Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/c119a6a2-05e8-3730-baec-ab434f50d0c6.roa
File:                     c119a6a2-05e8-3730-baec-ab434f50d0c6.roa (raw, json)
Hash identifier:          wy4fog8o0c2IV3C1MqifYg5MyIrKfKp49nOwkd015Ic=
Subject key identifier:   1E:FC:A2:4F:A7:CE:EB:A1:CF:D0:91:0A:EC:B7:04:5D:96:EA:AD:5C
Certificate issuer:       /CN=9512e4e8-1b19-4250-996e-7d86c6963211
Certificate serial:       010D0C9F4328584B6631EEE1465DEC111D20ED80
Authority key identifier: E6:87:4B:4A:F4:E4:FC:EE:A7:7A:68:BE:30:80:4A:8C:8F:03:91:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/c119a6a2-05e8-3730-baec-ab434f50d0c6.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     16509
IP address blocks:        198.204.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/9512e4e8-1b19-4250-996e-7d86c6963211.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/9512e4e8-1b19-4250-996e-7d86c6963211.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:ee:e1:46:5d:ec:11:1d:20:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9512e4e8-1b19-4250-996e-7d86c6963211
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=d90ccc6b-4d9b-4749-970e-12c02c483237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:6f:8c:3e:26:1e:80:76:e2:f9:f6:df:9e:
                    0b:d8:59:61:85:d8:ba:5f:bd:55:9e:93:9f:00:d0:
                    72:cd:dc:86:be:d2:26:12:c9:b3:20:cc:dd:f3:e6:
                    0e:71:37:28:4d:58:3a:45:3c:26:b6:cd:3d:19:03:
                    aa:cb:c2:8d:96:c7:3c:4e:b9:49:71:b0:3e:46:74:
                    e6:37:63:27:2d:43:72:68:55:30:e0:78:01:4d:da:
                    a6:35:b3:be:8c:db:ea:a1:eb:c8:ff:93:18:2d:e3:
                    28:8f:04:6b:04:f2:f1:61:7c:b4:3a:c8:50:4a:3c:
                    5f:ff:c6:94:b9:76:d4:15:b0:7c:d4:98:71:63:72:
                    aa:db:dd:00:93:b3:96:b7:ea:cd:c7:10:5a:da:f2:
                    0e:19:2b:89:3c:c6:ff:ce:a2:4e:ed:d2:bc:a1:b5:
                    a4:bb:c0:7b:53:4e:6b:7f:e9:42:6e:e4:10:fe:1c:
                    75:5a:41:d0:4e:21:b3:57:08:2e:52:41:b3:15:cd:
                    8d:d9:15:35:0a:14:c0:69:88:7c:3a:31:28:de:ec:
                    c4:fc:36:f1:82:e8:b1:e6:3e:db:86:85:78:fa:4b:
                    ca:44:24:f0:eb:a4:35:44:b2:37:b1:01:94:65:bf:
                    0a:27:7b:76:01:4b:ea:5b:3d:fc:15:1b:13:7f:dd:
                    e1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FC:A2:4F:A7:CE:EB:A1:CF:D0:91:0A:EC:B7:04:5D:96:EA:AD:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/c119a6a2-05e8-3730-baec-ab434f50d0c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/9512e4e8-1b19-4250-996e-7d86c6963211.crl

            X509v3 Authority Key Identifier:
