Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa
File:                     3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa (raw, json)
Hash identifier:          9g0yZS3ooOLnCFcUqplHRqeEbohgvg9KwBtiVIEjGEE=
Subject key identifier:   CB:83:E0:9D:87:65:6E:F3:B3:84:49:68:BF:6A:18:99:72:2E:54:FF
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F4328584B6FF7473C26C2481A6F11C280
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     36734
IP address blocks:        216.38.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:47:3c:26:c2:48:1a:6f:11:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=a07d2c3d-1df6-41f7-9df6-25dc1542966c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:93:df:4b:09:cf:91:8b:b3:93:b0:da:4c:23:
                    ee:2e:58:7e:d4:ab:f5:5c:c4:af:2d:59:9c:bb:c8:
                    e1:7f:50:c7:62:83:aa:b1:d2:a7:93:66:be:17:ce:
                    e6:37:15:0b:0e:b8:2f:3c:16:74:35:b6:a3:49:ae:
                    3c:63:94:59:6a:2d:4c:9a:58:9d:5c:b2:63:2c:81:
                    60:06:7d:fb:e5:97:73:1d:5c:36:c7:51:f0:56:71:
                    ca:0c:4f:98:45:f9:58:5c:db:33:6f:40:75:51:72:
                    99:a0:b1:eb:4b:74:03:38:64:ab:0b:bd:8d:0d:45:
                    d3:31:0b:cd:d2:08:54:df:fe:5d:c8:a8:24:f3:4f:
                    95:c6:db:d0:1c:d9:42:1e:50:d4:10:9a:a7:c2:8f:
                    d1:f4:06:d8:44:63:19:b5:5c:30:58:8c:bf:bb:95:
                    f9:db:d6:3d:60:22:a4:82:92:2c:86:21:90:b3:20:
                    b7:b8:dd:bc:44:2b:0b:c3:81:47:20:c8:25:30:9e:
                    74:5c:83:61:08:23:30:e7:eb:9c:04:b3:c8:42:7a:
                    aa:cf:ae:3b:33:d6:c3:d2:1e:f7:93:58:6f:7a:11:
                    7b:5e:65:9d:8e:4b:03:f3:9a:ea:1e:be:55:4f:ee:
                    2a:e0:b0:93:4e:a5:e7:f7:42:71:ce:cc:c5:13:ed:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:83:E0:9D:87:65:6E:F3:B3:84:49:68:BF:6A:18:99:72:2E:54:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/3b9ae560-7df7-3f01-ab94-5cba5061ecee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:d7:e4:a4:ab:11:b8:54:91:b3:19:77:e9:11:07:ae:23:04:
         09:5f:16:03:0e:ba:05:e4:b0:89:81:9c:2f:bd:25:eb:f6:87:
         22:f9:44:9d:e2:14:a0:6e:7c:f9:7c:03:a6:78:fe:72:ae:6d:
         60:f3:f4:23:69:b9:2d:af:0f:a5:57:49:61:1b:0b:b1:50:55:
         d3:79:17:c4:3c:3e:6f:ea:1e:0e:a0:2a:c1:02:8a:57:38:40:
         35:57:1e:27:e4:3e:fe:59:82:59:27:bf:0c:f3:5c:4b:66:7a:
         4a:9a:d2:e1:83:02:fe:d8:e6:18:93:0d:9e:dc:ea:6c:91:3f:
         5f:3e:b9:e9:46:56:7c:07:08:69:a9:ce:b1:ee:28:2e:cb:72:
         71:10:09:d9:3c:30:d3:13:b4:72:fb:60:c5:b1:28:67:04:31:
         18:0b:61:ce:58:d8:d2:e0:34:98:c8:fc:87:bc:ff:11:f0:64:
         91:a9:fb:49:5a:c3:15:b8:68:2b:66:2a:28:94:48:f1:9d:25:
         75:88:1d:b7:96:6d:46:71:72:bd:f8:78:b3:48:7c:6a:62:ed:
         c0:69:cf:28:de:b1:a7:c4:f7:0d:76:e1:e9:69:f7:d5:fc:a2:
         d6:26:91:56:14:fe:27:6d:4e:cb:1e:03:d3:39:d9:29:f3:4e:
         3e:9b:b8:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90c8JsJIGm8RwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU2YmVlZGYtYmM5OS00ZDdjLTlhMjAtNjBlYzkxM2E2
YTE3MB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk
YTA3ZDJjM2QtMWRmNi00MWY3LTlkZjYtMjVkYzE1NDI5NjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5PfSwnPkYuzk7DaTCPuLlh+1Kv1XMSvLVmc
u8jhf1DHYoOqsdKnk2a+F87mNxULDrgvPBZ0NbajSa48Y5RZai1MmlidXLJjLIFg
Bn375ZdzHVw2x1HwVnHKDE+YRflYXNszb0B1UXKZoLHrS3QDOGSrC72NDUXTMQvN
0ghU3/5dyKgk80+VxtvQHNlCHlDUEJqnwo/R9AbYRGMZtVwwWIy/u5X529Y9YCKk
gpIshiGQsyC3uN28RCsLw4FHIMglMJ50XINhCCMw5+ucBLPIQnqqz647M9bD0h73
k1hvehF7XmWdjksD85rqHr5VT+4q4LCTTqXn90JxzszFE+10mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMuD4J2HZW7zs4RJaL9qGJlyLlT/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ZTZi
ZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVjOTEzYTZhMTcvM2I5YWU1NjAtN2RmNy0z
ZjAxLWFiOTQtNWNiYTUwNjFlY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGU2YmVlZGYtYmM5OS00ZDdjLTlh
MjAtNjBlYzkxM2E2YTE3LzRlNmJlZWRmLWJjOTktNGQ3Yy05YTIwLTYwZWM5MTNh
NmExNy5jcmwwHwYDVR0jBBgwFoAUyQ4hHWXwKXwCsjkvnzZN9Y5CVlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ZTZiZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVj
OTEzYTZhMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2CaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKXX5KSrEbhUkbMZd+kRB64jBAlfFgMOugXksImBnC+9Jev2hyL5RJ3i
FKBufPl8A6Z4/nKubWDz9CNpuS2vD6VXSWEbC7FQVdN5F8Q8Pm/qHg6gKsECilc4
QDVXHifkPv5ZglknvwzzXEtmekqa0uGDAv7Y5hiTDZ7c6myRP18+uelGVnwHCGmp
zrHuKC7LcnEQCdk8MNMTtHL7YMWxKGcEMRgLYc5Y2NLgNJjI/Ie8/xHwZJGp+0la
wxW4aCtmKiiUSPGdJXWIHbeWbUZxcr34eLNIfGpi7cBpzyjesafE9w124elp99X8
otYmkVYU/idtTsseA9M52SnzTj6buPo=
-----END CERTIFICATE-----
Generated at Fri Oct 10 09:51:54 2025 by rpki-client