Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/922515f7-135b-3413-8cd0-766b8ae7a234.roa
File:                     922515f7-135b-3413-8cd0-766b8ae7a234.roa (raw, json)
Hash identifier:          cwgblgN8i8m3KUiZMWydaSujbWQqwfLB7dIKQ+XVHG0=
Subject key identifier:   20:4D:EC:1D:42:9C:6E:38:FB:BD:3F:17:98:02:F0:1B:37:AE:FB:60
Certificate issuer:       /CN=0265af60-e6e1-4613-b159-33bc6053852a
Certificate serial:       010D0C9F4328584BA39D064EEFE740F5AA2DA880
Authority key identifier: CE:AD:10:F9:CE:E6:DA:D9:9D:6D:E1:C2:10:84:42:6D:85:F2:15:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/922515f7-135b-3413-8cd0-766b8ae7a234.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     399500
IP address blocks:        192.251.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:06:4e:ef:e7:40:f5:aa:2d:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0265af60-e6e1-4613-b159-33bc6053852a
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=6d0483b5-0258-4d9a-b326-d90a1baff8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:3c:71:f2:d7:2d:b3:98:40:15:07:eb:76:
                    32:9e:fb:d8:5e:a7:8f:47:72:27:21:75:ff:73:57:
                    1f:11:0d:ea:08:33:f2:64:01:d8:fd:d9:74:9e:7a:
                    c2:cd:1a:6a:e8:43:84:e6:10:98:70:ce:e6:92:06:
                    51:1f:75:f5:ae:eb:e8:7f:86:82:ee:5e:13:9e:d0:
                    18:c7:7d:af:b3:fe:c5:df:dd:63:10:77:ea:a9:d8:
                    ea:58:d3:39:b9:fa:a6:02:6d:d9:7f:29:12:85:13:
                    a4:e7:10:dd:52:fa:11:3b:59:17:a3:04:20:7b:a0:
                    af:3a:e9:06:aa:81:eb:79:88:1d:fa:44:c8:9f:44:
                    72:81:bc:97:b0:18:bd:ff:09:13:b1:13:ac:b2:a8:
                    16:48:4a:60:b5:43:7e:4c:a3:10:6b:6e:5b:6f:bf:
                    68:ab:05:0f:b4:0b:1c:bf:a4:bd:3e:9c:91:92:81:
                    21:8c:a9:0d:c6:23:66:47:a7:32:f3:d8:a7:13:cc:
                    05:71:3c:b3:cc:a3:20:5d:9f:4e:ad:46:46:5c:9a:
                    d3:b1:74:d1:ad:77:0d:79:8b:c9:73:20:10:f8:0c:
                    88:42:eb:13:fe:ea:fe:1a:9d:74:f4:af:35:07:30:
                    21:0a:3c:fd:d3:73:e1:25:47:46:8d:c1:85:fc:04:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4D:EC:1D:42:9C:6E:38:FB:BD:3F:17:98:02:F0:1B:37:AE:FB:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/922515f7-135b-3413-8cd0-766b8ae7a234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:AD:10:F9:CE:E6:DA:D9:9D:6D:E1:C2:10:84:42:6D:85:F2:15:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.251.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c7:e6:8f:27:b5:e8:9d:50:a7:3c:be:e7:cc:d7:07:cc:c1:
         3c:dd:37:38:8c:00:97:cd:21:02:f0:1f:a4:89:a4:62:d7:10:
         4c:f8:67:bc:ef:1c:06:9e:8c:ac:a6:00:a8:21:cc:7e:4b:b8:
         96:e5:b1:c3:ef:0a:59:24:00:a3:44:11:a7:95:3f:ea:6c:e5:
         95:5c:bf:4f:f7:0e:bd:6b:07:e7:a8:88:d4:d3:24:56:57:14:
         ea:5c:73:09:72:2d:fe:f6:e5:b9:e7:26:e1:8f:69:b0:f8:7c:
         13:57:d7:82:36:32:d1:f5:ba:61:a2:0d:db:40:9a:e4:83:7a:
         86:ec:dc:c8:88:7b:99:8a:f7:7c:4f:18:5e:36:88:1c:aa:59:
         d9:26:1f:de:28:b2:5e:4a:fc:cd:ec:8e:44:3b:4d:a8:cb:9c:
         e5:6a:65:0a:bd:4c:cc:20:13:7c:27:39:d2:52:1b:37:75:69:
         cf:ce:93:45:90:39:e0:d1:ed:90:8c:0b:34:0e:e9:01:f9:1a:
         c9:dd:54:3a:c2:0d:eb:63:29:25:15:ba:77:10:8c:a0:01:e4:
         ed:74:66:68:eb:6c:0d:12:3c:48:1f:2d:a7:1f:7a:14:25:29:
         67:35:4c:73:e9:c4:fc:35:19:ba:bf:61:f3:cd:bd:05:6b:6c:
         44:ec:54:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQZO7+dA9aotqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDI2NWFmNjAtZTZlMS00NjEzLWIxNTktMzNiYzYwNTM4
NTJhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
NmQwNDgzYjUtMDI1OC00ZDlhLWIzMjYtZDkwYTFiYWZmOGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ns8cfLXLbOYQBUH63YynvvYXqePR3InIXX/
c1cfEQ3qCDPyZAHY/dl0nnrCzRpq6EOE5hCYcM7mkgZRH3X1ruvof4aC7l4TntAY
x32vs/7F391jEHfqqdjqWNM5ufqmAm3ZfykShROk5xDdUvoRO1kXowQge6CvOukG
qoHreYgd+kTIn0RygbyXsBi9/wkTsROssqgWSEpgtUN+TKMQa25bb79oqwUPtAsc
v6S9PpyRkoEhjKkNxiNmR6cy89inE8wFcTyzzKMgXZ9OrUZGXJrTsXTRrXcNeYvJ
cyAQ+AyIQusT/ur+Gp109K81BzAhCjz903PhJUdGjcGF/ATiTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBN7B1CnG44+70/F5gC8Bs3rvtgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMjY1
YWY2MC1lNmUxLTQ2MTMtYjE1OS0zM2JjNjA1Mzg1MmEvOTIyNTE1ZjctMTM1Yi0z
NDEzLThjZDAtNzY2YjhhZTdhMjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDI2NWFmNjAtZTZlMS00NjEzLWIx
NTktMzNiYzYwNTM4NTJhLzAyNjVhZjYwLWU2ZTEtNDYxMy1iMTU5LTMzYmM2MDUz
ODUyYS5jcmwwHwYDVR0jBBgwFoAUzq0Q+c7m2tmdbeHCEIRCbYXyFVkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMjY1YWY2MC1lNmUxLTQ2MTMtYjE1OS0zM2Jj
NjA1Mzg1MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbH5o8nteidUKc8vufM1wfMwTzdNziMAJfNIQLwH6SJpGLXEEz4Z7zv
HAaejKymAKghzH5LuJblscPvClkkAKNEEaeVP+ps5ZVcv0/3Dr1rB+eoiNTTJFZX
FOpccwlyLf725bnnJuGPabD4fBNX14I2MtH1umGiDdtAmuSDeobs3MiIe5mK93xP
GF42iByqWdkmH94osl5K/M3sjkQ7TajLnOVqZQq9TMwgE3wnOdJSGzd1ac/Ok0WQ
OeDR7ZCMCzQO6QH5GsndVDrCDetjKSUVuncQjKAB5O10ZmjrbA0SPEgfLacfehQl
KWc1THPpxPw1Gbq/YfPNvQVrbETsVC8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:42:04 2025 by rpki-client