Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa
File:                     6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa (raw, json)
Hash identifier:          0jKhikmUuewzLVfvHbC4ztqx4Df7VdaTdPuXjuu4P3Q=
Subject key identifier:   2F:DD:5B:C6:A3:13:3E:B2:0B:62:47:E6:F4:EB:29:F9:59:48:BA:9F
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B821CCDBDC72F254EC402D900
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     0
IP address blocks:        206.51.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:cd:bd:c7:2f:25:4e:c4:02:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=0a62cc01-d569-4c86-80d5-1fd34ac16794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:42:97:d2:3f:9a:a3:39:e8:04:75:24:6a:95:
                    d4:df:e8:b6:95:1f:fd:47:75:32:8c:fa:a5:5a:43:
                    93:6e:50:e5:ea:ba:01:bd:69:08:4f:c7:4e:e1:24:
                    39:33:cb:a1:a1:86:3b:66:8b:d0:cd:d2:20:6d:07:
                    1c:8d:59:ac:a9:6f:57:63:17:e0:e9:55:9a:f4:6e:
                    52:48:b9:b5:a1:1d:f5:3c:98:cc:9e:80:ed:41:94:
                    39:b7:ac:b5:06:ec:35:24:ab:d4:f8:22:d4:04:f0:
                    f2:54:d4:00:df:42:b6:8a:e0:a0:bf:1f:92:7e:6b:
                    90:f5:f7:57:c2:4d:85:5e:71:a0:38:aa:51:3e:c3:
                    07:66:da:0a:56:33:8b:8e:be:5a:d0:e1:0a:18:6b:
                    23:78:0e:2f:ab:20:18:b9:c7:b2:4e:e4:36:03:7d:
                    a4:56:18:66:42:f6:af:fb:4a:8f:77:a2:e7:55:de:
                    b3:f9:b8:e9:29:58:5f:b3:e7:b0:a7:0a:43:34:48:
                    52:35:56:92:dd:a5:4e:ba:41:fe:8c:6a:e4:d4:3c:
                    92:c6:a9:2e:aa:1f:0b:72:68:e4:d4:d4:f4:bf:34:
                    9d:75:3c:71:75:fe:f5:95:6b:34:df:79:ba:db:84:
                    3f:ef:af:f7:91:13:2b:b1:fa:d9:c1:32:7c:6a:24:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DD:5B:C6:A3:13:3E:B2:0B:62:47:E6:F4:EB:29:F9:59:48:BA:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/6bab23a3-1cbf-3c68-9c08-2239d40d923e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.51.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:25:6f:28:1e:f4:3b:a0:86:26:0e:21:16:b9:0a:6c:0b:c3:
         32:86:9a:cb:f2:db:66:8c:a5:dc:ea:cf:76:81:51:6b:bd:84:
         c9:19:76:fb:50:e7:85:41:9b:39:25:2d:ef:ef:a6:0f:ed:74:
         d3:b9:b0:65:33:4c:33:83:a0:fe:d8:d6:89:83:cb:9a:b5:ea:
         70:e0:ab:15:33:09:e4:27:f9:15:60:34:01:5d:3a:ba:28:bf:
         4a:5d:43:a4:e2:a7:4b:2a:66:67:1f:ff:38:cf:16:44:2c:74:
         21:3a:7d:05:a1:dd:bf:6c:3f:db:1d:5c:1c:91:d1:dd:d4:4c:
         b9:c8:aa:75:d5:7e:34:d3:49:c1:77:8d:2e:17:32:dd:eb:db:
         6c:e7:10:d9:5c:ae:fd:ba:0e:2e:ad:8a:c4:26:4f:55:81:54:
         1e:14:14:36:9d:64:37:f0:be:1e:7a:52:b8:14:b3:6d:06:57:
         8b:88:f5:72:7f:0c:58:0c:3a:9c:58:26:80:00:a1:3c:e7:52:
         1e:a2:1a:3d:3c:cc:20:c2:88:4a:b6:10:a0:0e:9f:2c:93:53:
         a2:ac:0a:65:44:b5:b1:a4:72:42:c0:12:fe:80:26:53:2f:ef:
         e8:88:e3:d4:99:b4:9a:71:73:9b:28:5d:01:7c:16:a2:24:e1:
         00:65:52:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHM29xy8lTsQC2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MGE2MmNjMDEtZDU2OS00Yzg2LTgwZDUtMWZkMzRhYzE2Nzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEKX0j+aoznoBHUkapXU3+i2lR/9R3UyjPql
WkOTblDl6roBvWkIT8dO4SQ5M8uhoYY7ZovQzdIgbQccjVmsqW9XYxfg6VWa9G5S
SLm1oR31PJjMnoDtQZQ5t6y1Buw1JKvU+CLUBPDyVNQA30K2iuCgvx+SfmuQ9fdX
wk2FXnGgOKpRPsMHZtoKVjOLjr5a0OEKGGsjeA4vqyAYuceyTuQ2A32kVhhmQvav
+0qPd6LnVd6z+bjpKVhfs+ewpwpDNEhSNVaS3aVOukH+jGrk1DySxqkuqh8Lcmjk
1NT0vzSddTxxdf71lWs033m624Q/76/3kRMrsfrZwTJ8aiQ+wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/dW8ajEz6yC2JH5vTrKflZSLqfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvNmJhYjIzYTMtMWNiZi0z
YzY4LTljMDgtMjIzOWQ0MGQ5MjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjMrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGklbyge9DughiYOIRa5CmwLwzKGmsvy22aMpdzqz3aBUWu9hMkZdvtQ
54VBmzklLe/vpg/tdNO5sGUzTDODoP7Y1omDy5q16nDgqxUzCeQn+RVgNAFdOroo
v0pdQ6Tip0sqZmcf/zjPFkQsdCE6fQWh3b9sP9sdXByR0d3UTLnIqnXVfjTTScF3
jS4XMt3r22znENlcrv26Di6tisQmT1WBVB4UFDadZDfwvh56UrgUs20GV4uI9XJ/
DFgMOpxYJoAAoTznUh6iGj08zCDCiEq2EKAOnyyTU6KsCmVEtbGkckLAEv6AJlMv
7+iI49SZtJpxc5soXQF8FqIk4QBlUhE=
-----END CERTIFICATE-----
Generated at Fri Oct 17 20:44:37 2025 by rpki-client