Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa
File:                     fc734abe-84cb-31fb-9091-572995e67bbc.roa (raw, json)
Hash identifier:          eZamVMSqmWkBIhdqihCGU/ciWgqStJ/WIBglCzlIoQM=
Subject key identifier:   A0:22:88:D2:20:4B:15:32:05:18:A4:5B:FF:E1:72:14:0B:60:B1:3B
Certificate issuer:       /CN=08a6d347-5170-4470-abb6-1b99491a1406
Certificate serial:       010D0C9F4328584B52A74EE722703818E217EE80
Authority key identifier: 34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     199959
IP address blocks:        192.189.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:4e:e7:22:70:38:18:e2:17:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a6d347-5170-4470-abb6-1b99491a1406
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=3420b39f-df9f-4146-a716-3e81f640017e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:d6:05:87:1e:5e:84:c6:de:5d:1c:42:0f:
                    36:50:c9:7d:c8:86:64:02:34:57:86:29:b2:c9:3b:
                    d0:13:9e:12:24:48:f1:ad:d9:0e:11:79:7e:4e:2c:
                    08:ae:96:2c:28:84:48:99:7d:79:f9:7f:f7:14:ee:
                    b3:e8:4d:b4:03:39:9a:8f:b5:40:4f:f7:61:6a:c5:
                    aa:4a:93:d1:2c:4f:f1:e0:9d:9f:6c:98:10:ac:63:
                    a1:33:4f:30:74:46:03:b6:02:a1:ea:f1:53:4f:40:
                    96:f7:23:ef:a1:07:7c:c1:b0:8b:de:88:d1:24:60:
                    5d:7d:d7:69:0b:79:9a:17:8c:fc:5d:f0:12:5d:e5:
                    bd:ff:70:82:51:75:20:38:de:af:e2:7a:95:d5:72:
                    b1:af:23:f7:d3:76:e7:c1:06:35:23:bc:b9:53:c4:
                    a4:69:7d:37:1f:ad:1d:08:1c:74:da:ad:7c:7e:27:
                    22:21:2c:b4:e2:e5:0b:93:f1:d4:2a:ad:52:b9:c8:
                    c3:f1:20:84:84:42:18:0c:1f:ef:12:f0:ce:77:fd:
                    26:94:84:ea:13:30:9d:7e:2d:f4:1f:02:92:ca:f0:
                    cc:26:5a:a4:87:fb:83:27:ea:d4:ed:12:26:61:a3:
                    1e:6f:ec:b5:73:1d:cd:b4:39:11:f6:53:6d:4d:ae:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:22:88:D2:20:4B:15:32:05:18:A4:5B:FF:E1:72:14:0B:60:B1:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl

            X509v3 Authority Key Identifier:
                keyid:34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5c:21:01:7c:5b:1d:9b:a0:24:52:45:b5:30:08:3b:63:91:
         91:bc:7f:73:f5:4d:43:ba:50:64:0f:91:00:78:97:65:f0:28:
         6e:ce:0a:34:f7:bd:4b:8e:fb:d4:d1:f1:97:10:08:69:5f:4e:
         a8:89:f2:43:76:48:10:f0:99:17:b5:5e:2e:f1:d1:9b:d7:a6:
         20:64:fa:45:b8:c4:d2:8d:40:b1:43:f2:64:88:9c:dd:7d:3a:
         c2:d9:a6:c9:d7:cc:3c:3c:c5:c3:b3:6d:a3:f2:91:64:7e:42:
         30:80:fb:a9:1f:42:01:d3:86:ad:0d:05:f5:ef:c2:03:a8:89:
         66:d2:97:d5:95:d4:17:c4:13:b3:cf:a4:25:75:56:43:ce:1a:
         85:4c:ba:34:aa:66:90:e9:c2:8b:8e:29:c1:29:21:c0:ae:3d:
         8e:1a:b6:15:e6:5b:b8:94:42:88:55:83:c9:70:19:37:88:ea:
         c2:cd:3c:14:8f:45:c9:ce:8b:0f:36:14:0b:52:34:9f:2b:3b:
         60:0f:fe:ca:34:70:1d:c5:c5:5d:c1:48:f9:f1:92:45:50:16:
         4e:31:cd:d5:29:e1:69:cd:2c:41:df:45:c4:ba:d1:3a:50:04:
         0d:f9:90:90:7e:c7:3a:6e:7b:75:ec:ac:e2:79:1c:1e:11:76:
         7e:5f:22:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp07nInA4GOIX7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhhNmQzNDctNTE3MC00NDcwLWFiYjYtMWI5OTQ5MWEx
NDA2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
MzQyMGIzOWYtZGY5Zi00MTQ2LWE3MTYtM2U4MWY2NDAwMTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt/WBYceXoTG3l0cQg82UMl9yIZkAjRXhimy
yTvQE54SJEjxrdkOEXl+TiwIrpYsKIRImX15+X/3FO6z6E20Azmaj7VAT/dhasWq
SpPRLE/x4J2fbJgQrGOhM08wdEYDtgKh6vFTT0CW9yPvoQd8wbCL3ojRJGBdfddp
C3maF4z8XfASXeW9/3CCUXUgON6v4nqV1XKxryP303bnwQY1I7y5U8SkaX03H60d
CBx02q18ficiISy04uULk/HUKq1SucjD8SCEhEIYDB/vEvDOd/0mlITqEzCdfi30
HwKSyvDMJlqkh/uDJ+rU7RImYaMeb+y1cx3NtDkR9lNtTa6FsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAiiNIgSxUyBRikW//hchQLYLE7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wOGE2
ZDM0Ny01MTcwLTQ0NzAtYWJiNi0xYjk5NDkxYTE0MDYvZmM3MzRhYmUtODRjYi0z
MWZiLTkwOTEtNTcyOTk1ZTY3YmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDhhNmQzNDctNTE3MC00NDcwLWFi
YjYtMWI5OTQ5MWExNDA2LzA4YTZkMzQ3LTUxNzAtNDQ3MC1hYmI2LTFiOTk0OTFh
MTQwNi5jcmwwHwYDVR0jBBgwFoAUNOmTqFaGORWFujeTlR6QytCcE48wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8wOGE2ZDM0Ny01MTcwLTQ0NzAtYWJiNi0xYjk5
NDkxYTE0MDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL0CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZcIQF8Wx2boCRSRbUwCDtjkZG8f3P1TUO6UGQPkQB4l2XwKG7OCjT3
vUuO+9TR8ZcQCGlfTqiJ8kN2SBDwmRe1Xi7x0ZvXpiBk+kW4xNKNQLFD8mSInN19
OsLZpsnXzDw8xcOzbaPykWR+QjCA+6kfQgHThq0NBfXvwgOoiWbSl9WV1BfEE7PP
pCV1VkPOGoVMujSqZpDpwouOKcEpIcCuPY4athXmW7iUQohVg8lwGTeI6sLNPBSP
RcnOiw82FAtSNJ8rO2AP/so0cB3FxV3BSPnxkkVQFk4xzdUp4WnNLEHfRcS60TpQ
BA35kJB+xzpue3XsrOJ5HB4Rdn5fIls=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:20 2025 by rpki-client