Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/fce1b82b-9489-3d8e-affa-b2b570f00b91.roa
File:                     fce1b82b-9489-3d8e-affa-b2b570f00b91.roa (raw, json)
Hash identifier:          XWTh3ZRo19n7TspAgXYqinpUm10o1u/gEHN+B+O6IlA=
Subject key identifier:   DD:4D:96:5B:B5:AE:6D:8C:86:A3:92:18:76:9E:86:47:25:E5:19:A3
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584BCD9B1A2CE29DE71E0996E700
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/fce1b82b-9489-3d8e-affa-b2b570f00b91.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     26744
IP address blocks:        206.180.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9b:1a:2c:e2:9d:e7:1e:09:96:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=7236d3d3-c543-4eb9-82b5-19d7b34c16f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:b3:bc:ae:d3:c7:28:a5:eb:5f:98:22:db:
                    b1:99:e0:c1:5c:58:9d:18:b0:70:aa:b7:23:61:12:
                    4b:6a:ea:0c:1b:0a:04:4a:08:a4:b6:19:e8:f1:a7:
                    ed:01:b1:73:87:4a:e1:e9:97:ba:51:7f:bb:ee:97:
                    3e:cd:31:85:04:c3:17:66:87:ec:1f:0a:5e:06:25:
                    4c:60:bc:26:47:2f:c5:6b:92:df:7d:ff:4f:35:77:
                    7c:9b:08:e3:73:ea:e5:9f:79:c3:54:0f:59:ac:42:
                    5c:96:6e:60:71:2a:d4:c6:5e:75:55:de:b8:88:0e:
                    22:f3:6f:f3:57:89:51:4c:38:64:1a:70:d7:ec:6a:
                    84:4f:b0:5d:cb:ca:1c:e2:15:89:b6:23:59:4a:dc:
                    ee:db:29:74:12:d0:04:3f:2f:60:71:25:0c:d7:66:
                    3b:50:9d:f4:50:95:0a:cb:77:5d:39:74:ac:38:56:
                    d9:b2:6f:50:eb:45:7d:dd:b1:4d:86:e4:d3:63:6d:
                    29:58:08:b0:9e:85:f6:b6:66:a7:53:b4:70:7b:c4:
                    9f:f4:22:9e:2c:d2:86:cc:10:a2:5a:8f:4a:c2:3d:
                    08:65:06:f2:8c:68:a2:61:4f:f2:bf:1d:6e:0f:88:
                    4a:e4:7e:e9:0d:39:62:68:0c:23:56:e5:af:19:d6:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4D:96:5B:B5:AE:6D:8C:86:A3:92:18:76:9E:86:47:25:E5:19:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/fce1b82b-9489-3d8e-affa-b2b570f00b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8a:ef:eb:b0:87:7b:c1:06:b5:c9:35:4a:53:09:5d:fc:ba:
         55:e3:8e:e5:e1:e7:0c:11:47:cb:49:f4:f5:56:9d:02:61:19:
         89:f9:47:46:e1:31:35:fb:6d:60:c7:96:48:71:4e:4d:37:49:
         11:70:50:36:3d:3a:b0:29:83:ad:35:a5:9c:9f:50:ea:32:10:
         11:b3:0a:53:a8:19:b2:1b:75:43:b7:97:6d:c7:30:cf:74:69:
         32:bd:f5:45:7b:1e:1f:75:0b:e7:9a:e8:f7:1c:62:c0:bb:f7:
         aa:15:98:21:aa:ff:e3:62:56:8a:0c:5e:02:b2:26:42:24:ac:
         6d:7b:e6:3d:05:9b:17:53:18:7a:a3:f3:22:1d:97:e1:1a:45:
         76:70:b8:b4:de:87:c0:35:b0:27:b6:a7:53:b7:cd:25:a9:37:
         90:ab:cb:84:a5:7c:0e:c8:8c:bf:53:bf:43:50:88:e8:8f:98:
         d6:2a:76:ef:2d:25:30:2d:93:94:cc:22:7f:ba:b2:ee:ae:0d:
         e3:1d:8c:79:fd:5a:d6:76:4b:e4:0e:a0:bc:03:68:67:a1:66:
         b9:c9:73:5f:cb:42:05:54:3e:37:5a:45:7a:99:19:49:e8:3b:
         c1:2d:f9:a5:c4:e8:38:f4:aa:d0:da:19:56:f5:f5:67:ce:d3:
         8e:64:23:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxos4p3nHgmW5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk
NzIzNmQzZDMtYzU0My00ZWI5LTgyYjUtMTlkN2IzNGMxNmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9GzvK7Txyil61+YItuxmeDBXFidGLBwqrcj
YRJLauoMGwoESgikthno8aftAbFzh0rh6Ze6UX+77pc+zTGFBMMXZofsHwpeBiVM
YLwmRy/Fa5Lfff9PNXd8mwjjc+rln3nDVA9ZrEJclm5gcSrUxl51Vd64iA4i82/z
V4lRTDhkGnDX7GqET7Bdy8oc4hWJtiNZStzu2yl0EtAEPy9gcSUM12Y7UJ30UJUK
y3ddOXSsOFbZsm9Q60V93bFNhuTTY20pWAiwnoX2tmanU7Rwe8Sf9CKeLNKGzBCi
Wo9Kwj0IZQbyjGiiYU/yvx1uD4hK5H7pDTliaAwjVuWvGdbrLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1Nllu1rm2MhqOSGHaehkcl5RmjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvZmNlMWI4MmItOTQ4OS0z
ZDhlLWFmZmEtYjJiNTcwZjAwYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzrSfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGK7+uwh3vBBrXJNUpTCV38ulXjjuXh5wwRR8tJ9PVWnQJhGYn5R0bh
MTX7bWDHlkhxTk03SRFwUDY9OrApg601pZyfUOoyEBGzClOoGbIbdUO3l23HMM90
aTK99UV7Hh91C+ea6PccYsC796oVmCGq/+NiVooMXgKyJkIkrG175j0FmxdTGHqj
8yIdl+EaRXZwuLTeh8A1sCe2p1O3zSWpN5Cry4SlfA7IjL9Tv0NQiOiPmNYqdu8t
JTAtk5TMIn+6su6uDeMdjHn9WtZ2S+QOoLwDaGehZrnJc1/LQgVUPjdaRXqZGUno
O8Et+aXE6Dj0qtDaGVb19WfO045kI90=
-----END CERTIFICATE-----
Generated at Sun Nov 16 22:06:54 2025 by rpki-client