Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa
File:                     7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa (raw, json)
Hash identifier:          zZoDBet9MpXAe6bbllO+Tfy12BhGY1fNq1ymXbk6RM0=
Subject key identifier:   0E:73:47:C3:CD:8D:8E:97:37:79:32:EA:6F:FD:EC:EE:82:E0:CA:ED
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584B970CD1031C41285226ED0420
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     30133
IP address blocks:        192.228.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d1:03:1c:41:28:52:26:ed:04:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=b2fa0f70-55f1-4e4d-8474-a3b01fa9da0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:71:e8:82:ce:b0:b5:40:75:dd:29:3e:58:
                    df:ba:de:32:19:66:84:85:3c:ca:97:c1:f9:e3:12:
                    d9:9c:65:35:fc:e1:dd:b2:ed:9b:3c:66:67:2a:58:
                    05:39:1f:e5:10:3c:6b:dc:5b:66:06:bb:ec:fa:ee:
                    54:89:bd:01:cd:d3:31:05:9d:f5:84:d1:8c:df:cb:
                    a1:54:04:75:a0:09:ca:7d:1a:20:d1:a2:76:94:63:
                    90:4c:a9:06:c7:6a:ae:9e:35:41:4a:97:da:bf:8e:
                    94:a7:62:5a:6c:72:9f:ce:de:d7:d2:cf:f8:93:a9:
                    4f:25:31:f0:aa:9e:00:59:47:83:f5:9a:3c:1c:61:
                    d9:ba:d0:0e:05:5f:db:56:54:c6:e7:f7:25:e5:8d:
                    9a:fc:a0:34:f5:c5:ff:3a:0a:3a:92:4d:ac:e6:22:
                    14:cb:17:9c:09:8d:ce:62:5b:36:cd:92:96:53:e7:
                    fb:dc:ee:9d:e4:2f:cd:7c:a0:e6:f3:a3:f3:95:1b:
                    c4:59:96:44:43:0b:6b:49:18:56:ea:6d:30:3c:9e:
                    f9:46:4f:80:cf:29:9a:66:5c:ee:74:a5:56:c5:f0:
                    62:ab:75:c5:3c:b5:13:35:ee:61:6f:5b:69:96:90:
                    eb:8f:87:4a:e4:7a:4d:b6:95:c5:98:cf:59:c9:d8:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:73:47:C3:CD:8D:8E:97:37:79:32:EA:6F:FD:EC:EE:82:E0:CA:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/7acad89f-616b-33f6-a0fe-5bd776bc6dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:e2:5d:7f:37:ab:88:5e:e6:80:cd:1d:82:63:66:f4:e8:
         05:df:fb:fc:9a:7d:44:c4:59:9a:b7:89:74:e7:10:26:32:8b:
         42:ce:3c:e3:d1:c1:47:6a:a8:97:b9:80:dc:cc:72:ec:2a:b8:
         f7:75:a7:36:37:c6:ee:5f:c8:59:e6:c9:7f:cf:a2:94:a8:2c:
         41:a0:25:30:26:a7:86:5b:48:43:84:8d:b5:b5:e3:99:23:43:
         1a:cb:9d:5c:ac:34:cc:0b:af:90:ed:34:0e:aa:e1:16:7f:7f:
         55:a4:b3:f3:77:f6:8a:e5:e8:5c:75:48:97:dc:cd:e0:c8:99:
         a3:c1:d8:fc:eb:d0:84:6f:0c:77:24:bc:41:92:69:84:bc:5e:
         73:c6:b2:f1:b1:89:f9:eb:f6:aa:f7:4a:7f:fb:00:ce:fc:e1:
         f6:53:e7:24:9d:8e:37:92:a5:f5:a7:42:da:28:94:12:25:29:
         0e:94:0b:ba:61:b1:0a:f7:1e:c7:70:dd:82:a2:cd:1a:34:0c:
         39:9a:f4:f0:5f:1e:73:ea:2f:6c:8a:56:5c:03:c4:d0:db:d4:
         aa:83:56:c8:80:1e:3b:85:5f:8e:2b:95:27:8e:1f:42:20:ef:
         56:84:75:70:18:0d:71:d0:a4:20:97:65:a2:c3:91:95:d8:84:
         45:16:ea:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNEDHEEoUibtBCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
YjJmYTBmNzAtNTVmMS00ZTRkLTg0NzQtYTNiMDFmYTlkYTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8lx6ILOsLVAdd0pPljfut4yGWaEhTzKl8H5
4xLZnGU1/OHdsu2bPGZnKlgFOR/lEDxr3FtmBrvs+u5Uib0BzdMxBZ31hNGM38uh
VAR1oAnKfRog0aJ2lGOQTKkGx2qunjVBSpfav46Up2JabHKfzt7X0s/4k6lPJTHw
qp4AWUeD9Zo8HGHZutAOBV/bVlTG5/cl5Y2a/KA09cX/Ogo6kk2s5iIUyxecCY3O
Yls2zZKWU+f73O6d5C/NfKDm86PzlRvEWZZEQwtrSRhW6m0wPJ75Rk+AzymaZlzu
dKVWxfBiq3XFPLUTNe5hb1tplpDrj4dK5HpNtpXFmM9ZydjdBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5zR8PNjY6XN3ky6m/97O6C4MrtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvN2FjYWQ4OWYtNjE2Yi0z
M2Y2LWEwZmUtNWJkNzc2YmM2ZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEA+4l1/N6uIXuaAzR2CY2b06AXf+/yafUTEWZq3iXTnECYyi0LOPOPR
wUdqqJe5gNzMcuwquPd1pzY3xu5fyFnmyX/PopSoLEGgJTAmp4ZbSEOEjbW145kj
QxrLnVysNMwLr5DtNA6q4RZ/f1Wks/N39orl6Fx1SJfczeDImaPB2Pzr0IRvDHck
vEGSaYS8XnPGsvGxifnr9qr3Sn/7AM784fZT5ySdjjeSpfWnQtoolBIlKQ6UC7ph
sQr3Hsdw3YKizRo0DDma9PBfHnPqL2yKVlwDxNDb1KqDVsiAHjuFX44rlSeOH0Ig
71aEdXAYDXHQpCCXZaLDkZXYhEUW6sA=
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:36:00 2025 by rpki-client