Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/dd636bfe-abf4-32bf-87a0-eafa6275305f.roa
File:                     dd636bfe-abf4-32bf-87a0-eafa6275305f.roa (raw, json)
Hash identifier:          TlpXXlnzHS8DnHIHOpkcGxTHLhtprjxxTuohiGenVtY=
Subject key identifier:   AC:FA:38:D8:18:29:D4:42:E0:85:EE:B6:71:CC:26:A6:6F:00:10:9E
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584B5B0FA3B361A78A2286848780
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/dd636bfe-abf4-32bf-87a0-eafa6275305f.roa
Signing time:             Mon 29 Sep 2025 13:17:46 +0000
ROA not before:           Mon 29 Sep 2025 13:17:46 +0000
ROA not after:            Sun 28 Dec 2025 14:17:46 +0000
asID:                     154049
IP address blocks:        216.75.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:0f:a3:b3:61:a7:8a:22:86:84:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Sep 29 13:17:46 2025 GMT
            Not After : Dec 28 14:17:46 2025 GMT
        Subject: CN=cdab8211-260b-4f40-8e34-9ec8d9919314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:cf:db:db:0a:71:c5:34:03:58:99:61:7d:
                    29:a6:f4:de:d8:92:49:20:5b:ec:80:9a:26:8e:d2:
                    23:da:af:29:47:dc:29:bb:55:e1:a9:59:ab:9c:54:
                    0c:f2:97:ff:9f:36:15:72:fc:fe:09:32:6f:a6:6c:
                    cd:47:4c:47:58:01:2e:cb:f4:58:e4:dd:f3:61:17:
                    fe:34:29:41:1f:c8:0d:67:a4:5c:6e:42:10:88:d7:
                    40:2a:59:75:e0:b5:8f:69:fe:b6:37:3e:5b:b6:0d:
                    c9:f4:23:89:c3:f8:db:0c:cc:5c:c5:ce:c9:e3:89:
                    6b:c9:e3:b3:3f:ec:38:d8:7a:4e:9c:71:de:12:b4:
                    19:ef:97:1f:44:ed:be:94:cd:be:45:59:08:ec:1a:
                    5f:12:98:7c:40:d0:6a:7e:fe:e5:35:2f:60:e5:5c:
                    af:bc:57:a4:14:7e:1d:08:3d:ff:a6:91:26:e6:54:
                    48:01:2d:9f:2d:26:3a:0e:c2:b7:c8:96:fd:72:e8:
                    c1:1b:ba:67:39:56:e7:f1:23:dd:2f:b6:7f:89:5a:
                    d9:3a:54:28:f0:8c:8b:b4:58:99:58:0d:03:63:08:
                    fd:17:ab:aa:87:82:20:73:7c:eb:c5:f4:c9:d2:af:
                    12:1e:88:81:ea:c3:0c:e7:2d:43:5c:f4:1e:8d:88:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FA:38:D8:18:29:D4:42:E0:85:EE:B6:71:CC:26:A6:6F:00:10:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/dd636bfe-abf4-32bf-87a0-eafa6275305f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b6:75:19:a5:6b:19:06:1e:09:85:a4:b5:cd:0e:b0:79:28:
         13:ba:6c:94:a1:38:07:70:07:dc:c3:3c:87:98:08:86:48:5d:
         d6:e5:df:83:3b:c7:e5:96:04:7a:7e:25:23:3f:6f:8a:1c:89:
         0d:a9:e7:4b:33:4c:e9:7c:63:90:5e:6d:73:49:fb:58:04:8b:
         49:16:04:56:e0:b9:70:b2:5d:7f:a4:2d:d8:2a:ae:14:8e:56:
         65:72:ab:01:89:21:93:7b:3b:2d:3e:79:e6:2c:bc:69:ab:e5:
         f3:b8:83:5c:e8:f0:b5:1b:cd:24:4b:af:0c:98:7f:d8:11:d8:
         bc:6c:8a:9a:aa:c4:d1:00:52:13:7d:78:0d:9b:61:be:f8:72:
         18:b8:fe:51:c9:f3:8f:cb:04:20:5a:a4:bf:26:30:19:7f:54:
         a8:68:dd:da:26:65:53:0d:e5:64:aa:ad:80:6b:60:2e:e6:eb:
         26:44:f8:9b:ae:a3:50:b5:6f:fb:90:45:d9:6f:80:b0:1a:12:
         85:04:db:30:4c:71:1c:1d:33:67:49:fa:dc:dd:31:02:93:8c:
         40:0c:44:58:58:c8:13:d2:82:14:4e:a1:27:d7:db:57:e2:50:
         80:57:46:3a:c9:95:5b:39:54:84:fa:e4:7a:19:a6:c1:38:72:
         ce:1f:a4:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbD6OzYaeKIoaEh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl
YTA4MB4XDTI1MDkyOTEzMTc0NloXDTI1MTIyODE0MTc0NlowLzEtMCsGA1UEAxMk
Y2RhYjgyMTEtMjYwYi00ZjQwLThlMzQtOWVjOGQ5OTE5MzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbHP29sKccU0A1iZYX0ppvTe2JJJIFvsgJom
jtIj2q8pR9wpu1XhqVmrnFQM8pf/nzYVcvz+CTJvpmzNR0xHWAEuy/RY5N3zYRf+
NClBH8gNZ6RcbkIQiNdAKll14LWPaf62Nz5btg3J9COJw/jbDMxcxc7J44lryeOz
P+w42HpOnHHeErQZ75cfRO2+lM2+RVkI7BpfEph8QNBqfv7lNS9g5VyvvFekFH4d
CD3/ppEm5lRIAS2fLSY6DsK3yJb9cujBG7pnOVbn8SPdL7Z/iVrZOlQo8IyLtFiZ
WA0DYwj9F6uqh4Igc3zrxfTJ0q8SHoiB6sMM5y1DXPQejYhIxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKz6ONgYKdRC4IXutnHMJqZvABCeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy
MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvZGQ2MzZiZmUtYWJmNC0z
MmJmLTg3YTAtZWFmYTYyNzUzMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4
MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1
ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk
MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EufMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAm2dRmlaxkGHgmFpLXNDrB5KBO6bJShOAdwB9zDPIeYCIZIXdbl34M7
x+WWBHp+JSM/b4ociQ2p50szTOl8Y5BebXNJ+1gEi0kWBFbguXCyXX+kLdgqrhSO
VmVyqwGJIZN7Oy0+eeYsvGmr5fO4g1zo8LUbzSRLrwyYf9gR2LxsipqqxNEAUhN9
eA2bYb74chi4/lHJ84/LBCBapL8mMBl/VKho3domZVMN5WSqrYBrYC7m6yZE+Juu
o1C1b/uQRdlvgLAaEoUE2zBMcRwdM2dJ+tzdMQKTjEAMRFhYyBPSghROoSfX21fi
UIBXRjrJlVs5VIT65HoZpsE4cs4fpJM=
-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:36 2025 by rpki-client