Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa
File:                     0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa (raw, json)
Hash identifier:          3ZnaItpzKPo9Q9u9fcreOr9zog3tPR9sY8vTwegiutQ=
Subject key identifier:   DE:5F:9F:D0:55:C0:2C:4A:08:4E:C3:7A:B5:51:0E:27:40:52:43:E1
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584B9E07BD47DA0F71BEC4F751C0
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     6181
IP address blocks:        66.42.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:bd:47:da:0f:71:be:c4:f7:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=3dc46c4d-7ad2-4792-ac3a-a55966132900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:56:e0:4a:56:58:86:27:3b:b0:64:cd:a6:45:
                    d6:89:7a:42:96:82:bc:ec:40:ba:ae:67:6f:a0:68:
                    84:fc:c6:e4:77:ae:18:ff:4c:2b:fc:30:91:c2:04:
                    01:3b:ad:fc:67:9c:86:00:b2:3d:f6:3f:54:70:21:
                    18:9f:33:49:9e:d0:4d:c6:ff:95:35:0c:c3:f9:fb:
                    19:9f:e6:f2:1f:10:7f:49:df:37:c4:92:36:d7:45:
                    c2:21:49:4f:6b:09:ca:08:db:60:58:e6:96:32:86:
                    89:1e:04:68:64:3c:85:3e:8e:ab:70:a7:aa:d7:46:
                    4e:e5:49:46:b4:b7:cb:82:01:b6:b0:34:c6:b8:97:
                    f5:23:37:7d:22:88:e1:c8:03:73:91:e9:0a:1c:65:
                    08:de:67:e2:dc:46:4b:1e:c7:60:5a:be:ac:53:5f:
                    37:32:5e:b1:1a:6b:97:40:4c:92:e5:52:b9:60:ac:
                    c2:bf:d1:33:38:14:49:99:a1:53:21:8c:80:8d:34:
                    b4:11:aa:ac:0a:67:d3:84:d5:0e:8b:7b:df:19:bd:
                    ff:75:45:57:09:ff:45:5a:ed:6e:15:e9:f7:30:bc:
                    a4:a0:09:69:b5:61:f7:d7:11:92:6c:b8:1f:0f:66:
                    85:0d:69:03:8b:5d:04:48:70:1e:3d:80:4e:cc:fa:
                    17:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5F:9F:D0:55:C0:2C:4A:08:4E:C3:7A:B5:51:0E:27:40:52:43:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.42.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d4:eb:3b:ff:f9:ee:51:9b:87:67:18:e7:69:93:19:7b:de:
         7b:d7:59:1f:b2:f8:2d:a4:b8:fc:d9:2f:ff:e4:d5:96:de:6b:
         af:c7:44:ef:36:0f:8d:0c:40:14:7a:81:a3:7e:db:ec:57:2c:
         06:9b:78:7e:7a:f9:54:c9:1f:54:c9:0a:7f:91:04:76:29:20:
         47:d8:c8:52:8e:dd:60:b2:c6:d9:d2:b6:44:9c:f7:22:bd:da:
         ae:3a:c7:bb:7b:ad:91:45:9e:b2:37:d0:0c:ce:ba:62:ee:fc:
         fb:b7:54:4f:22:e0:f1:9e:b4:f8:2c:fb:6f:68:28:b1:d1:bb:
         e5:73:f5:bc:42:28:71:96:4e:34:ca:91:0d:bc:48:e7:29:3e:
         d9:c1:79:3a:85:91:9e:07:c2:4f:01:4c:e8:52:3e:a3:3f:c7:
         5b:cb:93:ea:5d:f9:10:d1:d4:f5:c8:8c:b3:68:32:bd:cb:2b:
         64:53:37:92:5b:65:92:a3:d6:7b:48:ae:e2:e4:bc:d9:0d:bb:
         7e:d9:17:c0:9f:79:52:b9:f6:52:1a:73:cd:3d:be:0b:84:21:
         cd:41:49:6d:dd:1f:dd:36:51:bf:c8:04:39:c6:41:7a:56:60:
         4d:1a:a1:b3:46:b6:f4:7a:1b:20:fd:22:54:33:13:0f:9d:22:
         0a:a9:bf:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB71H2g9xvsT3UcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ2MzkzNjYtYzA0NC00NTZlLWI4YzgtMGRlMDRhNTQz
YTBjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
M2RjNDZjNGQtN2FkMi00NzkyLWFjM2EtYTU1OTY2MTMyOTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1bgSlZYhic7sGTNpkXWiXpCloK87EC6rmdv
oGiE/Mbkd64Y/0wr/DCRwgQBO638Z5yGALI99j9UcCEYnzNJntBNxv+VNQzD+fsZ
n+byHxB/Sd83xJI210XCIUlPawnKCNtgWOaWMoaJHgRoZDyFPo6rcKeq10ZO5UlG
tLfLggG2sDTGuJf1Izd9IojhyANzkekKHGUI3mfi3EZLHsdgWr6sU183Ml6xGmuX
QEyS5VK5YKzCv9EzOBRJmaFTIYyAjTS0EaqsCmfThNUOi3vfGb3/dUVXCf9FWu1u
Fen3MLykoAlptWH31xGSbLgfD2aFDWkDi10ESHAePYBOzPoXrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN5fn9BVwCxKCE7DerVRDidAUkPhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYz
OTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUwNGE1NDNhMGMvMGNhM2E0NWItOWJhYS0z
M2Y1LTliNDMtMDQ0YmYyMWI3MGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQ2MzkzNjYtYzA0NC00NTZlLWI4
YzgtMGRlMDRhNTQzYTBjLzFkNjM5MzY2LWMwNDQtNDU2ZS1iOGM4LTBkZTA0YTU0
M2EwYy5jcmwwHwYDVR0jBBgwFoAU/DVXyQ49tRkFhaSn5xDpZWoEZ4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDYzOTM2Ni1jMDQ0LTQ1NmUtYjhjOC0wZGUw
NGE1NDNhMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQiqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDU6zv/+e5Rm4dnGOdpkxl73nvXWR+y+C2kuPzZL//k1Zbea6/HRO82
D40MQBR6gaN+2+xXLAabeH56+VTJH1TJCn+RBHYpIEfYyFKO3WCyxtnStkSc9yK9
2q46x7t7rZFFnrI30AzOumLu/Pu3VE8i4PGetPgs+29oKLHRu+Vz9bxCKHGWTjTK
kQ28SOcpPtnBeTqFkZ4Hwk8BTOhSPqM/x1vLk+pd+RDR1PXIjLNoMr3LK2RTN5Jb
ZZKj1ntIruLkvNkNu37ZF8CfeVK59lIac809vguEIc1BSW3dH902Ub/IBDnGQXpW
YE0aobNGtvR6GyD9IlQzEw+dIgqpv9A=
-----END CERTIFICATE-----
Generated at Tue Nov 4 09:25:39 2025 by rpki-client