Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3b5dd32-8482-334b-bee6-d68b9efe02a3.roa
File:                     e3b5dd32-8482-334b-bee6-d68b9efe02a3.roa (raw, json)
Hash identifier:          B82L+bmMelOHzIXz8Ui2n3CsmaIPDFnd6GOsStb6Alo=
Subject key identifier:   47:12:09:41:9A:59:58:54:99:41:6E:3E:80:8B:F6:3B:06:27:1D:E0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BA4E94777D8232AE6B535D780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3b5dd32-8482-334b-bee6-d68b9efe02a3.roa
Signing time:             Sun 26 Oct 2025 00:10:18 +0000
ROA not before:           Sun 26 Oct 2025 00:10:18 +0000
ROA not after:            Sat 24 Jan 2026 01:10:18 +0000
asID:                     834
IP address blocks:        72.244.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a4:e9:47:77:d8:23:2a:e6:b5:35:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 26 00:10:18 2025 GMT
            Not After : Jan 24 01:10:18 2026 GMT
        Subject: CN=3431b4c4-d8a9-45aa-911e-dc686f5c5892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:5d:e5:94:2f:34:49:b9:19:bd:88:4d:85:
                    90:05:3e:25:b0:1f:7f:dc:e4:d3:68:6b:c6:be:1d:
                    24:86:82:f1:5f:cb:55:46:d3:b1:7b:e8:bc:03:01:
                    0d:8d:1c:5f:d3:d5:31:4f:16:e5:57:e0:91:6f:d1:
                    84:80:57:5e:97:6b:ee:9b:5a:2f:53:5e:64:5a:9c:
                    5d:78:36:84:8f:01:a4:8b:d4:e4:a7:3b:45:a0:ed:
                    f0:14:ee:86:3f:f3:88:0f:00:14:93:77:4c:46:8f:
                    87:30:cf:2b:57:ec:06:9d:49:cf:02:9d:f4:19:63:
                    50:20:af:56:cf:e1:74:98:f0:9e:a2:0f:3f:10:0e:
                    9b:89:78:bf:e3:1d:61:4d:6a:ed:d0:9b:e5:6c:de:
                    55:a9:7d:b1:6c:99:18:48:59:e9:77:6d:58:58:69:
                    c4:da:98:db:93:9e:76:aa:01:bb:0e:02:6d:9d:4f:
                    bb:7a:92:89:81:f5:73:14:44:2f:45:a3:2d:71:0a:
                    6d:49:77:e3:f5:31:e6:3d:39:cc:9d:0d:ac:6b:90:
                    4a:b6:d8:5c:93:e1:fc:b4:bc:74:0b:cd:ef:bb:d8:
                    10:9f:a5:8f:92:3f:be:dd:56:ea:b7:34:9b:37:0d:
                    c3:30:89:d4:b1:7a:03:61:32:f9:9a:a3:52:be:de:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:12:09:41:9A:59:58:54:99:41:6E:3E:80:8B:F6:3B:06:27:1D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3b5dd32-8482-334b-bee6-d68b9efe02a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:2f:a6:87:51:94:77:a6:dc:b7:92:a7:ee:91:7d:a6:f5:86:
         8a:3e:0d:cb:15:ac:3d:d3:57:af:6f:5c:71:00:06:e2:57:a6:
         92:2c:87:2c:21:9e:dc:d4:33:d7:7f:eb:bc:dc:b4:c0:65:8b:
         7e:0e:ca:9a:92:7b:34:63:85:e1:a2:17:19:99:95:f5:c5:f7:
         20:4c:87:ea:e5:64:e8:57:f3:e9:80:d4:e3:6a:bf:e3:74:32:
         8a:81:75:42:ba:e9:f2:e2:0c:34:8e:d9:6a:c4:79:3f:56:1c:
         80:e2:e7:d5:0f:19:4e:16:de:5b:b0:60:ea:6d:91:68:a4:f4:
         a1:3f:2e:16:be:57:d7:af:66:12:fb:a3:18:85:3e:ea:71:a3:
         4f:6a:99:a0:80:dc:bf:94:25:6a:bd:e4:a7:01:ad:0d:7e:e1:
         d2:dc:7b:56:40:59:08:1b:d0:41:cd:43:79:9f:1a:19:89:b1:
         85:81:7a:79:d1:e3:10:fa:0e:9a:5c:a9:4a:a9:72:c0:98:f7:
         66:63:67:09:f5:3f:2b:86:fa:67:6f:4f:3d:66:83:2f:f0:d1:
         56:8b:a4:56:47:2c:3d:17:a0:ae:e1:b6:07:42:20:a0:13:b2:
         d2:41:d6:47:dd:85:22:b8:c2:8b:86:8d:95:1c:ce:08:31:a1:
         7f:18:b0:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuk6Ud32CMq5rU114AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MTAyNjAwMTAxOFoXDTI2MDEyNDAxMTAxOFowLzEtMCsGA1UEAxMk
MzQzMWI0YzQtZDhhOS00NWFhLTkxMWUtZGM2ODZmNWM1ODkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g5d5ZQvNEm5Gb2ITYWQBT4lsB9/3OTTaGvG
vh0khoLxX8tVRtOxe+i8AwENjRxf09UxTxblV+CRb9GEgFdel2vum1ovU15kWpxd
eDaEjwGki9TkpztFoO3wFO6GP/OIDwAUk3dMRo+HMM8rV+wGnUnPAp30GWNQIK9W
z+F0mPCeog8/EA6biXi/4x1hTWrt0JvlbN5VqX2xbJkYSFnpd21YWGnE2pjbk552
qgG7DgJtnU+7epKJgfVzFEQvRaMtcQptSXfj9THmPTnMnQ2sa5BKtthck+H8tLx0
C83vu9gQn6WPkj++3VbqtzSbNw3DMInUsXoDYTL5mqNSvt5GGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEcSCUGaWVhUmUFuPoCL9jsGJx3gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTNiNWRkMzItODQ4Mi0z
MzRiLWJlZTYtZDY4YjllZmUwMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPTMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMcvpodRlHem3LeSp+6Rfab1hoo+DcsVrD3TV69vXHEABuJXppIshywh
ntzUM9d/67zctMBli34OypqSezRjheGiFxmZlfXF9yBMh+rlZOhX8+mA1ONqv+N0
MoqBdUK66fLiDDSO2WrEeT9WHIDi59UPGU4W3luwYOptkWik9KE/Lha+V9evZhL7
oxiFPupxo09qmaCA3L+UJWq95KcBrQ1+4dLce1ZAWQgb0EHNQ3mfGhmJsYWBennR
4xD6DppcqUqpcsCY92ZjZwn1PyuG+mdvTz1mgy/w0VaLpFZHLD0XoK7htgdCIKAT
stJB1kfdhSK4wouGjZUczggxoX8YsNI=
-----END CERTIFICATE-----
Generated at Fri Oct 31 05:36:12 2025 by rpki-client