Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa
File:                     f5ac55ac-f810-3544-90b5-8f6795c65f87.roa (raw, json)
Hash identifier:          mPYryobBLzEVi1niZVEo89y5LbhaDkculOJMKw0Lgmw=
Subject key identifier:   AC:6E:F2:B9:D6:ED:54:25:F3:FB:0D:F7:3D:E7:76:7D:C4:1B:73:BE
Certificate issuer:       /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial:       010D0C9F4328584AD7D10D43D39209D556FB1400
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     262287
IP address blocks:        172.111.12.0/22 maxlen: 24
                          204.9.36.0/23 maxlen: 24
                          204.9.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:0d:43:d3:92:09:d5:56:fb:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=308bebf2-1cd0-4c66-a516-472d9f3bbb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cf:a1:a6:26:f8:fd:86:5d:1f:68:fa:9a:a4:
                    5a:ac:67:2c:ee:c7:da:7f:01:ef:29:26:5c:be:98:
                    dd:61:e7:08:41:6e:1e:5d:68:e2:27:6d:aa:3d:8b:
                    5c:65:f5:db:fa:67:62:3d:0c:36:3d:cc:e9:9e:c4:
                    84:ab:85:2c:d7:e6:5b:8f:30:a3:46:7a:37:5a:90:
                    07:a5:a5:95:80:2c:b2:71:48:e4:d0:2d:b4:5b:8f:
                    8d:0f:de:2e:79:2a:04:12:91:fa:9d:f2:0a:cc:bf:
                    b6:fd:9a:d6:9c:6b:6a:da:55:16:29:4f:4d:a7:c9:
                    2e:3f:1f:68:b3:43:38:7c:0b:bd:74:c9:4a:46:dc:
                    77:9f:24:72:ab:72:a0:82:ba:e5:d5:e8:f6:c8:db:
                    21:d5:21:e1:54:fa:ba:37:a4:2d:7e:fe:a5:20:e5:
                    d3:ec:fe:29:ad:8f:ca:16:e9:67:53:62:10:fd:21:
                    07:c2:33:59:7c:ff:94:71:05:5b:55:84:2d:a2:b2:
                    d6:94:89:b9:75:f7:59:06:f3:e8:fc:50:69:8e:8a:
                    a8:63:e1:25:a6:e8:75:0c:c8:8f:81:f8:45:97:17:
                    17:34:53:25:b5:d5:0c:55:f4:1d:f8:56:07:87:66:
                    35:ea:b5:df:d8:56:03:dc:1e:aa:4a:1b:1f:e6:9e:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6E:F2:B9:D6:ED:54:25:F3:FB:0D:F7:3D:E7:76:7D:C4:1B:73:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl

            X509v3 Authority Key Identifier:
                keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.12.0/22
                  204.9.36.0-204.9.38.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c3:05:9e:32:1f:ab:e1:62:42:29:51:20:05:b9:5c:6b:03:
         06:21:ef:0e:9e:a4:f0:42:7d:44:e0:b6:a5:6e:de:e3:a8:42:
         3d:73:8e:a6:3a:05:e2:2f:da:f0:da:1a:bb:de:d5:da:ab:19:
         8f:9c:92:c9:36:33:b2:b7:bc:39:a1:ae:a3:9c:6d:1b:46:95:
         4e:c0:0b:c1:73:35:85:11:3f:4e:5f:0e:82:42:f3:7c:39:84:
         9a:ab:90:f6:38:70:6d:28:ef:f0:24:b7:9a:08:1e:58:6e:ce:
         6a:c0:35:11:f5:57:4d:2b:4b:54:c8:bd:5b:14:3c:5e:82:52:
         4f:d8:a8:11:cd:5c:3a:83:4b:5f:a7:c0:33:82:20:e6:47:bf:
         e6:6c:ba:de:89:4c:5d:10:64:9e:76:17:aa:59:a3:bd:81:c3:
         31:ab:db:1f:f7:33:f5:8b:bf:67:04:ca:1a:f6:a8:93:6d:0e:
         8f:60:88:ea:fc:6d:aa:0b:6a:57:31:96:9d:16:93:93:06:2d:
         4a:0b:d9:c7:a8:6a:6b:11:80:a3:0d:6f:f5:26:e0:49:e7:d5:
         65:b0:df:56:93:fa:58:bc:8f:18:f9:93:b5:40:bc:d3:c9:ee:
         ab:a3:20:99:cd:7f:dd:9e:f6:77:5f:96:16:31:3e:90:70:be:
         ee:f8:ca:32
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWErX0Q1D05IJ1Vb7FAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1
NmRiMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
MzA4YmViZjItMWNkMC00YzY2LWE1MTYtNDcyZDlmM2JiYjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M+hpib4/YZdH2j6mqRarGcs7sfafwHvKSZc
vpjdYecIQW4eXWjiJ22qPYtcZfXb+mdiPQw2PczpnsSEq4Us1+ZbjzCjRno3WpAH
paWVgCyycUjk0C20W4+ND94ueSoEEpH6nfIKzL+2/ZrWnGtq2lUWKU9Np8kuPx9o
s0M4fAu9dMlKRtx3nyRyq3Kggrrl1ej2yNsh1SHhVPq6N6Qtfv6lIOXT7P4prY/K
FulnU2IQ/SEHwjNZfP+UcQVbVYQtorLWlIm5dfdZBvPo/FBpjoqoY+Elpuh1DMiP
gfhFlxcXNFMltdUMVfQd+FYHh2Y16rXf2FYD3B6qShsf5p5aHwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFKxu8rnW7VQl8/sN9z3ndn3EG3O+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4
NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvZjVhYzU1YWMtZjgxMC0z
NTQ0LTkwYjUtOGY2Nzk1YzY1Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi
NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy
NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj
NzZmMjU2ZGIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCrG8MMAwD
BALMCSQDBADMCSYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEADMMFnjIfq+FiQilRIAW5XGsDBiHvDp6k8EJ9
ROC2pW7e46hCPXOOpjoF4i/a8Noau97V2qsZj5ySyTYzsre8OaGuo5xtG0aVTsAL
wXM1hRE/Tl8OgkLzfDmEmquQ9jhwbSjv8CS3mggeWG7OasA1EfVXTStLVMi9WxQ8
XoJST9ioEc1cOoNLX6fAM4Ig5ke/5my63olMXRBknnYXqlmjvYHDMavbH/cz9Yu/
ZwTKGvaok20Oj2CI6vxtqgtqVzGWnRaTkwYtSgvZx6hqaxGAow1v9SbgSefVZbDf
VpP6WLyPGPmTtUC808nuq6Mgmc1/3Z72d1+WFjE+kHC+7vjKMg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:46 2025 by rpki-client