Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/b2ecd0c6-cf90-3a30-9eab-4a9a840d23dd.roa
File:                     b2ecd0c6-cf90-3a30-9eab-4a9a840d23dd.roa (raw, json)
Hash identifier:          whln5p9E1FP+Cpn5TDXgBsMHhbtg5MGlM6BlQGiyImE=
Subject key identifier:   5E:C3:89:79:62:96:88:3C:CB:55:76:46:F4:1C:FC:19:AD:5C:B5:84
Certificate issuer:       /CN=a7740fca-0621-46f8-ba8f-31a8983ed90a
Certificate serial:       010D0C9F4328584B21002AD748E655EA208A366E
Authority key identifier: 7D:8D:13:0E:1A:78:AC:E0:02:4C:33:D8:59:5F:4B:06:13:57:F2:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/b2ecd0c6-cf90-3a30-9eab-4a9a840d23dd.roa
Signing time:             Mon 08 Sep 2025 18:09:43 +0000
ROA not before:           Mon 08 Sep 2025 18:09:43 +0000
ROA not after:            Sun 07 Dec 2025 19:09:43 +0000
asID:                     53604
IP address blocks:        159.35.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/a7740fca-0621-46f8-ba8f-31a8983ed90a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/a7740fca-0621-46f8-ba8f-31a8983ed90a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:00:2a:d7:48:e6:55:ea:20:8a:36:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7740fca-0621-46f8-ba8f-31a8983ed90a
        Validity
            Not Before: Sep  8 18:09:43 2025 GMT
            Not After : Dec  7 19:09:43 2025 GMT
        Subject: CN=de1b27c9-63ea-4930-82b1-5a4fb8f7a550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:94:b8:1b:46:5f:1e:1d:ba:a1:16:5b:a2:
                    87:3f:d0:ba:ec:08:9f:4d:8c:ee:98:26:fd:12:7d:
                    52:56:7a:1a:31:5e:ad:46:8b:a8:85:e4:80:37:4c:
                    c5:f8:82:55:c0:ca:e3:de:7a:bd:76:cf:01:18:65:
                    20:13:e3:af:1b:ba:c3:44:f3:a8:a0:8d:7f:69:d3:
                    b1:84:fd:35:4d:e2:d8:31:30:25:00:f0:d9:8f:cc:
                    84:d3:72:1b:40:81:1f:92:83:91:c6:b4:bd:98:aa:
                    92:0b:95:18:d5:a7:2d:32:aa:ff:6b:3a:76:9f:fc:
                    2e:43:37:38:e9:f4:6f:d0:dd:9b:10:1a:47:79:d3:
                    28:0f:05:70:d1:63:b0:c1:4b:29:2f:ff:08:e7:a6:
                    98:43:cb:95:f9:55:21:e2:de:7b:44:7a:85:bb:4b:
                    1b:19:c4:a5:b3:23:31:bd:a0:cf:51:d2:3e:1f:4f:
                    6c:41:ba:db:ea:78:56:1a:67:b2:ea:6a:cc:21:eb:
                    dc:05:84:2a:12:05:d4:24:bb:88:ea:9f:fe:9a:ca:
                    d3:71:05:97:5c:e1:2e:9f:f8:d0:2b:f6:92:fa:7e:
                    76:3c:c7:0c:0a:ab:dc:a2:67:fa:29:61:86:43:0a:
                    cb:f6:9d:29:e0:0d:4a:0b:b9:09:52:95:69:6b:b4:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C3:89:79:62:96:88:3C:CB:55:76:46:F4:1C:FC:19:AD:5C:B5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/b2ecd0c6-cf90-3a30-9eab-4a9a840d23dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a/a7740fca-0621-46f8-ba8f-31a8983ed90a.crl

            X509v3 Authority Key Identifier:
