Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa
File:                     d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa (raw, json)
Hash identifier:          97ixfhIKHoUdxP4YR0fiQh9Z8Y8WvUxSd+FmcZiyNfc=
Subject key identifier:   1D:F2:76:79:32:8E:B9:F6:B8:8A:F4:AD:60:09:26:92:5F:E5:AE:74
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B95AAFE83CFC16B4A8ACE0040
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     3477
IP address blocks:        199.242.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:fe:83:cf:c1:6b:4a:8a:ce:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=e4555bfb-dafc-40d3-8526-ecc2d17378a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:90:3f:9d:a9:9c:be:ed:f9:5d:2d:ca:b0:41:
                    e1:cd:d4:81:23:f6:2f:37:7c:0d:b8:3c:f9:cc:0c:
                    a3:09:9d:02:c3:ee:73:76:a8:85:1c:ec:36:92:d1:
                    d5:3c:b3:ea:ae:59:d6:b6:c2:48:6a:a1:c8:25:ca:
                    71:57:f1:0d:c8:be:a3:49:2b:2f:7d:54:34:11:b4:
                    9f:6d:b9:ad:ee:92:ad:0c:26:18:e5:32:8e:5b:f7:
                    e5:7c:fc:f6:92:35:bb:5f:40:05:97:0a:19:99:45:
                    64:ff:f8:7c:35:26:6b:7e:e0:6a:47:c4:eb:2b:e8:
                    e7:12:c7:77:fd:ac:40:64:dd:30:9b:bc:4e:0d:08:
                    2e:0c:36:91:98:3f:84:29:44:51:c8:2a:67:4f:ba:
                    06:85:2e:cb:f6:77:47:bc:ce:f6:82:d5:a6:e3:0a:
                    d8:f5:25:9a:9c:82:3b:cb:b2:f4:62:ef:1e:6e:9c:
                    72:dc:15:b6:3b:da:1c:67:b4:4e:c8:49:c4:96:22:
                    70:69:bf:6c:ad:1a:93:22:dc:52:51:5d:fb:14:d6:
                    bb:4b:19:9e:b1:00:5a:5e:eb:54:bd:31:1e:33:62:
                    38:2a:b7:30:f5:71:2f:0c:65:93:d2:d1:2b:59:12:
                    7e:16:54:c3:c3:f5:a8:9a:9b:fd:f0:67:73:1e:49:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F2:76:79:32:8E:B9:F6:B8:8A:F4:AD:60:09:26:92:5F:E5:AE:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d9130e45-ea0d-3373-b9c3-2b0c7395a2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e9:2c:41:70:3f:57:25:86:7f:fc:04:4f:fb:c8:d6:94:a0:
         36:7d:7d:be:1b:88:3a:d0:ea:a4:8f:19:f3:c7:1c:ce:92:68:
         2c:0f:66:db:ec:76:a1:01:d9:3d:40:42:29:d4:b1:2d:06:6f:
         73:76:af:20:44:bc:d6:8f:9d:45:84:fe:68:11:cf:07:61:be:
         83:ca:60:b6:97:25:16:6c:03:9a:d2:ec:21:98:3e:07:e8:34:
         1c:d2:c2:19:82:c9:ca:73:50:b5:5f:f8:e9:1d:7d:88:2c:e4:
         1d:f3:1a:0a:bf:ed:b2:15:ba:61:6a:bb:4d:1b:79:d4:c1:98:
         e1:05:8f:80:85:b5:d8:9e:52:62:5d:5d:77:f5:d5:79:ef:a1:
         fb:86:38:93:bd:8f:68:cb:c9:93:76:1d:23:6a:6a:d2:c4:f9:
         1f:a4:ef:d7:d2:e3:26:85:40:55:8b:51:53:aa:88:2b:c4:18:
         49:be:5a:35:f0:29:31:cf:24:e2:d4:c6:19:d8:9e:a0:69:24:
         44:47:ba:44:64:6e:22:4c:50:c5:5c:bd:ac:34:01:6b:81:21:
         3f:e6:e0:de:96:83:41:e9:ca:c8:7b:e4:1e:f8:f1:65:1c:52:
         c7:a5:91:cb:43:b3:7a:00:92:38:ce:a7:3c:6b:5a:9e:36:95:
         4c:2d:3d:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqv6Dz8FrSorOAEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
ZTQ1NTViZmItZGFmYy00MGQzLTg1MjYtZWNjMmQxNzM3OGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5A/namcvu35XS3KsEHhzdSBI/YvN3wNuDz5
zAyjCZ0Cw+5zdqiFHOw2ktHVPLPqrlnWtsJIaqHIJcpxV/ENyL6jSSsvfVQ0EbSf
bbmt7pKtDCYY5TKOW/flfPz2kjW7X0AFlwoZmUVk//h8NSZrfuBqR8TrK+jnEsd3
/axAZN0wm7xODQguDDaRmD+EKURRyCpnT7oGhS7L9ndHvM72gtWm4wrY9SWanII7
y7L0Yu8ebpxy3BW2O9ocZ7ROyEnEliJwab9srRqTItxSUV37FNa7SxmesQBaXutU
vTEeM2I4Krcw9XEvDGWT0tErWRJ+FlTDw/Wompv98GdzHkmIYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3ydnkyjrn2uIr0rWAJJpJf5a50MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvZDkxMzBlNDUtZWEwZC0z
MzczLWI5YzMtMmIwYzczOTVhMmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx/LoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHpLEFwP1clhn/8BE/7yNaUoDZ9fb4biDrQ6qSPGfPHHM6SaCwPZtvs
dqEB2T1AQinUsS0Gb3N2ryBEvNaPnUWE/mgRzwdhvoPKYLaXJRZsA5rS7CGYPgfo
NBzSwhmCycpzULVf+OkdfYgs5B3zGgq/7bIVumFqu00bedTBmOEFj4CFtdieUmJd
XXf11XnvofuGOJO9j2jLyZN2HSNqatLE+R+k79fS4yaFQFWLUVOqiCvEGEm+WjXw
KTHPJOLUxhnYnqBpJERHukRkbiJMUMVcvaw0AWuBIT/m4N6Wg0Hpysh75B748WUc
UselkctDs3oAkjjOpzxrWp42lUwtPWQ=
-----END CERTIFICATE-----
Generated at Fri Oct 24 00:39:28 2025 by rpki-client