Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b857663-2a90-3553-ae58-b9e88a096e7a.roa
File:                     5b857663-2a90-3553-ae58-b9e88a096e7a.roa (raw, json)
Hash identifier:          B5YV7TMmjGGY98pHIzXfHkc8LTsRSgy/jpWO2dU1BZo=
Subject key identifier:   26:CC:83:A0:5E:70:F1:09:06:B1:35:FB:4D:A1:51:3A:3E:BE:D4:EB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5249ECCEBF39AB700A8980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b857663-2a90-3553-ae58-b9e88a096e7a.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        71.44.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:49:ec:ce:bf:39:ab:70:0a:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=f58a9898-30f0-44ed-a933-6c01653cbb59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:0c:92:e5:7a:2e:67:38:8a:ac:38:2f:8c:
                    09:b4:22:d4:fa:0f:2f:b9:be:c9:99:08:79:f5:cf:
                    58:aa:a1:df:8b:fc:8e:e0:d3:75:57:f1:af:3c:74:
                    65:61:a5:a9:f0:d0:73:61:4a:ff:3d:c5:f0:d6:51:
                    8a:43:e4:3e:08:8d:05:4c:85:12:3b:82:f7:cc:84:
                    1f:f5:9a:14:3a:2e:91:14:a6:b6:09:2d:73:ff:f3:
                    1c:f6:77:69:c1:17:cb:07:eb:c6:02:4d:08:bd:d9:
                    26:84:e8:15:9a:d3:f1:65:a8:6b:9b:ed:2f:94:37:
                    41:79:01:94:ca:be:56:34:5f:93:35:a2:db:ac:24:
                    f2:80:4c:45:30:d0:15:48:47:e0:a4:77:49:23:91:
                    f5:9d:a3:23:77:5f:9d:f6:b6:59:b5:6f:21:5c:17:
                    0e:bf:b1:ee:17:f6:42:6e:40:eb:1e:dc:8d:14:2d:
                    8c:6c:b9:8c:00:3b:c6:d7:01:2e:06:c8:8a:28:43:
                    bf:f2:96:00:c1:4f:8b:c3:6d:4e:1d:c0:87:82:27:
                    c5:e4:e3:c8:8f:02:98:87:6a:2f:dd:28:1e:5b:72:
                    dc:35:b6:ec:f0:9d:6e:ec:e4:bc:c9:af:8c:f3:82:
                    90:b3:e4:16:09:4b:3c:6f:46:09:3b:91:ae:ec:df:
                    a5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CC:83:A0:5E:70:F1:09:06:B1:35:FB:4D:A1:51:3A:3E:BE:D4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5b857663-2a90-3553-ae58-b9e88a096e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:1b:9d:63:b7:80:6a:27:cb:f6:8b:a6:a7:84:3a:14:80:96:
         10:df:d5:37:38:18:be:57:50:55:5b:05:ee:3f:60:18:1b:72:
         7c:c5:dd:77:a7:79:3c:98:61:3a:38:c5:2f:e4:2e:1f:ae:fe:
         fe:12:df:04:f4:4d:7f:48:98:76:8b:12:ff:30:8e:4c:cf:c2:
         a1:0e:16:92:00:25:a6:27:58:9d:3d:b7:e6:67:4d:ce:6f:28:
         08:d9:c1:bd:55:59:c4:ca:ac:b3:1e:08:8d:f6:73:2e:ab:cf:
         b6:02:22:48:4a:29:25:3f:b5:20:c0:1e:0f:ab:bf:57:ae:50:
         ee:ae:31:12:b9:86:0a:fe:d7:c2:48:ca:5a:37:ec:9a:ca:7d:
         0b:3d:87:23:62:de:fb:57:37:22:a3:f7:f9:b9:bd:47:b4:88:
         3a:9c:0f:bf:c1:5b:2e:7d:81:ac:52:e0:78:09:e0:c8:9f:ef:
         d6:8f:f4:87:e8:b9:bb:ee:f0:3c:d8:83:1d:6a:af:ca:40:dc:
         0d:d1:43:af:f0:1c:cf:71:01:d3:cc:aa:81:5a:e1:4a:37:90:
         fa:aa:69:0d:6a:3e:64:55:6b:f5:45:35:cf:64:80:ac:94:cf:
         fc:f2:a7:1c:94:7b:46:fb:1d:a8:c4:7b:22:4e:f9:ca:5d:bc:
         60:8d:3f:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Uknszr85q3AKiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
ZjU4YTk4OTgtMzBmMC00NGVkLWE5MzMtNmMwMTY1M2NiYjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5AMkuV6Lmc4iqw4L4wJtCLU+g8vub7JmQh5
9c9YqqHfi/yO4NN1V/GvPHRlYaWp8NBzYUr/PcXw1lGKQ+Q+CI0FTIUSO4L3zIQf
9ZoUOi6RFKa2CS1z//Mc9ndpwRfLB+vGAk0IvdkmhOgVmtPxZahrm+0vlDdBeQGU
yr5WNF+TNaLbrCTygExFMNAVSEfgpHdJI5H1naMjd1+d9rZZtW8hXBcOv7HuF/ZC
bkDrHtyNFC2MbLmMADvG1wEuBsiKKEO/8pYAwU+Lw21OHcCHgifF5OPIjwKYh2ov
3SgeW3LcNbbs8J1u7OS8ya+M84KQs+QWCUs8b0YJO5Gu7N+lBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCbMg6BecPEJBrE1+02hUTo+vtTrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNWI4NTc2NjMtMmE5MC0z
NTUzLWFlNTgtYjllODhhMDk2ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRyxyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHIbnWO3gGony/aLpqeEOhSAlhDf1Tc4GL5XUFVbBe4/YBgbcnzF3Xen
eTyYYTo4xS/kLh+u/v4S3wT0TX9ImHaLEv8wjkzPwqEOFpIAJaYnWJ09t+ZnTc5v
KAjZwb1VWcTKrLMeCI32cy6rz7YCIkhKKSU/tSDAHg+rv1euUO6uMRK5hgr+18JI
ylo37JrKfQs9hyNi3vtXNyKj9/m5vUe0iDqcD7/BWy59gaxS4HgJ4Mif79aP9Ifo
ubvu8DzYgx1qr8pA3A3RQ6/wHM9xAdPMqoFa4Uo3kPqqaQ1qPmRVa/VFNc9kgKyU
z/zypxyUe0b7HajEeyJO+cpdvGCNP8E=
-----END CERTIFICATE-----
Generated at Fri Oct 17 05:04:55 2025 by rpki-client