Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/a9f074e8-e89d-3da5-9b2f-a482341ce5a3.roa
File:                     a9f074e8-e89d-3da5-9b2f-a482341ce5a3.roa (raw, json)
Hash identifier:          LfK5AU8rz1nuz9IxkuPy38/RHX8gdpKZbMTAK1FQGGY=
Subject key identifier:   34:CB:71:75:8B:C3:F4:3F:7B:F7:12:90:B3:74:C3:FA:30:C6:CC:11
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584B27617381D8ACE8030E66ED00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/a9f074e8-e89d-3da5-9b2f-a482341ce5a3.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     36829
IP address blocks:        206.83.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:73:81:d8:ac:e8:03:0e:66:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=7b6269e7-88b0-41a0-852f-dc63bdabd140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:04:77:cf:55:d0:81:f3:42:1f:12:ac:ce:
                    a7:24:97:dd:15:65:c9:27:d9:46:2b:7d:da:aa:36:
                    ed:fb:a0:30:ae:9f:3c:ed:96:e6:61:3f:1d:5d:6d:
                    0a:16:c0:fd:be:d9:33:e3:b4:42:d2:e8:3e:24:0f:
                    c2:97:09:20:74:aa:62:d3:f4:3f:6c:f4:7f:bc:f5:
                    ff:99:f5:a8:2c:ef:a4:62:82:d6:6c:fa:7e:07:f1:
                    cf:eb:25:03:66:38:19:82:43:ac:9c:dd:3b:a7:b0:
                    74:e3:24:fd:32:cc:6f:e4:a0:7b:cf:51:a1:bf:5b:
                    d4:fe:8e:57:3e:c2:11:a1:1a:49:4a:cc:62:26:f1:
                    bd:ee:2b:3e:c3:28:7a:b9:8e:37:2e:9e:54:e4:a7:
                    4b:94:ea:df:aa:24:a0:b9:b2:d8:38:48:ac:d4:c2:
                    d3:8e:6c:29:77:4c:a8:a2:9c:80:47:d5:2a:75:a3:
                    27:a7:d7:52:b8:c1:03:b5:31:11:b1:a6:39:32:0f:
                    4c:ed:3f:62:72:b0:be:c5:7e:e0:ed:d3:9d:85:27:
                    1a:f6:71:75:8e:54:c8:43:60:cc:ff:a3:e9:9b:54:
                    48:57:30:88:5b:a4:3e:16:14:b6:c0:f0:50:7f:65:
                    22:2e:01:2b:7e:8d:50:2c:09:fb:7d:85:ab:37:18:
                    12:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CB:71:75:8B:C3:F4:3F:7B:F7:12:90:B3:74:C3:FA:30:C6:CC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/a9f074e8-e89d-3da5-9b2f-a482341ce5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:cb:23:f1:23:b5:46:0b:22:95:e8:af:01:0a:50:08:88:
         32:1f:11:10:f0:2f:99:42:22:06:38:34:fa:ec:f6:79:dd:ff:
         30:7a:1b:0a:c3:18:d3:95:3a:9a:f7:a7:10:72:ed:f5:ab:da:
         76:e5:b8:61:d5:7f:11:ef:97:cc:4e:6e:5a:f9:d2:98:fe:66:
         6a:9e:d7:c1:da:75:21:f4:73:73:26:1f:11:f4:be:0f:a8:c0:
         3b:78:63:56:57:6f:5b:29:80:d0:15:e3:2b:da:2b:f8:a9:3f:
         e9:51:17:79:ed:c7:c1:0b:37:f9:0d:2a:ca:f7:f3:4c:65:52:
         6b:b3:47:20:c3:05:a0:c9:d7:40:5c:52:48:74:e2:52:42:e2:
         f7:5f:da:22:97:fc:80:3f:10:f4:74:66:1f:ea:91:09:8d:e9:
         9f:a6:ca:89:3e:8a:b3:99:85:c0:b8:ed:19:8e:5c:22:29:e2:
         9d:b1:2a:ad:af:47:13:81:c8:e7:82:53:1f:92:4a:07:8b:0e:
         10:be:1f:35:67:5b:fc:10:70:d9:c3:8e:d3:90:76:af:bb:63:
         46:55:42:b0:5f:41:a0:e0:51:51:55:fa:91:ac:e4:b2:04:3f:
         3d:03:aa:b7:e1:19:5c:df:bc:cc:8b:0d:54:19:35:74:63:5c:
         db:98:7a:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXOB2KzoAw5m7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk
N2I2MjY5ZTctODhiMC00MWEwLTg1MmYtZGM2M2JkYWJkMTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqAEd89V0IHzQh8SrM6nJJfdFWXJJ9lGK33a
qjbt+6Awrp887ZbmYT8dXW0KFsD9vtkz47RC0ug+JA/ClwkgdKpi0/Q/bPR/vPX/
mfWoLO+kYoLWbPp+B/HP6yUDZjgZgkOsnN07p7B04yT9Msxv5KB7z1Ghv1vU/o5X
PsIRoRpJSsxiJvG97is+wyh6uY43Lp5U5KdLlOrfqiSgubLYOEis1MLTjmwpd0yo
opyAR9UqdaMnp9dSuMEDtTERsaY5Mg9M7T9icrC+xX7g7dOdhSca9nF1jlTIQ2DM
/6Ppm1RIVzCIW6Q+FhS2wPBQf2UiLgErfo1QLAn7fYWrNxgS/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTLcXWLw/Q/e/cSkLN0w/owxswRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvYTlmMDc0ZTgtZTg5ZC0z
ZGE1LTliMmYtYTQ4MjM0MWNlNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzlOXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtyyyPxI7VGCyKV6K8BClAIiDIfERDwL5lCIgY4NPrs9nnd/zB6GwrD
GNOVOpr3pxBy7fWr2nbluGHVfxHvl8xOblr50pj+Zmqe18HadSH0c3MmHxH0vg+o
wDt4Y1ZXb1spgNAV4yvaK/ipP+lRF3ntx8ELN/kNKsr380xlUmuzRyDDBaDJ10Bc
Ukh04lJC4vdf2iKX/IA/EPR0Zh/qkQmN6Z+myok+irOZhcC47RmOXCIp4p2xKq2v
RxOByOeCUx+SSgeLDhC+HzVnW/wQcNnDjtOQdq+7Y0ZVQrBfQaDgUVFV+pGs5LIE
Pz0DqrfhGVzfvMyLDVQZNXRjXNuYelw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:56 2025 by rpki-client