e:e7:f6:e9:03:9b:b9:e2:80:0f:7e:22:4b:b2:f3:
         2d:f7:5b:6b:84:2f:e1:fb:5f:02:88:c1:14:d6:c3:c1:32:ff:
         f9:ff:42:30:6c:77:36:ec:53:e0:86:79:ab:7e:57:67:60:bf:
         c0:2e:2e:5d:43:ff:87:d1:da:12:76:b6:46:ec:3a:53:99:1c:
         44:ed:1a:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhcfzRzCbP7rtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
ODExMmM3ZjAtMjVmYy00NWUxLTljZTctMmQwZWIxN2I0ZTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHlCEGPvlw730PSFTgdCoDH7pn9XkBOpyTZO
m0yYUpwdNbmwQ3UPtFpaXMZlMAqaHPavOIDtmQbg2CYVuMMFOK8oX9G84fnNIkHa
26Dj7mgBLqQtvAndBbzrlc1JwBGVhuc3VH8XCRI/XFxMZ3sVK+e1enHYOrxIpGr2
SeMzt3Rxp0WlqxxZW8T/K56Qwe47rJelvy8xT3BjTa4QCFjhjxOsZhsJQBJnfmfa
DQRBspcIW85FcdWzb+sj4JerPLXVw/FVyCSuEE1QoqY6K/JSXjq/rwd8u7Ot8a0M
hcnqwwzGZXo83Ak5Om9MwcIs3q+2GU+ug0urNYFyqP1W5pTGlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnANYXivUM5VVwmpdNOj4dQkgYEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNGMyYjQ0MGYtMThkOC0z
YTY0LTg2YTQtYWZjYWEzMzg1OWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdwSkTiJs3lttErKPbV3PcJRHmi3tR1jAd6MP1bxnKHHiX9o6zN31yK
8ODFAqo7/LqkvD2YUlG16MtZBF4eF3jusgcJ1rRugMhYVV53NOipu4j6Z69q2IGt
X3Sly3g8FNLyaQ7orSWiWmvzBFxe572qLOBmO5EWy1BdTyMFCp/DU7x1qILK3UzG
lSwfh18K+M7AiV8jdMoN83QKFILUyVzAjcOqZp4MYllbBy+RVgzCzYhvqWQQEU7n
9ukDm7nigA9+Ikuy8y33W2uEL+H7XwKIwRTWw8Ey//n/QjBsdzbsU+CGeat+V2dg
v8AuLl1D/4fR2hJ2tkbsOlOZHETtGqw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:15:40 2025 by rpki-client