Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2e4dd3c9-9358-3b91-a5d5-0ed3c2967195.roa
File:                     2e4dd3c9-9358-3b91-a5d5-0ed3c2967195.roa (raw, json)
Hash identifier:          3hkKJ3XTyg4Y5ofxuWCmazGvPmH7jXz50Vh8fIeW55Y=
Subject key identifier:   50:EC:8F:8A:D6:3E:26:F5:51:D2:EC:53:59:E5:19:0E:77:9E:09:97
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584B3AEC425C7656D3FD87ACD170
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2e4dd3c9-9358-3b91-a5d5-0ed3c2967195.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     14086
IP address blocks:        206.126.112.0/24 maxlen: 24
                          2620:1f:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:42:5c:76:56:d3:fd:87:ac:d1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=76851ceb-e163-467b-8cc2-fbf22a726165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:80:79:dc:88:b0:92:53:68:31:f3:e4:70:
                    2a:f7:9d:9c:bd:d0:1b:2b:d0:4b:b2:1b:1e:5c:38:
                    d9:67:1d:c4:c6:66:bc:c8:20:d7:1b:5f:4b:aa:41:
                    c9:be:4c:0d:95:2d:ac:eb:0a:61:6b:fb:3b:53:45:
                    2c:24:80:4e:9a:7f:05:e4:68:d1:f7:7a:1d:76:12:
                    4c:3c:0c:fb:ed:ed:43:7c:71:d5:75:eb:5d:7d:38:
                    9c:05:de:80:15:8e:3b:04:9f:4b:59:e7:bb:0e:a0:
                    3a:f1:83:dd:12:27:6c:58:eb:05:e0:d4:05:39:6c:
                    5b:b4:a8:91:a1:62:fe:63:34:6f:09:31:98:e5:1b:
                    3a:ae:a1:46:22:68:d1:35:9f:47:04:88:7d:03:d5:
                    b1:3f:57:3a:55:a1:75:64:ff:2c:77:16:66:59:7e:
                    44:a5:cf:d8:fa:2a:b2:5a:7e:a4:ed:55:53:4b:7d:
                    eb:c2:4c:c8:e8:e7:69:e0:3e:b7:2a:30:37:b2:2d:
                    1d:4f:5a:9f:33:24:50:6b:da:44:93:9d:59:bf:6c:
                    a2:04:c5:a5:ed:47:d9:7b:a3:0d:89:4d:56:75:77:
                    1a:01:bf:99:59:e7:f8:d2:2d:f6:75:bd:62:67:1b:
                    05:41:62:79:3f:43:d1:08:ec:6a:c9:32:37:f1:a9:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EC:8F:8A:D6:3E:26:F5:51:D2:EC:53:59:E5:19:0E:77:9E:09:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2e4dd3c9-9358-3b91-a5d5-0ed3c2967195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.112.0/24
                IPv6:
                  2620:1f:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ae:6d:ec:ac:48:e2:6c:0c:52:db:66:3f:81:a1:78:8a:1f:
         ac:76:a4:5b:e7:0f:74:37:94:5c:67:9b:fa:fb:87:d1:d3:11:
         29:85:aa:cd:f5:ba:9c:56:9c:2e:e3:bf:66:12:23:2f:74:8f:
         1d:60:d8:07:f9:8e:ca:ba:d9:6d:31:f7:76:bd:76:88:c0:fb:
         58:4d:23:bb:fa:55:b8:38:70:a5:f5:ef:98:e0:73:e6:26:d0:
         eb:2a:8f:37:ff:d0:96:b4:3a:29:8a:66:97:ac:3d:68:89:57:
         33:5c:26:1a:d4:a6:c6:64:f1:86:6b:da:11:33:2a:d3:0a:49:
         41:88:05:f6:bd:0c:b4:70:e5:77:d8:54:ad:bf:65:15:ae:37:
         cc:3d:dc:0b:0c:00:22:cf:9e:75:7d:0a:93:be:3b:96:c3:43:
         b0:6e:62:4f:83:59:f8:b3:b4:b3:f0:0c:3b:18:ae:d1:90:8b:
         a5:9d:d2:0f:79:97:07:c1:39:8e:a9:9c:02:a8:f0:68:7b:c4:
         d9:dc:44:f3:aa:06:b1:b5:cb:c7:c0:1a:9c:95:14:18:95:94:
         e0:5c:26:ee:95:c3:c3:51:87:44:c0:bd:c2:59:68:20:51:d2:
         4c:1e:5f:11:6c:33:a3:cf:3b:48:08:1e:24:d8:a2:18:ba:e1:
         ae:cb:c3:5b
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEs67EJcdlbT/Yes0XAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy
YWI4MB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk
NzY4NTFjZWItZTE2My00NjdiLThjYzItZmJmMjJhNzI2MTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu56AedyIsJJTaDHz5HAq952cvdAbK9BLshse
XDjZZx3Exma8yCDXG19LqkHJvkwNlS2s6wpha/s7U0UsJIBOmn8F5GjR93oddhJM
PAz77e1DfHHVdetdfTicBd6AFY47BJ9LWee7DqA68YPdEidsWOsF4NQFOWxbtKiR
oWL+YzRvCTGY5Rs6rqFGImjRNZ9HBIh9A9WxP1c6VaF1ZP8sdxZmWX5Epc/Y+iqy
Wn6k7VVTS33rwkzI6Odp4D63KjA3si0dT1qfMyRQa9pEk51Zv2yiBMWl7UfZe6MN
iU1WdXcaAb+ZWef40i32db1iZxsFQWJ5P0PRCOxqyTI38alxmQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFFDsj4rWPib1UdLsU1nlGQ53ngmXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh
OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvMmU0ZGQzYzktOTM1OC0z
YjkxLWE1ZDUtMGVkM2MyOTY3MTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3
NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4
MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi
MDA0ODJhYjguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzn5wMA8E
AgACMAkDBwAmIAAfQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAia5t7KxI4mwMUttmP4GheIofrHakW+cP
dDeUXGeb+vuH0dMRKYWqzfW6nFacLuO/ZhIjL3SPHWDYB/mOyrrZbTH3dr12iMD7
WE0ju/pVuDhwpfXvmOBz5ibQ6yqPN//QlrQ6KYpml6w9aIlXM1wmGtSmxmTxhmva
ETMq0wpJQYgF9r0MtHDld9hUrb9lFa43zD3cCwwAIs+edX0Kk747lsNDsG5iT4NZ
+LO0s/AMOxiu0ZCLpZ3SD3mXB8E5jqmcAqjwaHvE2dxE86oGsbXLx8AanJUUGJWU
4Fwm7pXDw1GHRMC9wlloIFHSTB5fEWwzo887SAgeJNiiGLrhrsvDWw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 05:47:07 2025 by rpki-client