Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b01a33cc-4594-3603-b5b8-3e9763379e38.roa
File:                     b01a33cc-4594-3603-b5b8-3e9763379e38.roa (raw, json)
Hash identifier:          mL5Csj4qcn2LAhq+j7Fpy1AxkBdpT1PaSxxCYmgsyVI=
Subject key identifier:   6D:4F:F0:F6:E4:BB:23:60:36:75:2F:97:18:B5:14:28:EC:4F:54:78
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524701396D8BA12DE92280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b01a33cc-4594-3603-b5b8-3e9763379e38.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        71.44.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:47:01:39:6d:8b:a1:2d:e9:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=31b9af70-6249-48a9-8117-aa8d582f7af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a8:72:4b:6a:53:d6:63:b9:a8:44:04:3a:83:
                    59:27:59:59:af:d3:99:13:f6:1d:ad:97:f7:60:1c:
                    d7:99:8a:ed:f7:54:4e:15:2b:01:eb:25:03:44:b8:
                    44:d4:6b:ea:5b:40:fd:f7:6c:81:a2:04:05:99:9a:
                    f0:cf:b7:81:dc:be:1b:3b:a2:65:a9:fd:a8:47:b4:
                    ea:eb:72:bf:fb:d0:14:09:c8:37:15:ca:0e:e2:b8:
                    14:2f:8d:a2:fa:a0:f4:28:06:36:94:f3:74:9e:51:
                    a7:2b:1d:53:d7:33:d7:f9:54:bd:df:bb:cb:7e:bc:
                    f5:5a:80:80:a2:0b:00:96:b2:c7:95:43:a4:03:83:
                    3e:9c:3a:a4:4b:5d:69:b3:2f:81:b3:26:86:35:66:
                    82:0c:89:31:18:6c:c2:50:87:77:1e:a0:66:40:e7:
                    b5:d3:e6:1f:51:0c:e1:ec:83:0e:a6:89:14:76:ca:
                    29:84:b2:8a:34:92:83:92:40:0e:88:d4:c1:12:a7:
                    11:11:e4:84:16:d8:52:e8:cd:97:c0:0f:6d:db:f8:
                    a2:8f:ec:8e:b6:84:8f:28:1e:12:75:5d:23:29:36:
                    1c:52:fa:ff:29:e4:1b:2f:2a:4d:13:62:67:3f:fd:
                    ed:21:2c:65:2c:14:b9:cf:3a:42:f4:e1:97:10:a1:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4F:F0:F6:E4:BB:23:60:36:75:2F:97:18:B5:14:28:EC:4F:54:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b01a33cc-4594-3603-b5b8-3e9763379e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:fd:ad:ec:56:c0:98:70:ed:7e:84:50:80:81:ae:b4:1b:9b:
         83:9a:70:da:7b:b5:89:4a:9f:e6:91:95:ec:fa:1f:47:a7:d5:
         83:0f:0e:21:d7:90:d3:1d:6e:34:e3:f0:08:d8:dd:74:27:4a:
         df:d6:1e:c1:a4:bc:84:79:f1:8c:60:57:5b:bf:68:96:81:26:
         72:31:4b:95:28:bb:88:bb:ad:64:e5:4d:63:10:7f:1f:ba:5b:
         3c:11:7c:57:06:98:93:d4:b8:ad:9b:f5:d3:05:14:57:60:c5:
         03:6b:b4:2e:35:9f:84:4d:0b:f4:35:c9:2f:cd:c8:2a:70:bd:
         c3:3d:67:73:a4:a3:ee:52:c1:23:0e:0f:65:01:6b:88:59:ed:
         a3:50:32:5d:28:b7:de:8e:97:e9:6d:ae:bb:31:a6:65:52:de:
         79:72:19:43:e8:88:03:ab:bd:6a:df:32:14:c0:99:f1:a8:79:
         cd:f7:f0:6f:a6:95:c3:90:5c:00:58:c7:35:3e:f9:b7:ba:32:
         16:32:ba:5c:0e:72:0e:58:46:c1:b4:dd:f7:02:4d:19:42:22:
         3d:07:96:ad:e9:66:cd:33:0d:8e:08:96:25:8e:6e:34:b6:d7:
         0a:b7:d8:c0:ba:20:c1:21:b8:37:bb:65:a1:50:a4:4a:10:54:
         87:63:68:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkcBOW2LoS3pIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
MzFiOWFmNzAtNjI0OS00OGE5LTgxMTctYWE4ZDU4MmY3YWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgahyS2pT1mO5qEQEOoNZJ1lZr9OZE/YdrZf3
YBzXmYrt91ROFSsB6yUDRLhE1GvqW0D992yBogQFmZrwz7eB3L4bO6Jlqf2oR7Tq
63K/+9AUCcg3FcoO4rgUL42i+qD0KAY2lPN0nlGnKx1T1zPX+VS937vLfrz1WoCA
ogsAlrLHlUOkA4M+nDqkS11psy+BsyaGNWaCDIkxGGzCUId3HqBmQOe10+YfUQzh
7IMOpokUdsophLKKNJKDkkAOiNTBEqcREeSEFthS6M2XwA9t2/iij+yOtoSPKB4S
dV0jKTYcUvr/KeQbLypNE2JnP/3tISxlLBS5zzpC9OGXEKGRywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1P8PbkuyNgNnUvlxi1FCjsT1R4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjAxYTMzY2MtNDU5NC0z
NjAzLWI1YjgtM2U5NzYzMzc5ZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRyw4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADv9rexWwJhw7X6EUICBrrQbm4OacNp7tYlKn+aRlez6H0en1YMPDiHX
kNMdbjTj8AjY3XQnSt/WHsGkvIR58YxgV1u/aJaBJnIxS5Uou4i7rWTlTWMQfx+6
WzwRfFcGmJPUuK2b9dMFFFdgxQNrtC41n4RNC/Q1yS/NyCpwvcM9Z3Oko+5SwSMO
D2UBa4hZ7aNQMl0ot96Ol+ltrrsxpmVS3nlyGUPoiAOrvWrfMhTAmfGoec338G+m
lcOQXABYxzU++be6MhYyulwOcg5YRsG03fcCTRlCIj0Hlq3pZs0zDY4IliWObjS2
1wq32MC6IMEhuDe7ZaFQpEoQVIdjaAQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:13:31 2025 by rpki-client