Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/9db941a2-2e75-3417-8db1-220c6d4a928e.roa
File:                     9db941a2-2e75-3417-8db1-220c6d4a928e.roa (raw, json)
Hash identifier:          YzPg996qnFbeK1qjrutRAY+CAtIq0ipgEB914tX8p+o=
Subject key identifier:   BD:78:17:D4:8C:9D:03:EF:58:B9:3F:9D:8A:C0:14:A1:5C:43:11:0D
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584B0CDC117FC6B01C5BAFD45480
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/9db941a2-2e75-3417-8db1-220c6d4a928e.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     3855
IP address blocks:        206.188.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:11:7f:c6:b0:1c:5b:af:d4:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=369fda73-9852-42ee-b125-52917e35be61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:14:0e:f3:87:c6:64:b6:5c:07:92:3d:e6:
                    68:b3:1a:92:a4:bc:44:19:4c:54:f3:28:5e:0a:92:
                    96:3d:fe:96:54:12:49:86:6b:90:37:94:08:1b:cd:
                    61:c4:8d:f9:33:a3:6c:82:1c:da:89:76:2e:81:8c:
                    cf:da:d0:7f:ce:92:a5:ad:4e:40:b2:f5:27:e6:22:
                    8e:1a:1f:ab:55:3f:ec:64:44:d1:d4:4a:84:f1:26:
                    da:98:98:b3:7c:c2:d5:89:18:58:09:31:ad:d2:c7:
                    73:d2:23:f6:1e:4c:45:36:e9:92:ee:ff:2b:7b:65:
                    92:b8:c5:25:f9:ee:d6:a9:46:cc:ff:03:25:74:3b:
                    d7:8c:a4:3e:2c:06:c1:ce:ee:2b:5f:14:ea:7d:a4:
                    a4:d7:97:20:99:78:e1:b0:04:b2:aa:80:9e:44:6a:
                    3c:50:6f:a6:53:10:67:bc:c7:3c:24:d4:d1:16:61:
                    e1:cb:f1:1d:42:b4:22:1a:54:24:2d:c8:8d:91:45:
                    0c:a1:53:e7:15:68:18:24:49:a5:36:20:6c:6b:01:
                    1f:d2:6a:93:ce:56:e1:bc:4f:7a:4f:7a:32:35:1a:
                    8f:dc:83:10:48:fe:1a:c3:ab:2e:00:bd:13:09:05:
                    33:d8:d8:f4:38:81:f6:b1:47:07:c5:36:7b:25:d9:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:78:17:D4:8C:9D:03:EF:58:B9:3F:9D:8A:C0:14:A1:5C:43:11:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/9db941a2-2e75-3417-8db1-220c6d4a928e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:11:9b:90:8e:af:61:ff:25:50:34:66:3d:be:ad:a8:2c:09:
         a7:74:7e:e7:95:b8:b8:eb:67:97:ab:bf:fb:00:5d:06:4e:43:
         f4:d8:d4:58:b9:46:2c:05:0d:52:6d:a8:92:db:7e:8a:20:24:
         b4:0b:65:6a:6d:a6:dd:b1:0e:64:e5:14:99:52:bc:78:11:18:
         0d:6d:36:8a:3a:c6:53:d6:57:9e:24:a6:01:38:14:e2:49:9e:
         54:7a:71:68:a9:93:15:ca:9b:98:b5:42:58:09:4b:d3:2b:a9:
         4d:2a:b5:b5:4a:38:9c:18:36:ff:6d:c1:c0:3e:f1:5b:60:bc:
         98:1a:50:82:c3:70:c8:9e:01:46:74:98:d5:0c:c6:7b:31:ee:
         8f:c3:ce:ed:53:27:d0:a8:4e:a6:cb:e2:2f:29:86:c2:db:e8:
         7e:9c:83:9c:79:fb:87:7b:57:94:26:35:3e:bc:2f:c7:f1:44:
         1f:1c:86:f6:ea:36:7a:67:e0:0d:73:b5:8e:0d:32:4e:65:b3:
         be:0e:37:20:e2:62:fc:37:d0:3f:19:aa:c4:3e:57:cb:7d:e9:
         ca:c7:08:d2:b1:9e:60:4b:ca:42:3d:56:db:4a:e5:01:49:9f:
         c7:b8:fa:5a:95:e7:18:51:43:ce:76:c0:e3:e7:d2:8c:26:70:
         b3:b0:3e:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BF/xrAcW6/UVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTNmYWRhNDktYjM1My00YTY5LTliMzItMWI2YWIzNzI5
ZGIxMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
MzY5ZmRhNzMtOTg1Mi00MmVlLWIxMjUtNTI5MTdlMzViZTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnskUDvOHxmS2XAeSPeZosxqSpLxEGUxU8yhe
CpKWPf6WVBJJhmuQN5QIG81hxI35M6NsghzaiXYugYzP2tB/zpKlrU5AsvUn5iKO
Gh+rVT/sZETR1EqE8SbamJizfMLViRhYCTGt0sdz0iP2HkxFNumS7v8re2WSuMUl
+e7WqUbM/wMldDvXjKQ+LAbBzu4rXxTqfaSk15cgmXjhsASyqoCeRGo8UG+mUxBn
vMc8JNTRFmHhy/EdQrQiGlQkLciNkUUMoVPnFWgYJEmlNiBsawEf0mqTzlbhvE96
T3oyNRqP3IMQSP4aw6suAL0TCQUz2Nj0OIH2sUcHxTZ7JdkbPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL14F9SMnQPvWLk/nYrAFKFcQxENMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2Zh
ZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3MjlkYjEvOWRiOTQxYTItMmU3NS0z
NDE3LThkYjEtMjIwYzZkNGE5MjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNmYWRhNDktYjM1My00YTY5LTli
MzItMWI2YWIzNzI5ZGIxL2UzZmFkYTQ5LWIzNTMtNGE2OS05YjMyLTFiNmFiMzcy
OWRiMS5jcmwwHwYDVR0jBBgwFoAUJuly3fKragsPZSkTRy/Y3+UGPZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZh
YjM3MjlkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzryAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACARm5COr2H/JVA0Zj2+ragsCad0fueVuLjrZ5erv/sAXQZOQ/TY1Fi5
RiwFDVJtqJLbfoogJLQLZWptpt2xDmTlFJlSvHgRGA1tNoo6xlPWV54kpgE4FOJJ
nlR6cWipkxXKm5i1QlgJS9MrqU0qtbVKOJwYNv9twcA+8VtgvJgaUILDcMieAUZ0
mNUMxnsx7o/Dzu1TJ9CoTqbL4i8phsLb6H6cg5x5+4d7V5QmNT68L8fxRB8chvbq
Nnpn4A1ztY4NMk5ls74ONyDiYvw30D8ZqsQ+V8t96crHCNKxnmBLykI9VttK5QFJ
n8e4+lqV5xhRQ852wOPn0owmcLOwPvM=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:21 2025 by rpki-client