                keyid:E6:87:4B:4A:F4:E4:FC:EE:A7:7A:68:BE:30:80:4A:8C:8F:03:91:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3b:b3:77:41:05:54:24:29:ca:48:58:f7:b7:aa:75:c9:84:
         52:3d:02:3d:ca:e9:65:54:e2:39:09:a6:31:ce:ff:bb:58:15:
         73:d0:8c:a4:9f:31:4d:00:09:55:88:1c:00:90:b9:04:ba:8b:
         18:2f:05:28:46:af:73:74:90:7f:78:87:13:34:fe:a8:03:e5:
         3d:47:61:bf:04:3e:93:01:00:50:29:33:b8:40:d4:93:24:b2:
         ca:be:40:38:db:dd:cc:c2:28:2e:22:c2:b9:c8:db:36:9b:8d:
         51:42:10:c7:15:ce:0d:2b:fc:df:8d:20:56:90:fa:3c:cc:79:
         11:24:15:8e:cd:e2:47:f4:db:3b:9f:2c:ac:7f:82:4f:50:6e:
         d3:ba:18:b0:85:88:f3:5f:3f:59:37:79:67:81:c4:f2:32:85:
         6d:b1:c4:97:ce:a4:7c:d8:bd:85:5c:b3:16:8a:21:ae:f1:ef:
         e0:ef:be:60:48:59:80:4c:86:2c:b9:27:da:16:e8:b3:44:73:
         f1:4d:fc:28:7f:31:de:70:83:98:09:ba:38:32:ac:1d:ae:2a:
         00:cf:a1:1b:0a:67:9c:84:09:8b:77:46:92:26:55:2e:5f:b6:
         fa:a6:e7:9b:79:5e:1a:97:a8:d5:d0:7f:cf:6c:ab:79:5f:ad:
         9d:df:1a:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMe7hRl3sER0g7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTUxMmU0ZTgtMWIxOS00MjUwLTk5NmUtN2Q4NmM2OTYz
MjExMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk
ZDkwY2NjNmItNGQ5Yi00NzQ5LTk3MGUtMTJjMDJjNDgzMjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwztvjD4mHoB24vn2354L2Flhhdi6X71VnpOf
ANByzdyGvtImEsmzIMzd8+YOcTcoTVg6RTwmts09GQOqy8KNlsc8TrlJcbA+RnTm
N2MnLUNyaFUw4HgBTdqmNbO+jNvqoevI/5MYLeMojwRrBPLxYXy0OshQSjxf/8aU
uXbUFbB81JhxY3Kq290Ak7OWt+rNxxBa2vIOGSuJPMb/zqJO7dK8obWku8B7U05r
f+lCbuQQ/hx1WkHQTiGzVwguUkGzFc2N2RU1ChTAaYh8OjEo3uzE/Dbxguix5j7b
hoV4+kvKRCTw66Q1RLI3sQGUZb8KJ3t2AUvqWz38FRsTf93haQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB78ok+nzuuhz9CRCuy3BF2W6q1cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NTEy
ZTRlOC0xYjE5LTQyNTAtOTk2ZS03ZDg2YzY5NjMyMTEvYzExOWE2YTItMDVlOC0z
NzMwLWJhZWMtYWI0MzRmNTBkMGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTUxMmU0ZTgtMWIxOS00MjUwLTk5
NmUtN2Q4NmM2OTYzMjExLzk1MTJlNGU4LTFiMTktNDI1MC05OTZlLTdkODZjNjk2
MzIxMS5jcmwwHwYDVR0jBBgwFoAU5odLSvTk/O6nemi+MIBKjI8DkaIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NTEyZTRlOC0xYjE5LTQyNTAtOTk2ZS03ZDg2
YzY5NjMyMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxszLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHk7s3dBBVQkKcpIWPe3qnXJhFI9Aj3K6WVU4jkJpjHO/7tYFXPQjKSf
MU0ACVWIHACQuQS6ixgvBShGr3N0kH94hxM0/qgD5T1HYb8EPpMBAFApM7hA1JMk
ssq+QDjb3czCKC4iwrnI2zabjVFCEMcVzg0r/N+NIFaQ+jzMeREkFY7N4kf02zuf
LKx/gk9QbtO6GLCFiPNfP1k3eWeBxPIyhW2xxJfOpHzYvYVcsxaKIa7x7+DvvmBI
WYBMhiy5J9oW6LNEc/FN/Ch/Md5wg5gJujgyrB2uKgDPoRsKZ5yECYt3RpImVS5f
tvqm55t5XhqXqNXQf89sq3lfrZ3fGmQ=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:21:57 2025 by rpki-client