Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/c898ae40-4c6d-3666-9f10-c83397f991ad.roa
File:                     c898ae40-4c6d-3666-9f10-c83397f991ad.roa (raw, json)
Hash identifier:          l7eFkaRrCumvGJ6AP2uCEizkDw0WnnFt2QgBMJUvLro=
Subject key identifier:   4B:DF:1C:6B:F2:91:2E:01:E8:F3:D4:FC:37:B8:D4:D8:60:99:90:BE
Certificate issuer:       /CN=26254462-2ddc-4c43-8ad7-6fc9c843ddf3
Certificate serial:       010D0C9F4328584B5C6C76BE8062B33896C9A880
Authority key identifier: 46:21:E9:FF:9D:C3:9C:BF:3E:42:07:DB:FC:31:C2:FF:88:3B:63:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/c898ae40-4c6d-3666-9f10-c83397f991ad.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     136744
IP address blocks:        209.209.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:76:be:80:62:b3:38:96:c9:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26254462-2ddc-4c43-8ad7-6fc9c843ddf3
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=498edf33-b6c0-45bb-a9c8-bf5777bf3e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:21:49:ac:36:e0:f8:bc:27:0e:08:dd:58:
                    3f:11:94:d3:3e:31:a0:3d:73:10:e7:0e:12:ec:ee:
                    c4:5a:bb:41:3e:67:51:ca:58:26:1a:a8:ab:96:1d:
                    48:a6:7d:e7:21:14:78:8a:40:32:c5:36:45:82:61:
                    7f:75:75:75:43:12:69:65:40:1b:0a:c8:57:30:16:
                    53:c8:32:87:34:32:06:4d:a8:00:bb:f3:47:72:ee:
                    5e:45:d5:17:bc:e9:ee:0e:2e:19:a6:bd:82:23:03:
                    24:42:eb:7e:d1:17:d8:b2:8a:a0:9f:7b:2b:42:9a:
                    b3:cd:34:8c:07:89:b2:b2:3d:f2:e8:d6:06:68:6d:
                    5c:bd:8c:a0:f8:57:9e:7d:c2:f1:93:ea:3b:34:69:
                    1f:08:d9:2c:ba:50:a0:0e:cc:f6:db:3c:74:70:e6:
                    98:c1:0e:bd:3b:50:cf:65:9a:94:08:cf:81:a0:08:
                    75:7a:95:e8:4f:06:8c:31:b0:64:14:a6:6b:ee:9a:
                    72:0a:fc:0e:ec:c1:35:45:6c:ff:f5:7c:45:a2:44:
                    e5:01:ab:1f:78:75:11:c9:a7:eb:f6:29:b5:0b:b2:
                    ef:ec:e1:7a:07:36:a2:47:e4:4e:26:e8:d1:48:6b:
                    30:a4:24:48:d2:19:f8:23:19:90:cd:fc:3f:52:3a:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DF:1C:6B:F2:91:2E:01:E8:F3:D4:FC:37:B8:D4:D8:60:99:90:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/c898ae40-4c6d-3666-9f10-c83397f991ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.crl

            X509v3 Authority Key Identifier:
                keyid:46:21:E9:FF:9D:C3:9C:BF:3E:42:07:DB:FC:31:C2:FF:88:3B:63:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:29:05:b6:a0:57:02:fb:1f:12:0d:4b:e0:2a:f4:d5:0a:
