Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/e0804d4c-cadf-3761-a0b7-82cc98d8a0c6.roa
File:                     e0804d4c-cadf-3761-a0b7-82cc98d8a0c6.roa (raw, json)
Hash identifier:          dWT6jP/ZbP11LGbeNoIblL6H6v5r3Nvze7PTz7S4iPk=
Subject key identifier:   97:F8:DA:89:9D:50:63:49:59:15:37:C8:A7:19:5D:B0:67:97:D1:89
Certificate issuer:       /CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
Certificate serial:       010D0C9F4328584B3DB704BF737F049996A453C0
Authority key identifier: AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/e0804d4c-cadf-3761-a0b7-82cc98d8a0c6.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        141.193.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:04:bf:73:7f:04:99:96:a4:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905d530e-058c-4acd-beb8-01a8d0ff41eb
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=ac0969f8-1407-46f8-8013-4932bc4d4416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:d1:30:91:c3:f5:ed:60:e7:f2:94:2d:6b:
                    d7:75:29:f0:b5:c6:ff:2b:e3:9c:b1:3e:00:0c:33:
                    e2:07:c8:2f:83:56:d0:65:18:b3:0e:2c:31:ee:c2:
                    ec:3c:93:2d:31:0d:f1:5c:3d:77:a0:d4:80:80:41:
                    45:9c:0b:55:17:b7:3b:22:74:cf:41:0d:a1:e8:34:
                    c3:c6:82:ad:5f:2f:9d:aa:46:d5:47:b0:7e:58:21:
                    75:2c:e1:3d:50:c1:9c:c7:b6:d0:7e:7c:c8:6a:53:
                    5f:d6:27:f6:8d:49:79:2c:49:2d:52:e6:7c:84:1d:
                    27:97:64:a0:6f:ea:04:31:41:f9:fe:36:0a:7f:4e:
                    f9:f7:4e:b9:11:93:b1:f6:c8:f9:ca:6d:10:47:11:
                    61:3f:21:a1:1e:e7:5c:fe:56:f6:a1:46:62:a0:f5:
                    09:9c:32:06:a7:e3:50:98:69:48:58:ce:cc:5c:8e:
                    55:84:0f:09:64:0c:49:da:82:ef:ba:90:d2:de:28:
                    bf:1b:ac:ed:43:58:24:82:98:5a:d0:2a:72:eb:99:
                    95:20:b5:61:42:fe:b0:7b:91:05:a8:d5:e7:91:17:
                    8a:b3:16:37:57:f5:c9:a5:e9:81:22:7f:2c:86:59:
                    67:45:20:95:e9:0b:9d:c7:58:16:60:f0:be:72:cf:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F8:DA:89:9D:50:63:49:59:15:37:C8:A7:19:5D:B0:67:97:D1:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/e0804d4c-cadf-3761-a0b7-82cc98d8a0c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb/905d530e-058c-4acd-beb8-01a8d0ff41eb.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D9:A4:74:EE:6C:BC:9C:11:7D:6E:3D:EC:C0:02:6D:35:48:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/905d530e-058c-4acd-beb8-01a8d0ff41eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:c6:a9:3d:bb:09:be:15:b0:56:fa:90:3b:99:05:28:20:
         0e:4c:33:52:e8:4e:10:e7:50:f8:ae:fb:78:64:6e:9d:99:63:
         52:ba:7d:60:cc:b2:85:75:d2:f2:ca:f3:b9:93:2f:df:86:ec:
         05:25:83:93:26:68:57:c6:e3:59:0f:ba:c6:27:de:af:48:12:
         1a:35:e4:7c:51:8b:9d:a4:e2:61:6b:be:35:16:03:ca:4b:e8:
         42:91:c8:3a:1d:7c:68:a4:92:03:12:b0:c7:77:e5:0c:61:65:
         28:e0:38:28:68:a7:d8:81:10:ba:1f:66:53:17:66:b6:a6:b1:
         0e:7a:c7:d4:cd:5e:15:1a:b3:d1:bf:19:b1:32:8b:a9:4e:d3:
         e0:bf:a9:91:bc:eb:bc:06:d5:85:7c:98:44:c0:b5:35:d8:34:
         45:73:87:2a:3c:8b:32:bb:25:2b:d6:80:b7:b4:ca:e7:50:c4:
         90:2e:31:66:86:cb:62:7d:aa:4f:92:de:95:b9:75:a2:02:a2:
         2b:e8:08:17:b7:f1:39:b9:3b:db:1c:ee:1c:a6:05:53:1a:a7:
         c3:3d:6f:e3:88:80:9b:7c:a2:2a:47:25:ad:8b:8a:b1:58:42:
         bd:93:37:27:cb:74:ea:ba:b0:5f:8b:9e:d0:78:41:3a:c9:e6:
         12:28:de:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twS/c38EmZakU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA1ZDUzMGUtMDU4Yy00YWNkLWJlYjgtMDFhOGQwZmY0
MWViMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
YWMwOTY5ZjgtMTQwNy00NmY4LTgwMTMtNDkzMmJjNGQ0NDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJfRMJHD9e1g5/KULWvXdSnwtcb/K+OcsT4A
DDPiB8gvg1bQZRizDiwx7sLsPJMtMQ3xXD13oNSAgEFFnAtVF7c7InTPQQ2h6DTD
xoKtXy+dqkbVR7B+WCF1LOE9UMGcx7bQfnzIalNf1if2jUl5LEktUuZ8hB0nl2Sg
b+oEMUH5/jYKf0759065EZOx9sj5ym0QRxFhPyGhHudc/lb2oUZioPUJnDIGp+NQ
mGlIWM7MXI5VhA8JZAxJ2oLvupDS3ii/G6ztQ1gkgpha0Cpy65mVILVhQv6we5EF
qNXnkReKsxY3V/XJpemBIn8shllnRSCV6Qudx1gWYPC+cs9ZfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJf42omdUGNJWRU3yKcZXbBnl9GJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MDVk
NTMwZS0wNThjLTRhY2QtYmViOC0wMWE4ZDBmZjQxZWIvZTA4MDRkNGMtY2FkZi0z
NzYxLWEwYjctODJjYzk4ZDhhMGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTA1ZDUzMGUtMDU4Yy00YWNkLWJl
YjgtMDFhOGQwZmY0MWViLzkwNWQ1MzBlLTA1OGMtNGFjZC1iZWI4LTAxYThkMGZm
NDFlYi5jcmwwHwYDVR0jBBgwFoAUrtmkdO5svJwRfW497MACbTVIj9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85MDVkNTMwZS0wNThjLTRhY2QtYmViOC0wMWE4
ZDBmZjQxZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcFYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDAxqk9uwm+FbBW+pA7mQUoIA5MM1LoThDnUPiu+3hkbp2ZY1K6fWDM
soV10vLK87mTL9+G7AUlg5MmaFfG41kPusYn3q9IEho15HxRi52k4mFrvjUWA8pL
6EKRyDodfGikkgMSsMd35QxhZSjgOChop9iBELofZlMXZramsQ56x9TNXhUas9G/
GbEyi6lO0+C/qZG867wG1YV8mETAtTXYNEVzhyo8izK7JSvWgLe0yudQxJAuMWaG
y2J9qk+S3pW5daICoivoCBe38Tm5O9sc7hymBVMap8M9b+OIgJt8oipHJa2LirFY
Qr2TNyfLdOq6sF+LntB4QTrJ5hIo3t0=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:24:16 2025 by rpki-client