Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/9018190a-86af-38cc-b86a-7cf52641711b.roa
File:                     9018190a-86af-38cc-b86a-7cf52641711b.roa (raw, json)
Hash identifier:          JIKDTmium4vb9vdTeFc7UAkFuSM2GCCdPhhuZIJi+l0=
Subject key identifier:   BE:CD:63:9B:42:20:C1:E3:5C:6F:6F:2D:07:42:5A:11:38:A9:26:D8
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584B0465C02B05C192CAD9E368A0
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/9018190a-86af-38cc-b86a-7cf52641711b.roa
Signing time:             Fri 29 Aug 2025 12:15:57 +0000
ROA not before:           Fri 29 Aug 2025 12:15:57 +0000
ROA not after:            Thu 27 Nov 2025 13:15:57 +0000
asID:                     20473
IP address blocks:        216.75.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:65:c0:2b:05:c1:92:ca:d9:e3:68:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Aug 29 12:15:57 2025 GMT
            Not After : Nov 27 13:15:57 2025 GMT
        Subject: CN=68f2080c-4fbf-4312-9c9d-4402a76f294d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:75:11:71:c3:57:97:31:4b:86:3f:12:ac:84:
                    34:9b:85:a8:b4:d6:c7:f0:f6:09:8e:eb:c4:8f:f6:
                    5f:e5:2b:d6:85:87:54:72:83:ad:7e:91:5a:24:11:
                    24:bd:e7:f0:5a:81:f7:54:d3:87:3d:4c:9e:83:88:
                    48:79:b4:d4:4a:15:2e:54:7a:b4:b4:67:f2:3a:69:
                    d6:14:be:47:61:4d:52:f7:69:10:1d:a9:53:3d:77:
                    13:32:25:25:6b:3c:d7:11:f8:00:64:7b:58:7a:85:
                    13:b1:62:22:8e:0b:8c:20:6c:5d:a4:d6:7c:5d:fe:
                    e5:31:7f:71:c2:24:18:b0:5b:dd:10:fa:18:1b:12:
                    f5:bf:54:6f:9e:e7:76:0a:38:d1:e1:93:e2:a8:e0:
                    bd:34:3f:78:5d:41:95:0f:8a:f4:cc:52:67:51:30:
                    ed:44:23:d5:73:ba:4e:92:16:4a:f9:d8:b6:44:d0:
                    dd:b2:b1:7a:02:7c:f6:3f:b1:75:7b:1f:77:91:14:
                    6a:17:cf:f2:c6:b0:27:73:60:b4:33:0d:2c:91:1b:
                    a3:44:9c:ab:5f:6a:7a:ab:7d:7b:5e:92:34:d0:37:
                    d3:07:81:c0:3f:f4:9e:bd:61:67:ee:08:4f:75:9b:
                    00:f1:9b:f3:93:09:77:3d:2d:6e:8f:0c:bf:8b:9e:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CD:63:9B:42:20:C1:E3:5C:6F:6F:2D:07:42:5A:11:38:A9:26:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/9018190a-86af-38cc-b86a-7cf52641711b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9f:5b:fe:ba:9e:36:88:4c:3d:59:88:fa:93:69:d4:20:eb:
         6e:5b:b0:07:41:1c:4a:27:ef:cc:5b:19:b6:9e:2b:1b:4f:e4:
         8e:ce:3f:a5:47:09:f7:64:4a:ee:91:b4:08:a9:62:2e:90:b2:
         fe:77:57:d6:8d:f1:93:e9:1c:c1:12:ce:9f:ce:46:c8:fb:84:
         b9:15:9d:7e:bf:65:8e:ac:e4:55:a2:8c:8b:7a:9c:d6:65:12:
         0f:6f:2f:0d:77:34:67:c8:b8:d7:20:41:dd:bb:f2:7f:b8:e7:
         73:44:35:68:e6:e0:e2:b4:6d:57:d9:d6:09:6d:bb:c1:17:d4:
         3f:30:a8:be:d3:9b:b1:f5:99:84:b8:aa:55:36:07:63:19:f4:
         24:b3:80:b5:64:ad:a2:c0:3c:fe:20:09:bc:e4:58:e8:d2:7f:
         7d:4a:87:f9:b5:be:11:97:f9:54:55:b3:c3:b1:39:5c:e3:57:
         d5:ff:18:85:8d:d4:d2:69:b4:df:4c:ae:6b:97:3d:f7:e9:35:
         ae:14:fe:c6:93:56:71:9f:3d:1b:db:61:56:c9:2d:d0:ce:e2:
         29:61:c6:a3:fa:ad:ea:b9:fb:67:23:26:34:ce:9e:48:81:29:
         6f:84:5b:58:e1:99:9d:07:4d:bf:e9:f3:f1:de:da:1d:bd:bf:
         20:04:29:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEZcArBcGSytnjaKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl
YTA4MB4XDTI1MDgyOTEyMTU1N1oXDTI1MTEyNzEzMTU1N1owLzEtMCsGA1UEAxMk
NjhmMjA4MGMtNGZiZi00MzEyLTljOWQtNDQwMmE3NmYyOTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHURccNXlzFLhj8SrIQ0m4WotNbH8PYJjuvE
j/Zf5SvWhYdUcoOtfpFaJBEkvefwWoH3VNOHPUyeg4hIebTUShUuVHq0tGfyOmnW
FL5HYU1S92kQHalTPXcTMiUlazzXEfgAZHtYeoUTsWIijguMIGxdpNZ8Xf7lMX9x
wiQYsFvdEPoYGxL1v1Rvnud2CjjR4ZPiqOC9ND94XUGVD4r0zFJnUTDtRCPVc7pO
khZK+di2RNDdsrF6Anz2P7F1ex93kRRqF8/yxrAnc2C0Mw0skRujRJyrX2p6q317
XpI00DfTB4HAP/SevWFn7ghPdZsA8Zvzkwl3PS1ujwy/i56Q3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7NY5tCIMHjXG9vLQdCWhE4qSbYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy
MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvOTAxODE5MGEtODZhZi0z
OGNjLWI4NmEtN2NmNTI2NDE3MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4
MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1
ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk
MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADifW/66njaITD1ZiPqTadQg625bsAdBHEon78xbGbaeKxtP5I7OP6VH
CfdkSu6RtAipYi6Qsv53V9aN8ZPpHMESzp/ORsj7hLkVnX6/ZY6s5FWijIt6nNZl
Eg9vLw13NGfIuNcgQd278n+453NENWjm4OK0bVfZ1gltu8EX1D8wqL7Tm7H1mYS4
qlU2B2MZ9CSzgLVkraLAPP4gCbzkWOjSf31Kh/m1vhGX+VRVs8OxOVzjV9X/GIWN
1NJptN9MrmuXPffpNa4U/saTVnGfPRvbYVbJLdDO4ilhxqP6req5+2cjJjTOnkiB
KW+EW1jhmZ0HTb/p8/He2h29vyAEKd8=
-----END CERTIFICATE-----
Generated at Sat Sep 6 19:00:43 2025 by rpki-client