Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d982cd8e-149a-3220-a91f-730be36c1624.roa
File:                     d982cd8e-149a-3220-a91f-730be36c1624.roa (raw, json)
Hash identifier:          yf54z/xORlduAes+750BXFgingbLxU3RhFGwxqJUG8s=
Subject key identifier:   AE:FC:66:49:E7:52:38:28:39:15:FE:94:6C:63:FC:A7:4D:BB:DA:C1
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CE9EA4CB257D7954E6420
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d982cd8e-149a-3220-a91f-730be36c1624.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        136.226.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:e9:ea:4c:b2:57:d7:95:4e:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=0942ab0e-df26-41a6-9cde-6e6ad2b8d644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:55:8d:0a:20:2e:fc:e2:fc:ea:66:e6:0c:
                    05:b7:ec:cc:71:ca:ab:d9:8a:b1:9e:f4:8e:ee:37:
                    07:c5:4b:f1:7a:6f:6b:b6:0c:d4:4c:7e:64:fc:41:
                    f0:73:e7:1e:d1:56:77:2c:3f:c8:1b:d5:05:ea:4b:
                    88:cd:a8:29:2e:1c:db:21:eb:0d:ce:10:3f:5e:ce:
                    cf:c9:1c:85:8d:5c:f8:10:00:0a:55:d2:49:f4:10:
                    02:cf:02:59:17:d3:e4:d2:41:05:76:5c:cd:44:52:
                    0b:bf:60:0d:40:4e:6a:aa:20:b6:ec:f2:de:3c:6d:
                    32:18:1b:8a:85:f3:a2:9f:4b:04:89:d6:3d:bf:a3:
                    b9:e0:2d:b8:a0:83:fc:74:b9:01:b4:de:c9:fa:6a:
                    ed:cf:c4:bd:73:f6:11:32:80:82:4c:aa:7a:ab:46:
                    e2:1c:4f:4e:57:08:c3:b6:33:49:be:a4:62:84:92:
                    82:ae:69:7e:71:6b:ac:e1:8e:8f:7b:a0:91:8a:4b:
                    94:ed:59:d1:5e:54:e1:33:d8:22:fb:27:b4:0a:d7:
                    c2:4b:03:10:a3:8b:2a:f1:47:fe:00:5b:1c:16:e0:
                    61:ea:f8:ae:ac:bd:fe:ef:a2:78:59:4a:71:1c:41:
                    03:98:21:02:41:e4:8b:43:63:78:93:92:70:1c:01:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FC:66:49:E7:52:38:28:39:15:FE:94:6C:63:FC:A7:4D:BB:DA:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d982cd8e-149a-3220-a91f-730be36c1624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f9:1c:7b:e5:5a:c3:39:7f:03:05:21:49:11:b9:a1:b9:64:
         0a:f5:4f:e9:61:94:e6:3c:08:68:10:67:bb:19:fe:3c:f5:23:
         6a:a2:16:1a:57:a2:23:e1:85:86:d0:94:d1:b8:6c:47:08:f5:
         b8:fa:9e:e4:e2:b3:86:47:bc:07:b1:ea:d8:f7:66:be:2e:07:
         a9:81:c2:77:6a:ae:5e:7a:e0:f2:87:08:d5:c5:67:51:80:bc:
         9f:ca:14:81:f4:4a:77:49:2d:be:31:f1:87:20:97:63:f5:77:
         71:c5:f5:5b:0c:50:6e:04:92:33:5b:1b:87:61:9f:e5:ab:48:
         c5:d7:08:d2:0e:f2:9d:d6:79:c3:eb:cc:5a:c1:e9:30:26:37:
         19:5e:29:43:98:d0:26:17:03:d2:2d:9b:d6:41:d8:f6:d4:43:
         1c:6b:89:86:5c:9a:30:dd:14:3a:a7:55:dd:30:70:12:5d:4c:
         8b:6a:19:a9:ee:07:f9:67:cb:b3:0d:f8:96:0e:c2:b6:61:99:
         a5:10:e5:bb:c9:1b:a7:45:48:a7:c8:f3:d8:9b:e5:75:d1:b5:
         ed:4f:ac:45:e9:42:21:a1:bd:ad:62:fe:99:d0:1c:1b:14:6c:
         ae:f2:48:89:bd:93:6c:f4:55:aa:54:4f:47:5e:49:99:68:04:
         38:3f:72:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOnqTLJX15VOZCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk
MDk0MmFiMGUtZGYyNi00MWE2LTljZGUtNmU2YWQyYjhkNjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppRVjQogLvzi/Opm5gwFt+zMccqr2YqxnvSO
7jcHxUvxem9rtgzUTH5k/EHwc+ce0VZ3LD/IG9UF6kuIzagpLhzbIesNzhA/Xs7P
yRyFjVz4EAAKVdJJ9BACzwJZF9Pk0kEFdlzNRFILv2ANQE5qqiC27PLePG0yGBuK
hfOin0sEidY9v6O54C24oIP8dLkBtN7J+mrtz8S9c/YRMoCCTKp6q0biHE9OVwjD
tjNJvqRihJKCrml+cWus4Y6Pe6CRikuU7VnRXlThM9gi+ye0CtfCSwMQo4sq8Uf+
AFscFuBh6viurL3+76J4WUpxHEEDmCECQeSLQ2N4k5JwHAFr4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK78ZknnUjgoORX+lGxj/KdNu9rBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDk4MmNkOGUtMTQ5YS0z
MjIwLWE5MWYtNzMwYmUzNmMxNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOISMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAz5HHvlWsM5fwMFIUkRuaG5ZAr1T+lhlOY8CGgQZ7sZ/jz1I2qiFhpX
oiPhhYbQlNG4bEcI9bj6nuTis4ZHvAex6tj3Zr4uB6mBwndqrl564PKHCNXFZ1GA
vJ/KFIH0SndJLb4x8Ycgl2P1d3HF9VsMUG4EkjNbG4dhn+WrSMXXCNIO8p3WecPr
zFrB6TAmNxleKUOY0CYXA9Itm9ZB2PbUQxxriYZcmjDdFDqnVd0wcBJdTItqGanu
B/lny7MN+JYOwrZhmaUQ5bvJG6dFSKfI89ib5XXRte1PrEXpQiGhva1i/pnQHBsU
bK7ySIm9k2z0VapUT0deSZloBDg/cvU=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:02:02 2025 by rpki-client