Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/0bcc84d1-d5ed-3d15-b09e-e328dfb11002.roa
File:                     0bcc84d1-d5ed-3d15-b09e-e328dfb11002.roa (raw, json)
Hash identifier:          2KpKFOVVWA7U4nOMOE818j2SdBMT5X02CkmnP5iatZs=
Subject key identifier:   DF:B1:25:29:5E:EF:56:85:38:E1:BE:65:24:70:FC:F7:3E:F3:B1:FC
Certificate issuer:       /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
Certificate serial:       010D0C9F4328584B328C327A06B0A199379500C0
Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/0bcc84d1-d5ed-3d15-b09e-e328dfb11002.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     47018
IP address blocks:        69.41.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:32:7a:06:b0:a1:99:37:95:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=25eb8956-3141-4d7e-995f-2c600b738998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3f:21:69:cd:8b:22:d0:d2:65:e8:34:2f:34:
                    33:8f:7e:7c:9d:c4:4b:f0:25:7d:98:85:b5:21:b5:
                    de:9f:62:1e:0d:ab:04:a5:12:34:22:f2:eb:c1:d3:
                    77:d8:cc:54:ab:61:f2:6c:97:39:f3:3e:75:94:39:
                    ff:9b:66:88:c3:f2:7a:5e:84:67:69:77:d3:ee:c7:
                    05:8f:39:fd:58:12:06:d8:57:f3:7b:70:83:93:94:
                    4f:98:df:85:3c:5c:6b:a0:77:06:ea:5d:f0:8a:08:
                    76:c4:c8:a3:72:78:50:06:8b:43:b7:13:e1:72:3f:
                    83:47:11:0d:a1:0b:bd:44:5a:62:e1:41:02:8a:dd:
                    07:1e:24:be:79:15:b6:f2:29:27:69:ef:1d:24:84:
                    a9:49:2f:b1:3f:b1:dd:b4:36:98:69:56:d7:cb:6f:
                    ef:92:ca:cc:f7:d5:af:a0:b7:0a:4b:db:6b:85:93:
                    ab:bc:43:74:14:25:4b:38:32:86:9a:28:b7:94:c2:
                    96:d7:e4:b0:49:9d:23:fc:3b:08:d6:ac:73:5a:a0:
                    11:ac:29:8e:73:d3:d2:12:7a:a4:af:b4:78:9d:19:
                    35:83:17:5e:51:7a:01:02:e7:a2:ae:8d:df:a1:77:
                    6a:ec:68:2d:95:2b:b3:b9:8f:9c:38:d8:9c:f7:8d:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B1:25:29:5E:EF:56:85:38:E1:BE:65:24:70:FC:F7:3E:F3:B1:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/0bcc84d1-d5ed-3d15-b09e-e328dfb11002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl

            X509v3 Authority Key Identifier:
                keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c7:fb:0a:a0:7e:51:6d:1f:ad:ce:50:5f:66:ab:e9:3d:af:
         3c:17:35:a7:a6:6d:b0:41:38:df:24:99:c3:34:80:9d:55:b8:
         20:76:d3:2e:30:20:23:12:ea:91:5b:e3:80:80:a6:12:eb:30:
         e8:8e:e0:7b:2f:63:15:23:6a:8e:e0:a4:6c:39:02:ce:88:da:
         74:39:98:52:f5:61:43:b8:a5:22:da:9b:62:d1:54:a3:26:d1:
         fa:c5:f5:82:ce:2d:8e:3e:ef:0b:8f:e9:5e:92:e0:3b:a6:2e:
         1b:39:13:73:ac:cb:1c:66:4e:1a:54:25:9a:c1:90:b3:eb:19:
         c5:12:c3:9f:26:5f:6d:6d:eb:37:16:88:a7:90:86:61:05:a3:
         41:ce:ba:64:0f:a2:92:f1:6a:91:29:a2:df:0f:b4:c1:92:19:
         5d:b3:fa:81:e9:94:87:15:78:3d:4d:4b:78:de:f7:a0:ec:5a:
         3e:d1:c4:ef:34:47:f2:d6:c5:a8:ad:e6:a8:27:03:8e:32:68:
         8a:16:eb:f4:71:91:bf:af:d5:17:b9:f7:01:b6:f1:a5:49:48:
         53:3b:96:e5:2c:d5:68:9a:9d:a5:1e:f7:2a:9b:c7:e8:bd:c2:
         3a:d9:3a:0a:49:d2:2b:74:db:0a:7f:d2:e5:f3:4c:e3:e3:fe:
         eb:23:0f:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjDJ6BrChmTeVAMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRjZTVhYzMtYzU1OS00OGZjLTg1NzctMjIzYzZlZDg4
YTNlMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
MjVlYjg5NTYtMzE0MS00ZDdlLTk5NWYtMmM2MDBiNzM4OTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT8hac2LItDSZeg0LzQzj358ncRL8CV9mIW1
IbXen2IeDasEpRI0IvLrwdN32MxUq2HybJc58z51lDn/m2aIw/J6XoRnaXfT7scF
jzn9WBIG2Ffze3CDk5RPmN+FPFxroHcG6l3wigh2xMijcnhQBotDtxPhcj+DRxEN
oQu9RFpi4UECit0HHiS+eRW28iknae8dJISpSS+xP7HdtDaYaVbXy2/vksrM99Wv
oLcKS9trhZOrvEN0FCVLODKGmii3lMKW1+SwSZ0j/DsI1qxzWqARrCmOc9PSEnqk
r7R4nRk1gxdeUXoBAueiro3foXdq7GgtlSuzuY+cONic943EvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN+xJSle71aFOOG+ZSRw/Pc+87H8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNl
NWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNjNmVkODhhM2UvMGJjYzg0ZDEtZDVlZC0z
ZDE1LWIwOWUtZTMyOGRmYjExMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWRjZTVhYzMtYzU1OS00OGZjLTg1
NzctMjIzYzZlZDg4YTNlL2FkY2U1YWMzLWM1NTktNDhmYy04NTc3LTIyM2M2ZWQ4
OGEzZS5jcmwwHwYDVR0jBBgwFoAUmhnasHlgX4KJItHBGKHq+9J/ZmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZGNlNWFjMy1jNTU5LTQ4ZmMtODU3Ny0yMjNj
NmVkODhhM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSkOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/H+wqgflFtH63OUF9mq+k9rzwXNaembbBBON8kmcM0gJ1VuCB20y4w
ICMS6pFb44CAphLrMOiO4HsvYxUjao7gpGw5As6I2nQ5mFL1YUO4pSLam2LRVKMm
0frF9YLOLY4+7wuP6V6S4DumLhs5E3OsyxxmThpUJZrBkLPrGcUSw58mX21t6zcW
iKeQhmEFo0HOumQPopLxapEpot8PtMGSGV2z+oHplIcVeD1NS3je96DsWj7RxO80
R/LWxait5qgnA44yaIoW6/Rxkb+v1Re59wG28aVJSFM7luUs1WianaUe9yqbx+i9
wjrZOgpJ0it02wp/0uXzTOPj/usjD6k=
-----END CERTIFICATE-----
Generated at Fri Oct 10 23:29:08 2025 by rpki-client