         62:f8:6d:6f:3a:35:5e:ec:65:b3:63:ca:48:f6:b6:5e:b9:38:
         89:99:d5:3a:d4:31:01:99:57:89:ea:93:18:be:42:86:ae:03:
         2f:52:4a:86:c6:82:8d:d0:0b:5a:e8:48:8c:e5:ed:d0:a4:e5:
         09:4e:2c:3e:06:f3:af:73:e0:82:3c:f8:20:d6:10:9f:5d:4d:
         e4:f7:19:08:8b:64:16:13:39:62:97:ac:9d:7e:0a:61:ba:4a:
         09:03:f4:a2:0c:99:79:c0:93:f0:b1:30:af:a6:f6:73:38:21:
         24:2c:41:10:e9:18:80:9f:03:aa:79:4e:c6:78:03:4a:a5:e4:
         0a:3f:8b:3f:39:ac:2a:02:04:4a:7b:19:73:50:12:7f:df:21:
         36:bc:c3:92:ae:ed:94:eb:33:30:75:aa:00:7a:9f:9c:a7:fe:
         68:04:af:5f:5d:cb:f8:c5:1e:3a:b1:38:ec:79:fe:ea:c2:dd:
         2b:f7:dc:e7:53:36:c1:3f:ae:b7:17:d4:7d:3f:6f:be:24:82:
         93:ae:1d:17:0a:fc:fb:2d:e4:93:70:0a:ad:e4:a9:d9:dc:c0:
         da:32:f4:62:34:29:49:01:37:a8:9e:06:52:4c:c2:ce:15:bd:
         d7:c5:bb:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHa+gGKzOJbJqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjYyNTQ0NjItMmRkYy00YzQzLThhZDctNmZjOWM4NDNk
ZGYzMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
NDk4ZWRmMzMtYjZjMC00NWJiLWE5YzgtYmY1Nzc3YmYzZTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04khSaw24Pi8Jw4I3Vg/EZTTPjGgPXMQ5w4S
7O7EWrtBPmdRylgmGqirlh1Ipn3nIRR4ikAyxTZFgmF/dXV1QxJpZUAbCshXMBZT
yDKHNDIGTagAu/NHcu5eRdUXvOnuDi4Zpr2CIwMkQut+0RfYsoqgn3srQpqzzTSM
B4mysj3y6NYGaG1cvYyg+FeefcLxk+o7NGkfCNksulCgDsz22zx0cOaYwQ69O1DP
ZZqUCM+BoAh1epXoTwaMMbBkFKZr7ppyCvwO7ME1RWz/9XxFokTlAasfeHURyafr
9im1C7Lv7OF6BzaiR+ROJujRSGswpCRI0hn4IxmQzfw/UjrI3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvfHGvykS4B6PPU/De41NhgmZC+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yNjI1
NDQ2Mi0yZGRjLTRjNDMtOGFkNy02ZmM5Yzg0M2RkZjMvYzg5OGFlNDAtNGM2ZC0z
NjY2LTlmMTAtYzgzMzk3Zjk5MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjYyNTQ0NjItMmRkYy00YzQzLThh
ZDctNmZjOWM4NDNkZGYzLzI2MjU0NDYyLTJkZGMtNGM0My04YWQ3LTZmYzljODQz
ZGRmMy5jcmwwHwYDVR0jBBgwFoAURiHp/53DnL8+Qgfb/DHC/4g7Y1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yNjI1NDQ2Mi0yZGRjLTRjNDMtOGFkNy02ZmM5
Yzg0M2RkZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dEzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4DKQW2oFcC+x8SDUvgKvTVCmL4bW86NV7sZbNjykj2tl65OImZ1TrU
MQGZV4nqkxi+QoauAy9SSobGgo3QC1roSIzl7dCk5QlOLD4G869z4II8+CDWEJ9d
TeT3GQiLZBYTOWKXrJ1+CmG6SgkD9KIMmXnAk/CxMK+m9nM4ISQsQRDpGICfA6p5
TsZ4A0ql5Ao/iz85rCoCBEp7GXNQEn/fITa8w5Ku7ZTrMzB1qgB6n5yn/mgEr19d
y/jFHjqxOOx5/urC3Sv33OdTNsE/rrcX1H0/b74kgpOuHRcK/Pst5JNwCq3kqdnc
wNoy9GI0KUkBN6ieBlJMws4VvdfFu9Y=
-----END CERTIFICATE-----
Generated at Fri Oct 10 19:49:09 2025 by rpki-client