Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a6f06a51-7eb8-3ba9-8145-3491e2de36e4.roa
File:                     a6f06a51-7eb8-3ba9-8145-3491e2de36e4.roa (raw, json)
Hash identifier:          WWBPFO2eWDcMs3XiDJ2xJCD+Kp6oFiMJTd0XHTrMsOU=
Subject key identifier:   DA:E1:9D:57:7F:32:36:3A:14:66:E1:2B:25:B1:A4:FE:CE:11:04:1A
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584BB2F7D76ADA7E584F0DC3FA00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a6f06a51-7eb8-3ba9-8145-3491e2de36e4.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     13531
IP address blocks:        169.224.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d7:6a:da:7e:58:4f:0d:c3:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=52f7d84e-1f0d-4b75-906d-63f9f1c64049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8d:af:43:27:d0:2a:31:45:60:2f:30:8a:8d:
                    38:3e:83:d0:64:46:68:b7:07:ab:9d:ac:06:f3:05:
                    86:5c:b6:71:55:9a:f4:57:a1:cd:26:7d:e4:f1:ca:
                    85:53:85:3d:84:03:3b:15:c7:16:52:7c:3b:e0:9c:
                    f3:31:6c:00:86:22:b3:9d:24:60:3d:ba:f6:48:88:
                    ab:5a:c7:d8:8c:bd:b4:a9:2f:4b:f3:f6:1e:ea:2d:
                    c4:59:c2:45:4c:cb:a9:6a:69:31:6a:c8:22:29:d9:
                    bd:ae:eb:c3:d5:61:7f:7f:9a:97:6c:38:2b:aa:b7:
                    0d:c9:41:41:a3:0c:bf:ac:df:65:68:e0:ca:6a:35:
                    3d:6c:7f:c2:c4:c2:e8:72:b5:47:22:2e:3a:33:9b:
                    51:0f:c8:24:82:a2:3d:75:08:e8:03:13:72:5c:8b:
                    23:36:db:71:47:95:9e:12:5e:7c:ba:b4:8f:0f:25:
                    6b:2d:20:d0:dc:4d:bf:d9:b1:1b:09:89:dd:3b:c0:
                    1d:c2:ba:72:93:9a:3b:3e:23:31:e1:5b:ee:1d:92:
                    37:c4:ec:4f:39:6e:92:c0:89:bc:3d:b2:67:b6:c6:
                    b5:3e:d1:39:db:92:07:b1:92:3d:44:23:85:3f:13:
                    89:ea:44:d0:5f:4c:67:68:f5:5e:12:68:f7:86:d1:
                    f7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E1:9D:57:7F:32:36:3A:14:66:E1:2B:25:B1:A4:FE:CE:11:04:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a6f06a51-7eb8-3ba9-8145-3491e2de36e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:08:5f:ea:63:d3:c5:d8:9e:38:6b:c0:ae:f9:5f:94:d9:
         a3:0b:76:ea:2f:89:9b:1b:32:a5:ad:80:52:b3:39:40:52:b8:
         ab:21:c2:42:35:db:7c:3a:9a:9e:28:32:ab:96:cd:f6:27:b1:
         35:82:a8:68:a1:ed:54:28:aa:f4:57:3f:90:ff:87:da:fb:89:
         25:11:b3:6b:4f:eb:35:4f:4b:2d:36:78:98:15:9d:0d:5f:dd:
         ca:cd:53:c4:ac:e1:5b:59:ae:64:d5:e7:8b:14:db:27:ac:89:
         f9:69:db:91:eb:31:93:dc:5e:7e:0c:93:9b:e4:9e:21:ea:75:
         71:df:a9:b3:da:7b:12:6c:0b:23:8a:13:9a:00:62:ad:c5:64:
         f8:64:13:6f:9a:28:0e:1e:28:1f:23:55:fc:0b:17:da:62:ae:
         d5:90:e3:d5:57:e7:fe:6f:a6:3f:20:26:81:5a:02:63:6c:5a:
         9d:71:0d:37:f1:e5:b9:10:42:99:35:2f:23:ae:38:65:02:99:
         b5:dc:69:61:9e:ef:3b:56:c4:ba:d4:6f:68:7a:27:31:d8:97:
         b8:56:ca:91:8e:cb:9a:a1:0d:3a:54:7b:21:e1:74:38:9e:00:
         28:b6:93:84:84:dc:4f:3d:32:9f:e0:48:12:73:11:f6:28:2f:
         61:1a:e7:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99dq2n5YTw3D+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
NTJmN2Q4NGUtMWYwZC00Yjc1LTkwNmQtNjNmOWYxYzY0MDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko2vQyfQKjFFYC8wio04PoPQZEZotwernawG
8wWGXLZxVZr0V6HNJn3k8cqFU4U9hAM7FccWUnw74JzzMWwAhiKznSRgPbr2SIir
WsfYjL20qS9L8/Ye6i3EWcJFTMupamkxasgiKdm9ruvD1WF/f5qXbDgrqrcNyUFB
owy/rN9laODKajU9bH/CxMLocrVHIi46M5tRD8gkgqI9dQjoAxNyXIsjNttxR5We
El58urSPDyVrLSDQ3E2/2bEbCYndO8Adwrpyk5o7PiMx4VvuHZI3xOxPOW6SwIm8
PbJntsa1PtE525IHsZI9RCOFPxOJ6kTQX0xnaPVeEmj3htH3UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNrhnVd/MjY6FGbhKyWxpP7OEQQaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYTZmMDZhNTEtN2ViOC0z
YmE5LTgxNDUtMzQ5MWUyZGUzNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqeCJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsnCF/qY9PF2J44a8Cu+V+U2aMLduoviZsbMqWtgFKzOUBSuKshwkI1
23w6mp4oMquWzfYnsTWCqGih7VQoqvRXP5D/h9r7iSURs2tP6zVPSy02eJgVnQ1f
3crNU8Ss4VtZrmTV54sU2yesiflp25HrMZPcXn4Mk5vkniHqdXHfqbPaexJsCyOK
E5oAYq3FZPhkE2+aKA4eKB8jVfwLF9pirtWQ49VX5/5vpj8gJoFaAmNsWp1xDTfx
5bkQQpk1LyOuOGUCmbXcaWGe7ztWxLrUb2h6JzHYl7hWypGOy5qhDTpUeyHhdDie
ACi2k4SE3E89Mp/gSBJzEfYoL2Ea5xQ=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:22:26 2025 by rpki-client