                keyid:7D:8D:13:0E:1A:78:AC:E0:02:4C:33:D8:59:5F:4B:06:13:57:F2:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a7740fca-0621-46f8-ba8f-31a8983ed90a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.35.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:db:ed:51:de:8a:99:ef:e7:94:8d:1e:8f:1e:87:e4:7a:a6:
         fa:49:63:dc:0e:1d:7d:a6:de:ef:ca:31:b8:db:c8:b7:6a:9c:
         c8:7a:c1:07:37:93:d5:3f:51:ac:84:dd:ad:02:47:8f:cc:8a:
         80:2d:be:bd:7d:8d:d2:df:8e:00:eb:f2:07:6b:63:a6:60:e8:
         5f:a2:40:54:ad:62:ff:29:75:e7:47:06:41:64:8e:06:a9:80:
         ed:b3:0f:5a:d0:b9:93:b1:57:53:d0:af:fe:ae:82:a9:e8:8d:
         3e:04:32:53:24:21:7b:ad:fe:ac:94:eb:24:dd:bc:3a:39:5c:
         38:c7:de:74:95:ce:b2:f4:34:ca:08:5b:de:6a:b8:32:db:0f:
         81:2a:a3:f5:f1:41:f5:13:5c:8d:27:5b:e1:2a:f6:a4:28:ca:
         2a:43:34:7f:83:3c:5c:15:88:de:7e:c1:08:ce:e7:2d:73:dd:
         35:a7:bf:c1:59:72:82:18:d0:5b:44:20:4a:60:e2:60:21:20:
         ed:e0:6e:69:b4:76:7f:b1:50:9f:5f:e0:a2:44:9b:7b:78:67:
         fe:fa:f8:28:c3:94:df:71:76:ab:2c:9a:4a:90:39:dd:97:8a:
         e0:06:39:6d:0f:a3:dc:dd:2e:4d:40:e3:c6:fa:c3:f9:a1:0f:
         fb:09:6f:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEshACrXSOZV6iCKNm4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc3NDBmY2EtMDYyMS00NmY4LWJhOGYtMzFhODk4M2Vk
OTBhMB4XDTI1MDkwODE4MDk0M1oXDTI1MTIwNzE5MDk0M1owLzEtMCsGA1UEAxMk
ZGUxYjI3YzktNjNlYS00OTMwLTgyYjEtNWE0ZmI4ZjdhNTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNyUuBtGXx4duqEWW6KHP9C67AifTYzumCb9
En1SVnoaMV6tRouoheSAN0zF+IJVwMrj3nq9ds8BGGUgE+OvG7rDRPOooI1/adOx
hP01TeLYMTAlAPDZj8yE03IbQIEfkoORxrS9mKqSC5UY1actMqr/azp2n/wuQzc4
6fRv0N2bEBpHedMoDwVw0WOwwUspL/8I56aYQ8uV+VUh4t57RHqFu0sbGcSlsyMx
vaDPUdI+H09sQbrb6nhWGmey6mrMIevcBYQqEgXUJLuI6p/+msrTcQWXXOEun/jQ
K/aS+n52PMcMCqvcomf6KWGGQwrL9p0p4A1KC7kJUpVpa7TjWQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF7DiXlilog8y1V2RvQc/BmtXLWEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hNzc0
MGZjYS0wNjIxLTQ2ZjgtYmE4Zi0zMWE4OTgzZWQ5MGEvYjJlY2QwYzYtY2Y5MC0z
YTMwLTllYWItNGE5YTg0MGQyM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTc3NDBmY2EtMDYyMS00NmY4LWJh
OGYtMzFhODk4M2VkOTBhL2E3NzQwZmNhLTA2MjEtNDZmOC1iYThmLTMxYTg5ODNl
ZDkwYS5jcmwwHwYDVR0jBBgwFoAUfY0TDhp4rOACTDPYWV9LBhNX8iIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9hNzc0MGZjYS0wNjIxLTQ2ZjgtYmE4Zi0zMWE4
OTgzZWQ5MGEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnyMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQ9vtUd6Kme/nlI0ejx6H5Hqm+klj3A4dfabe78oxuNvIt2qcyHrBBzeT
1T9RrITdrQJHj8yKgC2+vX2N0t+OAOvyB2tjpmDoX6JAVK1i/yl150cGQWSOBqmA
7bMPWtC5k7FXU9Cv/q6CqeiNPgQyUyQhe63+rJTrJN28OjlcOMfedJXOsvQ0yghb
3mq4MtsPgSqj9fFB9RNcjSdb4Sr2pCjKKkM0f4M8XBWI3n7BCM7nLXPdNae/wVly
ghjQW0QgSmDiYCEg7eBuabR2f7FQn1/gokSbe3hn/vr4KMOU33F2qyyaSpA53ZeK
4AY5bQ+j3N0uTUDjxvrD+aEP+wlvUw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:32:27 2025 by rpki-client