Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/905ea028-44a1-3b90-a210-d10796f79f2f.roa
File:                     905ea028-44a1-3b90-a210-d10796f79f2f.roa (raw, json)
Hash identifier:          2+uvc8YVLLGjTsGv9LbRMKW+EzXvhQScDx4OXznNeC0=
Subject key identifier:   95:95:2B:20:7D:18:5F:2C:F3:1D:D2:85:40:DB:4E:11:81:E5:74:0D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B8382108AFCD72A499CF3E780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/905ea028-44a1-3b90-a210-d10796f79f2f.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     34086
IP address blocks:        142.250.83.140/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:10:8a:fc:d7:2a:49:9c:f3:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=3dfe0446-129d-40b5-adc6-56cb3c16d82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:64:37:23:e7:ac:5e:4e:27:17:59:9a:03:
                    88:0d:cb:a9:25:66:c3:f0:73:4e:f8:25:a1:8c:33:
                    92:f5:54:d4:9c:ec:d4:0e:96:53:5e:4c:0a:d6:de:
                    da:bd:4a:42:47:8b:1f:a4:65:76:34:04:a1:19:c1:
                    50:14:49:40:ba:48:09:36:56:a2:81:dd:85:8d:ef:
                    d0:b7:d0:be:f2:ef:11:25:c8:2d:f0:dd:e1:b3:69:
                    34:77:95:a1:1e:9f:8e:15:24:f7:2d:73:0a:3d:c3:
                    36:7a:d1:84:fb:b2:be:e1:7d:68:af:0d:b9:70:98:
                    ed:dc:ea:21:24:11:a1:76:6f:78:28:55:50:83:0f:
                    96:4f:31:11:b5:75:5a:a8:a7:32:da:d7:39:4d:33:
                    46:fc:65:eb:26:b1:67:11:01:aa:b6:3e:e4:fe:57:
                    3a:39:65:51:f1:b9:4e:28:1a:36:75:c1:2f:4a:1e:
                    61:17:8c:2c:c2:17:32:4a:e7:6e:a3:af:8a:12:19:
                    bc:40:f2:13:84:91:51:92:af:65:89:7c:0c:7b:bb:
                    35:93:42:65:3d:a3:9c:f9:02:4a:cf:0a:91:b9:d3:
                    56:2d:4a:68:c0:79:a3:2f:56:33:02:92:6e:80:6c:
                    53:53:74:85:f9:c1:c4:d4:db:f7:87:e0:55:56:76:
                    27:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:95:2B:20:7D:18:5F:2C:F3:1D:D2:85:40:DB:4E:11:81:E5:74:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/905ea028-44a1-3b90-a210-d10796f79f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.83.140/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e3:23:4f:24:bb:f1:eb:60:94:23:73:3d:99:e7:05:c4:5c:
         c0:a3:e5:a0:c2:5a:6f:72:27:18:08:9d:65:31:0a:b2:bb:4d:
         5c:ee:a1:a5:db:82:29:08:e2:31:47:f6:f2:72:77:49:2b:f7:
         ba:aa:44:e6:70:9b:a0:bf:78:ee:a8:dd:4f:1b:e3:2e:f4:07:
         30:d1:b3:39:76:d2:95:ae:10:d8:14:b4:90:88:84:75:d3:18:
         a0:43:82:24:c0:a4:2e:ad:13:1b:d5:76:21:d7:8e:fc:26:fb:
         6c:9e:89:19:f2:ed:0f:67:ce:91:58:57:a8:5e:41:76:89:88:
         e8:71:af:a5:73:ea:b1:e2:0a:ab:30:68:9e:0a:92:ff:fd:c2:
         53:e6:40:70:d7:2c:4c:a2:7c:1b:c6:58:74:df:38:01:22:a3:
         df:99:fb:f0:ef:0c:52:d5:77:97:46:2e:d7:36:f4:d6:6f:99:
         5e:d0:80:44:57:54:3e:13:cf:72:45:ce:e2:97:ed:64:a9:6f:
         10:76:ae:98:e5:c9:52:88:ab:99:b9:32:0c:fc:28:5f:7c:2e:
         cc:28:e5:d9:8c:29:c7:28:0d:39:4a:ea:a0:a1:d9:5c:4f:7b:
         86:91:80:31:a8:b3:55:13:27:7e:fb:db:42:a7:1c:ba:8e:17:
         53:61:10:36
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuDghCK/NcqSZzz54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk
M2RmZTA0NDYtMTI5ZC00MGI1LWFkYzYtNTZjYjNjMTZkODJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVVkNyPnrF5OJxdZmgOIDcupJWbD8HNO+CWh
jDOS9VTUnOzUDpZTXkwK1t7avUpCR4sfpGV2NAShGcFQFElAukgJNlaigd2Fje/Q
t9C+8u8RJcgt8N3hs2k0d5WhHp+OFST3LXMKPcM2etGE+7K+4X1orw25cJjt3Ooh
JBGhdm94KFVQgw+WTzERtXVaqKcy2tc5TTNG/GXrJrFnEQGqtj7k/lc6OWVR8blO
KBo2dcEvSh5hF4wswhcySuduo6+KEhm8QPIThJFRkq9liXwMe7s1k0JlPaOc+QJK
zwqRudNWLUpowHmjL1YzApJugGxTU3SF+cHE1Nv3h+BVVnYnswIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJWVKyB9GF8s8x3ShUDbThGB5XQNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTA1ZWEwMjgtNDRhMS0z
YjkwLWEyMTAtZDEwNzk2Zjc5ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUCjvpTjDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCn4yNPJLvx62CUI3M9mecFxFzAo+WgwlpvcicYCJ1lMQqyu01c7qGl
24IpCOIxR/bycndJK/e6qkTmcJugv3juqN1PG+Mu9Acw0bM5dtKVrhDYFLSQiIR1
0xigQ4IkwKQurRMb1XYh1478JvtsnokZ8u0PZ86RWFeoXkF2iYjoca+lc+qx4gqr
MGieCpL//cJT5kBw1yxMonwbxlh03zgBIqPfmfvw7wxS1XeXRi7XNvTWb5le0IBE
V1Q+E89yRc7il+1kqW8Qdq6Y5clSiKuZuTIM/ChffC7MKOXZjCnHKA05Suqgodlc
T3uGkYAxqLNVEyd++9tCpxy6jhdTYRA2
-----END CERTIFICATE-----
Generated at Fri Oct 17 08:47:39 2025 by rpki-client