Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/cb1cf518-1add-3c7b-8bf6-803c23c623ee.roa
File:                     cb1cf518-1add-3c7b-8bf6-803c23c623ee.roa (raw, json)
Hash identifier:          W41j5BWgMSBBKjd5woECsuUt6TKsLN99oakOfp6YZo8=
Subject key identifier:   12:65:BE:D9:DE:44:84:7D:AC:D9:1B:05:2E:15:EA:3A:24:D3:C3:BD
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F4328584B7C875D57EAA1A9B77DFDBD40
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/cb1cf518-1add-3c7b-8bf6-803c23c623ee.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     32277
IP address blocks:        204.50.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:5d:57:ea:a1:a9:b7:7d:fd:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=ef3fc4c8-2139-49af-9a03-df0a17213454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:24:58:4e:e8:df:36:b3:d9:22:cb:bd:1c:
                    e0:8f:4f:17:d0:c6:21:c6:2e:70:27:1b:f4:87:72:
                    0e:4e:61:d2:a1:13:40:72:55:7c:a7:74:57:1d:dc:
                    df:2f:a0:c7:0b:a7:37:0e:dd:38:29:07:ba:11:5b:
                    05:cd:97:04:6b:9a:a9:00:b3:a3:62:38:41:97:b9:
                    2e:91:54:da:a5:c8:51:ff:6b:20:4f:77:5a:a6:dd:
                    29:38:cf:de:d1:e0:d6:7a:52:51:ae:cb:47:e3:b5:
                    e9:24:0d:63:fd:9b:52:60:4a:17:37:dd:39:dc:4b:
                    38:fa:bd:61:7a:82:e0:78:7a:86:12:52:8e:27:26:
                    8b:d7:c5:c2:ac:c1:1c:90:6e:c6:d7:ef:ea:aa:30:
                    36:95:aa:ac:39:1d:8c:15:e0:03:18:6b:80:5a:f5:
                    67:fa:8a:71:b4:86:e4:ae:4b:79:17:95:d9:9b:c1:
                    1b:c4:d8:68:93:19:35:95:f6:b7:4a:70:63:70:92:
                    57:e6:c8:72:b5:7b:5a:b8:1d:d5:db:ce:6a:0f:8e:
                    ee:d2:02:26:2a:9c:de:f9:f3:85:a5:b6:48:d9:0b:
                    7a:f8:ef:e0:aa:fc:cf:7a:c1:2e:7e:6e:c6:08:48:
                    72:7d:3a:ba:76:c2:a6:50:be:46:85:b5:08:e5:cb:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:65:BE:D9:DE:44:84:7D:AC:D9:1B:05:2E:15:EA:3A:24:D3:C3:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/cb1cf518-1add-3c7b-8bf6-803c23c623ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.50.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a9:ed:32:a0:e9:50:e5:fc:b4:c5:a2:64:46:b0:78:ca:f1:
         6e:7e:ee:b1:a4:70:d7:c5:2e:5d:27:84:f2:3d:b9:c4:88:13:
         6c:02:3d:66:f2:1a:af:99:09:bf:35:bf:cf:47:a1:4b:ee:fe:
         90:0d:ca:15:6b:8d:0a:53:63:aa:42:ac:ff:b2:f0:2d:c5:16:
         70:15:fd:34:26:13:da:01:e0:3a:36:d0:65:a0:9f:03:f9:ce:
         cb:f7:31:30:de:68:00:ef:40:10:f6:80:26:18:b5:28:b8:d2:
         1e:1b:f8:8c:e9:db:7c:f8:de:65:9c:60:86:9d:31:29:70:cc:
         0b:47:5d:2f:aa:6f:fc:a5:b1:97:80:00:07:7b:9c:a1:38:b0:
         65:91:6c:48:f5:4d:20:33:60:2c:38:d0:63:f5:4a:0f:91:6d:
         4e:ad:d0:f3:a1:a8:f0:6b:6a:12:ca:bd:90:66:2c:69:1a:78:
         56:0f:6d:d6:04:dd:d3:81:e7:1a:12:86:e2:00:88:0d:9d:01:
         ed:d3:11:11:5e:09:41:26:c4:55:57:0d:9a:7c:c5:1b:e1:52:
         45:4d:ee:92:83:7b:2c:d6:44:75:78:96:b6:9e:50:de:12:9c:
         48:9e:8b:50:52:fd:7a:d4:11:bb:f1:d7:87:2f:b4:21:39:f9:
         15:23:bd:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h11X6qGpt339vUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNmYjI5OTUtOWVlNS00MjNjLWE1MjEtOGQ2NDkwMzAz
ZTJkMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk
ZWYzZmM0YzgtMjEzOS00OWFmLTlhMDMtZGYwYTE3MjEzNDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv4kWE7o3zaz2SLLvRzgj08X0MYhxi5wJxv0
h3IOTmHSoRNAclV8p3RXHdzfL6DHC6c3Dt04KQe6EVsFzZcEa5qpALOjYjhBl7ku
kVTapchR/2sgT3dapt0pOM/e0eDWelJRrstH47XpJA1j/ZtSYEoXN9053Es4+r1h
eoLgeHqGElKOJyaL18XCrMEckG7G1+/qqjA2laqsOR2MFeADGGuAWvVn+opxtIbk
rkt5F5XZm8EbxNhokxk1lfa3SnBjcJJX5shytXtauB3V285qD47u0gImKpze+fOF
pbZI2Qt6+O/gqvzPesEufm7GCEhyfTq6dsKmUL5GhbUI5ctQZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBJlvtneRIR9rNkbBS4V6jok08O9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hY2Zi
Mjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0OTAzMDNlMmQvY2IxY2Y1MTgtMWFkZC0z
YzdiLThiZjYtODAzYzIzYzYyM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWNmYjI5OTUtOWVlNS00MjNjLWE1
MjEtOGQ2NDkwMzAzZTJkL2FjZmIyOTk1LTllZTUtNDIzYy1hNTIxLThkNjQ5MDMw
M2UyZC5jcmwwHwYDVR0jBBgwFoAUehSoKkY4vznA/kUKxvqKtp/wp5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hY2ZiMjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0
OTAzMDNlMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2p7TKg6VDl/LTFomRGsHjK8W5+7rGkcNfFLl0nhPI9ucSIE2wCPWby
Gq+ZCb81v89HoUvu/pANyhVrjQpTY6pCrP+y8C3FFnAV/TQmE9oB4Do20GWgnwP5
zsv3MTDeaADvQBD2gCYYtSi40h4b+Izp23z43mWcYIadMSlwzAtHXS+qb/ylsZeA
AAd7nKE4sGWRbEj1TSAzYCw40GP1Sg+RbU6t0POhqPBrahLKvZBmLGkaeFYPbdYE
3dOB5xoShuIAiA2dAe3TERFeCUEmxFVXDZp8xRvhUkVN7pKDeyzWRHV4lraeUN4S
nEiei1BS/XrUEbvx14cvtCE5+RUjvWY=
-----END CERTIFICATE-----
Generated at Mon Nov 3 14:46:00 2025 by rpki-client