Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15618664-5e1d-3074-b22e-97a267c85d9e.roa
File:                     15618664-5e1d-3074-b22e-97a267c85d9e.roa (raw, json)
Hash identifier:          LLHSKVvmSgFK1pusyyco+F/VWCFKdlHtfG0Uk4HzNWY=
Subject key identifier:   83:28:B6:D7:10:2C:07:C8:A4:A8:EE:A1:03:04:7C:D3:3E:F0:5A:7C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE0EBEE5E8615620EC9880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15618664-5e1d-3074-b22e-97a267c85d9e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        173.194.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:0e:be:e5:e8:61:56:20:ec:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1dfe046c-905b-4cce-afcc-04af4dc6ee9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e6:f4:c7:3a:24:16:33:45:f0:60:26:5d:3f:
                    e8:3d:bb:af:48:ca:6d:70:8d:49:67:23:0b:90:7b:
                    af:d4:9f:cb:8b:8a:71:41:45:18:5e:83:5e:4e:6f:
                    ef:33:95:52:20:1c:71:c3:af:74:44:06:07:43:70:
                    c6:4e:3a:e9:0a:20:ea:ae:52:72:7c:3c:84:93:03:
                    fe:11:b0:f0:a0:c3:f7:6a:09:77:e3:f0:16:7c:4c:
                    7d:13:a0:c7:bb:f3:c5:bb:2e:79:82:28:18:22:5f:
                    a8:04:79:5e:d4:f6:f9:62:af:34:85:8c:4c:86:81:
                    21:be:49:eb:d6:8a:dc:ad:d1:38:36:e4:01:a3:ea:
                    c2:da:5d:e2:2d:51:4e:e4:98:06:ae:57:b0:ed:1a:
                    7b:80:2a:f1:70:b0:ca:aa:6a:80:17:c9:84:32:2b:
                    c5:66:73:9d:68:34:86:2d:06:8e:b7:5a:dd:39:37:
                    19:98:6a:16:de:4b:5b:4e:87:fc:27:74:64:d9:e3:
                    a4:84:be:81:3d:1f:c1:05:39:30:3d:50:34:2b:13:
                    e3:2e:e7:75:cd:3b:d3:f1:76:16:e8:b5:97:30:be:
                    37:7f:16:10:21:67:60:bb:9e:9a:db:78:cc:db:21:
                    26:58:32:d0:c9:c9:2b:0a:de:ee:1f:cf:ba:d5:a8:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:28:B6:D7:10:2C:07:C8:A4:A8:EE:A1:03:04:7C:D3:3E:F0:5A:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15618664-5e1d-3074-b22e-97a267c85d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:58:c2:07:48:7e:63:06:8f:0c:35:3e:8b:66:65:59:12:31:
         c6:8c:ad:f9:77:de:23:82:cd:62:d9:87:aa:c2:9e:ec:87:c9:
         56:39:13:1c:ed:06:cb:6d:ba:00:b7:f6:a7:b8:14:91:ab:8b:
         29:a6:8f:12:3a:4b:f8:a1:22:0d:15:f8:3c:d2:66:dd:0d:66:
         e9:5b:ae:7f:fb:21:08:79:a2:3f:33:0e:a4:f2:cc:0c:99:50:
         f6:43:b0:f3:68:04:20:2f:03:d4:6e:91:02:3e:92:4d:28:e8:
         98:45:8c:cc:2e:86:48:05:0f:c5:cd:a9:0e:bd:18:94:0b:d9:
         ff:c0:92:77:03:d7:aa:f2:3c:dd:8c:5d:8b:08:2a:f0:59:8f:
         5e:14:95:3c:12:7c:96:89:42:d2:50:ab:8c:e1:3d:88:5f:51:
         00:b8:a6:83:ee:c1:bb:62:45:b1:bc:82:a4:c8:66:09:20:f8:
         1c:80:73:12:38:c0:17:e9:62:b2:47:36:56:7c:cb:d9:82:5a:
         3f:8c:54:b0:20:a4:f0:45:64:81:95:86:09:14:2c:f0:e5:c2:
         d4:fa:21:c9:57:0d:0a:f0:17:13:3d:05:f2:54:fa:9c:f2:96:
         c1:55:cb:4d:7f:d0:ba:68:ff:f3:34:8d:ce:1e:fc:d2:39:4a:
         84:65:b5:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzg6+5ehhViDsmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MWRmZTA0NmMtOTA1Yi00Y2NlLWFmY2MtMDRhZjRkYzZlZTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheb0xzokFjNF8GAmXT/oPbuvSMptcI1JZyML
kHuv1J/Li4pxQUUYXoNeTm/vM5VSIBxxw690RAYHQ3DGTjrpCiDqrlJyfDyEkwP+
EbDwoMP3agl34/AWfEx9E6DHu/PFuy55gigYIl+oBHle1Pb5Yq80hYxMhoEhvknr
1orcrdE4NuQBo+rC2l3iLVFO5JgGrlew7Rp7gCrxcLDKqmqAF8mEMivFZnOdaDSG
LQaOt1rdOTcZmGoW3ktbTof8J3Rk2eOkhL6BPR/BBTkwPVA0KxPjLud1zTvT8XYW
6LWXML43fxYQIWdgu56a23jM2yEmWDLQyckrCt7uH8+61aiX/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMottcQLAfIpKjuoQMEfNM+8Fp8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTU2MTg2NjQtNWUxZC0z
MDc0LWIyMmUtOTdhMjY3Yzg1ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFYwgdIfmMGjww1PotmZVkSMcaMrfl33iOCzWLZh6rCnuyHyVY5Exzt
BsttugC39qe4FJGriymmjxI6S/ihIg0V+DzSZt0NZulbrn/7IQh5oj8zDqTyzAyZ
UPZDsPNoBCAvA9RukQI+kk0o6JhFjMwuhkgFD8XNqQ69GJQL2f/AkncD16ryPN2M
XYsIKvBZj14UlTwSfJaJQtJQq4zhPYhfUQC4poPuwbtiRbG8gqTIZgkg+ByAcxI4
wBfpYrJHNlZ8y9mCWj+MVLAgpPBFZIGVhgkULPDlwtT6IclXDQrwFxM9BfJU+pzy
lsFVy01/0Lpo//M0jc4e/NI5SoRltSI=
-----END CERTIFICATE-----
Generated at Fri Oct 17 08:44:58 2025 by rpki-client