Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a91abc1-e122-3509-b4e1-6d91d91c0fe9.roa
File:                     0a91abc1-e122-3509-b4e1-6d91d91c0fe9.roa (raw, json)
Hash identifier:          AnM0FTLRpnOWFL42y0BxG0kA29mQI70+hGkVmcVP/Rg=
Subject key identifier:   A6:0F:1C:16:F4:23:E9:C8:C5:8A:FC:E7:5D:87:B2:95:AA:B3:25:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36DBC16AF47C1781CEC180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a91abc1-e122-3509-b4e1-6d91d91c0fe9.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        141.153.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:db:c1:6a:f4:7c:17:81:ce:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=18afbb68-0726-401a-b477-f45f687b0fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:13:54:fa:f5:1d:6a:d1:85:ff:00:3e:63:f6:
                    51:81:06:d5:2c:45:0c:4c:2d:5b:9f:61:47:55:3c:
                    cf:aa:98:45:4a:bc:6a:b2:75:b0:a7:fa:85:3f:f8:
                    fa:33:b9:df:38:b8:c7:dc:37:0f:e1:b6:9f:8c:64:
                    b7:ef:d7:91:ba:6c:e0:c8:36:54:7e:a8:51:1c:dc:
                    7b:f4:f2:bb:37:78:b8:c3:a4:da:08:d5:d6:d6:57:
                    2f:81:80:80:03:c3:1b:7a:38:76:45:8d:9d:56:d7:
                    cb:74:59:a4:9d:f6:8c:05:29:6e:ff:4e:3b:2b:74:
                    12:a2:d3:3a:82:46:08:52:c3:cd:da:b2:fd:40:83:
                    3f:0a:3c:65:26:dd:dd:5a:e7:ab:11:61:4b:7a:b9:
                    3a:fc:27:2e:08:6d:0f:6f:63:73:a1:fb:45:2f:2f:
                    11:44:b7:e3:4b:f1:e0:7f:c2:02:7e:6b:7c:a8:03:
                    65:06:48:a9:40:7f:92:49:46:93:a0:89:cd:72:2b:
                    04:7c:e2:3a:e5:7d:2b:16:b3:31:bd:2a:fa:10:b3:
                    0f:f3:21:2b:a7:82:ff:f1:46:0e:8b:d0:5d:fc:c8:
                    e3:45:d6:44:31:73:ec:ba:f6:d8:93:48:af:63:82:
                    87:8a:2f:d0:dc:36:00:50:53:e6:69:c5:26:a5:4b:
                    9b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0F:1C:16:F4:23:E9:C8:C5:8A:FC:E7:5D:87:B2:95:AA:B3:25:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a91abc1-e122-3509-b4e1-6d91d91c0fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.153.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f0:4c:36:b5:0a:52:0d:30:4c:8d:f1:ec:3c:f2:c9:49:92:
         6e:1b:3c:04:a1:44:99:04:98:4d:3d:17:d3:76:63:e6:41:5d:
         89:0b:10:53:e9:34:8a:cc:d5:01:1d:ab:08:f0:a7:94:4d:a9:
         cb:e3:d0:4e:63:dd:55:de:af:76:3d:ce:c2:07:d5:e6:de:6e:
         c8:99:d7:d6:7b:2a:20:04:58:fc:cf:5e:a7:43:f0:0f:24:23:
         7d:ee:fa:ee:9a:bb:2f:80:53:ef:1d:d3:b4:57:45:79:42:12:
         ef:23:ac:49:b5:33:44:0e:b7:a8:42:bb:1c:d3:50:80:19:2f:
         93:da:73:be:10:c3:47:ef:ac:12:cc:ad:f8:64:87:8d:68:cf:
         7a:26:02:db:0b:24:48:a9:53:83:df:a0:22:69:df:03:f0:1d:
         61:6f:c5:97:c5:52:78:e9:7b:fd:00:b1:13:97:3b:f1:2d:bd:
         c0:39:f1:8b:7b:04:30:b2:0c:d4:26:49:bb:fd:9a:9a:5e:68:
         0b:b9:ac:e4:37:32:68:7c:be:9d:f0:0a:ab:85:f4:4d:2e:c5:
         99:f9:b0:99:40:da:0f:b1:46:e4:c5:00:7d:e5:c0:cf:34:86:
         5d:b8:df:5f:1c:f3:fa:59:ca:7f:68:2d:65:35:8e:1e:d4:5c:
         f6:a8:89:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtvBavR8F4HOwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
MThhZmJiNjgtMDcyNi00MDFhLWI0NzctZjQ1ZjY4N2IwZmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBNU+vUdatGF/wA+Y/ZRgQbVLEUMTC1bn2FH
VTzPqphFSrxqsnWwp/qFP/j6M7nfOLjH3DcP4bafjGS379eRumzgyDZUfqhRHNx7
9PK7N3i4w6TaCNXW1lcvgYCAA8Mbejh2RY2dVtfLdFmknfaMBSlu/047K3QSotM6
gkYIUsPN2rL9QIM/CjxlJt3dWuerEWFLerk6/CcuCG0Pb2NzoftFLy8RRLfjS/Hg
f8ICfmt8qANlBkipQH+SSUaToInNcisEfOI65X0rFrMxvSr6ELMP8yErp4L/8UYO
i9Bd/MjjRdZEMXPsuvbYk0ivY4KHii/Q3DYAUFPmacUmpUubtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKYPHBb0I+nIxYr8512HspWqsyUVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGE5MWFiYzEtZTEyMi0z
NTA5LWI0ZTEtNmQ5MWQ5MWMwZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZn7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/wTDa1ClINMEyN8ew88slJkm4bPAShRJkEmE09F9N2Y+ZBXYkLEFPp
NIrM1QEdqwjwp5RNqcvj0E5j3VXer3Y9zsIH1ebebsiZ19Z7KiAEWPzPXqdD8A8k
I33u+u6auy+AU+8d07RXRXlCEu8jrEm1M0QOt6hCuxzTUIAZL5Pac74Qw0fvrBLM
rfhkh41oz3omAtsLJEipU4PfoCJp3wPwHWFvxZfFUnjpe/0AsROXO/EtvcA58Yt7
BDCyDNQmSbv9mppeaAu5rOQ3Mmh8vp3wCquF9E0uxZn5sJlA2g+xRuTFAH3lwM80
hl24318c8/pZyn9oLWU1jh7UXPaoiWU=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:52:09 2025 by rpki-client