Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c9846f2a-d4ca-368d-8e32-136a33898989.roa
File:                     c9846f2a-d4ca-368d-8e32-136a33898989.roa (raw, json)
Hash identifier:          h1gWi9ct2rr6Rp4w1PvaOdx+glKQR9352Mx04DCkQtg=
Subject key identifier:   90:64:3F:FC:85:A5:C8:1E:29:65:1D:90:CB:79:E4:52:B3:7B:5D:80
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2761855DF197B4255093C640
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c9846f2a-d4ca-368d-8e32-136a33898989.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     15290
IP address blocks:        66.46.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:85:5d:f1:97:b4:25:50:93:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=b4a72ac0-d2f0-4c60-baca-0d84da7d26c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:2d:23:d9:e4:b1:80:73:bf:82:08:44:bf:
                    12:4d:1d:51:34:f2:a3:42:fd:e1:e0:04:e9:a4:24:
                    78:3d:8a:ab:c2:a7:ed:94:e9:93:f8:e1:54:be:0b:
                    de:22:9a:1d:7f:01:6e:40:5b:63:55:f2:e8:be:b9:
                    51:6f:02:2e:15:97:3a:ef:90:f9:c2:c2:24:3e:35:
                    9f:6d:8b:54:ef:f8:6c:77:45:be:c2:ec:d5:b3:9a:
                    5b:dd:a8:f8:fb:a3:23:8a:a9:45:86:05:a4:d6:13:
                    57:4c:1c:fd:55:dd:17:c2:df:19:51:b5:d2:a0:14:
                    5e:2a:9d:bd:eb:73:a0:e6:53:10:e0:1d:9d:bb:6e:
                    17:b3:e4:16:3a:bd:ad:44:4c:ec:4c:28:e9:46:68:
                    8f:c7:95:9e:9d:21:de:1f:2c:43:d8:57:e2:6d:ed:
                    49:bc:b2:49:fa:95:10:af:54:69:b4:9c:47:a7:4b:
                    2a:92:77:be:27:ff:d0:b2:b9:2f:b8:a0:4c:83:75:
                    ea:1d:41:6a:24:d1:b7:38:25:62:f5:88:cf:bf:32:
                    04:8f:6f:db:ec:9e:e1:c9:cf:62:58:cc:a4:b2:28:
                    13:2b:3b:90:3c:93:3b:be:fa:76:80:5f:b6:e5:47:
                    99:f8:c5:d0:81:ad:96:a7:5c:46:3d:95:14:cf:2b:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:64:3F:FC:85:A5:C8:1E:29:65:1D:90:CB:79:E4:52:B3:7B:5D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c9846f2a-d4ca-368d-8e32-136a33898989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:b5:d6:0f:be:86:68:56:b1:f3:77:aa:3d:0e:7f:f9:2a:e4:
         8f:76:74:ce:44:46:1e:5c:a3:b8:69:7a:dc:81:91:af:34:09:
         c0:ad:59:ca:50:9c:0a:6f:31:2e:ff:18:b5:71:1e:ce:e2:7b:
         cd:11:62:66:f2:48:50:2e:9e:c5:ba:65:95:85:b8:27:8f:74:
         c2:b8:12:41:11:f3:39:c7:d8:81:4e:cf:76:20:1a:95:c2:e3:
         85:f6:99:5b:74:40:34:83:f8:2f:8e:78:c6:ca:b0:e3:de:13:
         00:d2:21:8f:a5:91:b6:4d:a1:90:0b:70:69:ae:94:40:1d:2a:
         78:a8:66:4d:17:38:bc:95:0e:4b:27:39:ac:eb:a5:17:30:55:
         e3:13:11:4b:d5:7f:ec:b9:9b:41:80:b0:6e:ec:2c:7e:c9:e4:
         30:2c:06:be:c2:54:3f:4e:a0:9b:46:51:27:17:79:48:cd:38:
         bc:73:92:2f:53:c8:32:32:a5:49:7a:40:d7:59:ed:78:9b:ec:
         a9:1b:70:16:d4:9b:fe:2a:b6:87:54:37:f6:5d:fc:c7:14:2c:
         0a:ef:47:38:61:ae:57:d1:89:49:08:e5:ca:53:65:a4:58:5d:
         50:df:41:13:0a:0c:28:f3:07:93:0f:db:0a:95:a2:e0:7e:7c:
         2d:59:3f:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYYVd8Ze0JVCTxkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk
YjRhNzJhYzAtZDJmMC00YzYwLWJhY2EtMGQ4NGRhN2QyNmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmItI9nksYBzv4IIRL8STR1RNPKjQv3h4ATp
pCR4PYqrwqftlOmT+OFUvgveIpodfwFuQFtjVfLovrlRbwIuFZc675D5wsIkPjWf
bYtU7/hsd0W+wuzVs5pb3aj4+6MjiqlFhgWk1hNXTBz9Vd0Xwt8ZUbXSoBReKp29
63Og5lMQ4B2du24Xs+QWOr2tREzsTCjpRmiPx5WenSHeHyxD2Ffibe1JvLJJ+pUQ
r1RptJxHp0sqkne+J//QsrkvuKBMg3XqHUFqJNG3OCVi9YjPvzIEj2/b7J7hyc9i
WMyksigTKzuQPJM7vvp2gF+25UeZ+MXQga2Wp1xGPZUUzyvixwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJBkP/yFpcgeKWUdkMt55FKze12AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYzk4NDZmMmEtZDRjYS0z
NjhkLThlMzItMTM2YTMzODk4OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQi4uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANK11g++hmhWsfN3qj0Of/kq5I92dM5ERh5co7hpetyBka80CcCtWcpQ
nApvMS7/GLVxHs7ie80RYmbySFAunsW6ZZWFuCePdMK4EkER8znH2IFOz3YgGpXC
44X2mVt0QDSD+C+OeMbKsOPeEwDSIY+lkbZNoZALcGmulEAdKnioZk0XOLyVDksn
OazrpRcwVeMTEUvVf+y5m0GAsG7sLH7J5DAsBr7CVD9OoJtGUScXeUjNOLxzki9T
yDIypUl6QNdZ7Xib7KkbcBbUm/4qtodUN/Zd/McULArvRzhhrlfRiUkI5cpTZaRY
XVDfQRMKDCjzB5MP2wqVouB+fC1ZP+w=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:36:20 2025 by rpki-client