Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/dc45fae9-5ad3-321c-8049-0bf016f07538.roa
File:                     dc45fae9-5ad3-321c-8049-0bf016f07538.roa (raw, json)
Hash identifier:          00mc2ffe6/bdyMeivmXgMlubC2Tl2CymZnuUHb9xgC0=
Subject key identifier:   63:3B:77:68:0C:B6:6F:8C:07:A3:2E:4B:0E:88:28:8A:39:0D:F3:CE
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F4328584B0E414D439E7E77B864594340
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/dc45fae9-5ad3-321c-8049-0bf016f07538.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     394625
IP address blocks:        185.240.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:4d:43:9e:7e:77:b8:64:59:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=c8807e04-f59d-46e2-aa73-b028d3e1dc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:82:c3:55:03:95:f0:08:97:27:55:86:f8:d6:
                    09:2c:b4:ad:a4:7f:dc:e8:1c:ce:50:d6:9b:cd:ad:
                    79:c6:ec:1d:40:a3:09:aa:92:e1:9c:d7:e5:cf:d6:
                    70:3f:06:b8:49:b6:a4:9a:6d:87:6f:c6:a9:e7:e4:
                    15:1a:c9:4c:4b:74:1c:19:0b:c8:16:c9:b7:cb:34:
                    f7:9a:50:3d:f3:33:3c:a9:c6:60:75:be:89:b1:6e:
                    52:9a:a7:3c:40:65:76:9a:88:b0:23:fe:ae:b5:d7:
                    79:81:45:2b:b3:ee:e5:ee:3a:32:18:89:59:ad:41:
                    d1:49:e5:cc:67:e0:2b:db:fa:0a:4c:0a:44:f8:b9:
                    74:ac:6a:60:1a:89:5a:cf:1e:fa:fe:00:64:fc:7d:
                    dd:ee:2b:de:b5:89:e0:3e:ba:2c:1a:00:e0:b6:e0:
                    84:d4:01:3c:ad:5a:9d:b8:b4:8e:01:17:ae:36:2f:
                    6b:a3:89:1f:6f:c4:b2:35:8e:3a:0a:73:d9:aa:da:
                    d0:95:55:4b:11:6b:78:98:5f:8a:71:a3:84:e5:a4:
                    f5:e9:37:6d:bd:f2:f3:32:fc:9a:42:a2:49:7b:c6:
                    5f:33:97:a2:56:70:38:73:0f:89:ae:e4:ea:2b:37:
                    0d:0a:42:7e:e4:64:e0:3e:ed:dc:22:b8:92:d1:3a:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3B:77:68:0C:B6:6F:8C:07:A3:2E:4B:0E:88:28:8A:39:0D:F3:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/dc45fae9-5ad3-321c-8049-0bf016f07538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:50:1d:c4:85:43:89:df:0f:2b:67:80:5c:ff:34:82:51:
         14:88:4f:15:67:74:46:1c:85:8f:7d:d1:ab:44:92:2e:90:d0:
         2c:27:dd:b3:5e:af:0a:ca:f9:58:15:3a:30:09:3a:94:bc:c3:
         04:84:55:cd:16:96:72:38:03:64:18:e8:b9:f7:62:b1:cd:fc:
         c9:62:10:ef:3d:8a:5e:d8:1e:c8:4d:9e:2b:0a:4a:ce:0c:fa:
         98:e3:84:10:b1:69:e1:84:8b:30:7b:fa:7c:7d:7d:53:c2:bc:
         cc:5b:cc:bc:47:9f:14:fd:76:7a:61:19:c7:57:04:b4:0b:93:
         3e:8d:83:17:5c:4c:aa:74:3b:b7:ba:05:62:91:ff:aa:c9:cb:
         36:06:ae:2c:60:15:9e:8c:12:66:dd:8a:f5:df:f8:f5:25:72:
         2b:de:cf:e4:b5:d7:81:27:a4:74:0e:a4:af:98:ec:32:62:d3:
         27:0d:b7:93:b1:da:2f:0d:5b:c3:c5:cc:61:da:55:fc:f9:b2:
         9c:4f:63:38:e4:80:9d:e4:9b:07:3d:bf:6b:76:dc:0d:94:03:
         ee:ff:ae:9d:e8:a2:c4:d1:bd:93:18:08:4f:24:a7:cc:09:c4:
         78:bf:0d:75:2b:c6:f0:18:2f:46:f6:a4:bf:0d:30:d6:91:5f:
         59:8d:20:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQU1Dnn53uGRZQ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4
NmQ3MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk
Yzg4MDdlMDQtZjU5ZC00NmUyLWFhNzMtYjAyOGQzZTFkYzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioLDVQOV8AiXJ1WG+NYJLLStpH/c6BzOUNab
za15xuwdQKMJqpLhnNflz9ZwPwa4Sbakmm2Hb8ap5+QVGslMS3QcGQvIFsm3yzT3
mlA98zM8qcZgdb6JsW5Smqc8QGV2moiwI/6utdd5gUUrs+7l7joyGIlZrUHRSeXM
Z+Ar2/oKTApE+Ll0rGpgGolazx76/gBk/H3d7ivetYngProsGgDgtuCE1AE8rVqd
uLSOAReuNi9ro4kfb8SyNY46CnPZqtrQlVVLEWt4mF+KcaOE5aT16TdtvfLzMvya
QqJJe8ZfM5eiVnA4cw+JruTqKzcNCkJ+5GTgPu3cIriS0TqEKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGM7d2gMtm+MB6MuSw6IKIo5DfPOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj
NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZGM0NWZhZTktNWFkMy0z
MjFjLTgwNDktMGJmMDE2ZjA3NTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx
MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl
ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy
ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufAiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABn+UB3EhUOJ3w8rZ4Bc/zSCURSITxVndEYchY990atEki6Q0Cwn3bNe
rwrK+VgVOjAJOpS8wwSEVc0WlnI4A2QY6Ln3YrHN/MliEO89il7YHshNnisKSs4M
+pjjhBCxaeGEizB7+nx9fVPCvMxbzLxHnxT9dnphGcdXBLQLkz6NgxdcTKp0O7e6
BWKR/6rJyzYGrixgFZ6MEmbdivXf+PUlcivez+S114EnpHQOpK+Y7DJi0ycNt5Ox
2i8NW8PFzGHaVfz5spxPYzjkgJ3kmwc9v2t23A2UA+7/rp3oosTRvZMYCE8kp8wJ
xHi/DXUrxvAYL0b2pL8NMNaRX1mNIL0=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:15:03 2025 by rpki-client