Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/0e5a24d6-c66c-333e-a464-a98bf11ab068.roa
File:                     0e5a24d6-c66c-333e-a464-a98bf11ab068.roa (raw, json)
Hash identifier:          q4nNL1g0d2qhFgIa9MCikEUzVowhTGfohEuey8DnkoM=
Subject key identifier:   22:7A:43:D4:FD:65:40:BD:02:81:12:17:59:52:60:2A:D6:13:F1:0A
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F4328584B0746B27DAE917074DE925500
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/0e5a24d6-c66c-333e-a464-a98bf11ab068.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     23154
IP address blocks:        143.116.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:b2:7d:ae:91:70:74:de:92:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=2c61dcd0-dc63-4eb6-a872-5c1f0e32a90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:85:41:37:1b:a8:bb:f8:4e:7b:d0:29:d1:
                    eb:f7:1f:ee:35:dc:11:fe:e9:82:ef:44:8f:7e:46:
                    b5:00:84:cf:67:ec:7c:7b:62:88:c7:a1:63:ad:03:
                    f4:e4:88:0f:82:16:d4:23:80:9b:a8:c2:b7:c3:fa:
                    5f:14:3a:52:27:0f:89:b2:66:bb:2c:2e:a0:2c:e3:
                    d9:6d:3d:23:01:5a:76:94:84:77:39:e3:e3:38:d9:
                    80:e3:da:be:ad:5c:39:66:92:a6:f2:96:d3:d7:3d:
                    cc:2d:cb:0b:2b:68:ab:fb:03:19:e5:65:d5:87:c5:
                    39:e2:d7:8b:99:ee:66:06:cb:54:82:f1:4b:d3:d6:
                    8b:3e:54:05:a3:fd:7c:a1:cb:97:8a:af:10:8f:2c:
                    e5:fc:f0:de:ff:35:c2:eb:52:e1:aa:e6:d9:24:b3:
                    12:69:90:32:c9:b6:65:98:2d:b5:92:87:8a:df:7b:
                    d2:86:3e:75:f8:ff:50:ea:76:f9:d0:b8:41:72:0d:
                    b9:1e:c4:2a:c3:3b:bd:46:cf:83:82:30:19:07:09:
                    45:5d:1e:1b:07:34:50:7d:cc:a2:e5:b7:de:c4:05:
                    0b:c0:63:41:26:bd:7e:65:32:b8:f0:00:3c:75:d1:
                    43:e6:5b:95:3d:0b:0d:f0:0b:3b:1d:e0:0e:84:44:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7A:43:D4:FD:65:40:BD:02:81:12:17:59:52:60:2A:D6:13:F1:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/0e5a24d6-c66c-333e-a464-a98bf11ab068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:5f:76:a3:5f:24:0a:44:83:c5:88:34:4f:0e:f3:40:7c:
         d7:61:e3:35:37:f3:a8:7a:cf:0e:65:e6:4e:f7:d4:c3:6c:04:
         00:b0:47:07:21:53:75:1a:cd:81:86:d1:3e:3a:06:f8:fb:42:
         26:df:d6:25:be:4f:ba:b8:21:b4:b7:41:e8:dd:da:c1:e2:e0:
         dd:8d:9a:73:8a:2d:57:8d:2b:b4:44:96:c3:58:2c:7c:20:50:
         7e:47:ff:b6:39:c1:8d:d4:82:8d:01:8e:8b:5b:74:ba:93:de:
         48:85:86:69:94:48:3f:d7:49:e6:ed:10:66:86:8a:6e:c4:07:
         4c:18:17:16:63:d1:2f:a6:3d:d1:73:0d:99:af:af:af:60:32:
         22:88:6f:3f:3d:43:2d:05:72:8b:76:86:48:1b:30:c7:70:31:
         eb:67:8e:bd:04:6e:c4:f2:25:1d:4d:46:78:06:a3:14:8a:89:
         34:3e:20:ee:82:22:a6:c9:d6:40:40:2a:f8:1b:6c:15:cb:6b:
         9e:62:2f:a6:10:4b:b9:03:e0:de:14:c3:86:71:98:6c:ff:e6:
         db:e5:30:33:fc:bd:40:1a:86:42:3a:c0:8f:84:8b:e7:c4:d1:
         03:ba:e2:73:28:6f:e9:ca:04:5a:11:09:d0:d4:28:84:c3:9d:
         b2:cb:54:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrJ9rpFwdN6SVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ0YjhkNmItYzZkNC00N2NjLTk5NjYtNzc3MDY1NjA5
ZTkwMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
MmM2MWRjZDAtZGM2My00ZWI2LWE4NzItNWMxZjBlMzJhOTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGyFQTcbqLv4TnvQKdHr9x/uNdwR/umC70SP
fka1AITPZ+x8e2KIx6FjrQP05IgPghbUI4CbqMK3w/pfFDpSJw+Jsma7LC6gLOPZ
bT0jAVp2lIR3OePjONmA49q+rVw5ZpKm8pbT1z3MLcsLK2ir+wMZ5WXVh8U54teL
me5mBstUgvFL09aLPlQFo/18ocuXiq8Qjyzl/PDe/zXC61LhqubZJLMSaZAyybZl
mC21koeK33vShj51+P9Q6nb50LhBcg25HsQqwzu9Rs+DgjAZBwlFXR4bBzRQfcyi
5bfexAULwGNBJr1+ZTK48AA8ddFD5luVPQsN8As7HeAOhESjWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJ6Q9T9ZUC9AoESF1lSYCrWE/EKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDRi
OGQ2Yi1jNmQ0LTQ3Y2MtOTk2Ni03NzcwNjU2MDllOTAvMGU1YTI0ZDYtYzY2Yy0z
MzNlLWE0NjQtYTk4YmYxMWFiMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQ0YjhkNmItYzZkNC00N2NjLTk5
NjYtNzc3MDY1NjA5ZTkwL2E0NGI4ZDZiLWM2ZDQtNDdjYy05OTY2LTc3NzA2NTYw
OWU5MC5jcmwwHwYDVR0jBBgwFoAUAbszEM/IbpG9J5hf9i/TfsnLdsAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDRiOGQ2Yi1jNmQ0LTQ3Y2MtOTk2Ni03Nzcw
NjU2MDllOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj3QwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyLX3ajXyQKRIPFiDRPDvNAfNdh4zU386h6zw5l5k731MNsBACwRwch
U3UazYGG0T46Bvj7Qibf1iW+T7q4IbS3Qejd2sHi4N2NmnOKLVeNK7RElsNYLHwg
UH5H/7Y5wY3Ugo0BjotbdLqT3kiFhmmUSD/XSebtEGaGim7EB0wYFxZj0S+mPdFz
DZmvr69gMiKIbz89Qy0Fcot2hkgbMMdwMetnjr0EbsTyJR1NRngGoxSKiTQ+IO6C
IqbJ1kBAKvgbbBXLa55iL6YQS7kD4N4Uw4ZxmGz/5tvlMDP8vUAahkI6wI+Ei+fE
0QO64nMob+nKBFoRCdDUKITDnbLLVGU=
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:31:43 2025 by rpki-client