Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c52b75db-73ab-3192-9a90-b60ac67f8d25.roa
File:                     c52b75db-73ab-3192-9a90-b60ac67f8d25.roa (raw, json)
Hash identifier:          28NVXNp1Ctpf/r4dyg9AF5Qviwwj6M019WgeKxKPEBs=
Subject key identifier:   F3:73:FE:82:77:D4:92:3A:31:04:C5:E8:AB:A0:D0:8C:AA:C9:D9:81
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52486B5CD7EAFFD9D8A480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c52b75db-73ab-3192-9a90-b60ac67f8d25.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        72.31.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:48:6b:5c:d7:ea:ff:d9:d8:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=e593f4a2-80db-471c-9e2e-7c26f4e8453c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:26:58:5f:6d:a8:b0:44:bc:f1:cf:40:59:
                    bf:a1:8f:45:6d:b7:d6:f9:46:49:46:2b:26:8d:f0:
                    3e:6d:8a:69:d6:b2:f4:d2:5c:6a:68:b0:e4:37:7f:
                    68:3d:5d:9e:db:32:db:ef:08:6a:e9:da:b6:53:72:
                    7d:7f:54:b0:3c:38:2e:30:ae:1e:2d:c0:29:86:29:
                    90:9d:9b:c3:4b:ee:8c:61:92:21:11:6f:f9:76:33:
                    d6:4c:14:38:ae:c7:15:05:c8:2b:b5:5a:6a:83:0a:
                    42:c5:89:f6:56:e9:7a:44:3b:cb:a9:73:f6:dd:21:
                    07:d0:c9:48:ee:9c:0e:db:36:a9:30:51:9c:a3:7e:
                    9d:23:00:8d:3d:4b:83:55:1f:65:f3:d5:bc:d7:e6:
                    f2:6a:2b:16:eb:3d:12:98:ed:dc:67:15:67:f0:3b:
                    62:ec:fc:50:93:56:0b:84:df:46:63:fc:95:de:3f:
                    19:ca:4e:d7:86:8e:27:10:1e:fb:c7:87:fa:23:b0:
                    9b:3b:84:e1:19:3d:84:c7:fd:d3:d8:8c:00:39:20:
                    b0:9b:9a:34:9e:e5:b9:38:38:3c:3c:89:63:b8:f2:
                    a3:6e:5c:fd:f9:22:68:a5:1f:e9:aa:da:43:3a:7f:
                    b5:49:f2:81:2c:5c:ff:8d:e4:c5:d4:93:bf:ed:98:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:73:FE:82:77:D4:92:3A:31:04:C5:E8:AB:A0:D0:8C:AA:C9:D9:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c52b75db-73ab-3192-9a90-b60ac67f8d25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.31.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:f0:cc:e6:38:90:cd:5e:5d:28:5f:09:a0:87:ae:21:92:
         0a:4f:0f:84:8d:d4:88:8b:61:44:79:59:b1:d8:27:0c:f0:b1:
         18:6e:60:1f:31:ad:d8:46:40:21:66:53:5e:8b:1f:59:a7:c8:
         b3:a5:a4:88:85:46:aa:ce:4b:38:ac:91:1d:a6:f4:2d:cc:02:
         62:2c:32:90:59:29:2b:74:02:07:c0:d4:4e:c8:95:af:2c:5b:
         92:aa:26:d2:1c:08:58:78:8c:11:87:95:ab:bc:8d:8b:36:70:
         4b:e9:24:99:19:b8:3a:cc:2c:3f:73:93:3d:ef:86:44:35:62:
         52:a7:f8:af:47:d0:2a:63:e7:99:0c:39:39:0c:18:47:cb:f2:
         14:d1:6e:e8:5f:76:36:e0:8b:e7:da:a3:8d:05:36:c8:a5:94:
         cb:91:0a:f6:00:7e:d4:27:68:ac:f4:b5:b1:37:95:e9:9b:cd:
         67:d1:f6:80:5b:1e:4b:38:b1:9f:c9:31:41:7d:df:fa:21:a3:
         41:b6:f7:35:a3:ff:f8:18:54:5a:65:20:1f:54:4b:26:62:95:
         52:f3:17:33:d0:2a:58:c3:ce:f7:bb:7d:c0:1c:32:fd:99:48:
         29:06:bf:f0:07:5c:54:cf:94:89:ab:23:80:10:68:b9:94:65:
         de:e5:83:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkhrXNfq/9nYpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
ZTU5M2Y0YTItODBkYi00NzFjLTllMmUtN2MyNmY0ZTg0NTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn98mWF9tqLBEvPHPQFm/oY9FbbfW+UZJRism
jfA+bYpp1rL00lxqaLDkN39oPV2e2zLb7whq6dq2U3J9f1SwPDguMK4eLcAphimQ
nZvDS+6MYZIhEW/5djPWTBQ4rscVBcgrtVpqgwpCxYn2Vul6RDvLqXP23SEH0MlI
7pwO2zapMFGco36dIwCNPUuDVR9l89W81+byaisW6z0SmO3cZxVn8Dti7PxQk1YL
hN9GY/yV3j8Zyk7Xho4nEB77x4f6I7CbO4ThGT2Ex/3T2IwAOSCwm5o0nuW5ODg8
PIljuPKjblz9+SJopR/pqtpDOn+1SfKBLFz/jeTF1JO/7ZjIdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPNz/oJ31JI6MQTF6Kug0IyqydmBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzUyYjc1ZGItNzNhYi0z
MTkyLTlhOTAtYjYwYWM2N2Y4ZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB/KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0F8MzmOJDNXl0oXwmgh64hkgpPD4SN1IiLYUR5WbHYJwzwsRhuYB8x
rdhGQCFmU16LH1mnyLOlpIiFRqrOSziskR2m9C3MAmIsMpBZKSt0AgfA1E7Ila8s
W5KqJtIcCFh4jBGHlau8jYs2cEvpJJkZuDrMLD9zkz3vhkQ1YlKn+K9H0Cpj55kM
OTkMGEfL8hTRbuhfdjbgi+fao40FNsillMuRCvYAftQnaKz0tbE3lembzWfR9oBb
Hks4sZ/JMUF93/oho0G29zWj//gYVFplIB9USyZilVLzFzPQKljDzve7fcAcMv2Z
SCkGv/AHXFTPlImrI4AQaLmUZd7lg/M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:16:50 2025 by rpki-client