Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3a5718e2-ed49-393b-b46f-23001a4bd580.roa
File:                     3a5718e2-ed49-393b-b46f-23001a4bd580.roa (raw, json)
Hash identifier:          /9MxicVu7fsTz+DhfqJ8Gc9l/LT44BjW3tQ9Lb9iH8A=
Subject key identifier:   BD:A4:60:E6:18:C7:3B:F1:00:06:9C:49:21:0A:7F:B8:A2:9A:90:B9
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584BA7CD172322AB7E03739C4F00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3a5718e2-ed49-393b-b46f-23001a4bd580.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     394089
IP address blocks:        134.231.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:17:23:22:ab:7e:03:73:9c:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=fbfce993-f131-42f6-965d-5d32cfe34cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:0f:e1:6f:a5:10:26:59:b7:ca:c7:0b:67:
                    65:75:37:cc:9c:33:86:2c:f6:b2:90:cc:41:88:a1:
                    a6:31:73:5b:74:72:c9:ff:e1:a6:45:93:a7:28:27:
                    87:02:67:2b:0a:6b:35:c7:31:65:13:f5:02:a0:c5:
                    d8:9e:cf:09:83:6f:33:70:a6:69:be:bc:56:bd:25:
                    44:95:57:15:d7:61:3b:32:d9:90:12:bf:01:a4:75:
                    95:35:c1:03:e2:44:49:2a:84:a3:7b:36:de:7f:7a:
                    f7:69:29:47:75:20:64:c6:9f:ce:c6:31:a2:89:fc:
                    f6:5e:36:af:ea:a4:7d:e6:60:e6:8d:03:d5:14:6c:
                    79:4d:6f:3f:35:eb:0c:f9:1b:e6:8f:03:08:67:be:
                    6f:16:28:b1:2e:79:c3:29:fa:8d:c0:5b:82:fe:42:
                    44:17:a7:40:a9:3a:d0:00:2e:82:78:ce:df:fb:52:
                    ab:26:ff:38:24:d5:09:e4:be:1b:4e:b5:74:70:c3:
                    fa:c7:8d:8a:e6:28:17:f9:f9:d3:66:0c:92:61:59:
                    3c:d8:5a:e8:d5:e1:ba:33:21:e9:d4:7b:ed:91:ed:
                    e4:45:37:65:9e:30:22:92:9b:b0:49:5b:6e:ce:4c:
                    3e:7d:bd:60:0e:a2:7b:c0:ef:2a:20:20:da:97:81:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A4:60:E6:18:C7:3B:F1:00:06:9C:49:21:0A:7F:B8:A2:9A:90:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3a5718e2-ed49-393b-b46f-23001a4bd580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:03:52:a2:6c:5b:b0:f5:c7:d0:b6:d2:3b:68:c9:d8:e2:48:
         97:03:28:88:f8:87:f0:a7:b3:d6:b0:09:0c:c4:a8:38:fd:e6:
         50:d5:66:26:fc:49:20:77:f4:d1:5b:d3:a2:db:ce:7a:40:91:
         ac:b0:fb:45:24:02:12:d7:f4:6b:13:bc:ee:c7:6d:7b:dd:f1:
         f7:c9:16:b6:10:32:6c:91:9b:ad:4a:3b:22:41:66:14:e5:68:
         9b:73:a8:4c:08:70:1f:ab:03:14:b1:fb:fb:05:cf:37:11:28:
         28:25:65:fe:5f:95:dc:de:92:c8:5d:81:be:0e:85:d5:a3:00:
         e7:87:83:4d:dc:f1:63:25:9b:ff:02:5e:c8:5a:4f:f1:3e:75:
         57:f6:eb:2a:56:32:c6:5f:d8:68:a8:9b:4a:f6:95:cf:e1:84:
         6c:e1:d9:5a:cc:f7:0b:33:72:d2:f8:c4:9f:02:9f:2e:8e:c3:
         44:c4:e5:c9:a6:1b:52:94:b0:70:f1:b5:32:b4:7f:a0:db:ad:
         60:f1:24:a5:4a:02:c5:46:d8:5b:2d:49:51:17:4c:3a:2f:8c:
         7b:b1:50:54:e6:76:7f:69:db:df:08:92:fe:30:3b:04:fa:9d:
         cc:a5:89:cb:1c:53:de:e5:1e:dd:b0:34:26:4e:39:39:d6:7a:
         3d:4e:c9:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRcjIqt+A3OcTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
ZmJmY2U5OTMtZjEzMS00MmY2LTk2NWQtNWQzMmNmZTM0Y2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1QP4W+lECZZt8rHC2dldTfMnDOGLPaykMxB
iKGmMXNbdHLJ/+GmRZOnKCeHAmcrCms1xzFlE/UCoMXYns8Jg28zcKZpvrxWvSVE
lVcV12E7MtmQEr8BpHWVNcED4kRJKoSjezbef3r3aSlHdSBkxp/OxjGiifz2Xjav
6qR95mDmjQPVFGx5TW8/NesM+RvmjwMIZ75vFiixLnnDKfqNwFuC/kJEF6dAqTrQ
AC6CeM7f+1KrJv84JNUJ5L4bTrV0cMP6x42K5igX+fnTZgySYVk82Fro1eG6MyHp
1Hvtke3kRTdlnjAikpuwSVtuzkw+fb1gDqJ7wO8qICDal4FlZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL2kYOYYxzvxAAacSSEKf7iimpC5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvM2E1NzE4ZTItZWQ0OS0z
OTNiLWI0NmYtMjMwMDFhNGJkNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhuf4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMYDUqJsW7D1x9C20jtoydjiSJcDKIj4h/Cns9awCQzEqDj95lDVZib8
SSB39NFb06LbznpAkayw+0UkAhLX9GsTvO7HbXvd8ffJFrYQMmyRm61KOyJBZhTl
aJtzqEwIcB+rAxSx+/sFzzcRKCglZf5fldzekshdgb4OhdWjAOeHg03c8WMlm/8C
XshaT/E+dVf26ypWMsZf2Giom0r2lc/hhGzh2VrM9wszctL4xJ8Cny6Ow0TE5cmm
G1KUsHDxtTK0f6DbrWDxJKVKAsVG2FstSVEXTDovjHuxUFTmdn9p298Ikv4wOwT6
ncylicscU97lHt2wNCZOOTnWej1OyXE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:02:01 2025 by rpki-client