Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43caa540-de27-3074-970d-0f7f826011e6.roa
File:                     43caa540-de27-3074-970d-0f7f826011e6.roa (raw, json)
Hash identifier:          kLn7Zz2nq2sQxwduTcIvtgbB+0e3kQ9zrAEwdKQV/8w=
Subject key identifier:   09:6F:F7:09:82:25:7A:60:7D:A1:6B:BD:CB:91:9F:EE:52:CF:16:72
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B724AD7C26392D242986D8C30
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43caa540-de27-3074-970d-0f7f826011e6.roa
Signing time:             Tue 07 Oct 2025 21:00:39 +0000
ROA not before:           Tue 07 Oct 2025 21:00:39 +0000
ROA not after:            Mon 05 Jan 2026 22:00:39 +0000
asID:                     151719
IP address blocks:        154.59.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:4a:d7:c2:63:92:d2:42:98:6d:8c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  7 21:00:39 2025 GMT
            Not After : Jan  5 22:00:39 2026 GMT
        Subject: CN=e3905640-7805-451d-b06d-40a44e8c91ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:6a:f5:b5:42:7b:5e:9a:20:90:9b:2a:20:
                    c4:6d:79:52:7b:6f:81:6c:1b:fe:e5:58:f4:63:ce:
                    e6:ea:6a:d4:55:df:2c:c4:06:1b:19:9a:46:ef:3f:
                    2e:a9:60:f2:1e:5b:02:97:8a:07:4b:aa:28:6f:16:
                    43:68:a5:26:8f:0f:58:7b:29:92:e4:88:c3:e0:67:
                    33:36:ac:12:06:41:3f:59:81:55:8d:b1:85:e3:64:
                    40:cd:49:94:4e:57:e2:1c:b6:fe:ce:c1:7a:cb:a1:
                    34:d8:65:16:56:8e:ea:08:96:f5:56:f0:31:b0:91:
                    2a:a1:d1:d3:b8:91:84:46:e5:48:92:e5:31:a2:bb:
                    31:0d:13:7f:5b:78:b0:37:55:37:c0:61:fe:1d:95:
                    09:f8:e5:53:3d:25:0d:fb:7b:de:d4:3b:4e:80:2b:
                    92:8d:56:7c:ab:9f:3a:0d:39:2d:69:fc:65:c3:04:
                    c6:6d:ed:22:a5:cf:a8:a0:41:b5:a1:cf:21:c2:89:
                    80:a5:2f:e9:ea:76:08:0a:63:0d:e2:f1:61:85:cc:
                    d5:1f:37:d3:a5:38:00:bb:4b:f4:de:9b:ea:8f:1c:
                    2b:ef:b6:a0:50:32:ba:f0:99:f5:67:1f:d5:c4:b7:
                    00:1a:61:e8:1f:b2:22:2e:bc:e8:9b:43:06:ff:d0:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:F7:09:82:25:7A:60:7D:A1:6B:BD:CB:91:9F:EE:52:CF:16:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43caa540-de27-3074-970d-0f7f826011e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.59.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:67:38:fd:bd:b2:62:f5:48:f7:46:d2:de:73:ec:90:92:
         3f:17:a9:26:ac:fb:51:d9:71:c3:47:6a:60:a1:8f:13:85:8d:
         28:dd:a2:2d:ca:2d:bc:7a:80:4b:d6:9a:b5:a4:f0:15:41:da:
         9b:45:bd:db:5a:bb:b0:c1:c4:1f:de:59:63:64:7a:87:61:52:
         1c:ff:8d:90:25:3f:89:84:fe:b0:cb:c3:42:3b:a9:5a:05:9c:
         04:90:15:3e:8a:3a:5a:73:31:33:bc:b7:98:cd:69:bf:b3:6b:
         1e:4a:02:60:dd:62:44:40:d6:90:d0:44:96:16:63:82:cb:39:
         63:4c:63:6a:84:9c:a6:72:78:b7:41:98:54:9a:65:ba:5f:76:
         30:e8:c1:fa:dc:82:b1:cd:d8:f4:3a:52:4b:3d:b3:0b:1d:ac:
         95:e6:1c:8c:13:c9:7e:c5:7a:4a:69:e5:67:8a:9f:3c:38:7d:
         cd:9c:d4:e8:65:8e:65:e4:87:00:67:0e:95:c5:57:1f:4f:c3:
         2f:f0:49:ce:c6:b8:be:2b:ce:f1:bc:a0:10:0f:7f:6a:c1:da:
         3c:02:43:73:1e:39:a5:4b:3d:d0:20:c5:2b:e5:b4:77:74:1e:
         81:f0:16:c0:76:6a:05:50:f3:42:86:78:c4:47:c7:0a:d2:2d:
         f5:0b:cf:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtyStfCY5LSQphtjDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI1MTAwNzIxMDAzOVoXDTI2MDEwNTIyMDAzOVowLzEtMCsGA1UEAxMk
ZTM5MDU2NDAtNzgwNS00NTFkLWIwNmQtNDBhNDRlOGM5MWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6Jq9bVCe16aIJCbKiDEbXlSe2+BbBv+5Vj0
Y87m6mrUVd8sxAYbGZpG7z8uqWDyHlsCl4oHS6oobxZDaKUmjw9YeymS5IjD4Gcz
NqwSBkE/WYFVjbGF42RAzUmUTlfiHLb+zsF6y6E02GUWVo7qCJb1VvAxsJEqodHT
uJGERuVIkuUxorsxDRN/W3iwN1U3wGH+HZUJ+OVTPSUN+3ve1DtOgCuSjVZ8q586
DTktafxlwwTGbe0ipc+ooEG1oc8hwomApS/p6nYICmMN4vFhhczVHzfTpTgAu0v0
3pvqjxwr77agUDK68Jn1Zx/VxLcAGmHoH7IiLrzom0MG/9CaYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlv9wmCJXpgfaFrvcuRn+5SzxZyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDNjYWE1NDAtZGUyNy0z
MDc0LTk3MGQtMGY3ZjgyNjAxMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmjtcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxCZzj9vbJi9Uj3RtLec+yQkj8XqSas+1HZccNHamChjxOFjSjdoi3K
Lbx6gEvWmrWk8BVB2ptFvdtau7DBxB/eWWNkeodhUhz/jZAlP4mE/rDLw0I7qVoF
nASQFT6KOlpzMTO8t5jNab+zax5KAmDdYkRA1pDQRJYWY4LLOWNMY2qEnKZyeLdB
mFSaZbpfdjDowfrcgrHN2PQ6Uks9swsdrJXmHIwTyX7Fekpp5WeKnzw4fc2c1Ohl
jmXkhwBnDpXFVx9Pwy/wSc7GuL4rzvG8oBAPf2rB2jwCQ3MeOaVLPdAgxSvltHd0
HoHwFsB2agVQ80KGeMRHxwrSLfULzwU=
-----END CERTIFICATE-----
Generated at Sat Oct 11 12:08:47 2025 by rpki-client