Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cc2278b1-dbd0-3082-93dd-866a89cb3225.roa
File:                     cc2278b1-dbd0-3082-93dd-866a89cb3225.roa (raw, json)
Hash identifier:          +npGJvECZiTNiCSv49OziW1p8977FsllQL11dTtP/g8=
Subject key identifier:   83:4B:D3:D5:F2:08:BB:43:D4:BE:51:B3:82:1C:B6:8C:4F:67:92:92
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584B4893C7A45ABD034DB3A021C0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cc2278b1-dbd0-3082-93dd-866a89cb3225.roa
Signing time:             Mon 22 Sep 2025 22:23:40 +0000
ROA not before:           Mon 22 Sep 2025 22:23:40 +0000
ROA not after:            Sun 21 Dec 2025 23:23:40 +0000
asID:                     401838
IP address blocks:        172.111.58.0/24 maxlen: 24
                          172.111.59.0/24 maxlen: 24
                          209.142.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:93:c7:a4:5a:bd:03:4d:b3:a0:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Sep 22 22:23:40 2025 GMT
            Not After : Dec 21 23:23:40 2025 GMT
        Subject: CN=f33d00ff-9745-40bf-972d-6f8c8b6e2297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:c5:29:91:50:0b:27:d8:ca:14:bd:59:e2:
                    98:94:56:04:0c:85:65:cb:3c:71:4c:27:22:de:1e:
                    09:e8:2d:ee:04:b2:dd:1f:fa:f6:f5:9e:f4:0f:06:
                    65:7f:bf:ae:91:35:d1:d0:97:4a:27:a9:f5:56:bb:
                    c4:e8:25:06:9d:cb:ad:3a:53:8d:3e:a1:79:84:8e:
                    40:33:df:b7:25:8b:0d:47:ab:2b:83:b7:16:90:a9:
                    07:f3:c6:8f:7d:80:3e:4b:3d:95:1a:2f:25:90:16:
                    19:94:0d:d2:1a:79:e2:0a:ab:d4:f9:fd:39:0d:47:
                    3a:35:a8:92:ac:af:28:7a:01:48:ba:fc:ad:eb:c3:
                    21:70:c8:c2:6c:79:96:56:2a:5f:f5:a4:c7:57:78:
                    c2:da:0e:d4:ed:2f:1c:ce:32:ad:42:6b:e1:9b:7f:
                    be:4d:f8:a1:80:3f:ff:37:b2:ed:4a:a9:17:6f:28:
                    78:55:bc:19:f7:57:38:5c:a4:aa:8c:29:69:95:d3:
                    9c:3f:7f:a4:3f:5b:a0:00:4b:58:c0:f2:c9:65:4a:
                    08:25:b1:f0:8e:b1:ae:d2:97:bf:fd:fe:ba:5f:5c:
                    d0:e3:8b:13:07:ea:71:a3:94:c4:ba:6f:cc:fe:90:
                    54:0f:3b:39:11:ca:31:d5:6f:fb:68:f0:52:fd:23:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4B:D3:D5:F2:08:BB:43:D4:BE:51:B3:82:1C:B6:8C:4F:67:92:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cc2278b1-dbd0-3082-93dd-866a89cb3225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.58.0/23
                  209.142.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:10:6b:ad:f0:18:ca:7d:22:d1:a6:50:aa:64:3c:52:e9:
         82:da:ef:03:cf:1b:2c:85:9b:73:ef:8e:ba:54:ad:2d:f1:c8:
         13:25:d3:0f:0c:a5:b2:cf:62:92:52:29:aa:05:a4:00:90:f2:
         86:e0:7a:8e:04:2f:96:57:09:ce:a3:10:01:9c:20:b1:b1:2a:
         73:09:63:8a:28:46:c9:d3:db:39:1c:6b:2b:98:e9:23:6e:03:
         54:72:71:53:7b:8c:9f:0b:eb:fb:76:7a:5b:57:64:cf:e6:a1:
         b4:7d:98:e3:ce:d4:a0:ad:4c:85:91:40:77:33:49:a3:b0:2f:
         62:42:eb:db:92:06:cf:f3:9e:56:83:b4:24:68:3f:7b:c6:ba:
         32:7e:4b:db:46:90:77:a8:58:78:16:d4:dc:12:dc:d0:34:a1:
         79:34:73:42:f3:76:12:45:b4:fa:c4:de:3b:7c:1e:3a:53:a1:
         2b:2a:79:5a:79:88:92:20:fc:ac:06:3b:bc:68:18:3a:7d:28:
         17:f3:6d:a9:29:82:b2:3a:16:40:e5:a8:40:1f:8c:1d:b2:77:
         63:c2:cd:77:96:2f:27:41:e0:32:6a:84:52:ec:bc:ee:49:d1:
         99:b2:7a:93:89:d1:c2:31:75:55:ee:9f:95:d9:2a:f8:cd:f2:
         df:28:93:44
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtIk8ekWr0DTbOgIcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTI1MDkyMjIyMjM0MFoXDTI1MTIyMTIzMjM0MFowLzEtMCsGA1UEAxMk
ZjMzZDAwZmYtOTc0NS00MGJmLTk3MmQtNmY4YzhiNmUyMjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurbFKZFQCyfYyhS9WeKYlFYEDIVlyzxxTCci
3h4J6C3uBLLdH/r29Z70DwZlf7+ukTXR0JdKJ6n1VrvE6CUGncutOlONPqF5hI5A
M9+3JYsNR6srg7cWkKkH88aPfYA+Sz2VGi8lkBYZlA3SGnniCqvU+f05DUc6NaiS
rK8oegFIuvyt68MhcMjCbHmWVipf9aTHV3jC2g7U7S8czjKtQmvhm3++TfihgD//
N7LtSqkXbyh4VbwZ91c4XKSqjClpldOcP3+kP1ugAEtYwPLJZUoIJbHwjrGu0pe/
/f66X1zQ44sTB+pxo5TEum/M/pBUDzs5Ecox1W/7aPBS/SM+RQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFINL09XyCLtD1L5Rs4IctoxPZ5KSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvY2MyMjc4YjEtZGJkMC0z
MDgyLTkzZGQtODY2YTg5Y2IzMjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBrG86AwQA
0Y5mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAzREGut8BjKfSLRplCqZDxS6YLa7wPPGyyFm3PvjrpUrS3x
yBMl0w8MpbLPYpJSKaoFpACQ8obgeo4EL5ZXCc6jEAGcILGxKnMJY4ooRsnT2zkc
ayuY6SNuA1RycVN7jJ8L6/t2eltXZM/mobR9mOPO1KCtTIWRQHczSaOwL2JC69uS
Bs/znlaDtCRoP3vGujJ+S9tGkHeoWHgW1NwS3NA0oXk0c0LzdhJFtPrE3jt8HjpT
oSsqeVp5iJIg/KwGO7xoGDp9KBfzbakpgrI6FkDlqEAfjB2yd2PCzXeWLydB4DJq
hFLsvO5J0ZmyepOJ0cIxdVXun5XZKvjN8t8ok0Q=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:53 2025 by rpki-client