Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/86de017a-6584-31e8-922e-02cebceb38a9.roa
File:                     86de017a-6584-31e8-922e-02cebceb38a9.roa (raw, json)
Hash identifier:          rGb/Pu0EB2UFwyZs5G0P7gC/fMCcFGr39Zz7mNs1qWI=
Subject key identifier:   A9:73:95:74:D1:69:A2:48:74:B4:84:DA:FE:ED:07:82:A1:E3:40:B8
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584B0A115EC6B5630069D2BF1F80
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/86de017a-6584-31e8-922e-02cebceb38a9.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     13779
IP address blocks:        216.93.241.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5e:c6:b5:63:00:69:d2:bf:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=a1540fdb-170d-4a21-8ad6-6082aa728fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:84:ed:7e:a5:9f:be:ab:30:f0:8d:03:15:
                    bd:2c:fe:a5:93:d2:df:f0:98:58:ac:1a:46:aa:99:
                    2c:e2:29:ea:09:30:11:f4:93:fb:ac:31:69:f3:77:
                    ff:0c:2e:27:e6:68:5e:82:ba:a6:6f:e2:25:1e:94:
                    80:b6:e7:26:36:d3:b6:6e:0b:9f:35:62:8f:78:42:
                    ed:bb:07:10:fc:65:46:b4:41:3e:c4:7a:1e:0d:cb:
                    05:e4:57:bd:2b:1d:33:0a:60:5c:b9:b9:83:02:9c:
                    bc:b3:f0:f8:c4:f8:f2:45:80:4c:1d:28:ca:93:66:
                    ca:61:7a:83:0c:a9:95:07:8e:d3:ec:00:4d:64:f5:
                    71:e8:88:bb:b8:4d:68:14:30:d7:c6:55:5c:9c:c6:
                    45:f9:de:fc:d5:a4:c7:34:2c:75:02:6d:22:ed:6b:
                    63:7c:7d:18:44:a7:fa:aa:96:35:e1:1e:aa:7b:b4:
                    62:29:33:13:83:19:57:cf:75:82:bd:9a:71:2f:4a:
                    3d:d5:06:cb:5e:7b:b2:d0:5b:a9:21:4c:8c:51:b4:
                    7a:8f:54:f6:b4:d6:71:04:de:fa:83:15:76:72:34:
                    ae:7a:c0:b3:7d:88:e6:6e:a1:ab:13:66:87:d6:f4:
                    30:39:4e:73:ad:57:0b:39:33:ad:a0:43:48:26:f0:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:73:95:74:D1:69:A2:48:74:B4:84:DA:FE:ED:07:82:A1:E3:40:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/86de017a-6584-31e8-922e-02cebceb38a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.93.241.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d5:bf:6c:22:85:96:45:2a:1b:61:60:c0:91:bc:52:38:28:
         f8:5c:29:49:cb:4f:7c:a9:9b:13:58:9c:59:ec:53:b8:6c:9e:
         f2:46:86:9d:68:4d:5e:e0:41:a6:44:74:67:01:01:15:ee:73:
         0a:a0:c7:41:02:8b:22:37:64:61:22:29:8c:35:4b:28:63:f7:
         56:d9:6c:0a:fd:36:03:81:06:5b:d3:6b:d1:7b:40:10:33:0e:
         3b:62:d3:ab:50:e3:e3:89:e0:e2:aa:9d:22:30:3c:dd:01:41:
         b7:d9:e5:f7:da:16:81:f6:1a:52:6b:37:d1:92:e7:c5:3a:da:
         69:43:2d:79:3c:3e:17:c1:c9:5c:00:31:17:ea:78:bd:84:88:
         08:fe:03:a3:b3:6b:89:be:2f:54:c4:22:46:a7:06:1e:b9:19:
         3e:67:39:2d:7a:1d:50:c2:54:93:d1:d7:6c:a9:5e:b4:8e:42:
         a9:d5:8e:f7:28:58:43:8c:42:ab:0f:d8:53:70:70:ba:69:7e:
         91:40:60:73:ac:d5:99:ec:ac:2a:48:58:f4:ba:f6:66:d2:86:
         2a:37:36:7e:8c:f5:d5:3a:f6:f0:89:b3:9a:01:bb:a6:96:3c:
         14:0a:ed:a8:54:78:2d:82:14:86:ca:ee:e7:cf:70:04:98:7c:
         5b:9f:f8:88
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsKEV7GtWMAadK/H4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5
MWRkMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
YTE1NDBmZGItMTcwZC00YTIxLThhZDYtNjA4MmFhNzI4ZmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBWE7X6ln76rMPCNAxW9LP6lk9Lf8JhYrBpG
qpks4inqCTAR9JP7rDFp83f/DC4n5mhegrqmb+IlHpSAtucmNtO2bgufNWKPeELt
uwcQ/GVGtEE+xHoeDcsF5Fe9Kx0zCmBcubmDApy8s/D4xPjyRYBMHSjKk2bKYXqD
DKmVB47T7ABNZPVx6Ii7uE1oFDDXxlVcnMZF+d781aTHNCx1Am0i7WtjfH0YRKf6
qpY14R6qe7RiKTMTgxlXz3WCvZpxL0o91QbLXnuy0FupIUyMUbR6j1T2tNZxBN76
gxV2cjSuesCzfYjmbqGrE2aH1vQwOU5zrVcLOTOtoENIJvApxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKlzlXTRaaJIdLSE2v7tB4Kh40C4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2
MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvODZkZTAxN2EtNjU4NC0z
MWU4LTkyMmUtMDJjZWJjZWIzOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1
NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx
OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl
ZGQ4MTkxZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE2F3xADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAT1b9sIoWWRSobYWDAkbxSOCj4XClJy098qZsTWJxZ7FO4bJ7yRoad
aE1e4EGmRHRnAQEV7nMKoMdBAosiN2RhIimMNUsoY/dW2WwK/TYDgQZb02vRe0AQ
Mw47YtOrUOPjieDiqp0iMDzdAUG32eX32haB9hpSazfRkufFOtppQy15PD4Xwclc
ADEX6ni9hIgI/gOjs2uJvi9UxCJGpwYeuRk+Zzkteh1QwlST0ddsqV60jkKp1Y73
KFhDjEKrD9hTcHC6aX6RQGBzrNWZ7KwqSFj0uvZm0oYqNzZ+jPXVOvbwibOaAbum
ljwUCu2oVHgtghSGyu7nz3AEmHxbn/iI
-----END CERTIFICATE-----
Generated at Sat Oct 18 14:54:40 2025 by rpki-client