Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/06d4b122-7a26-3109-a4c6-1f7987347027.roa
File:                     06d4b122-7a26-3109-a4c6-1f7987347027.roa (raw, json)
Hash identifier:          WQLNg6rHjm4U5T6h/PU8vGkGn0Pu4m4nEVkGvzOMrsM=
Subject key identifier:   BB:11:A9:55:44:9D:CA:64:36:7B:C5:B1:50:D5:A6:EA:36:00:9B:D1
Certificate issuer:       /CN=c634bf2d-3875-4079-9788-431e36d8743a
Certificate serial:       010D0C9F4328584BA9326706036AC372981FF700
Authority key identifier: 8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/06d4b122-7a26-3109-a4c6-1f7987347027.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     400718
IP address blocks:        168.102.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:67:06:03:6a:c3:72:98:1f:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c634bf2d-3875-4079-9788-431e36d8743a
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=debac490-fab5-4448-96a2-119a9d611fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:59:1c:6b:50:3c:a4:a9:38:f6:f6:8d:61:
                    b5:cc:a8:f5:1b:30:de:b5:82:5e:7e:56:6e:bc:9b:
                    ad:68:69:bf:ee:9c:18:a4:8c:d3:44:70:f6:8d:f8:
                    fe:9b:0a:17:8a:eb:24:e8:7e:9f:9b:0a:a9:de:5f:
                    cb:6c:cb:4d:a3:23:6a:66:75:fa:90:5b:83:90:f0:
                    af:8a:db:eb:ab:89:d1:21:52:93:7d:f5:dc:ad:9a:
                    f4:86:7c:a1:4d:55:14:74:26:2c:c1:29:e4:46:68:
                    d0:02:e3:f6:a2:38:de:9b:29:b2:de:03:c4:7d:d8:
                    49:01:c6:da:05:6c:1a:1c:ca:aa:b5:a2:7d:34:cc:
                    0c:fa:9f:f2:c4:81:b0:51:7c:aa:01:87:54:00:49:
                    e8:10:f5:7e:4a:cb:d7:a1:56:72:20:04:ba:3c:1c:
                    e6:b8:61:bb:f0:d1:3f:d2:70:3e:32:47:e3:a7:88:
                    a9:ef:e6:68:92:c0:9d:2f:e5:00:97:28:64:c6:e0:
                    fd:09:3f:1f:ce:3f:c6:0d:1a:1a:3f:0e:b0:69:1e:
                    d2:aa:90:cd:a4:a8:c8:b0:61:b4:ca:72:09:5c:da:
                    41:88:1f:26:78:96:a2:7c:81:02:9f:89:e0:2b:e0:
                    c5:f5:79:0a:31:42:21:00:94:60:7b:55:e9:2c:5b:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:11:A9:55:44:9D:CA:64:36:7B:C5:B1:50:D5:A6:EA:36:00:9B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/06d4b122-7a26-3109-a4c6-1f7987347027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl

            X509v3 Authority Key Identifier:
                keyid:8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.102.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:bb:9d:9a:9d:48:f5:09:70:72:fe:79:c1:1e:67:c8:4e:94:
         dc:1f:79:74:f1:62:e4:09:87:a4:62:7c:bc:18:18:79:3e:c8:
         7f:fb:25:7f:f9:f6:cb:b6:55:a9:bf:cd:87:86:8b:96:b3:d7:
         11:03:71:9b:4e:de:e1:79:cc:f0:34:cf:78:e4:7a:97:58:91:
         db:aa:d9:0f:70:da:2f:5e:50:0b:df:7a:2b:fa:cf:d0:2d:90:
         e2:92:bd:43:3d:b8:a2:82:51:17:ff:e2:ab:8d:bf:c7:a8:70:
         4a:d5:58:d5:d6:9f:ad:43:e4:46:56:f8:6f:7e:50:94:65:b1:
         b3:fa:fb:c3:bb:97:0a:c3:ba:6d:5b:69:cb:7e:a5:69:74:ed:
         e4:78:4b:ea:a4:78:9c:34:db:53:c0:6e:a9:05:97:98:3a:ea:
         26:8b:84:ce:b8:04:fc:1f:6a:c5:ea:fc:46:c6:1d:50:80:b1:
         7d:27:fb:04:fb:e9:3e:78:db:d0:fe:68:39:99:3d:23:b7:9d:
         5a:22:4e:f7:37:74:94:79:85:96:c1:fd:7f:a6:f4:09:d4:10:
         17:b5:a9:c8:4f:44:76:4c:7d:b3:43:ad:c7:ac:a9:f3:cb:a6:
         5e:72:0f:b1:e2:90:b5:16:c7:2f:39:10:ba:38:48:f2:72:ba:
         24:03:06:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmcGA2rDcpgf9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYzNGJmMmQtMzg3NS00MDc5LTk3ODgtNDMxZTM2ZDg3
NDNhMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZGViYWM0OTAtZmFiNS00NDQ4LTk2YTItMTE5YTlkNjExZmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSRZHGtQPKSpOPb2jWG1zKj1GzDetYJeflZu
vJutaGm/7pwYpIzTRHD2jfj+mwoXiusk6H6fmwqp3l/LbMtNoyNqZnX6kFuDkPCv
itvrq4nRIVKTffXcrZr0hnyhTVUUdCYswSnkRmjQAuP2ojjemymy3gPEfdhJAcba
BWwaHMqqtaJ9NMwM+p/yxIGwUXyqAYdUAEnoEPV+SsvXoVZyIAS6PBzmuGG78NE/
0nA+Mkfjp4ip7+ZoksCdL+UAlyhkxuD9CT8fzj/GDRoaPw6waR7SqpDNpKjIsGG0
ynIJXNpBiB8meJaifIECn4ngK+DF9XkKMUIhAJRge1XpLFsSkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLsRqVVEncpkNnvFsVDVpuo2AJvRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNjM0
YmYyZC0zODc1LTQwNzktOTc4OC00MzFlMzZkODc0M2EvMDZkNGIxMjItN2EyNi0z
MTA5LWE0YzYtMWY3OTg3MzQ3MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzYzNGJmMmQtMzg3NS00MDc5LTk3
ODgtNDMxZTM2ZDg3NDNhL2M2MzRiZjJkLTM4NzUtNDA3OS05Nzg4LTQzMWUzNmQ4
NzQzYS5jcmwwHwYDVR0jBBgwFoAUjznnANhpkhCHgv+7RhaeZJqG1cIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNjM0YmYyZC0zODc1LTQwNzktOTc4OC00MzFl
MzZkODc0M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqGYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACu7nZqdSPUJcHL+ecEeZ8hOlNwfeXTxYuQJh6RifLwYGHk+yH/7JX/5
9su2Vam/zYeGi5az1xEDcZtO3uF5zPA0z3jkepdYkduq2Q9w2i9eUAvfeiv6z9At
kOKSvUM9uKKCURf/4quNv8eocErVWNXWn61D5EZW+G9+UJRlsbP6+8O7lwrDum1b
act+pWl07eR4S+qkeJw021PAbqkFl5g66iaLhM64BPwfasXq/EbGHVCAsX0n+wT7
6T5429D+aDmZPSO3nVoiTvc3dJR5hZbB/X+m9AnUEBe1qchPRHZMfbNDrcesqfPL
pl5yD7HikLUWxy85ELo4SPJyuiQDBnA=
-----END CERTIFICATE-----
Generated at Mon Nov 3 14:48:32 2025 by rpki-client