Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa
File:                     f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa (raw, json)
Hash identifier:          K8S4a5+vPgHgDPtuOCd0r+rsIJMSJLf4G5blmWmdinA=
Subject key identifier:   00:9A:7B:04:8E:E4:10:C7:79:E7:CE:A7:F9:5D:76:5D:48:96:E2:F0
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584B970CE9408EAEA6344FB992C0
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     12129
IP address blocks:        69.39.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:e9:40:8e:ae:a6:34:4f:b9:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=cb6bd559-be0d-45cd-8cdb-e7a467354df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:b2:e3:76:45:2f:f2:81:33:45:74:ed:bd:
                    47:14:ef:4b:4d:8d:c2:51:fc:59:f8:d0:24:60:59:
                    5e:cf:24:cb:04:a9:02:2c:5d:a6:f7:b1:89:ec:a4:
                    32:57:52:10:30:5d:36:ed:51:61:e7:4c:f1:8c:ff:
                    e9:29:c4:96:8d:14:44:f7:c7:67:30:ac:25:7a:c7:
                    74:05:ae:83:13:5b:4c:a0:2c:86:27:42:c9:4d:d2:
                    ba:c0:17:d0:f5:36:d6:df:58:a4:62:7f:54:c5:29:
                    98:40:0f:e6:8e:fc:48:0a:6b:e2:db:ee:34:61:ce:
                    6f:a6:b8:06:6f:38:3c:38:ed:b0:e0:68:4a:67:d7:
                    50:a5:a9:1a:14:bb:bd:9b:35:27:66:2a:77:15:c5:
                    37:27:be:42:98:23:3d:b6:b4:2a:4d:eb:93:4a:72:
                    8c:ed:06:19:8a:2b:26:be:51:1e:8e:de:10:3f:e8:
                    a2:de:a8:34:3c:6e:ca:3f:64:40:65:71:ef:6f:17:
                    4b:7d:49:0e:ef:60:4a:f3:e5:25:a0:d6:8c:89:7e:
                    74:52:ae:e8:e5:96:b4:a5:1a:ae:d3:29:f5:42:95:
                    8c:f4:6b:27:58:8a:8b:45:80:db:d9:82:d1:d6:b4:
                    1d:a7:cb:17:d2:da:6f:5a:57:b0:35:10:7e:a1:90:
                    da:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9A:7B:04:8E:E4:10:C7:79:E7:CE:A7:F9:5D:76:5D:48:96:E2:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f12e8adb-5e41-3875-ac13-7e5a05c363dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.39.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:be:27:d1:f7:f1:f9:31:5d:45:6f:7e:8e:8c:d0:49:48:36:
         e1:79:68:41:5f:10:93:86:a9:28:5e:9a:7f:1b:d0:cd:d3:ef:
         c5:c3:d7:db:46:4e:9f:1f:94:29:71:8a:ed:40:e5:27:dd:67:
         95:2e:1f:f5:2c:a7:1a:54:fc:f8:0a:22:e0:e7:c0:51:97:8a:
         f1:bd:da:42:dc:16:6a:2d:1b:b2:2e:36:19:94:b5:b3:54:77:
         62:a2:be:64:81:0a:12:f0:f7:89:c3:01:d1:00:9e:80:a0:71:
         48:80:46:e0:06:10:b1:21:52:5b:5a:11:7a:7f:a9:e5:83:45:
         a7:96:58:08:72:a7:bb:17:b2:ce:d2:b4:72:7e:85:49:3f:8f:
         e4:8c:9c:e4:d0:c4:30:4a:e4:68:a1:c9:1d:f9:6b:72:72:f5:
         73:2e:f0:36:2a:c7:6b:d3:b5:f9:6e:a5:b7:83:9d:7b:05:a3:
         cb:43:3e:75:1e:67:4d:3d:72:fd:91:af:e0:9b:3b:30:d9:d6:
         bf:2c:bb:45:fd:d9:6d:19:3c:07:ba:4a:20:a9:5e:34:14:5e:
         61:c3:a8:58:d5:75:12:a9:34:e3:54:87:f6:37:78:95:fa:c8:
         21:fc:52:89:65:5f:e4:cd:f3:3e:e8:8e:ba:ef:84:43:bf:c7:
         8c:e3:18:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOlAjq6mNE+5ksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
Y2I2YmQ1NTktYmUwZC00NWNkLThjZGItZTdhNDY3MzU0ZGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsay43ZFL/KBM0V07b1HFO9LTY3CUfxZ+NAk
YFlezyTLBKkCLF2m97GJ7KQyV1IQMF027VFh50zxjP/pKcSWjRRE98dnMKwlesd0
Ba6DE1tMoCyGJ0LJTdK6wBfQ9TbW31ikYn9UxSmYQA/mjvxICmvi2+40Yc5vprgG
bzg8OO2w4GhKZ9dQpakaFLu9mzUnZip3FcU3J75CmCM9trQqTeuTSnKM7QYZiism
vlEejt4QP+ii3qg0PG7KP2RAZXHvbxdLfUkO72BK8+UloNaMiX50Uq7o5Za0pRqu
0yn1QpWM9GsnWIqLRYDb2YLR1rQdp8sX0tpvWlewNRB+oZDafQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFACaewSO5BDHeefOp/lddl1IluLwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvZjEyZThhZGItNWU0MS0z
ODc1LWFjMTMtN2U1YTA1YzM2M2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRSdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF++J9H38fkxXUVvfo6M0ElINuF5aEFfEJOGqShemn8b0M3T78XD19tG
Tp8flClxiu1A5SfdZ5UuH/UspxpU/PgKIuDnwFGXivG92kLcFmotG7IuNhmUtbNU
d2KivmSBChLw94nDAdEAnoCgcUiARuAGELEhUltaEXp/qeWDRaeWWAhyp7sXss7S
tHJ+hUk/j+SMnOTQxDBK5GihyR35a3Jy9XMu8DYqx2vTtflupbeDnXsFo8tDPnUe
Z009cv2Rr+CbOzDZ1r8su0X92W0ZPAe6SiCpXjQUXmHDqFjVdRKpNONUh/Y3eJX6
yCH8UollX+TN8z7ojrrvhEO/x4zjGOM=
-----END CERTIFICATE-----
Generated at Thu Oct 23 16:07:03 2025 by rpki-client