Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/de28b314-abdf-3f3f-813f-4e0deac66bff.roa
File:                     de28b314-abdf-3f3f-813f-4e0deac66bff.roa (raw, json)
Hash identifier:          Y0DthhLKCtJIPCKT0tDudMPkZ0Af4cCGmyjrKB6i4Vg=
Subject key identifier:   A6:90:B0:1F:98:5C:CB:91:69:1D:95:C9:35:67:86:6D:83:84:76:EE
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F4328584B13D6B1566CF70F44CB06EEC0
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/de28b314-abdf-3f3f-813f-4e0deac66bff.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     396292
IP address blocks:        142.54.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b1:56:6c:f7:0f:44:cb:06:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=01129011-1a09-41c4-a9c1-c9dc15e20872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:11:84:01:75:5b:e8:c6:11:a3:27:f5:57:1d:
                    83:b1:73:f1:07:6d:cf:db:02:f8:07:67:e6:26:fe:
                    67:fe:5b:24:62:ca:8e:df:41:30:b1:52:5f:6c:d2:
                    6d:79:a8:97:bf:67:d0:be:9d:4a:79:03:9e:11:e7:
                    42:b5:f9:00:7e:42:ee:cb:4a:7e:aa:b5:ca:67:63:
                    88:a6:e2:c9:94:48:0d:3d:d4:dc:23:65:13:8f:46:
                    80:7a:39:fc:55:29:c7:91:6c:a4:5d:fa:e0:a0:44:
                    33:aa:84:f5:00:a9:5f:92:b7:23:7c:3f:0c:ed:2d:
                    27:88:d1:e9:6b:8c:94:98:2b:a0:f9:81:28:d5:24:
                    a6:df:a9:2a:ec:56:d7:6e:5a:97:86:14:60:ba:f2:
                    e6:ec:10:a5:87:a3:5f:5f:e3:4b:84:8f:c7:af:91:
                    87:c8:8b:5b:00:cb:1d:76:21:4f:b5:7d:9a:6a:0a:
                    b9:c8:4a:c9:25:e0:23:55:92:46:72:36:53:d4:56:
                    62:b5:2c:83:f0:7f:bd:e2:07:c0:53:0e:e5:87:e5:
                    af:77:58:73:a9:bb:03:68:eb:14:76:1a:a6:61:15:
                    af:bc:26:2f:68:0e:ca:a2:d0:ad:09:73:62:ef:fc:
                    ea:5c:79:d2:68:14:66:e3:1f:e7:be:fa:6e:9f:82:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:90:B0:1F:98:5C:CB:91:69:1D:95:C9:35:67:86:6D:83:84:76:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/de28b314-abdf-3f3f-813f-4e0deac66bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:2b:83:3b:df:d4:31:0a:b9:11:f0:b5:7d:8e:81:e1:7b:
         a1:ef:56:ad:cf:9d:15:15:ee:21:c5:47:21:50:21:c8:02:f9:
         a4:81:ba:51:ca:12:ad:f0:04:4a:eb:e7:2c:7d:24:1e:a8:e6:
         70:c0:2f:2c:7f:56:01:c9:67:35:dd:16:6d:90:f3:8a:9c:d0:
         8a:ca:c9:c9:c6:36:71:61:9d:aa:97:26:5f:e5:35:aa:4a:6a:
         ff:9d:52:35:56:8d:a4:1a:6d:1a:4b:15:b4:19:71:31:46:3f:
         4b:c2:c5:8f:2c:de:be:da:c5:69:23:ec:2c:a0:b7:5c:d5:fd:
         24:57:e3:27:0c:fc:17:15:0d:9e:87:9f:bf:47:b8:d0:e3:a5:
         10:e9:2e:0f:9d:17:fd:37:15:76:ce:d9:a6:ca:d8:3c:c4:4d:
         75:b3:23:20:88:59:fd:05:30:07:e2:cd:dc:d2:9c:ae:a0:71:
         ed:68:28:f7:05:4c:2f:c0:ae:a5:03:34:94:bb:85:87:4a:0a:
         a1:ea:7c:62:85:d2:42:04:d5:f0:c6:af:9b:96:77:af:cb:6a:
         44:5f:9e:57:a6:14:e5:78:d5:f0:dc:6a:81:b6:1e:78:ae:fa:
         d6:af:9c:fb:d0:ad:0e:75:81:f4:be:e7:71:7b:dc:2a:48:6e:
         01:fc:40:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rFWbPcPRMsG7sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ2Y2IxOTUtOWI5YS00ODM2LTkxNTItYjk3ZTllODMx
MTQ0MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
MDExMjkwMTEtMWEwOS00MWM0LWE5YzEtYzlkYzE1ZTIwODcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRGEAXVb6MYRoyf1Vx2DsXPxB23P2wL4B2fm
Jv5n/lskYsqO30EwsVJfbNJteaiXv2fQvp1KeQOeEedCtfkAfkLuy0p+qrXKZ2OI
puLJlEgNPdTcI2UTj0aAejn8VSnHkWykXfrgoEQzqoT1AKlfkrcjfD8M7S0niNHp
a4yUmCug+YEo1SSm36kq7FbXblqXhhRguvLm7BClh6NfX+NLhI/Hr5GHyItbAMsd
diFPtX2aagq5yErJJeAjVZJGcjZT1FZitSyD8H+94gfAUw7lh+Wvd1hzqbsDaOsU
dhqmYRWvvCYvaA7KotCtCXNi7/zqXHnSaBRm4x/nvvpun4KhNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKaQsB+YXMuRaR2VyTVnhm2DhHbuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZj
YjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdlOWU4MzExNDQvZGUyOGIzMTQtYWJkZi0z
ZjNmLTgxM2YtNGUwZGVhYzY2YmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTQ2Y2IxOTUtOWI5YS00ODM2LTkx
NTItYjk3ZTllODMxMTQ0Lzk0NmNiMTk1LTliOWEtNDgzNi05MTUyLWI5N2U5ZTgz
MTE0NC5jcmwwHwYDVR0jBBgwFoAU1WDzXob02ndtuMXazfHRY5vlND0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZjYjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdl
OWU4MzExNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjjYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADp9K4M739QxCrkR8LV9joHhe6HvVq3PnRUV7iHFRyFQIcgC+aSBulHK
Eq3wBErr5yx9JB6o5nDALyx/VgHJZzXdFm2Q84qc0IrKycnGNnFhnaqXJl/lNapK
av+dUjVWjaQabRpLFbQZcTFGP0vCxY8s3r7axWkj7Cygt1zV/SRX4ycM/BcVDZ6H
n79HuNDjpRDpLg+dF/03FXbO2abK2DzETXWzIyCIWf0FMAfizdzSnK6gce1oKPcF
TC/ArqUDNJS7hYdKCqHqfGKF0kIE1fDGr5uWd6/LakRfnlemFOV41fDcaoG2Hniu
+tavnPvQrQ51gfS+53F73CpIbgH8QAw=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:37:22 2025 by rpki-client