Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/99756ba8-748e-3d01-8177-e0de6e539f0a.roa
File:                     99756ba8-748e-3d01-8177-e0de6e539f0a.roa (raw, json)
Hash identifier:          j9B1Q3w9DmWBaNGk5C/hbESqAqacRs4MvkcrNY76LsA=
Subject key identifier:   46:7C:73:57:0E:16:09:CE:31:D9:E8:6E:F9:F6:59:BB:B8:17:4B:F0
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584BCD9B2B58CBA03CC5D8AF8540
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/99756ba8-748e-3d01-8177-e0de6e539f0a.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     393740
IP address blocks:        206.180.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9b:2b:58:cb:a0:3c:c5:d8:af:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=346f5248-ffe1-4690-84c1-d17266eaf0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:ce:13:60:9c:c0:c3:df:18:83:cd:4c:f1:
                    62:3b:16:40:5e:c8:0d:ec:7e:40:44:46:94:d3:3a:
                    a2:65:79:1a:d6:11:8b:82:b0:cf:fa:a3:81:9d:fc:
                    e4:cc:92:74:02:33:72:5c:99:10:cb:32:49:1a:b1:
                    11:59:b0:90:41:89:40:d4:45:97:cd:6f:20:ab:0d:
                    72:84:75:94:2b:5d:db:ac:8b:6a:e4:2a:97:ae:9d:
                    16:08:77:30:0a:e9:40:ce:a8:68:7b:2f:dd:f8:a5:
                    9b:ad:11:bd:36:28:6c:75:36:40:f5:bc:87:ac:cc:
                    c9:d0:ff:38:d3:3c:13:c1:ba:92:0c:77:1a:49:b9:
                    b2:7c:83:4b:0a:05:e7:2b:7d:3e:d9:ff:04:82:cf:
                    26:a1:43:3f:46:61:a3:04:00:47:78:2a:61:9c:7e:
                    3c:ce:7c:69:85:07:42:bf:44:25:4c:bb:8c:b9:8a:
                    88:09:8c:fd:48:63:f7:23:c3:9b:09:86:7f:11:c1:
                    e5:a4:c9:db:66:7c:7a:6c:a4:58:b5:3d:6e:8f:09:
                    b3:14:a5:86:e2:8e:f1:d0:66:3d:7d:3d:54:95:65:
                    f0:64:f6:a8:74:8a:02:57:26:fc:af:57:e3:8d:22:
                    0d:1a:05:63:51:b9:88:ef:c5:44:03:dd:2c:c2:d7:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7C:73:57:0E:16:09:CE:31:D9:E8:6E:F9:F6:59:BB:B8:17:4B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/99756ba8-748e-3d01-8177-e0de6e539f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c6:e2:13:a8:99:40:df:a4:42:d0:88:99:fb:83:3e:e6:94:
         b5:3b:76:6b:6a:2d:3c:a9:98:3a:2b:d8:98:5b:35:af:f7:85:
         9c:d3:c7:a9:6e:ff:62:24:3d:ea:4b:4a:73:f1:78:d6:9d:8b:
         34:5a:50:90:cc:80:ca:92:cc:64:a3:92:df:c4:08:18:c2:92:
         6c:72:23:a6:6e:b4:bc:f7:9d:2a:b3:81:08:9b:83:20:83:bc:
         bf:ab:ec:2d:7f:0f:6c:70:c0:b4:74:af:91:e5:9d:63:51:4b:
         37:b6:a0:23:df:04:49:37:f6:5f:7d:a3:85:75:30:c0:f5:65:
         12:55:1b:83:e9:3e:aa:21:b6:ac:ab:84:7c:b2:7d:bc:43:42:
         2e:8f:cf:63:59:cd:e4:62:f9:12:38:6a:13:44:33:51:bc:d2:
         05:84:c2:9d:54:57:3d:99:70:49:93:18:18:ad:bf:86:62:bc:
         80:ad:a1:41:f9:a6:58:a5:69:77:cd:45:7e:70:f6:c5:32:dd:
         c8:8d:1e:d5:b0:99:0d:7e:86:7e:a3:4b:a1:b7:80:06:63:5f:
         c9:be:5c:43:c6:c9:d5:c4:23:66:f0:86:46:80:86:3b:26:8f:
         15:22:c0:2b:aa:f1:c0:fb:c2:66:5d:94:14:4a:63:a8:49:3d:
         b1:d6:32:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmytYy6A8xdivhUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk
MzQ2ZjUyNDgtZmZlMS00NjkwLTg0YzEtZDE3MjY2ZWFmMGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuADOE2CcwMPfGIPNTPFiOxZAXsgN7H5AREaU
0zqiZXka1hGLgrDP+qOBnfzkzJJ0AjNyXJkQyzJJGrERWbCQQYlA1EWXzW8gqw1y
hHWUK13brItq5CqXrp0WCHcwCulAzqhoey/d+KWbrRG9NihsdTZA9byHrMzJ0P84
0zwTwbqSDHcaSbmyfINLCgXnK30+2f8Egs8moUM/RmGjBABHeCphnH48znxphQdC
v0QlTLuMuYqICYz9SGP3I8ObCYZ/EcHlpMnbZnx6bKRYtT1ujwmzFKWG4o7x0GY9
fT1UlWXwZPaodIoCVyb8r1fjjSINGgVjUbmI78VEA90swtdySwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEZ8c1cOFgnOMdnobvn2Wbu4F0vwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvOTk3NTZiYTgtNzQ4ZS0z
ZDAxLTgxNzctZTBkZTZlNTM5ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzrSUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbG4hOomUDfpELQiJn7gz7mlLU7dmtqLTypmDor2JhbNa/3hZzTx6lu
/2IkPepLSnPxeNadizRaUJDMgMqSzGSjkt/ECBjCkmxyI6ZutLz3nSqzgQibgyCD
vL+r7C1/D2xwwLR0r5HlnWNRSze2oCPfBEk39l99o4V1MMD1ZRJVG4PpPqohtqyr
hHyyfbxDQi6Pz2NZzeRi+RI4ahNEM1G80gWEwp1UVz2ZcEmTGBitv4ZivICtoUH5
plilaXfNRX5w9sUy3ciNHtWwmQ1+hn6jS6G3gAZjX8m+XEPGydXEI2bwhkaAhjsm
jxUiwCuq8cD7wmZdlBRKY6hJPbHWMhU=
-----END CERTIFICATE-----
Generated at Sun Nov 16 22:08:47 2025 by rpki-client