Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a8d97188-37bf-3b8a-b22f-c811083e21b3.roa
File:                     a8d97188-37bf-3b8a-b22f-c811083e21b3.roa (raw, json)
Hash identifier:          baEa+obd+2Yo5f5SybJglXyKnowWTTVkNDOHrXocfug=
Subject key identifier:   61:B7:B3:6C:90:E3:21:0C:40:F1:8B:B9:E7:72:92:B5:2E:08:2A:E6
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584B6A61F0E8ABCE94952CCD8500
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a8d97188-37bf-3b8a-b22f-c811083e21b3.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     14618
IP address blocks:        209.169.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f0:e8:ab:ce:94:95:2c:cd:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=a22d3fad-ae3b-4db8-a0cf-ecb612fc01a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:69:24:89:a0:6b:f3:fa:99:6b:8c:51:d2:
                    23:5b:e6:a6:9b:65:af:da:f1:24:7b:76:22:2a:af:
                    94:a1:5f:54:cb:cc:b7:ed:aa:5d:19:20:f2:13:9e:
                    ef:fd:e4:51:82:1f:15:5c:fb:38:27:69:e9:a0:81:
                    a3:37:24:22:fe:e8:e8:88:1e:4a:a3:48:05:ea:aa:
                    35:69:20:2c:e3:59:25:7f:ed:17:0a:93:c0:94:f9:
                    76:23:4d:06:dd:61:87:38:4e:f2:81:8b:b5:59:14:
                    63:13:ee:2c:24:a8:a5:a6:ef:3f:40:2b:d7:f1:09:
                    9d:11:7b:bd:64:d7:05:a2:55:07:b5:2e:0e:fd:74:
                    16:57:24:fe:bf:6d:b2:f8:ee:2a:ba:4d:65:23:ed:
                    ec:b9:93:d8:0b:12:2f:de:38:38:8f:3f:00:bb:c4:
                    08:bc:cd:b4:e1:97:0e:a5:df:c0:52:df:52:56:19:
                    ff:57:b0:8b:15:d8:99:77:70:4f:81:55:23:14:9f:
                    7d:58:75:c4:f8:cc:40:4a:d7:fd:20:b2:0f:57:ed:
                    87:a9:13:7d:cc:23:d1:e4:dc:3f:b7:a7:99:10:b0:
                    09:96:46:9e:9b:2c:14:bf:75:fc:a5:01:1b:a5:2d:
                    c1:a6:2f:d5:84:d9:37:8a:68:de:bc:df:5f:10:38:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B7:B3:6C:90:E3:21:0C:40:F1:8B:B9:E7:72:92:B5:2E:08:2A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a8d97188-37bf-3b8a-b22f-c811083e21b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:04:d5:7e:c3:00:53:40:3f:06:54:1c:e8:07:78:b8:54:
         f9:42:d3:e5:cc:65:04:57:d8:66:ff:4d:36:91:72:de:28:7e:
         15:14:d8:c1:46:cf:7c:8b:af:14:f6:6b:ff:8c:1c:a5:6c:10:
         45:4a:ae:da:71:fc:72:f0:2d:d0:30:87:9a:6e:49:27:b0:1c:
         44:dc:ee:b6:53:58:e0:21:25:ec:8c:a7:27:07:a8:dc:f8:f6:
         f1:37:9b:88:0c:14:a2:70:1b:f2:71:0e:79:d6:22:69:04:08:
         e0:f4:cd:10:df:eb:af:d2:ec:bc:31:49:a9:c6:46:20:2f:eb:
         d7:0c:db:30:d7:4e:f3:76:19:62:c8:61:1f:13:bf:23:47:da:
         c1:c1:d2:c1:1b:b9:4f:f6:75:03:ed:8e:0e:8e:aa:33:d2:f3:
         8f:b3:5e:50:41:01:1d:75:48:34:23:d7:f0:9e:5e:27:b1:c1:
         1a:14:91:7a:4b:fc:54:77:7f:82:21:09:78:99:6b:84:35:7e:
         d3:40:c5:d9:3f:9d:29:bd:80:c3:eb:18:2b:c4:ad:b6:07:28:
         2e:07:95:5e:64:cc:6f:c0:94:77:27:4b:e1:c7:f4:cd:81:82:
         45:60:2c:2e:71:f5:4a:40:d1:86:13:26:1a:3d:3d:78:41:04:
         8e:dd:39:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfDoq86UlSzNhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw
MjhiMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
YTIyZDNmYWQtYWUzYi00ZGI4LWEwY2YtZWNiNjEyZmMwMWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQFpJImga/P6mWuMUdIjW+amm2Wv2vEke3Yi
Kq+UoV9Uy8y37apdGSDyE57v/eRRgh8VXPs4J2npoIGjNyQi/ujoiB5Ko0gF6qo1
aSAs41klf+0XCpPAlPl2I00G3WGHOE7ygYu1WRRjE+4sJKilpu8/QCvX8QmdEXu9
ZNcFolUHtS4O/XQWVyT+v22y+O4quk1lI+3suZPYCxIv3jg4jz8Au8QIvM204ZcO
pd/AUt9SVhn/V7CLFdiZd3BPgVUjFJ99WHXE+MxAStf9ILIPV+2HqRN9zCPR5Nw/
t6eZELAJlkaemywUv3X8pQEbpS3Bpi/VhNk3imjevN9fEDi8YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGG3s2yQ4yEMQPGLuedykrUuCCrmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk
ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYThkOTcxODgtMzdiZi0z
YjhhLWIyMmYtYzgxMTA4M2UyMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk
Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3
MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0
NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0anxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3NBNV+wwBTQD8GVBzoB3i4VPlC0+XMZQRX2Gb/TTaRct4ofhUU2MFG
z3yLrxT2a/+MHKVsEEVKrtpx/HLwLdAwh5puSSewHETc7rZTWOAhJeyMpycHqNz4
9vE3m4gMFKJwG/JxDnnWImkECOD0zRDf66/S7LwxSanGRiAv69cM2zDXTvN2GWLI
YR8TvyNH2sHB0sEbuU/2dQPtjg6OqjPS84+zXlBBAR11SDQj1/CeXiexwRoUkXpL
/FR3f4IhCXiZa4Q1ftNAxdk/nSm9gMPrGCvErbYHKC4HlV5kzG/AlHcnS+HH9M2B
gkVgLC5x9UpA0YYTJho9PXhBBI7dOew=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:30:59 2025 by rpki-client