Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/09c19d50-c067-3e65-81fb-cf90c34ff493.roa
File:                     09c19d50-c067-3e65-81fb-cf90c34ff493.roa (raw, json)
Hash identifier:          RecgymU9VKsWcs8cmLGv1xK7dWA7/fH6qBFBDExrVCw=
Subject key identifier:   56:D4:52:E9:7D:CE:76:2A:40:A9:2E:CF:72:F6:D0:76:96:C3:EA:35
Certificate issuer:       /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Certificate serial:       010D0C9F4328584B0A116CAD98BFAF88AFFEB6E0
Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/09c19d50-c067-3e65-81fb-cf90c34ff493.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     21693
IP address blocks:        151.215.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:6c:ad:98:bf:af:88:af:fe:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=be75a9d6-d9cd-4097-b9da-6a139d449f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:45:a7:41:d8:fd:d8:18:15:56:60:e7:52:f4:
                    c9:65:01:5b:a7:a5:c3:2f:ca:11:1a:bd:55:af:0f:
                    86:57:de:07:47:75:d9:b7:04:7d:9b:92:6d:07:cf:
                    47:8d:80:be:40:8f:54:72:e5:68:a2:3f:48:1f:ef:
                    e7:d7:37:1c:a1:36:31:fa:50:97:f7:0d:24:66:df:
                    c7:c4:16:a2:62:ba:7a:77:2b:7e:cc:53:72:4f:a5:
                    18:ab:86:c1:7f:54:3d:5a:5d:1d:df:35:d6:fc:c6:
                    f5:d2:cb:c9:d1:2d:23:f8:2f:b1:e9:41:30:59:8a:
                    09:d2:a1:7b:28:43:08:1f:61:a6:f8:dd:27:6b:21:
                    1f:ba:f7:bd:c8:49:9f:9a:34:a9:72:98:66:d5:09:
                    72:c3:35:b3:20:7f:4f:c1:44:37:6a:24:d3:d1:b6:
                    44:d7:ac:75:bf:e0:90:25:32:5e:38:88:b0:1b:f6:
                    3d:63:6f:1b:ed:7f:68:2f:be:5e:56:d5:5e:84:55:
                    f9:15:ee:fa:e0:f0:e7:ac:82:fc:5d:f1:6d:b8:e2:
                    78:07:d6:d9:b2:20:69:af:76:81:f5:c2:da:d5:45:
                    46:83:d2:dc:98:f8:2b:e2:bb:44:12:09:f1:1c:48:
                    61:e8:c4:e2:1e:cc:15:37:53:0e:aa:0a:11:41:95:
                    50:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D4:52:E9:7D:CE:76:2A:40:A9:2E:CF:72:F6:D0:76:96:C3:EA:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/09c19d50-c067-3e65-81fb-cf90c34ff493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.215.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a9:ec:3b:b2:3c:61:89:60:39:21:86:ad:be:9b:18:c7:b0:
         5d:a1:c9:97:7e:f3:ca:2b:50:cc:54:80:4d:bc:1c:26:24:86:
         fa:2f:21:73:36:a9:49:0a:5e:37:eb:21:17:41:8a:f9:81:5f:
         99:4a:54:7c:46:9c:6a:5b:75:be:bf:54:3d:6a:91:6b:d6:76:
         a5:8e:9b:4b:dd:ed:6c:9f:b3:5e:f7:7e:77:19:35:d8:98:30:
         0d:f8:22:ef:65:11:81:73:7c:72:bd:9e:c2:a4:12:0a:42:f6:
         a3:a0:49:45:10:53:aa:83:65:fa:19:68:a2:bf:cc:f9:ab:31:
         80:d3:c6:55:a8:5a:07:66:be:e3:bc:8e:bd:1e:f3:d5:a0:ef:
         df:14:7a:ab:87:15:9a:bc:36:9c:6a:38:2f:75:17:6e:01:c2:
         f6:b2:b8:70:9f:5e:f4:13:92:6f:38:6b:39:36:d0:31:51:ec:
         92:42:c4:4f:49:77:95:de:e3:75:bb:d3:e6:18:28:13:07:a4:
         0a:f8:de:55:bc:3d:29:9a:d6:46:61:f2:a1:fa:16:ac:45:96:
         4f:d7:c3:14:31:a3:d3:60:b0:24:48:18:c5:65:34:08:34:b0:
         8e:67:30:e0:93:4c:86:b1:7f:c2:8a:90:25:a2:70:15:81:c5:
         54:e7:bd:f6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsKEWytmL+viK/+tuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTI5ZTM2NzQtYWNjNi00ODU4LWIwZjEtN2EyZGFhYWVk
MTE5MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
YmU3NWE5ZDYtZDljZC00MDk3LWI5ZGEtNmExMzlkNDQ5ZjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEWnQdj92BgVVmDnUvTJZQFbp6XDL8oRGr1V
rw+GV94HR3XZtwR9m5JtB89HjYC+QI9UcuVooj9IH+/n1zccoTYx+lCX9w0kZt/H
xBaiYrp6dyt+zFNyT6UYq4bBf1Q9Wl0d3zXW/Mb10svJ0S0j+C+x6UEwWYoJ0qF7
KEMIH2Gm+N0nayEfuve9yEmfmjSpcphm1QlywzWzIH9PwUQ3aiTT0bZE16x1v+CQ
JTJeOIiwG/Y9Y28b7X9oL75eVtVehFX5Fe764PDnrIL8XfFtuOJ4B9bZsiBpr3aB
9cLa1UVGg9LcmPgr4rtEEgnxHEhh6MTiHswVN1MOqgoRQZVQ1QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFbUUul9znYqQKkuz3L20HaWw+o1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMjll
MzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJkYWFhZWQxMTkvMDljMTlkNTAtYzA2Ny0z
ZTY1LTgxZmItY2Y5MGMzNGZmNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTI5ZTM2NzQtYWNjNi00ODU4LWIw
ZjEtN2EyZGFhYWVkMTE5L2EyOWUzNjc0LWFjYzYtNDg1OC1iMGYxLTdhMmRhYWFl
ZDExOS5jcmwwHwYDVR0jBBgwFoAUml1tM1p2OnrYfTyiJ/n5DI1sO48wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hMjllMzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJk
YWFhZWQxMTkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAl9cwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUansO7I8YYlgOSGGrb6bGMewXaHJl37zyitQzFSATbwcJiSG+i8hczap
SQpeN+shF0GK+YFfmUpUfEacalt1vr9UPWqRa9Z2pY6bS93tbJ+zXvd+dxk12Jgw
Dfgi72URgXN8cr2ewqQSCkL2o6BJRRBTqoNl+hloor/M+asxgNPGVahaB2a+47yO
vR7z1aDv3xR6q4cVmrw2nGo4L3UXbgHC9rK4cJ9e9BOSbzhrOTbQMVHskkLET0l3
ld7jdbvT5hgoEwekCvjeVbw9KZrWRmHyofoWrEWWT9fDFDGj02CwJEgYxWU0CDSw
jmcw4JNMhrF/woqQJaJwFYHFVOe99g==
-----END CERTIFICATE-----
Generated at Wed Sep 17 22:48:09 2025 by rpki-client