Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2e123a2-9096-32e7-a270-69e079c6d056.roa
File:                     d2e123a2-9096-32e7-a270-69e079c6d056.roa (raw, json)
Hash identifier:          co+HooszIVghWHMh5sD5W7Y40EnIhkIq8jp7s5EllT0=
Subject key identifier:   0F:D1:EA:3F:EE:5A:91:79:9E:C5:A8:39:44:06:81:BC:0F:A3:8C:52
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CE2D3E3A008F2F7013A5C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2e123a2-9096-32e7-a270-69e079c6d056.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        173.194.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:2d:3e:3a:00:8f:2f:70:13:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6d9b183a-37b8-4caa-8124-036e1137a5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6b:91:8b:8e:60:85:e8:90:76:e7:69:4c:b5:
                    5b:31:de:ae:a7:a4:f5:dd:b6:47:37:2b:eb:f4:2d:
                    24:b0:a2:06:07:9a:6f:77:6d:9a:15:74:59:f4:db:
                    00:8d:30:0a:d2:a6:e5:ce:4c:94:f4:c7:3b:48:90:
                    e3:69:41:af:fd:42:a0:f1:be:7c:b7:0b:79:43:90:
                    c1:81:6e:c8:9c:cc:88:de:9d:78:4f:8b:5a:cc:d3:
                    a9:18:ee:93:88:d4:17:57:d8:81:79:3e:38:1e:d5:
                    b4:b0:f7:ec:3b:48:66:83:2e:37:5d:2a:9d:1b:a0:
                    0a:bd:29:9b:30:b7:f0:f9:d2:95:f5:6b:f2:00:ad:
                    6f:f7:75:4c:cb:a7:5a:36:df:cc:10:61:2a:60:27:
                    f4:9a:c0:f0:71:af:e7:56:2b:da:d3:01:8c:8a:59:
                    be:b3:02:6e:4b:7c:5a:f3:97:88:0b:ce:a1:8a:f2:
                    8e:0f:e7:f8:71:01:99:b7:1e:74:f2:22:d9:95:5e:
                    c3:68:26:72:2a:9e:cb:48:05:bf:68:ef:1b:97:98:
                    62:af:f9:7a:9b:30:e5:d9:0b:39:57:b9:da:18:38:
                    a9:5b:07:a3:91:07:9e:eb:af:0c:45:e0:31:33:4c:
                    ed:e5:62:bb:4e:c7:7a:f2:59:ec:f8:bf:59:d7:30:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D1:EA:3F:EE:5A:91:79:9E:C5:A8:39:44:06:81:BC:0F:A3:8C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2e123a2-9096-32e7-a270-69e079c6d056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:0e:2b:e8:bb:72:1b:39:78:4b:13:52:32:e6:e5:ce:ff:77:
         b4:08:14:33:90:fe:59:f0:72:e1:ac:3e:5d:20:2e:e1:91:3d:
         61:06:08:b3:fe:6b:94:df:07:02:ff:17:2d:9e:e7:8b:9c:b9:
         03:73:fc:44:3c:4e:ce:db:63:72:00:2e:5d:ff:32:6d:30:8e:
         e5:8b:c4:da:c2:16:4a:f0:ee:a8:5e:dc:f6:f4:a2:2d:1f:02:
         21:b2:bd:26:54:8a:4f:25:f5:b6:69:df:77:1d:96:d4:42:48:
         67:d9:1a:55:7d:4d:07:9b:b7:72:f8:b7:88:ea:80:23:6f:a4:
         5d:0c:50:75:cb:87:66:31:29:53:77:5a:6d:71:17:26:52:a8:
         fc:75:f9:d3:1b:51:31:23:e3:36:12:c0:cc:cc:f5:f6:c7:b0:
         12:fd:04:a5:ef:46:4c:a7:1c:7c:83:2a:b5:e0:03:52:ab:66:
         38:cf:bb:ba:b7:6a:f4:9e:a8:93:f3:bb:75:d7:d4:74:58:3d:
         88:89:97:72:57:e7:72:f6:3b:21:db:49:f4:be:e1:9f:ee:29:
         c0:2c:7a:aa:05:3f:38:20:a3:3e:3a:44:80:5e:bb:9c:df:bd:
         ba:40:7d:0c:e0:4a:e1:f3:92:03:5a:48:c6:54:21:0b:12:fb:
         e7:fd:b5:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzi0+OgCPL3ATpcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NmQ5YjE4M2EtMzdiOC00Y2FhLTgxMjQtMDM2ZTExMzdhNWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmuRi45gheiQdudpTLVbMd6up6T13bZHNyvr
9C0ksKIGB5pvd22aFXRZ9NsAjTAK0qblzkyU9Mc7SJDjaUGv/UKg8b58twt5Q5DB
gW7InMyI3p14T4tazNOpGO6TiNQXV9iBeT44HtW0sPfsO0hmgy43XSqdG6AKvSmb
MLfw+dKV9WvyAK1v93VMy6daNt/MEGEqYCf0msDwca/nViva0wGMilm+swJuS3xa
85eIC86hivKOD+f4cQGZtx508iLZlV7DaCZyKp7LSAW/aO8bl5hir/l6mzDl2Qs5
V7naGDipWwejkQee668MReAxM0zt5WK7Tsd68lns+L9Z1zCKtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/R6j/uWpF5nsWoOUQGgbwPo4xSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDJlMTIzYTItOTA5Ni0z
MmU3LWEyNzAtNjllMDc5YzZkMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkOK+i7chs5eEsTUjLm5c7/d7QIFDOQ/lnwcuGsPl0gLuGRPWEGCLP+
a5TfBwL/Fy2e54ucuQNz/EQ8Ts7bY3IALl3/Mm0wjuWLxNrCFkrw7qhe3Pb0oi0f
AiGyvSZUik8l9bZp33cdltRCSGfZGlV9TQebt3L4t4jqgCNvpF0MUHXLh2YxKVN3
Wm1xFyZSqPx1+dMbUTEj4zYSwMzM9fbHsBL9BKXvRkynHHyDKrXgA1KrZjjPu7q3
avSeqJPzu3XX1HRYPYiJl3JX53L2OyHbSfS+4Z/uKcAseqoFPzggoz46RIBeu5zf
vbpAfQzgSuHzkgNaSMZUIQsS++f9tfk=
-----END CERTIFICATE-----
Generated at Fri Oct 17 08:45:04 2025 by rpki-client