Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/a4249787-a790-3cf8-8678-56770f696be4.roa
File:                     a4249787-a790-3cf8-8678-56770f696be4.roa (raw, json)
Hash identifier:          pnkcPhjPmDCKzjMWLcDLEX6CPbk/eB0u6mlNfvKKz1g=
Subject key identifier:   68:5A:86:1B:E9:C0:30:E4:71:B6:44:82:AD:7F:55:BE:0C:16:AC:E4
Certificate issuer:       /CN=00adbd42-33fc-471d-8b5d-c9ffe622ea2a
Certificate serial:       010D0C9F4328584B28C6E53ECD972C0323FDE880
Authority key identifier: 93:27:BA:88:AD:D9:16:D7:4A:BA:88:E3:00:E1:16:BD:A4:D6:1D:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/a4249787-a790-3cf8-8678-56770f696be4.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     26685
IP address blocks:        155.107.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:e5:3e:cd:97:2c:03:23:fd:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00adbd42-33fc-471d-8b5d-c9ffe622ea2a
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=496adfba-637f-42be-a480-d41f2a800e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:81:0e:70:bb:cf:3f:50:04:86:f7:0d:ad:41:
                    ff:56:b8:9e:12:6c:87:51:c7:3a:7a:37:3b:a2:94:
                    18:a1:dd:37:ee:d3:c6:a0:a7:5d:82:1d:ba:c3:03:
                    d8:f5:33:55:ba:6f:76:ac:3c:62:de:0e:96:4d:ef:
                    15:f4:ff:7d:f2:e6:bb:8d:cb:c2:7c:84:0b:72:96:
                    09:88:a0:b5:f7:bf:84:48:ff:35:0a:5d:c2:ae:78:
                    f2:dd:75:7c:f4:8b:fc:c9:33:2b:b4:18:cc:b1:03:
                    f6:b2:80:46:57:e4:a0:34:20:53:c3:65:ac:f2:2c:
                    31:c6:8f:2a:c4:43:99:81:d4:83:b2:b0:45:a1:8a:
                    3f:24:16:b1:46:71:c3:d2:a6:69:82:0a:dc:dc:f2:
                    7c:3f:75:2b:93:e1:2c:32:0b:e9:0a:2b:5a:2b:e3:
                    a7:eb:7f:d9:72:e0:7b:f7:6c:c9:58:e2:84:e3:1e:
                    ce:e9:44:b3:2d:b1:69:86:f5:e4:7b:29:5b:64:66:
                    34:61:3a:26:5c:fb:44:90:5d:b5:04:6e:f9:92:60:
                    df:4c:84:d7:ce:9f:97:29:18:b7:f3:a2:a5:b9:76:
                    3f:5e:e2:56:5b:d4:54:c1:63:39:58:3e:57:1d:7d:
                    31:f8:6b:a4:f1:12:1b:08:09:c0:eb:72:3b:a0:09:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5A:86:1B:E9:C0:30:E4:71:B6:44:82:AD:7F:55:BE:0C:16:AC:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/a4249787-a790-3cf8-8678-56770f696be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.crl

            X509v3 Authority Key Identifier:
                keyid:93:27:BA:88:AD:D9:16:D7:4A:BA:88:E3:00:E1:16:BD:A4:D6:1D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00adbd42-33fc-471d-8b5d-c9ffe622ea2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.107.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:ee:4f:38:0d:85:0c:e6:d5:42:eb:7b:ff:2e:14:dc:81:
