Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/7614ff47-3c79-33e8-ba83-de9c623d0d9b.roa
File:                     7614ff47-3c79-33e8-ba83-de9c623d0d9b.roa (raw, json)
Hash identifier:          yu+zZWKSf2FPIOGjqSb6esiy4VZRstQ+Y0fOXjf2E40=
Subject key identifier:   E4:12:82:A4:1A:62:3A:05:A5:8C:E9:64:48:DB:C4:A0:82:9B:DC:8B
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584B3821A02BA26D2D277351A900
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/7614ff47-3c79-33e8-ba83-de9c623d0d9b.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     27539
IP address blocks:        113.30.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:a0:2b:a2:6d:2d:27:73:51:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=139190a3-ca31-437d-ab3e-a9a9ce22c92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:fb:76:89:10:d4:fb:73:9e:23:c8:1f:4c:
                    b8:cb:e0:e0:74:55:9e:e6:1c:5b:89:22:cf:c7:41:
                    7b:1b:ff:2a:20:ce:2e:4b:a9:13:63:81:8f:7d:71:
                    cc:f1:03:8f:cf:09:2e:ad:9c:72:09:95:6f:32:40:
                    19:1b:96:17:fa:a6:8b:8e:12:5d:2e:18:ac:56:5b:
                    c1:7e:3a:ec:9e:76:1a:b8:9b:6f:5a:f2:55:12:5f:
                    b3:f8:50:7e:74:d7:67:70:1f:0b:69:7e:15:01:c6:
                    eb:ae:6d:04:1d:e7:a1:1a:18:db:a1:65:a3:ac:29:
                    f1:78:2e:41:e2:e0:75:f2:76:9f:d2:d9:3d:2c:4f:
                    c4:6e:b3:4b:2e:3b:11:b4:3e:69:51:5c:58:44:78:
                    70:3f:ec:f6:5b:d0:7b:6c:ad:f1:53:ab:ed:6c:52:
                    94:83:62:05:38:6a:64:ee:48:89:21:b6:e7:7a:37:
                    6c:ca:26:ed:5f:7d:3e:b4:a9:60:61:1b:5d:1a:10:
                    8a:7d:16:c7:38:c4:f2:4a:02:f2:1f:fc:bf:c1:e1:
                    86:2c:8d:a0:5e:b0:57:b5:9d:92:39:5d:55:e7:de:
                    a4:ae:7e:db:b3:4c:20:63:08:ef:58:a6:78:cc:57:
                    6c:78:81:99:7c:2d:80:f0:a2:05:80:fd:1b:43:44:
                    bb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:12:82:A4:1A:62:3A:05:A5:8C:E9:64:48:DB:C4:A0:82:9B:DC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/7614ff47-3c79-33e8-ba83-de9c623d0d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.30.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:85:00:20:93:48:a7:e1:c0:e2:5d:54:2d:77:51:5c:65:89:
         9d:0c:d8:16:7f:1d:f1:78:87:39:28:78:67:35:88:a2:dd:ec:
         71:e8:37:40:88:e7:9d:a1:ae:2b:6c:8a:44:5d:d2:db:a6:30:
         fa:78:98:46:80:81:06:e7:22:0b:41:34:03:c5:ff:b1:de:c3:
         f1:69:35:ae:4a:3f:f7:e7:b8:63:1f:53:c6:ed:b8:f9:f8:53:
         98:59:19:bb:65:18:7f:da:58:ac:75:43:ae:81:12:39:5a:4c:
         7c:4e:20:e4:69:b9:86:06:20:d5:f3:f8:24:f1:b9:c4:0c:6d:
         56:ad:41:20:ca:cb:ad:37:18:b6:ef:92:a9:44:9a:1d:fe:79:
         a5:3b:57:6c:a0:07:d4:53:3e:5a:99:21:d9:84:af:8c:4c:88:
         93:11:56:01:59:6c:88:4a:b3:aa:60:86:2c:43:70:a2:79:6d:
         e3:89:3d:a4:5c:2a:7c:97:2b:68:08:9d:1f:01:44:05:5d:a6:
         c6:88:f8:e6:5b:76:c7:a1:ea:c1:d5:5e:e4:7b:11:8f:60:39:
         0c:b3:ec:b1:b6:d5:fc:ac:12:ee:7b:7e:1b:43:23:27:f5:d9:
         ca:ce:01:b7:56:f5:02:7c:7c:04:f6:b4:51:35:5a:da:2b:b5:
         20:78:01:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IaArom0tJ3NRqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli
OWI2MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
MTM5MTkwYTMtY2EzMS00MzdkLWFiM2UtYTlhOWNlMjJjOTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaD7dokQ1PtzniPIH0y4y+DgdFWe5hxbiSLP
x0F7G/8qIM4uS6kTY4GPfXHM8QOPzwkurZxyCZVvMkAZG5YX+qaLjhJdLhisVlvB
fjrsnnYauJtvWvJVEl+z+FB+dNdncB8LaX4VAcbrrm0EHeehGhjboWWjrCnxeC5B
4uB18naf0tk9LE/EbrNLLjsRtD5pUVxYRHhwP+z2W9B7bK3xU6vtbFKUg2IFOGpk
7kiJIbbnejdsyibtX30+tKlgYRtdGhCKfRbHOMTySgLyH/y/weGGLI2gXrBXtZ2S
OV1V596krn7bs0wgYwjvWKZ4zFdseIGZfC2A8KIFgP0bQ0S7owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOQSgqQaYjoFpYzpZEjbxKCCm9yLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh
NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvNzYxNGZmNDctM2M3OS0z
M2U4LWJhODMtZGU5YzYyM2QwZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4
MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5
YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk
OGRjOWI5YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEcR7wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESFACCTSKfhwOJdVC13UVxliZ0M2BZ/HfF4hzkoeGc1iKLd7HHoN0CI
552hritsikRd0tumMPp4mEaAgQbnIgtBNAPF/7Hew/FpNa5KP/fnuGMfU8btuPn4
U5hZGbtlGH/aWKx1Q66BEjlaTHxOIORpuYYGINXz+CTxucQMbVatQSDKy603GLbv
kqlEmh3+eaU7V2ygB9RTPlqZIdmEr4xMiJMRVgFZbIhKs6pghixDcKJ5beOJPaRc
KnyXK2gInR8BRAVdpsaI+OZbdseh6sHVXuR7EY9gOQyz7LG21fysEu57fhtDIyf1
2crOAbdW9QJ8fAT2tFE1WtortSB4AZs=
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:05:09 2025 by rpki-client