Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa
File:                     854709f1-c55c-3f5f-9469-3bea6718e5b4.roa (raw, json)
Hash identifier:          UU1dynhATnt6p6QBeQoC+o1tU4ddiIpmiJFDr+ryVCk=
Subject key identifier:   B6:C8:11:C7:97:37:61:18:4F:53:D5:45:7E:E6:15:99:46:35:9A:C6
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584BA0D2655290277E611D563100
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     26930
IP address blocks:        23.133.6.0/24 maxlen: 24
                          202.5.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:65:52:90:27:7e:61:1d:56:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=f385b2b6-d30b-4909-b42a-97f335dd278b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:f3:fe:d7:b2:22:71:27:83:ff:00:72:8d:
                    b5:b4:a8:e2:c3:c2:34:ec:b8:f2:5e:f8:07:e9:b2:
                    39:35:6c:5c:d7:c2:88:43:50:0d:0b:b1:eb:86:67:
                    0a:fc:cb:79:37:e9:b0:4d:85:03:81:df:fa:c4:de:
                    fc:92:60:59:a2:cc:f8:b0:15:30:e7:2c:b0:32:db:
                    40:7f:8d:91:c7:2b:8a:a0:45:32:5c:4c:5f:23:98:
                    90:7e:0c:82:e2:4c:31:43:12:6d:cb:24:36:75:b2:
                    62:65:c8:da:e8:72:b5:a1:df:c8:0d:8b:54:47:6a:
                    78:96:7c:91:60:fd:6f:8b:c5:0b:db:13:6c:76:66:
                    53:d6:df:46:1c:03:5b:58:1d:95:cf:87:7a:72:55:
                    4f:d1:04:5b:fe:01:98:55:cd:7b:45:a2:91:9e:04:
                    08:5d:9a:a0:74:a3:2e:27:f9:6f:b1:24:0b:67:43:
                    7c:72:23:26:fb:24:bc:be:c0:ca:4e:f5:14:09:8d:
                    16:25:60:2c:da:17:b4:7d:95:d6:a4:e7:b3:6a:b8:
                    cc:ab:b6:93:4e:6f:65:fc:fe:ab:1a:65:65:cb:16:
                    8d:65:78:e9:20:14:60:a4:89:01:9d:5f:6c:81:39:
                    b1:7c:f7:c9:85:74:d9:43:53:d0:cd:38:f9:6e:c0:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C8:11:C7:97:37:61:18:4F:53:D5:45:7E:E6:15:99:46:35:9A:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.6.0/24
                  202.5.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:96:bd:b3:7a:e2:fe:d6:ef:71:78:6d:a7:f6:30:38:c6:07:
         80:0a:9c:86:4f:a9:64:49:d9:7e:ce:03:f8:c2:f1:dc:a1:ba:
         12:74:af:48:52:0e:19:5b:03:48:52:c9:77:55:b6:3e:ba:7b:
         f3:d8:22:21:95:82:63:d3:f0:6d:19:cf:44:05:0a:1d:04:48:
         52:b7:13:07:f5:d9:5e:93:35:2d:8d:14:ff:1c:27:f5:e7:3b:
         94:a1:e8:8f:6d:ac:b0:d9:a8:83:10:05:11:0f:48:b7:14:e7:
         5b:a1:7e:aa:17:00:e1:5b:de:e6:ad:af:90:e0:ad:b9:e6:c4:
         71:a1:fc:73:d4:c1:52:17:6f:a5:43:b9:2e:91:e4:11:c9:52:
         9c:6c:92:d1:1a:f7:c1:39:33:75:b9:94:4c:b8:19:31:76:97:
         23:f9:6c:e4:e5:2a:92:04:3b:e4:0b:65:4a:12:80:43:fb:69:
         05:9b:05:ea:22:85:2e:93:c3:8e:4f:11:4a:34:92:2e:3b:67:
         fb:04:49:15:a1:65:c6:c9:79:dc:4d:c0:a8:10:6e:2c:dd:19:
         de:ac:31:9f:03:ce:1d:f0:e1:24:2e:06:8d:09:ff:ba:c9:0a:
         c8:db:87:3b:af:17:0b:45:9b:96:dd:b1:d6:4d:ae:35:f1:18:
         47:59:15:23
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEug0mVSkCd+YR1WMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3
NGJjMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk
ZjM4NWIyYjYtZDMwYi00OTA5LWI0MmEtOTdmMzM1ZGQyNzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRrz/teyInEng/8Aco21tKjiw8I07LjyXvgH
6bI5NWxc18KIQ1ANC7HrhmcK/Mt5N+mwTYUDgd/6xN78kmBZosz4sBUw5yywMttA
f42RxyuKoEUyXExfI5iQfgyC4kwxQxJtyyQ2dbJiZcja6HK1od/IDYtUR2p4lnyR
YP1vi8UL2xNsdmZT1t9GHANbWB2Vz4d6clVP0QRb/gGYVc17RaKRngQIXZqgdKMu
J/lvsSQLZ0N8ciMm+yS8vsDKTvUUCY0WJWAs2he0fZXWpOezarjMq7aTTm9l/P6r
GmVlyxaNZXjpIBRgpIkBnV9sgTmxfPfJhXTZQ1PQzTj5bsANrwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLbIEceXN2EYT1PVRX7mFZlGNZrGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2
NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvODU0NzA5ZjEtYzU1Yy0z
ZjVmLTk0NjktM2JlYTY3MThlNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm
MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl
NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5
NTdkZTc0YmMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4UGAwQA
ygUaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJqWvbN64v7W73F4baf2MDjGB4AKnIZPqWRJ2X7OA/jC8dyh
uhJ0r0hSDhlbA0hSyXdVtj66e/PYIiGVgmPT8G0Zz0QFCh0ESFK3Ewf12V6TNS2N
FP8cJ/XnO5Sh6I9trLDZqIMQBREPSLcU51uhfqoXAOFb3uatr5DgrbnmxHGh/HPU
wVIXb6VDuS6R5BHJUpxsktEa98E5M3W5lEy4GTF2lyP5bOTlKpIEO+QLZUoSgEP7
aQWbBeoihS6Tw45PEUo0ki47Z/sESRWhZcbJedxNwKgQbizdGd6sMZ8Dzh3w4SQu
Bo0J/7rJCsjbhzuvFwtFm5bdsdZNrjXxGEdZFSM=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:41:18 2025 by rpki-client