         3e:58:25:4a:78:e3:cf:02:9d:c0:56:17:ff:24:87:ef:b6:cb:
         49:97:bd:e6:9f:28:37:b4:ea:a1:80:c9:68:7f:8d:b5:4d:63:
         44:94:d6:cc:07:bc:ec:de:37:21:6b:a9:11:49:e0:cb:7b:c9:
         cd:fb:07:12:bd:78:ff:9f:c1:35:34:45:d8:a6:59:3c:a8:7c:
         a5:89:2a:e2:e2:f7:8a:4f:41:11:0e:1e:b8:b1:02:d4:e1:0a:
         95:51:bf:8f:22:80:b4:be:3d:81:36:d2:a3:46:c7:f4:d4:13:
         22:90:e2:3c:f6:47:97:99:00:c3:c1:2f:f8:5c:22:01:3d:f9:
         d0:48:19:d3:3b:2c:c8:40:24:39:48:07:8f:dc:18:e1:d1:94:
         a6:cf:5a:09:77:c4:c9:b7:40:85:6b:bc:ac:ca:15:e3:62:23:
         d2:e3:83:9f:9f:6a:5e:12:53:d4:bb:e3:82:e6:73:d1:e8:c0:
         99:eb:9b:0e:bb:a9:d2:0a:00:ba:b9:17:80:93:fe:27:e7:cf:
         12:8c:fc:21:87:ba:cb:b2:df:cd:d7:4b:68:ae:51:a6:42:af:
         d0:e9:a3:f2:8e:d7:e6:aa:55:11:0d:c0:32:1b:49:28:2e:62:
         d1:b7:6f:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuU+zZcsAyP96IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBhZGJkNDItMzNmYy00NzFkLThiNWQtYzlmZmU2MjJl
YTJhMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk
NDk2YWRmYmEtNjM3Zi00MmJlLWE0ODAtZDQxZjJhODAwZTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIEOcLvPP1AEhvcNrUH/VrieEmyHUcc6ejc7
opQYod037tPGoKddgh26wwPY9TNVum92rDxi3g6WTe8V9P998ua7jcvCfIQLcpYJ
iKC197+ESP81Cl3Crnjy3XV89Iv8yTMrtBjMsQP2soBGV+SgNCBTw2Ws8iwxxo8q
xEOZgdSDsrBFoYo/JBaxRnHD0qZpggrc3PJ8P3Urk+EsMgvpCitaK+On63/ZcuB7
92zJWOKE4x7O6USzLbFphvXkeylbZGY0YTomXPtEkF21BG75kmDfTITXzp+XKRi3
86KluXY/XuJWW9RUwWM5WD5XHX0x+Guk8RIbCAnA63I7oAnw/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhahhvpwDDkcbZEgq1/Vb4MFqzkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMGFk
YmQ0Mi0zM2ZjLTQ3MWQtOGI1ZC1jOWZmZTYyMmVhMmEvYTQyNDk3ODctYTc5MC0z
Y2Y4LTg2NzgtNTY3NzBmNjk2YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDBhZGJkNDItMzNmYy00NzFkLThi
NWQtYzlmZmU2MjJlYTJhLzAwYWRiZDQyLTMzZmMtNDcxZC04YjVkLWM5ZmZlNjIy
ZWEyYS5jcmwwHwYDVR0jBBgwFoAUkye6iK3ZFtdKuojjAOEWvaTWHXUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMGFkYmQ0Mi0zM2ZjLTQ3MWQtOGI1ZC1jOWZm
ZTYyMmVhMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm2tRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3j7k84DYUM5tVC63v/LhTcgT5YJUp4488CncBWF/8kh++2y0mXveaf
KDe06qGAyWh/jbVNY0SU1swHvOzeNyFrqRFJ4Mt7yc37BxK9eP+fwTU0RdimWTyo
fKWJKuLi94pPQREOHrixAtThCpVRv48igLS+PYE20qNGx/TUEyKQ4jz2R5eZAMPB
L/hcIgE9+dBIGdM7LMhAJDlIB4/cGOHRlKbPWgl3xMm3QIVrvKzKFeNiI9Ljg5+f
al4SU9S744Lmc9HowJnrmw67qdIKALq5F4CT/ifnzxKM/CGHusuy383XS2iuUaZC
r9Dpo/KO1+aqVRENwDIbSSguYtG3bzQ=
-----END CERTIFICATE-----
Generated at Fri Sep 19 04:46:08 2025 by rpki-client