Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f3c4abf-a45b-30b2-9eff-a8fbfa523048.roa
File:                     1f3c4abf-a45b-30b2-9eff-a8fbfa523048.roa (raw, json)
Hash identifier:          j9Ji0rN/QLcxuaiIpqeHBTfyPjCTVleMMQKuNIDvQDE=
Subject key identifier:   FD:C0:3C:E9:09:2F:C2:CC:63:FA:19:27:4E:17:A1:DE:D7:D8:7E:9C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B79BCB196E6601916DB5507A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f3c4abf-a45b-30b2-9eff-a8fbfa523048.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     3855
IP address blocks:        199.172.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b1:96:e6:60:19:16:db:55:07:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=bee54ae4-e1aa-4474-ae69-444ea86358da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4d:52:a4:88:44:62:b1:65:1e:30:00:45:41:
                    7b:18:9a:2b:9b:b2:76:24:d3:34:71:a4:cd:3a:ef:
                    b5:91:02:9b:82:58:03:7c:2c:51:4c:51:86:75:af:
                    b0:d9:1d:a5:84:9c:54:94:3a:94:f8:f5:cc:6e:f3:
                    15:a6:af:b3:3f:08:14:12:b5:44:16:d9:ce:32:db:
                    bc:e2:94:03:4f:8a:7e:d8:37:57:42:95:f3:47:8d:
                    61:58:3e:bb:09:a1:25:37:2b:09:b9:59:3b:78:0d:
                    c6:52:56:f7:2e:87:a7:25:0a:f6:8f:d5:f6:21:95:
                    2a:e8:dd:3a:78:e3:04:de:70:c3:0e:20:e8:4c:93:
                    da:ef:37:c1:18:ce:c5:13:b7:31:d2:ba:95:a6:aa:
                    4e:80:32:42:e1:27:b9:9a:43:22:01:57:c3:5c:a0:
                    62:8d:a3:93:5e:5e:22:6f:e9:62:3c:fc:68:d9:4b:
                    cb:c3:1e:70:42:8b:0b:1d:cc:ba:49:b8:3b:68:aa:
                    57:92:80:d1:e5:f2:ac:2d:d5:47:f6:7d:72:af:31:
                    45:70:27:92:f1:ec:0c:42:07:5b:7c:14:62:79:58:
                    40:57:b6:a2:d4:97:6a:50:7b:ae:d4:14:0c:cb:89:
                    a8:6f:66:e0:ec:f9:f9:65:a3:15:fc:90:04:d4:9d:
                    05:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C0:3C:E9:09:2F:C2:CC:63:FA:19:27:4E:17:A1:DE:D7:D8:7E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f3c4abf-a45b-30b2-9eff-a8fbfa523048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:91:bb:8e:3c:26:49:07:ad:2b:f1:7e:99:a4:b3:20:36:89:
         66:5f:e9:83:8a:5a:4c:e1:6c:54:ba:7f:96:db:8f:a2:60:8d:
         16:19:3b:a3:7d:a1:0d:02:a7:59:47:ed:59:73:1c:20:35:13:
         48:3c:4d:93:9e:60:d7:dd:ff:6b:5e:b9:00:b7:52:df:f6:8f:
         f5:95:6c:3a:6f:b9:84:80:be:9d:ab:d9:ef:96:d7:5a:f7:3f:
         0d:d5:d1:ca:13:29:df:1e:30:0d:71:be:77:5b:dc:c2:a7:99:
         75:96:d4:04:8f:26:68:2d:ba:27:86:cc:b8:c0:48:0c:ad:08:
         f4:63:3c:cd:72:84:94:68:9c:b2:80:19:93:d8:27:8e:1d:c6:
         d4:a9:ef:fa:48:b2:aa:3d:38:51:60:9c:ac:c0:6e:75:56:2a:
         c8:41:ab:6a:ec:81:61:85:59:d1:01:68:76:04:b1:d6:3f:b8:
         2e:68:fb:15:c8:87:31:8e:a6:ad:d5:0f:a8:fd:15:7d:65:07:
         ba:b9:d9:a2:c0:6b:56:f9:9a:f8:93:46:57:69:7b:39:2d:35:
         9e:86:4d:70:c8:04:88:d8:4d:3c:db:97:64:24:be:6c:7f:0e:
         12:e2:2f:81:c7:14:1b:87:c5:64:d2:62:23:f7:70:c9:f7:84:
         8c:a3:0b:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLGW5mAZFttVB6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk
YmVlNTRhZTQtZTFhYS00NDc0LWFlNjktNDQ0ZWE4NjM1OGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE1SpIhEYrFlHjAARUF7GJorm7J2JNM0caTN
Ou+1kQKbglgDfCxRTFGGda+w2R2lhJxUlDqU+PXMbvMVpq+zPwgUErVEFtnOMtu8
4pQDT4p+2DdXQpXzR41hWD67CaElNysJuVk7eA3GUlb3LoenJQr2j9X2IZUq6N06
eOME3nDDDiDoTJPa7zfBGM7FE7cx0rqVpqpOgDJC4Se5mkMiAVfDXKBijaOTXl4i
b+liPPxo2UvLwx5wQosLHcy6Sbg7aKpXkoDR5fKsLdVH9n1yrzFFcCeS8ewMQgdb
fBRieVhAV7ai1JdqUHuu1BQMy4mob2bg7Pn5ZaMV/JAE1J0FBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3APOkJL8LMY/oZJ04Xod7X2H6cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWYzYzRhYmYtYTQ1Yi0z
MGIyLTllZmYtYThmYmZhNTIzMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6z7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIORu448JkkHrSvxfpmksyA2iWZf6YOKWkzhbFS6f5bbj6JgjRYZO6N9
oQ0Cp1lH7VlzHCA1E0g8TZOeYNfd/2teuQC3Ut/2j/WVbDpvuYSAvp2r2e+W11r3
Pw3V0coTKd8eMA1xvndb3MKnmXWW1ASPJmgtuieGzLjASAytCPRjPM1yhJRonLKA
GZPYJ44dxtSp7/pIsqo9OFFgnKzAbnVWKshBq2rsgWGFWdEBaHYEsdY/uC5o+xXI
hzGOpq3VD6j9FX1lB7q52aLAa1b5mviTRldpezktNZ6GTXDIBIjYTTzbl2Qkvmx/
DhLiL4HHFBuHxWTSYiP3cMn3hIyjC+Q=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:27 2025 by rpki-client