Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa
File:                     7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa (raw, json)
Hash identifier:          YcqiMyn9MR03KOE9dUKkNTfu6GzhuTtqcQiBbFNMzZI=
Subject key identifier:   08:8B:7E:E8:66:BC:7E:93:19:FD:08:7E:E6:80:47:09:D8:82:6B:FB
Certificate issuer:       /CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
Certificate serial:       010D0C9F4328584AFC1BF3927AFF3BDE428224E0
Authority key identifier: 42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        203.96.187.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:f3:92:7a:ff:3b:de:42:82:24:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6683fc-5b15-4663-9da3-19c5de5a85c0
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=7d1e96f2-0a56-40b8-9497-18e9d98fef61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:b9:22:23:c9:25:60:b3:99:b4:23:8d:e1:
                    4c:4a:02:c9:02:cf:66:af:99:0e:ef:30:99:9a:1b:
                    8f:d2:5b:ea:71:dc:9d:f3:0f:ef:ba:90:79:b9:f9:
                    0b:12:ae:63:86:83:50:34:5b:6e:93:32:47:86:eb:
                    97:6b:6e:83:b8:69:d5:6a:8f:cc:0f:7a:04:6d:1d:
                    d3:d2:41:24:67:99:c6:96:e9:3a:c6:fa:89:e2:f3:
                    19:f8:ed:1a:6e:3d:0e:89:9f:a4:0d:c2:52:03:6d:
                    d5:66:5d:c6:49:14:86:e4:5d:e0:e9:bf:99:bd:1e:
                    98:0a:65:2e:88:d1:40:a7:4e:88:f2:05:62:6c:2c:
                    82:1e:ed:fc:c0:52:11:bb:b7:8f:8d:95:58:ba:2e:
                    93:e0:db:9c:fd:1e:48:85:77:d6:65:e9:a8:f0:e6:
                    1f:68:48:34:f1:bc:95:f8:70:45:be:a8:3f:63:20:
                    81:ac:e5:ad:ea:63:bf:98:7c:e6:57:ae:51:4f:ab:
                    60:1c:42:a7:f3:25:3b:ef:42:0a:45:d5:c9:2b:e7:
                    9a:02:29:7e:93:4e:44:18:64:9b:b1:a6:7f:4e:b3:
                    e8:a9:2d:95:96:4e:92:10:7b:b5:90:d9:2b:37:7a:
                    fb:0d:45:a1:67:88:bb:99:8e:8c:12:b9:1b:41:61:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8B:7E:E8:66:BC:7E:93:19:FD:08:7E:E6:80:47:09:D8:82:6B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/7d7b9e34-c827-3d60-b37a-56fb5dc294d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0/3e6683fc-5b15-4663-9da3-19c5de5a85c0.crl

            X509v3 Authority Key Identifier:
                keyid:42:55:62:1A:8C:64:0F:DA:C2:60:93:BF:A8:F1:2B:A6:ED:6E:D5:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e6683fc-5b15-4663-9da3-19c5de5a85c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.96.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d8:89:17:a9:cd:ae:3f:81:83:4e:b0:b4:b5:13:da:77:41:
         4f:2a:d4:7f:d9:10:39:de:8a:32:98:cd:1e:6b:0c:c7:a6:81:
         e8:0a:78:a6:ef:1c:ca:c7:42:3d:5b:3a:5e:80:04:58:db:3c:
         fc:06:ea:99:91:29:a8:65:be:43:8e:ac:da:c2:cf:c7:3a:f0:
         49:7f:29:42:18:de:ed:89:6f:93:90:8f:34:8b:72:0e:4e:b4:
         8e:46:df:f2:48:4e:7a:66:df:dd:c1:ac:2f:97:e5:d8:34:8d:
         45:81:73:41:c5:14:39:4c:18:d4:ea:85:d5:ee:fb:b3:3a:56:
         33:44:a9:5e:d7:36:92:22:40:e8:24:39:1a:2d:c9:c9:b5:f6:
         a1:6f:d6:e9:20:3b:b4:e0:db:d8:8d:82:c5:59:9a:23:30:77:
         d6:75:be:81:e8:a0:97:9d:62:fc:fd:e7:a2:86:82:34:c8:ea:
         7d:59:3e:8a:83:df:b6:07:39:15:c2:12:56:48:f3:d6:55:f3:
         75:aa:b4:64:8f:8c:4b:4b:a5:26:0d:c3:7d:d0:b1:1f:76:93:
         1f:28:13:86:c2:a2:a7:da:f0:47:86:9e:2a:b2:75:1a:81:59:
         a2:1f:37:aa:12:bb:00:01:cd:ab:5c:9d:12:79:22:0a:dd:f3:
         33:f2:e8:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/OSev873kKCJOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2U2NjgzZmMtNWIxNS00NjYzLTlkYTMtMTljNWRlNWE4
NWMwMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
N2QxZTk2ZjItMGE1Ni00MGI4LTk0OTctMThlOWQ5OGZlZjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxG5IiPJJWCzmbQjjeFMSgLJAs9mr5kO7zCZ
mhuP0lvqcdyd8w/vupB5ufkLEq5jhoNQNFtukzJHhuuXa26DuGnVao/MD3oEbR3T
0kEkZ5nGluk6xvqJ4vMZ+O0abj0OiZ+kDcJSA23VZl3GSRSG5F3g6b+ZvR6YCmUu
iNFAp06I8gVibCyCHu38wFIRu7ePjZVYui6T4Nuc/R5IhXfWZemo8OYfaEg08byV
+HBFvqg/YyCBrOWt6mO/mHzmV65RT6tgHEKn8yU770IKRdXJK+eaAil+k05EGGSb
saZ/TrPoqS2Vlk6SEHu1kNkrN3r7DUWhZ4i7mY6MErkbQWG13wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAiLfuhmvH6TGf0IfuaARwnYgmv7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZTY2
ODNmYy01YjE1LTQ2NjMtOWRhMy0xOWM1ZGU1YTg1YzAvN2Q3YjllMzQtYzgyNy0z
ZDYwLWIzN2EtNTZmYjVkYzI5NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2U2NjgzZmMtNWIxNS00NjYzLTlk
YTMtMTljNWRlNWE4NWMwLzNlNjY4M2ZjLTViMTUtNDY2My05ZGEzLTE5YzVkZTVh
ODVjMC5jcmwwHwYDVR0jBBgwFoAUQlViGoxkD9rCYJO/qPErpu1u1UkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZTY2ODNmYy01YjE1LTQ2NjMtOWRhMy0xOWM1
ZGU1YTg1YzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy2C7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbYiRepza4/gYNOsLS1E9p3QU8q1H/ZEDneijKYzR5rDMemgegKeKbv
HMrHQj1bOl6ABFjbPPwG6pmRKahlvkOOrNrCz8c68El/KUIY3u2Jb5OQjzSLcg5O
tI5G3/JITnpm393BrC+X5dg0jUWBc0HFFDlMGNTqhdXu+7M6VjNEqV7XNpIiQOgk
ORotycm19qFv1ukgO7Tg29iNgsVZmiMwd9Z1voHooJedYvz956KGgjTI6n1ZPoqD
37YHORXCElZI89ZV83WqtGSPjEtLpSYNw33QsR92kx8oE4bCoqfa8EeGniqydRqB
WaIfN6oSuwABzatcnRJ5Igrd8zPy6JE=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:48:50 2025 by rpki-client