Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa
File:                     db6c28c7-3310-3a30-a759-80e2eb7282e0.roa (raw, json)
Hash identifier:          Juu7K0ZuqNXqlTnaHjQ3mBdxQXer6u6dHmfhcYWYv3M=
Subject key identifier:   69:F5:1C:0E:C6:01:3E:0D:DF:12:EE:2E:7D:1A:33:36:B9:9F:2D:E3
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584B434C5A90DF527F36665EBC00
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     22926
IP address blocks:        67.43.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:5a:90:df:52:7f:36:66:5e:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=fd51cfe9-2354-4d6d-af27-f866829de0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2c:b7:05:6d:b8:fc:90:b2:18:c5:bb:5c:9c:
                    a5:d1:65:b8:87:1a:af:07:69:35:db:d0:2f:b7:2b:
                    ab:57:ab:78:ab:b5:64:fc:93:4d:91:d9:c5:c0:09:
                    f0:b7:93:ff:e9:2f:6c:bc:20:d8:6a:15:90:5b:f9:
                    ba:0c:0d:46:30:e2:f6:71:b8:2b:05:e7:bc:cb:0a:
                    15:6c:6c:61:cf:50:22:71:a8:b1:fa:55:ee:84:59:
                    08:38:6e:93:7f:7d:8d:9f:68:a9:9a:4e:11:fc:f1:
                    35:08:5b:51:0b:5b:0a:37:91:70:00:70:49:fa:36:
                    9b:98:24:af:9d:a5:57:28:2e:5c:17:67:1c:89:25:
                    30:4c:80:ea:eb:a8:99:4f:2b:56:86:ee:9c:e3:79:
                    80:26:4c:4b:49:9a:65:8f:a7:c8:43:75:0b:78:f4:
                    ca:bd:55:a1:33:48:82:ac:3f:c9:d5:d8:0c:ce:b5:
                    dc:53:bc:fe:b1:ea:4a:dc:91:a9:97:72:0d:6d:f4:
                    11:26:d9:86:05:fe:55:c1:ef:f7:d3:6b:3e:90:a7:
                    02:b7:96:49:a8:c1:3e:c3:86:29:e2:27:a0:42:8f:
                    0d:bf:91:3b:f3:fe:82:a4:77:e5:08:e2:d5:21:a3:
                    56:9f:b3:5d:3d:3a:2c:3e:0c:59:71:da:14:41:ce:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F5:1C:0E:C6:01:3E:0D:DF:12:EE:2E:7D:1A:33:36:B9:9F:2D:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4a:3d:a5:c1:6d:a8:fa:6a:f0:95:49:e2:f9:1b:0c:7e:8e:
         65:02:e7:09:a7:bd:c1:89:6a:b0:4e:92:89:b2:d3:8a:53:9b:
         ac:46:af:42:e0:d4:0d:ab:ef:3f:d2:85:92:8c:dd:50:1e:7b:
         a9:7b:9f:05:92:eb:c2:a0:0a:64:8b:66:2b:33:35:e4:67:0d:
         fb:27:17:88:1e:d0:33:21:0a:0a:90:d0:1d:5b:e0:04:3d:4c:
         9d:61:be:c3:8f:f4:67:45:d7:76:dd:39:22:2e:74:fb:c0:ad:
         32:f3:1e:3f:7b:3e:19:c4:8a:d4:9f:f0:7a:2e:4b:51:f6:9d:
         04:01:6a:04:0e:c6:91:22:8f:43:7a:c5:f0:d8:22:3f:32:2d:
         50:ff:fe:70:3e:44:fc:23:9f:c1:97:b2:5a:4a:4f:77:97:ad:
         69:da:33:90:e7:e0:05:fd:5d:e9:87:8b:70:6c:df:e4:a0:bd:
         26:d6:30:51:e7:38:44:eb:76:ff:d5:8a:15:37:17:8e:65:7f:
         4f:2d:0e:5c:27:00:3a:01:db:9e:b8:a2:7d:fc:4c:6c:82:5a:
         cf:09:f8:f6:53:ed:82:7d:f0:96:6b:a2:09:ec:a2:66:2e:b7:
         ea:d9:17:80:1f:e4:79:db:16:9b:ee:a4:4b:47:fd:1d:7d:2f:
         1c:2c:5a:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFqQ31J/NmZevAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl
YjQ4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
ZmQ1MWNmZTktMjM1NC00ZDZkLWFmMjctZjg2NjgyOWRlMGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSy3BW24/JCyGMW7XJyl0WW4hxqvB2k129Av
tyurV6t4q7Vk/JNNkdnFwAnwt5P/6S9svCDYahWQW/m6DA1GMOL2cbgrBee8ywoV
bGxhz1Aicaix+lXuhFkIOG6Tf32Nn2ipmk4R/PE1CFtRC1sKN5FwAHBJ+jabmCSv
naVXKC5cF2cciSUwTIDq66iZTytWhu6c43mAJkxLSZplj6fIQ3ULePTKvVWhM0iC
rD/J1dgMzrXcU7z+sepK3JGpl3INbfQRJtmGBf5Vwe/302s+kKcCt5ZJqME+w4Yp
4iegQo8Nv5E78/6CpHflCOLVIaNWn7NdPTosPgxZcdoUQc4q5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGn1HA7GAT4N3xLuLn0aMza5ny3jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0
ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvZGI2YzI4YzctMzMxMC0z
YTMwLWE3NTktODBlMmViNzI4MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm
OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi
ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk
MGM4YmViNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQytwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpKPaXBbaj6avCVSeL5Gwx+jmUC5wmnvcGJarBOkomy04pTm6xGr0Lg
1A2r7z/ShZKM3VAee6l7nwWS68KgCmSLZiszNeRnDfsnF4ge0DMhCgqQ0B1b4AQ9
TJ1hvsOP9GdF13bdOSIudPvArTLzHj97PhnEitSf8HouS1H2nQQBagQOxpEij0N6
xfDYIj8yLVD//nA+RPwjn8GXslpKT3eXrWnaM5Dn4AX9XemHi3Bs3+SgvSbWMFHn
OETrdv/VihU3F45lf08tDlwnADoB2564on38TGyCWs8J+PZT7YJ98JZrognsomYu
t+rZF4Af5HnbFpvupEtH/R19LxwsWuw=
-----END CERTIFICATE-----
Generated at Tue Oct 14 19:26:20 2025 by rpki-client