Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/13c41f03-1739-31d0-98ac-2616cd414326.roa
File:                     13c41f03-1739-31d0-98ac-2616cd414326.roa (raw, json)
Hash identifier:          uT3u8Wdzkw58FY0XmEivq7w9KP8TXOiaZ6Q3CvlsnpI=
Subject key identifier:   53:AA:F8:C0:16:10:EB:4C:58:6D:98:56:84:BA:B0:E4:FE:A0:50:8C
Certificate issuer:       /CN=39fea962-7ffb-4d29-beb1-e588e6436410
Certificate serial:       010D0C9F4328584B13D6B45DA2F899D9D6458CC0
Authority key identifier: C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/13c41f03-1739-31d0-98ac-2616cd414326.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     30247
IP address blocks:        69.167.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b4:5d:a2:f8:99:d9:d6:45:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fea962-7ffb-4d29-beb1-e588e6436410
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=28e32d58-b2e2-419d-aaa9-6b2b9f26c696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:42:c6:eb:24:0f:4b:31:8d:c1:72:00:8a:d6:
                    f6:e1:39:30:63:55:93:d6:8c:85:ac:40:e9:ba:30:
                    85:43:d9:57:c1:23:c8:3a:34:5e:9e:9f:5d:22:c6:
                    6a:b2:47:3a:15:14:41:50:e4:ed:ff:0f:8b:3f:6e:
                    f2:5b:fb:8e:b7:6b:47:2d:7e:71:87:d9:39:9a:07:
                    c2:21:37:61:9e:9e:91:f5:a1:4d:55:75:da:cd:1c:
                    cc:53:30:1b:02:6b:5f:ef:7a:8c:59:b0:3b:b1:b4:
                    4e:85:a4:4c:b9:bb:8a:f3:b2:14:df:a9:e9:ad:7e:
                    1e:2c:f7:2b:5d:2b:5f:57:62:ec:05:2c:bf:42:f7:
                    4e:11:6d:15:bf:dc:44:ee:e1:6e:04:bb:6f:48:96:
                    f8:c7:18:5a:0c:6d:41:86:5c:29:cb:9c:1a:55:7e:
                    8c:ee:a0:d4:02:81:31:ed:ec:1a:d2:11:33:9f:e2:
                    6f:98:38:b5:0f:cc:7a:cb:dc:c1:94:75:b5:46:57:
                    84:95:7b:05:f3:d1:4c:37:08:10:55:8b:cb:d1:4a:
                    f9:95:8f:b7:a0:95:2c:35:07:8b:62:14:58:43:40:
                    27:29:20:5a:1a:fd:e0:8b:63:96:3d:3c:ac:8e:4e:
                    36:15:34:a2:cb:1a:7a:52:8f:b8:b3:cc:d7:57:fc:
                    df:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AA:F8:C0:16:10:EB:4C:58:6D:98:56:84:BA:B0:E4:FE:A0:50:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/13c41f03-1739-31d0-98ac-2616cd414326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl

            X509v3 Authority Key Identifier:
                keyid:C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.167.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:de:9a:fd:b8:c0:07:ef:1b:d0:9a:69:8a:fe:27:e9:26:77:
         21:c2:f1:34:72:d3:af:5d:ac:1b:44:50:d4:53:eb:c7:68:45:
         ee:37:e3:64:22:f7:61:10:93:ac:2e:43:ff:a7:c7:dd:f3:10:
         95:fe:60:df:8c:4e:83:2f:b4:ee:30:2b:40:70:e7:26:9e:e6:
         3f:c9:e8:e7:97:7b:8d:8b:61:b9:8c:16:d7:f0:55:2f:3b:7c:
         fa:44:64:d6:95:fa:d9:8f:cf:82:14:61:46:9b:02:b5:fd:d9:
         d6:71:79:3a:da:8f:8c:57:4a:db:d9:c4:52:4a:e5:d1:67:3a:
         ae:80:59:d5:c7:e4:6d:98:d9:fa:65:c0:f3:54:b1:81:ab:90:
         e0:32:b4:d5:87:ed:ca:07:85:58:a4:85:91:da:c5:53:d4:e4:
         16:71:29:26:8b:81:01:d4:45:ef:64:d1:9d:99:fb:be:0f:a0:
         01:cb:05:26:76:c6:f4:8a:0f:6f:13:3d:1d:ae:7d:6f:d7:0e:
         ea:d5:47:d4:d6:2a:d0:91:e3:27:dd:38:56:ab:73:d1:29:dd:
         9a:65:f1:5a:5e:33:6a:09:5c:25:eb:44:6a:14:b0:7d:16:5b:
         05:73:50:6b:b4:a3:ac:b2:0b:85:69:59:fb:3f:cd:b0:d2:14:
         88:c1:99:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rRdoviZ2dZFjMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzlmZWE5NjItN2ZmYi00ZDI5LWJlYjEtZTU4OGU2NDM2
NDEwMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
MjhlMzJkNTgtYjJlMi00MTlkLWFhYTktNmIyYjlmMjZjNjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ULG6yQPSzGNwXIAitb24TkwY1WT1oyFrEDp
ujCFQ9lXwSPIOjRenp9dIsZqskc6FRRBUOTt/w+LP27yW/uOt2tHLX5xh9k5mgfC
ITdhnp6R9aFNVXXazRzMUzAbAmtf73qMWbA7sbROhaRMubuK87IU36nprX4eLPcr
XStfV2LsBSy/QvdOEW0Vv9xE7uFuBLtvSJb4xxhaDG1Bhlwpy5waVX6M7qDUAoEx
7ewa0hEzn+JvmDi1D8x6y9zBlHW1RleElXsF89FMNwgQVYvL0Ur5lY+3oJUsNQeL
YhRYQ0AnKSBaGv3gi2OWPTysjk42FTSiyxp6Uo+4s8zXV/zfbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOq+MAWEOtMWG2YVoS6sOT+oFCMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOWZl
YTk2Mi03ZmZiLTRkMjktYmViMS1lNTg4ZTY0MzY0MTAvMTNjNDFmMDMtMTczOS0z
MWQwLTk4YWMtMjYxNmNkNDE0MzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzlmZWE5NjItN2ZmYi00ZDI5LWJl
YjEtZTU4OGU2NDM2NDEwLzM5ZmVhOTYyLTdmZmItNGQyOS1iZWIxLWU1ODhlNjQz
NjQxMC5jcmwwHwYDVR0jBBgwFoAUyVB6rGZ35uRr5aFExxzYjCXCnvswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOWZlYTk2Mi03ZmZiLTRkMjktYmViMS1lNTg4
ZTY0MzY0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERacwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXemv24wAfvG9CaaYr+J+kmdyHC8TRy069drBtEUNRT68doRe4342Qi
92EQk6wuQ/+nx93zEJX+YN+MToMvtO4wK0Bw5yae5j/J6OeXe42LYbmMFtfwVS87
fPpEZNaV+tmPz4IUYUabArX92dZxeTraj4xXStvZxFJK5dFnOq6AWdXH5G2Y2fpl
wPNUsYGrkOAytNWH7coHhVikhZHaxVPU5BZxKSaLgQHURe9k0Z2Z+74PoAHLBSZ2
xvSKD28TPR2ufW/XDurVR9TWKtCR4yfdOFarc9Ep3Zpl8VpeM2oJXCXrRGoUsH0W
WwVzUGu0o6yyC4VpWfs/zbDSFIjBmXc=
-----END CERTIFICATE-----
Generated at Sat Oct 11 04:50:10 2025 by rpki-client