Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a8d5a5fb-00e3-3a5f-adca-77c5f35b9914.roa
File:                     a8d5a5fb-00e3-3a5f-adca-77c5f35b9914.roa (raw, json)
Hash identifier:          CWvv9Mob79+WqHYC7cZt8R6sYJL0q72vQwrZiK+vB5M=
Subject key identifier:   69:65:C7:2F:39:5A:4F:C9:CB:62:2D:CE:AD:95:D3:49:BF:61:77:A4
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C0D4144BF230856425280
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a8d5a5fb-00e3-3a5f-adca-77c5f35b9914.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     4922
IP address blocks:        24.56.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:0d:41:44:bf:23:08:56:42:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=e87ce741-ff0d-4f57-a518-d8f363e52b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:41:b9:c8:ba:5f:c8:e4:12:1e:cf:89:42:19:
                    01:ea:fb:ad:c9:2c:1c:8f:27:17:57:73:c9:fd:33:
                    bd:6a:e0:63:b1:dd:9e:a0:ac:c5:c2:73:5c:04:c1:
                    51:b2:b6:bd:95:06:93:c3:cb:4a:68:0e:37:74:99:
                    f8:6c:a6:7f:e7:ab:16:e3:8a:b5:96:b0:5d:7b:7a:
                    98:95:cc:53:7c:b0:82:40:ac:e0:3e:b1:b6:ad:9c:
                    2d:4a:7d:24:ad:a6:cd:4f:a1:90:9e:96:ac:3b:10:
                    47:3c:ad:f0:19:f3:a9:77:2f:63:7b:a5:5b:ef:15:
                    b0:43:de:ce:0c:83:b2:d4:67:4f:43:ef:33:72:3e:
                    c2:fb:c9:16:10:ac:2e:b9:ca:6e:e2:5e:08:c0:f4:
                    45:82:26:2f:cb:a1:30:69:3c:81:7b:4d:4c:c8:a2:
                    2e:f6:67:d5:65:d6:6a:2f:a6:9a:bc:f2:83:97:79:
                    38:89:85:70:25:fc:78:10:f5:15:ee:35:82:e2:e5:
                    7c:0a:0d:cc:ba:30:40:10:92:84:4f:77:6a:b1:dd:
                    1d:8d:59:ad:8d:94:c6:0d:29:a8:42:4a:43:de:fd:
                    c6:0f:39:ea:b7:05:05:cd:51:28:9a:49:56:d5:58:
                    8e:20:ed:81:26:e2:6e:c3:f2:91:40:56:65:2f:62:
                    2b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:65:C7:2F:39:5A:4F:C9:CB:62:2D:CE:AD:95:D3:49:BF:61:77:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a8d5a5fb-00e3-3a5f-adca-77c5f35b9914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d1:1c:4b:3a:f2:a0:0b:d8:2b:a9:2b:4c:c8:dc:67:3e:82:
         93:68:54:e6:15:03:83:e1:b5:a4:72:65:a8:a7:ad:cf:b3:a6:
         15:cf:33:a6:aa:70:b0:08:69:cd:8e:30:35:51:11:0c:b0:99:
         12:c4:82:e3:c5:b0:a9:5b:47:f6:28:43:bb:ec:64:40:f0:bb:
         bb:e7:3f:8a:bf:e2:7c:bc:6f:33:e8:39:5c:16:2e:62:f1:69:
         77:f5:85:bf:24:8f:d9:d8:ff:f7:f2:8a:54:51:26:7e:36:b4:
         47:55:1a:7c:19:53:a2:c4:e4:91:60:8e:08:6e:27:71:c6:b7:
         1c:58:25:41:ef:74:6f:b4:88:e4:4e:ae:e3:51:38:73:c7:16:
         8e:01:da:5d:24:b3:3b:da:56:a1:bc:68:a1:ff:ab:63:06:ca:
         25:9c:cc:1f:83:9c:ff:40:a7:93:a9:4f:4a:44:b9:8f:09:d2:
         34:77:6e:f5:ad:84:8f:0f:90:bf:24:7c:19:ca:55:23:d8:46:
         e5:cc:aa:2b:e1:ed:f5:10:7c:2d:da:de:7f:db:47:84:29:03:
         fe:d9:21:9f:5b:da:e4:13:11:27:3d:a0:a4:67:48:59:ec:1f:
         85:79:43:ae:74:c8:64:0f:36:60:5f:d3:16:a2:48:da:ad:dd:
         fd:a0:10:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfA1BRL8jCFZCUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
ZTg3Y2U3NDEtZmYwZC00ZjU3LWE1MTgtZDhmMzYzZTUyYjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UG5yLpfyOQSHs+JQhkB6vutySwcjycXV3PJ
/TO9auBjsd2eoKzFwnNcBMFRsra9lQaTw8tKaA43dJn4bKZ/56sW44q1lrBde3qY
lcxTfLCCQKzgPrG2rZwtSn0krabNT6GQnpasOxBHPK3wGfOpdy9je6Vb7xWwQ97O
DIOy1GdPQ+8zcj7C+8kWEKwuucpu4l4IwPRFgiYvy6EwaTyBe01MyKIu9mfVZdZq
L6aavPKDl3k4iYVwJfx4EPUV7jWC4uV8Cg3MujBAEJKET3dqsd0djVmtjZTGDSmo
QkpD3v3GDznqtwUFzVEomklW1ViOIO2BJuJuw/KRQFZlL2IrnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGllxy85Wk/Jy2Itzq2V00m/YXekMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYThkNWE1ZmItMDBlMy0z
YTVmLWFkY2EtNzdjNWYzNWI5OTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGDhwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDRHEs68qAL2CupK0zI3Gc+gpNoVOYVA4PhtaRyZainrc+zphXPM6aq
cLAIac2OMDVREQywmRLEguPFsKlbR/YoQ7vsZEDwu7vnP4q/4ny8bzPoOVwWLmLx
aXf1hb8kj9nY//fyilRRJn42tEdVGnwZU6LE5JFgjghuJ3HGtxxYJUHvdG+0iORO
ruNROHPHFo4B2l0kszvaVqG8aKH/q2MGyiWczB+DnP9Ap5OpT0pEuY8J0jR3bvWt
hI8PkL8kfBnKVSPYRuXMqivh7fUQfC3a3n/bR4QpA/7ZIZ9b2uQTESc9oKRnSFns
H4V5Q650yGQPNmBf0xaiSNqt3f2gEKQ=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:33:11 2025 by rpki-client