Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/f82f5044-0067-38a4-988f-171ba4f694e4.roa
File:                     f82f5044-0067-38a4-988f-171ba4f694e4.roa (raw, json)
Hash identifier:          iZHUYUqq+W5+FthyhhDTvckKkykEgEZRkm7pCVYb470=
Subject key identifier:   73:8A:5C:E7:FD:D4:16:98:CE:8A:4A:99:3C:D4:48:F6:24:B0:D3:20
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F4328584BD3306AC01486587F2FF45300
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/f82f5044-0067-38a4-988f-171ba4f694e4.roa
Signing time:             Tue 11 Nov 2025 14:00:38 +0000
ROA not before:           Tue 11 Nov 2025 14:00:38 +0000
ROA not after:            Mon 09 Feb 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        45.223.208.0/24 maxlen: 24
                          45.223.209.0/24 maxlen: 24
                          45.223.210.0/24 maxlen: 24
                          45.223.211.0/24 maxlen: 24
                          45.223.212.0/24 maxlen: 24
                          45.223.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d3:30:6a:c0:14:86:58:7f:2f:f4:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Nov 11 14:00:38 2025 GMT
            Not After : Feb  9 14:00:38 2026 GMT
        Subject: CN=691d6348-9c03-402c-9512-d58c3f1c6ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:ea:6c:fa:a4:a7:c5:1f:08:4d:fd:62:22:
                    e4:aa:35:5d:26:e5:a5:a1:48:51:45:32:fd:35:18:
                    c4:0e:65:b1:df:ee:e0:8b:81:29:92:f0:00:af:3f:
                    8c:02:aa:f4:f3:d0:6c:a4:72:12:9b:78:fe:6b:94:
                    5c:e1:a3:85:6f:e6:a0:9e:a0:aa:98:32:8b:52:ed:
                    5b:d9:01:7b:89:59:b4:0b:1a:07:df:de:a4:34:b9:
                    19:b0:d7:82:a8:98:f5:3c:ef:58:21:60:15:94:66:
                    87:47:6f:dd:1c:02:04:06:7c:8b:5e:c6:4f:1b:c2:
                    0f:0c:a7:3b:0f:51:83:5d:0a:73:fd:82:20:f9:c7:
                    47:bb:13:21:97:bd:03:6b:e9:9f:40:87:ac:f3:08:
                    f2:1e:ad:5a:63:5b:91:8c:ff:30:3d:8c:a4:6f:c1:
                    e2:f4:a1:a3:fb:aa:ea:8b:26:93:56:0e:6b:be:b0:
                    03:ca:d9:6f:0e:97:13:64:2d:48:22:35:2f:96:90:
                    6f:08:79:39:31:6f:22:04:e2:0e:93:90:bb:e2:e0:
                    a1:b1:96:cd:ee:c4:89:e8:90:e8:fd:6a:06:cb:f0:
                    7d:e0:e9:75:b1:f1:d6:d4:ad:4c:06:2c:8c:cb:9e:
                    c5:ad:9d:95:fa:e2:ee:0b:e4:1b:85:cc:a2:c3:9b:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:5C:E7:FD:D4:16:98:CE:8A:4A:99:3C:D4:48:F6:24:B0:D3:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/f82f5044-0067-38a4-988f-171ba4f694e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.208.0-45.223.213.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:2e:0e:ff:62:8f:be:3f:a5:4e:22:33:73:ac:36:b5:ba:28:
         2c:29:a9:a0:2f:39:dc:f4:99:97:97:83:98:65:ae:fb:ce:e3:
         1c:6c:2d:63:fe:5d:75:9f:cc:51:92:6a:87:d0:95:97:79:38:
         11:88:fa:7e:4e:11:0d:64:e9:1b:84:65:6b:02:67:c5:f2:60:
         37:b5:bb:fe:99:56:ae:1e:6a:ca:0b:e5:4c:37:21:31:1b:25:
         28:4e:00:ed:3f:06:0d:80:32:84:27:c9:1f:77:d4:4a:4f:27:
         5a:41:4d:86:56:fc:5c:3c:87:6a:ae:5a:59:4b:6d:d5:2a:b9:
         32:ef:d0:cb:8a:a7:ee:06:20:80:22:b0:4c:86:be:d5:d9:b7:
         ae:3a:98:97:0a:22:66:8c:86:56:7a:69:38:af:28:80:da:cb:
         1e:ae:ed:88:3d:32:d9:33:91:c7:60:16:2d:c2:71:ee:41:eb:
         df:c2:5a:05:b7:be:3f:7e:aa:7e:7a:fe:73:be:79:18:5a:b4:
         e2:ec:16:68:52:c5:d8:f7:47:88:36:12:20:66:9d:0c:b6:62:
         57:79:d2:2e:c9:84:ff:86:96:11:f6:4b:88:41:6a:5a:0d:dd:
         5c:f9:a7:e1:04:4f:a7:e4:13:d4:88:6d:8a:31:27:f8:45:07:
         bf:ed:15:49
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEvTMGrAFIZYfy/0UwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj
Yzc4MB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk
NjkxZDYzNDgtOWMwMy00MDJjLTk1MTItZDU4YzNmMWM2YWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshLqbPqkp8UfCE39YiLkqjVdJuWloUhRRTL9
NRjEDmWx3+7gi4EpkvAArz+MAqr089BspHISm3j+a5Rc4aOFb+agnqCqmDKLUu1b
2QF7iVm0CxoH396kNLkZsNeCqJj1PO9YIWAVlGaHR2/dHAIEBnyLXsZPG8IPDKc7
D1GDXQpz/YIg+cdHuxMhl70Da+mfQIes8wjyHq1aY1uRjP8wPYykb8Hi9KGj+6rq
iyaTVg5rvrADytlvDpcTZC1IIjUvlpBvCHk5MW8iBOIOk5C74uChsZbN7sSJ6JDo
/WoGy/B94Ol1sfHW1K1MBiyMy57FrZ2V+uLuC+Qbhcyiw5v5RQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHOKXOf91BaYzopKmTzUSPYksNMgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi
N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvZjgyZjUwNDQtMDA2Ny0z
OGE0LTk4OGYtMTcxYmE0ZjY5NGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl
Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj
Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0
ZDZiY2NjNzguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQt39AD
BAEt39QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAnS4O/2KPvj+lTiIzc6w2tbooLCmpoC853PSZl5eDmGWu
+87jHGwtY/5ddZ/MUZJqh9CVl3k4EYj6fk4RDWTpG4RlawJnxfJgN7W7/plWrh5q
ygvlTDchMRslKE4A7T8GDYAyhCfJH3fUSk8nWkFNhlb8XDyHaq5aWUtt1Sq5Mu/Q
y4qn7gYggCKwTIa+1dm3rjqYlwoiZoyGVnppOK8ogNrLHq7tiD0y2TORx2AWLcJx
7kHr38JaBbe+P36qfnr+c755GFq04uwWaFLF2PdHiDYSIGadDLZiV3nSLsmE/4aW
EfZLiEFqWg3dXPmn4QRPp+QT1IhtijEn+EUHv+0VSQ==
-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:28 2025 by rpki-client