Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa
File:                     bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa (raw, json)
Hash identifier:          DfkN7Vw9rxEvWt3OnffGjRNmvaICSUS3Y+huhHiWmFM=
Subject key identifier:   42:70:40:CC:3B:B1:34:9F:7B:0F:E7:03:FC:2D:97:D3:63:2C:8F:3E
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584B328C512AB76EFF7EC4486780
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        173.0.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:51:2a:b7:6e:ff:7e:c4:48:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=9943b1e7-125d-4307-a53d-d5697f2ef117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:8d:73:51:a2:60:3f:64:95:e4:1c:28:4d:
                    20:bd:a7:8a:b6:a1:06:31:8e:d2:ca:4d:6f:d4:67:
                    ce:13:2c:a5:fc:5b:88:b2:92:13:9b:8a:f0:e6:b9:
                    31:6e:f2:65:50:58:80:1c:10:fa:03:a1:62:83:9f:
                    f2:55:62:fd:61:44:11:e2:eb:d3:6f:66:0e:fa:93:
                    18:e6:6d:62:71:d8:55:3e:7b:08:3a:b9:5f:fc:a5:
                    96:29:43:25:37:ee:7b:aa:02:4d:74:1f:d0:b1:73:
                    b4:af:24:61:71:9e:c5:6f:1b:56:e3:61:c8:10:5b:
                    84:cd:19:76:f5:75:2a:82:ec:a8:26:63:aa:97:7e:
                    14:99:60:a4:e4:07:3c:46:9f:e2:3b:c1:16:46:b8:
                    ab:df:d9:08:fd:14:09:d9:1b:38:3a:e9:66:76:b0:
                    2e:ab:58:64:3f:0a:8c:c6:3e:6a:99:fd:53:d2:d8:
                    45:c2:bd:8f:a1:66:62:38:06:6a:f3:16:e3:6a:22:
                    d3:15:44:8d:ed:f8:b9:76:86:ef:42:ed:d3:cf:d4:
                    b6:54:d9:06:79:6e:01:0b:9c:dd:a0:f5:5d:32:a5:
                    8b:02:cd:f0:5c:48:09:42:92:f0:58:91:84:46:4d:
                    20:6f:3f:07:92:6b:d5:3b:a9:4c:83:45:4e:32:8d:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:70:40:CC:3B:B1:34:9F:7B:0F:E7:03:FC:2D:97:D3:63:2C:8F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:fc:8e:91:33:9b:3e:d9:93:93:78:0c:65:d4:64:66:26:19:
         6f:69:7a:98:40:55:b8:30:1b:ed:54:e8:51:86:1b:0a:a1:64:
         ca:c1:dc:33:89:e0:87:28:16:e1:1d:89:48:03:44:7f:5f:1d:
         82:e5:c9:ea:90:af:ba:c2:fd:25:d9:eb:e4:c6:b5:fa:74:67:
         10:d1:a0:1e:6f:4a:1e:d4:a0:31:ae:e0:e7:50:16:d6:e1:91:
         40:29:cb:c7:0b:3e:78:76:49:2b:54:d0:f5:5c:7d:aa:c9:15:
         dc:00:b5:18:9f:6a:64:c4:fc:eb:c5:79:77:be:12:84:c4:87:
         38:7b:76:15:60:34:8d:d9:09:60:73:59:2e:de:23:cb:31:ba:
         69:94:10:5c:6e:e1:ca:ee:66:0b:df:a7:89:11:9f:fe:35:12:
         fb:7e:01:1b:29:f7:89:f8:f5:b6:34:e2:b6:b8:27:24:a7:2b:
         5c:b2:45:03:b2:4b:6c:93:61:e9:49:b2:17:48:8b:41:a6:c2:
         12:3a:10:ae:af:80:f9:b0:a8:25:c2:ef:d4:cd:99:91:a0:5a:
         da:1c:ba:cc:1e:40:fd:72:57:25:02:cc:a4:72:ee:62:d9:76:
         38:f7:8f:27:df:dc:23:7d:3e:71:b4:71:17:dc:c4:2a:10:54:
         17:2e:e9:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjFEqt27/fsRIZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
OTk0M2IxZTctMTI1ZC00MzA3LWE1M2QtZDU2OTdmMmVmMTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOeNc1GiYD9kleQcKE0gvaeKtqEGMY7Syk1v
1GfOEyyl/FuIspITm4rw5rkxbvJlUFiAHBD6A6Fig5/yVWL9YUQR4uvTb2YO+pMY
5m1icdhVPnsIOrlf/KWWKUMlN+57qgJNdB/QsXO0ryRhcZ7FbxtW42HIEFuEzRl2
9XUqguyoJmOql34UmWCk5Ac8Rp/iO8EWRrir39kI/RQJ2Rs4OulmdrAuq1hkPwqM
xj5qmf1T0thFwr2PoWZiOAZq8xbjaiLTFUSN7fi5dobvQu3Tz9S2VNkGeW4BC5zd
oPVdMqWLAs3wXEgJQpLwWJGERk0gbz8HkmvVO6lMg0VOMo2xZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJwQMw7sTSfew/nA/wtl9NjLI8+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvYmQ3Y2QzMWYtNGNkMi0z
NjNmLTk0YzQtYzVlNWQ4NGIyMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArQBcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABH8jpEzmz7Zk5N4DGXUZGYmGW9pephAVbgwG+1U6FGGGwqhZMrB3DOJ
4IcoFuEdiUgDRH9fHYLlyeqQr7rC/SXZ6+TGtfp0ZxDRoB5vSh7UoDGu4OdQFtbh
kUApy8cLPnh2SStU0PVcfarJFdwAtRifamTE/OvFeXe+EoTEhzh7dhVgNI3ZCWBz
WS7eI8sxummUEFxu4cruZgvfp4kRn/41Evt+ARsp94n49bY04ra4JySnK1yyRQOy
S2yTYelJshdIi0GmwhI6EK6vgPmwqCXC79TNmZGgWtocusweQP1yVyUCzKRy7mLZ
djj3jyff3CN9PnG0cRfcxCoQVBcu6Rw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:11:53 2025 by rpki-client