Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
File:                     472b8477-15d6-33d4-b0d4-4c577d494c08.roa (raw, json)
Hash identifier:          SVc4M5m/Hlqv+ki5MBCJxzcEvYxPmJ5ern/mQK5aD4Y=
Subject key identifier:   6F:01:81:AF:03:6E:1C:A8:CC:AA:E9:20:F9:D3:E1:BB:2C:C9:AD:0F
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584B8EACEBEAF2E29466623FDB80
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     9312
IP address blocks:        104.245.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:eb:ea:f2:e2:94:66:62:3f:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=6a4ac1be-0328-4967-87fd-c04b8d11d415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b9:4d:52:61:ef:fe:2c:2e:61:81:1a:56:5a:
                    d9:92:ac:46:7e:64:41:8f:cf:42:04:b1:0e:d5:b9:
                    70:57:ca:83:8c:74:24:e5:7a:8c:02:49:06:be:72:
                    2d:1b:f3:8a:bf:af:e9:8f:a7:70:da:11:a0:92:92:
                    d2:0e:e3:4d:35:5c:57:88:80:64:a2:c3:6b:7c:67:
                    ff:c8:2e:96:e5:43:e2:89:4f:5b:94:96:56:95:47:
                    1b:61:79:af:f3:f7:25:e2:6c:61:6c:49:ca:1a:68:
                    2f:b8:ba:98:03:e3:05:72:04:72:93:5c:5d:9e:2f:
                    5f:df:64:d3:09:f0:a7:b6:64:28:91:41:7e:29:b9:
                    b8:49:b3:a7:ec:21:15:57:d4:94:18:d7:48:fc:20:
                    5a:6a:b1:a3:b9:c5:d4:ee:0d:9b:ed:f3:1c:4b:0c:
                    a6:8a:ef:fe:aa:7a:1c:01:7e:cf:92:98:af:97:d7:
                    55:8c:b9:29:1d:d9:03:18:52:eb:a5:33:a5:4a:aa:
                    d7:54:b9:a8:a2:41:d7:cd:ce:e0:67:bd:6a:2d:6e:
                    8d:3e:7f:7c:90:26:7e:5f:03:6b:86:98:d8:18:bd:
                    05:e2:f3:b9:b7:bd:d1:9c:c7:41:cc:1b:b3:3c:c7:
                    62:a8:58:98:16:20:88:37:57:7a:de:7e:32:b1:36:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:01:81:AF:03:6E:1C:A8:CC:AA:E9:20:F9:D3:E1:BB:2C:C9:AD:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/472b8477-15d6-33d4-b0d4-4c577d494c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5a:2b:9a:07:39:1b:7f:ab:b2:8c:ba:5e:35:a7:46:39:7d:
         6e:ee:c2:2c:f3:01:a1:12:22:60:6a:10:1d:60:c0:2e:c8:50:
         1f:ef:43:b5:7f:11:5b:59:cf:29:9a:c6:0d:f6:77:e4:38:67:
         36:f2:1e:92:96:71:5f:19:d1:b5:e0:c3:cc:b0:7f:d5:95:0b:
         2b:4c:ec:ab:9a:01:b5:e0:71:f3:02:bb:6c:31:db:8a:1c:30:
         30:e9:1b:df:d9:2c:92:61:bb:84:6c:ac:ce:b8:92:c0:8a:62:
         fe:08:33:20:7b:48:4e:88:8d:62:f5:34:ac:a1:c6:9b:26:9b:
         dc:f8:03:5e:2d:d0:af:b5:8a:3a:cd:29:54:db:4f:4c:d7:7c:
         c1:41:68:87:aa:36:37:45:64:f0:60:6b:89:b7:b8:47:91:33:
         a0:96:32:ff:3f:0d:6e:3a:d8:ae:ee:63:59:07:39:22:cc:8f:
         10:d4:d4:98:cc:35:39:3a:a6:23:55:7f:4a:d1:d3:d6:57:e6:
         6b:49:dc:38:4b:83:f1:e4:d4:ec:c3:c5:bc:25:62:96:df:36:
         f5:ab:96:cb:a5:16:4f:d6:d4:dc:6e:7b:36:4f:10:09:e4:db:
         ef:63:ca:ad:7e:59:10:0e:d9:da:38:4c:ad:f0:a9:d7:ab:77:
         0a:43:9a:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOvq8uKUZmI/24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IwMWIyOGEtNDM2ZC00MmRkLTg3NTAtNTM2MWYyMzA5
Mjk3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
NmE0YWMxYmUtMDMyOC00OTY3LTg3ZmQtYzA0YjhkMTFkNDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8blNUmHv/iwuYYEaVlrZkqxGfmRBj89CBLEO
1blwV8qDjHQk5XqMAkkGvnItG/OKv6/pj6dw2hGgkpLSDuNNNVxXiIBkosNrfGf/
yC6W5UPiiU9blJZWlUcbYXmv8/cl4mxhbEnKGmgvuLqYA+MFcgRyk1xdni9f32TT
CfCntmQokUF+Kbm4SbOn7CEVV9SUGNdI/CBaarGjucXU7g2b7fMcSwymiu/+qnoc
AX7Pkpivl9dVjLkpHdkDGFLrpTOlSqrXVLmookHXzc7gZ71qLW6NPn98kCZ+XwNr
hpjYGL0F4vO5t73RnMdBzBuzPMdiqFiYFiCIN1d63n4ysTaJjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8Bga8DbhyozKrpIPnT4bssya0PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAx
YjI4YS00MzZkLTQyZGQtODc1MC01MzYxZjIzMDkyOTcvNDcyYjg0NzctMTVkNi0z
M2Q0LWIwZDQtNGM1NzdkNDk0YzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2IwMWIyOGEtNDM2ZC00MmRkLTg3
NTAtNTM2MWYyMzA5Mjk3L2NiMDFiMjhhLTQzNmQtNDJkZC04NzUwLTUzNjFmMjMw
OTI5Ny5jcmwwHwYDVR0jBBgwFoAUoD/XgfdrhiAFQLOw8V5XSYqIHsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAxYjI4YS00MzZkLTQyZGQtODc1MC01MzYx
ZjIzMDkyOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPUoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1aK5oHORt/q7KMul41p0Y5fW7uwizzAaESImBqEB1gwC7IUB/vQ7V/
EVtZzymaxg32d+Q4ZzbyHpKWcV8Z0bXgw8ywf9WVCytM7KuaAbXgcfMCu2wx24oc
MDDpG9/ZLJJhu4RsrM64ksCKYv4IMyB7SE6IjWL1NKyhxpsmm9z4A14t0K+1ijrN
KVTbT0zXfMFBaIeqNjdFZPBga4m3uEeRM6CWMv8/DW462K7uY1kHOSLMjxDU1JjM
NTk6piNVf0rR09ZX5mtJ3DhLg/Hk1OzDxbwlYpbfNvWrlsulFk/W1NxuezZPEAnk
2+9jyq1+WRAO2do4TK3wqderdwpDmqM=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:40 2025 by rpki-client