Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a9e751f-0583-3628-950b-2cc24b9e00b0.roa
File:                     8a9e751f-0583-3628-950b-2cc24b9e00b0.roa (raw, json)
Hash identifier:          +ZXnHA4CTZ9bsoqHt1vzzIjH9FVjC/BXJrF1Hlb0Ju0=
Subject key identifier:   DA:C8:E9:51:47:18:B3:37:2C:D9:A3:C5:91:06:BB:D0:03:47:8D:67
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B76F226AA1EE8C4BF0F797E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a9e751f-0583-3628-950b-2cc24b9e00b0.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     400902
IP address blocks:        216.149.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:26:aa:1e:e8:c4:bf:0f:79:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=08a3c54a-7aac-4bfd-95b1-12445100f416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:bc:f9:9a:23:de:a8:46:95:fc:cb:10:44:
                    b6:75:54:fe:12:f7:ed:19:5f:42:bd:0e:3a:33:91:
                    34:a2:76:23:3d:e0:bf:4d:97:58:e3:a2:ff:d7:f6:
                    8e:88:3d:67:54:66:b7:04:de:9b:41:70:f1:70:87:
                    c8:89:05:05:97:38:67:75:45:63:62:cb:fd:39:9e:
                    02:63:f1:64:4e:eb:86:e8:d6:5e:6f:ed:b7:96:7c:
                    de:8d:6c:29:5c:16:04:10:90:99:1a:61:47:ce:cd:
                    ba:05:c8:7b:cc:56:a0:37:e0:93:75:91:87:4b:0d:
                    b3:52:d0:15:f0:4d:c3:45:50:9b:8c:5d:4e:14:8b:
                    23:67:8b:e7:e0:18:8c:6c:51:ab:af:ce:88:0b:09:
                    8c:d5:fa:4f:3f:d3:46:69:4e:b6:3d:42:ed:a0:35:
                    d4:9b:a2:d2:49:0f:b3:82:21:8a:e8:e6:73:7d:46:
                    af:3f:b1:d3:d2:24:8f:79:fa:52:73:5e:c1:83:4c:
                    dc:9e:20:fd:c4:6b:19:5b:6f:aa:34:78:79:92:00:
                    20:f1:72:26:4a:55:92:43:31:15:2d:bb:9e:da:5b:
                    24:0b:6f:3b:93:f8:cd:d4:4f:cc:14:7e:d2:c6:13:
                    d8:a4:82:df:52:9f:ec:cb:b9:97:cf:6e:1c:49:aa:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C8:E9:51:47:18:B3:37:2C:D9:A3:C5:91:06:BB:D0:03:47:8D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a9e751f-0583-3628-950b-2cc24b9e00b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.149.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:08:b6:84:20:58:c9:a4:3a:50:d2:38:5d:59:6a:15:21:55:
         d7:e0:41:ef:65:3d:4e:a3:fd:72:69:df:87:24:64:5d:0c:8d:
         fd:69:47:b6:0d:2f:e1:98:55:64:40:18:be:5a:c5:14:17:86:
         c2:cd:6c:80:54:c6:1a:e4:e9:04:48:0e:21:6b:cd:d3:10:76:
         03:3a:5f:74:02:35:77:85:93:dc:c1:48:28:fa:97:5d:a5:10:
         90:5d:e0:00:3f:59:73:55:68:83:69:d7:46:d0:9e:f9:49:3c:
         d9:34:7c:ab:c6:2b:2f:a3:2a:68:c3:14:c2:11:4b:f9:2f:4f:
         3d:44:4a:c4:13:c1:7b:d3:13:35:49:47:ac:a6:98:f5:6a:45:
         4b:ca:54:3c:7a:9e:86:e3:9b:8d:09:5a:12:eb:e6:76:90:d4:
         20:77:99:f9:93:33:aa:79:88:a5:74:ec:64:f4:65:51:c4:96:
         a8:91:84:35:51:25:b0:58:59:9f:a3:2b:e6:be:9e:d1:f3:d7:
         e5:66:66:a8:7d:fb:84:4f:cd:f9:da:c1:9d:99:ab:6c:d3:16:
         40:2e:51:5e:fe:82:39:41:b0:42:60:79:aa:0b:8b:5d:4c:55:
         d5:a3:55:9a:95:29:51:91:bd:6d:0a:53:0f:f2:46:aa:6c:3a:
         7b:83:2a:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iaqHujEvw95foAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
MDhhM2M1NGEtN2FhYy00YmZkLTk1YjEtMTI0NDUxMDBmNDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjG8+Zoj3qhGlfzLEES2dVT+EvftGV9CvQ46
M5E0onYjPeC/TZdY46L/1/aOiD1nVGa3BN6bQXDxcIfIiQUFlzhndUVjYsv9OZ4C
Y/FkTuuG6NZeb+23lnzejWwpXBYEEJCZGmFHzs26Bch7zFagN+CTdZGHSw2zUtAV
8E3DRVCbjF1OFIsjZ4vn4BiMbFGrr86ICwmM1fpPP9NGaU62PULtoDXUm6LSSQ+z
giGK6OZzfUavP7HT0iSPefpSc17Bg0zcniD9xGsZW2+qNHh5kgAg8XImSlWSQzEV
Lbue2lskC287k/jN1E/MFH7SxhPYpILfUp/sy7mXz24cSaqRvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrI6VFHGLM3LNmjxZEGu9ADR41nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGE5ZTc1MWYtMDU4My0z
NjI4LTk1MGItMmNjMjRiOWUwMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JXUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKIItoQgWMmkOlDSOF1ZahUhVdfgQe9lPU6j/XJp34ckZF0Mjf1pR7YN
L+GYVWRAGL5axRQXhsLNbIBUxhrk6QRIDiFrzdMQdgM6X3QCNXeFk9zBSCj6l12l
EJBd4AA/WXNVaINp10bQnvlJPNk0fKvGKy+jKmjDFMIRS/kvTz1ESsQTwXvTEzVJ
R6ymmPVqRUvKVDx6nobjm40JWhLr5naQ1CB3mfmTM6p5iKV07GT0ZVHElqiRhDVR
JbBYWZ+jK+a+ntHz1+VmZqh9+4RPzfnawZ2Zq2zTFkAuUV7+gjlBsEJgeaoLi11M
VdWjVZqVKVGRvW0KUw/yRqpsOnuDKmw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:04:30 2025 by rpki-client