Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa
File:                     6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa (raw, json)
Hash identifier:          aHuaV+9x79WXBtXOlDa9D6aT9t31XGf9q45eQPZlM4o=
Subject key identifier:   25:7F:DA:4F:8A:88:5B:74:CB:43:E7:79:A6:7E:0D:39:75:7C:18:49
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584B110BFBEDF987CFDA916BB6C8
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     47050
IP address blocks:        173.224.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0b:fb:ed:f9:87:cf:da:91:6b:b6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=95dcabf6-1732-42ad-b993-b6799b779188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:64:46:97:d9:9e:6e:41:fd:d0:e2:73:77:d9:
                    f1:95:6c:73:b7:71:46:2c:89:94:8b:06:99:ee:a6:
                    a9:2e:d6:07:75:3c:47:69:3a:c6:70:5a:8d:b8:0a:
                    3f:92:23:e8:8d:28:4f:e5:44:5b:bd:28:93:7a:35:
                    79:2c:41:65:4a:87:a0:ac:0e:e1:89:ee:5b:3f:d5:
                    44:10:6c:7a:5f:da:02:84:50:ff:6d:3b:ac:72:f1:
                    3d:12:61:ec:d4:f8:3b:06:2c:18:a0:3c:3c:44:48:
                    42:5f:1d:40:f8:8d:d3:27:0a:7f:8f:b4:d1:c0:b6:
                    68:60:fc:79:b9:43:d0:45:4f:1d:1a:aa:99:e4:71:
                    7f:28:75:10:9d:ce:33:e5:59:a3:e6:eb:ed:66:3b:
                    66:38:8a:de:ef:5b:71:01:f4:d9:6f:e8:58:5c:a5:
                    db:e8:c0:eb:b7:9a:5b:84:3b:e1:f5:0a:55:37:8b:
                    fe:bb:4b:33:6d:51:97:9d:36:51:50:68:3c:74:bd:
                    ee:8f:8f:c0:f0:e4:51:2d:23:19:be:6f:6a:30:88:
                    6f:d4:46:0f:bd:51:dc:f5:9e:15:28:6d:f5:a7:4c:
                    c4:3c:7f:67:17:ee:6e:79:6e:7a:df:26:11:da:f1:
                    f3:aa:89:02:c4:13:42:54:f9:ff:4d:06:46:b0:3d:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7F:DA:4F:8A:88:5B:74:CB:43:E7:79:A6:7E:0D:39:75:7C:18:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9d:34:86:54:14:75:b1:e3:a1:05:5c:60:48:e5:08:37:e4:
         ea:9a:f2:2e:ac:7a:2f:62:f9:d1:ca:c1:86:fe:94:d7:eb:f2:
         74:d8:c4:6a:5e:a2:85:fa:82:ca:9a:d5:ba:52:4c:48:15:2f:
         7f:a7:2e:ea:9d:e6:50:e4:a8:b4:0e:68:45:71:4a:ae:a1:32:
         db:71:98:c9:2c:83:ff:85:dd:27:ac:bf:4d:05:09:91:03:8d:
         99:3f:5d:9e:29:3d:7a:45:a6:1e:0c:3e:58:33:e0:61:e5:6e:
         a0:5a:5b:59:f4:8a:5b:98:06:a9:79:90:07:c4:8d:46:58:66:
         6e:98:eb:47:0b:2f:26:45:6c:0c:a9:a9:69:3b:d4:81:04:59:
         82:7d:c0:c5:82:ce:85:fe:95:9d:62:84:89:bc:84:61:cc:d5:
         d5:a4:46:ef:d7:04:6f:c4:0d:b5:df:a6:b3:43:d3:28:87:58:
         ff:2f:c7:52:55:ee:8d:e7:2a:8c:79:b6:5a:b6:ff:31:f2:66:
         c5:34:6b:57:7a:9f:10:ab:38:9a:ba:38:64:a6:ca:45:00:b9:
         d6:6f:ef:c2:01:51:7d:a0:e4:a9:2c:85:b6:c5:b9:d1:ea:f8:
         8a:df:4a:a0:6e:07:e1:9b:d2:d7:83:58:6c:48:07:ab:2d:60:
         cc:f9:51:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRC/vt+YfP2pFrtsgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI1ZjJkYWYtN2Q3YS00ODQ4LWJiZDItMDU1ZjQzYWU4
OTcwMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk
OTVkY2FiZjYtMTczMi00MmFkLWI5OTMtYjY3OTliNzc5MTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWRGl9mebkH90OJzd9nxlWxzt3FGLImUiwaZ
7qapLtYHdTxHaTrGcFqNuAo/kiPojShP5URbvSiTejV5LEFlSoegrA7hie5bP9VE
EGx6X9oChFD/bTuscvE9EmHs1Pg7BiwYoDw8REhCXx1A+I3TJwp/j7TRwLZoYPx5
uUPQRU8dGqqZ5HF/KHUQnc4z5Vmj5uvtZjtmOIre71txAfTZb+hYXKXb6MDrt5pb
hDvh9QpVN4v+u0szbVGXnTZRUGg8dL3uj4/A8ORRLSMZvm9qMIhv1EYPvVHc9Z4V
KG31p0zEPH9nF+5ueW563yYR2vHzqokCxBNCVPn/TQZGsD00EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCV/2k+KiFt0y0PneaZ+DTl1fBhJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVm
MmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVmNDNhZTg5NzAvNmY4OTRmOTUtYmI1Yi0z
OWQzLWE0YTItYmExMTBlNmQ5YjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGI1ZjJkYWYtN2Q3YS00ODQ4LWJi
ZDItMDU1ZjQzYWU4OTcwLzBiNWYyZGFmLTdkN2EtNDg0OC1iYmQyLTA1NWY0M2Fl
ODk3MC5jcmwwHwYDVR0jBBgwFoAUMZIFdzydzonOld5Ql69DAR5Wb+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVmMmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVm
NDNhZTg5NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreBQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAidNIZUFHWx46EFXGBI5Qg35Oqa8i6sei9i+dHKwYb+lNfr8nTYxGpe
ooX6gsqa1bpSTEgVL3+nLuqd5lDkqLQOaEVxSq6hMttxmMksg/+F3Sesv00FCZED
jZk/XZ4pPXpFph4MPlgz4GHlbqBaW1n0iluYBql5kAfEjUZYZm6Y60cLLyZFbAyp
qWk71IEEWYJ9wMWCzoX+lZ1ihIm8hGHM1dWkRu/XBG/EDbXfprND0yiHWP8vx1JV
7o3nKox5tlq2/zHyZsU0a1d6nxCrOJq6OGSmykUAudZv78IBUX2g5KkshbbFudHq
+IrfSqBuB+Gb0teDWGxIB6stYMz5Ua8=
-----END CERTIFICATE-----
Generated at Thu Oct 9 20:13:38 2025 by rpki-client