Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0ed2e2c5-ee06-3d02-9a78-dad9818e33d3.roa
File:                     0ed2e2c5-ee06-3d02-9a78-dad9818e33d3.roa (raw, json)
Hash identifier:          mF4As8HhMmLcKcLPAznGLFWm15YJHAJv+60f6KmWY7I=
Subject key identifier:   39:02:A8:A3:B1:EE:B2:38:DC:C7:FB:6B:0E:B9:1F:98:A8:E0:60:9A
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584B233198EB155A9C2285B6E500
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0ed2e2c5-ee06-3d02-9a78-dad9818e33d3.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     6922
IP address blocks:        192.124.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:98:eb:15:5a:9c:22:85:b6:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=37245113-7245-45b4-a80b-9bac4447d6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:92:4a:e1:6b:be:ba:73:5c:34:84:b9:f5:ce:
                    36:0e:11:ac:71:6b:0c:6c:c3:30:a6:3e:f6:e8:39:
                    19:05:fd:29:d5:98:9e:4c:30:20:4c:8a:03:ca:de:
                    08:dd:05:63:f4:74:92:e4:14:b4:bc:09:ec:c0:bb:
                    70:dd:5c:b2:fd:c2:d8:e7:63:d0:7e:2b:df:00:d5:
                    13:fa:34:f8:f1:cf:dc:a7:69:54:01:ce:55:5f:9b:
                    fd:2b:40:b7:53:36:79:9d:71:c8:cd:7b:b5:5b:a4:
                    b1:cf:4a:f0:90:91:7f:df:60:0d:b1:da:b7:06:7b:
                    a3:4a:ec:5d:0a:d1:59:23:e7:50:b4:df:55:71:7f:
                    a9:e4:8a:2a:cc:25:0e:57:d6:67:51:ca:d4:f5:c5:
                    89:c5:d1:e7:f1:35:02:1a:0e:9b:3c:5c:9d:7f:ab:
                    3c:ed:d7:3f:0e:1e:2f:2f:01:c8:f8:c3:53:dd:50:
                    5c:c6:98:dd:00:34:15:6c:dc:fc:72:70:d3:13:c9:
                    ad:9f:94:ae:7e:92:64:97:dc:c8:92:14:56:47:c9:
                    3f:f4:3b:9b:18:3a:27:9f:0e:55:81:b2:ad:dd:ab:
                    ea:17:3e:24:ba:0c:4d:b7:18:aa:87:2a:8f:a7:1c:
                    a5:a4:39:f0:be:c9:aa:b4:25:e0:78:00:75:eb:73:
                    04:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:02:A8:A3:B1:EE:B2:38:DC:C7:FB:6B:0E:B9:1F:98:A8:E0:60:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0ed2e2c5-ee06-3d02-9a78-dad9818e33d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c3:74:85:07:14:c1:99:8f:d3:77:ad:5a:b2:97:94:8d:93:
         27:fd:79:53:17:56:f7:93:41:df:5d:24:97:c5:a2:3d:06:c6:
         39:c8:3c:6e:12:40:5c:b5:f6:d3:f6:7d:b7:14:ba:61:17:58:
         c5:3b:38:a5:09:e0:9f:c8:49:b2:92:90:52:88:9e:c0:17:e5:
         1c:b9:a2:80:9a:39:dc:e0:74:a8:70:ff:81:e2:6a:88:63:02:
         14:60:62:f1:d0:4f:62:74:7a:70:90:ff:bb:48:57:68:98:1b:
         1c:2e:ca:79:bd:27:42:5a:6c:6e:70:1a:f1:97:57:5d:d9:9f:
         97:53:f9:88:f0:c0:24:3a:e1:8b:15:92:77:fa:c1:2a:41:9e:
         35:bf:d3:14:f2:f4:02:b5:76:16:62:75:e3:65:6c:df:5c:c3:
         1c:60:43:58:88:11:e6:d9:bf:82:4d:1b:8e:3b:89:2a:41:06:
         47:a4:1d:15:a5:33:38:f1:0a:77:5b:db:96:73:ac:98:08:99:
         11:fd:81:2d:84:e4:ae:0c:75:fc:f1:e0:c4:0b:50:d6:47:d7:
         e5:6d:8c:b6:91:34:de:2a:8d:4b:23:ba:87:8f:c1:8e:70:56:
         55:4a:e1:a2:a9:a3:f6:63:3e:38:14:a1:52:0a:e3:33:41:16:
         aa:45:70:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZjrFVqcIoW25QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk
MzcyNDUxMTMtNzI0NS00NWI0LWE4MGItOWJhYzQ0NDdkNmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pJK4Wu+unNcNIS59c42DhGscWsMbMMwpj72
6DkZBf0p1ZieTDAgTIoDyt4I3QVj9HSS5BS0vAnswLtw3Vyy/cLY52PQfivfANUT
+jT48c/cp2lUAc5VX5v9K0C3UzZ5nXHIzXu1W6Sxz0rwkJF/32ANsdq3BnujSuxd
CtFZI+dQtN9VcX+p5IoqzCUOV9ZnUcrU9cWJxdHn8TUCGg6bPFydf6s87dc/Dh4v
LwHI+MNT3VBcxpjdADQVbNz8cnDTE8mtn5SufpJkl9zIkhRWR8k/9DubGDonnw5V
gbKt3avqFz4kugxNtxiqhyqPpxylpDnwvsmqtCXgeAB163MEiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDkCqKOx7rI43Mf7aw65H5io4GCaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvMGVkMmUyYzUtZWUwNi0z
ZDAyLTlhNzgtZGFkOTgxOGUzM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHznMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPDdIUHFMGZj9N3rVqyl5SNkyf9eVMXVveTQd9dJJfFoj0GxjnIPG4S
QFy19tP2fbcUumEXWMU7OKUJ4J/ISbKSkFKInsAX5Ry5ooCaOdzgdKhw/4Hiaohj
AhRgYvHQT2J0enCQ/7tIV2iYGxwuynm9J0JabG5wGvGXV13Zn5dT+YjwwCQ64YsV
knf6wSpBnjW/0xTy9AK1dhZideNlbN9cwxxgQ1iIEebZv4JNG447iSpBBkekHRWl
MzjxCndb25ZzrJgImRH9gS2E5K4Mdfzx4MQLUNZH1+VtjLaRNN4qjUsjuoePwY5w
VlVK4aKpo/ZjPjgUoVIK4zNBFqpFcBw=
-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:12 2025 by rpki-client