Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa
File:                     032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa (raw, json)
Hash identifier:          TCl/BYb6wU+oEJIhgwJaLOYpUAVrG7KcTGy3HROQSTE=
Subject key identifier:   23:9B:1E:44:11:DB:B1:FC:33:21:D9:F5:DF:67:FE:52:AB:FA:23:A9
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584BBB7596469C4A127CD095C3C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     203
IP address blocks:        20.139.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:96:46:9c:4a:12:7c:d0:95:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=614ac91e-5a14-4624-b296-65a7e09486f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e0:70:24:f8:ed:e8:06:1c:1e:37:20:ca:74:
                    6e:7a:23:22:39:f1:38:79:84:62:a9:8e:3d:df:5a:
                    79:ce:b7:0e:8c:0b:aa:57:e4:87:ea:f4:ca:d0:64:
                    89:27:7a:52:73:65:6a:4e:e6:ba:e9:41:2c:4f:5e:
                    97:83:3f:83:5a:3e:0e:3f:59:21:64:7a:77:5c:42:
                    f7:d5:8d:7b:e9:95:e3:b3:47:0e:8d:b0:2a:c7:f8:
                    3f:59:e6:6c:3e:56:ec:1a:8f:f1:2b:06:15:f4:d2:
                    e9:dc:03:16:40:f9:12:a8:3f:0b:07:79:c2:0b:ce:
                    0d:5c:86:b8:02:49:03:b6:07:7f:bc:4e:31:c5:62:
                    b7:a0:c7:5e:2d:61:5d:45:86:db:cf:38:2d:40:78:
                    ca:d9:96:f2:e2:e1:72:87:76:09:a3:ed:e8:ac:c8:
                    a3:38:e0:da:20:03:b4:70:e6:e1:9e:ba:9c:a3:1c:
                    f7:c4:83:c4:99:46:f1:45:49:5a:e0:73:44:d0:33:
                    34:7c:ce:f3:42:94:c2:24:dd:3d:ea:36:d7:2c:24:
                    2c:68:e1:d0:c7:46:5f:88:57:e8:15:21:9f:c9:0f:
                    d2:cf:82:58:4b:5d:2d:1c:f1:cd:27:75:9a:ce:a1:
                    45:0b:88:1e:7c:00:bc:93:4e:7f:54:c0:3d:ab:67:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9B:1E:44:11:DB:B1:FC:33:21:D9:F5:DF:67:FE:52:AB:FA:23:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/032ec7b5-50bc-3a9e-baf0-6bd4d8ac1e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.139.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4a:97:6e:fb:86:96:fb:76:04:eb:06:ea:f9:42:2b:73:ee:
         42:82:c7:14:3a:4a:10:9c:25:f2:b3:c0:77:26:60:09:47:76:
         20:17:ea:58:33:ea:80:da:b5:ed:2c:78:68:01:af:99:99:df:
         64:88:d5:8e:90:5c:dc:23:f3:ce:03:82:94:23:57:29:8f:85:
         a0:91:4a:f6:cf:44:c8:78:b4:e6:8c:5c:b5:17:3d:de:c4:34:
         f3:52:7a:18:7a:6f:7c:de:e2:b0:ef:d2:09:85:88:5d:0f:80:
         64:44:a0:f3:1b:04:79:ec:e4:5e:1a:3e:38:e4:3e:48:32:e2:
         7c:e6:6b:52:93:f9:39:24:d6:ed:10:dc:86:9e:65:f2:da:18:
         7f:7d:d9:84:72:4c:16:92:a6:b4:79:ae:f4:72:d2:56:86:e8:
         6b:a1:93:f6:c9:5a:d6:97:c6:b5:a3:ff:05:24:8f:5f:71:1e:
         9c:ce:4a:2c:ce:58:71:c0:65:da:8e:0e:c8:4e:d4:ef:74:ec:
         73:60:34:24:56:78:49:97:8d:2e:bb:93:54:92:4c:8b:0a:10:
         d6:76:07:fe:fe:f5:5a:5e:1a:9a:8f:ca:f9:63:d8:8f:53:0b:
         36:06:d3:0c:4f:19:2e:5b:7c:e7:02:93:f4:38:75:5a:85:c3:
         c4:55:4a:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZZGnEoSfNCVw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk
NjE0YWM5MWUtNWExNC00NjI0LWIyOTYtNjVhN2UwOTQ4NmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeBwJPjt6AYcHjcgynRueiMiOfE4eYRiqY49
31p5zrcOjAuqV+SH6vTK0GSJJ3pSc2VqTua66UEsT16Xgz+DWj4OP1khZHp3XEL3
1Y176ZXjs0cOjbAqx/g/WeZsPlbsGo/xKwYV9NLp3AMWQPkSqD8LB3nCC84NXIa4
AkkDtgd/vE4xxWK3oMdeLWFdRYbbzzgtQHjK2Zby4uFyh3YJo+3orMijOODaIAO0
cObhnrqcoxz3xIPEmUbxRUla4HNE0DM0fM7zQpTCJN096jbXLCQsaOHQx0ZfiFfo
FSGfyQ/Sz4JYS10tHPHNJ3WazqFFC4gefAC8k05/VMA9q2de0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCObHkQR27H8MyHZ9d9n/lKr+iOpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDMyZWM3YjUtNTBiYy0z
YTllLWJhZjAtNmJkNGQ4YWMxZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIsGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlKl277hpb7dgTrBur5Qitz7kKCxxQ6ShCcJfKzwHcmYAlHdiAX6lgz
6oDate0seGgBr5mZ32SI1Y6QXNwj884DgpQjVymPhaCRSvbPRMh4tOaMXLUXPd7E
NPNSehh6b3ze4rDv0gmFiF0PgGREoPMbBHns5F4aPjjkPkgy4nzma1KT+Tkk1u0Q
3IaeZfLaGH992YRyTBaSprR5rvRy0laG6Guhk/bJWtaXxrWj/wUkj19xHpzOSizO
WHHAZdqODshO1O907HNgNCRWeEmXjS67k1SSTIsKENZ2B/7+9VpeGpqPyvlj2I9T
CzYG0wxPGS5bfOcCk/Q4dVqFw8RVSqw=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:50:50 2025 by rpki-client