Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f513d71c-8f60-33be-bd78-41b06d433626.roa
File:                     f513d71c-8f60-33be-bd78-41b06d433626.roa (raw, json)
Hash identifier:          myioe/yyoWvkPBqupHSkxCA74lg+u6CUEasL7LtQVIQ=
Subject key identifier:   54:4E:83:80:B0:8F:A7:04:3D:2E:CE:09:B8:97:A5:06:A2:E8:9F:68
Certificate issuer:       /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial:       010D0C9F4328584BB2F7A84D9B5356A24F766F04
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f513d71c-8f60-33be-bd78-41b06d433626.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     40501
IP address blocks:        216.235.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:a8:4d:9b:53:56:a2:4f:76:6f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=504b1120-d6a6-4d63-840f-2e00adc3f4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0f:c9:47:64:26:28:09:18:e5:e4:b0:36:25:
                    0c:ce:24:cb:d7:fe:f3:b2:5c:bd:af:70:dc:0f:75:
                    cc:bd:d9:63:64:d4:59:58:6c:bb:fc:2a:cb:7d:67:
                    35:45:6c:c8:33:17:c5:00:c2:51:2a:c7:09:d9:a6:
                    3a:b6:cc:99:5f:62:f5:44:63:6a:42:5f:b7:ba:6b:
                    0a:02:36:be:7c:63:b1:b2:be:d5:93:e1:61:28:38:
                    03:7d:08:dd:6a:97:9f:4b:7d:71:2a:3f:ef:d3:e9:
                    16:01:aa:d9:43:39:6c:3e:c8:15:92:e5:4d:11:6a:
                    1b:60:35:23:33:16:e7:3a:2e:d5:fb:55:5b:71:6e:
                    41:82:cf:e3:e0:f9:2b:63:99:d1:fa:56:08:e3:fc:
                    78:80:2d:ce:45:9b:08:51:f7:f1:3b:5d:19:3b:75:
                    ea:0a:1a:c1:83:de:0b:65:5b:25:d2:38:3d:75:8b:
                    36:3e:a4:ae:e9:e9:a3:78:0e:f4:6a:55:86:1f:46:
                    7f:92:cb:ba:55:a7:3b:36:cb:06:53:4f:87:36:48:
                    94:c8:e7:af:4a:10:db:8c:19:fe:d7:22:cd:98:36:
                    cd:75:14:05:95:29:06:10:54:e9:ec:30:52:6e:f9:
                    14:0d:8e:5b:c9:4d:86:94:91:a4:be:0f:69:5d:3d:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4E:83:80:B0:8F:A7:04:3D:2E:CE:09:B8:97:A5:06:A2:E8:9F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f513d71c-8f60-33be-bd78-41b06d433626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl

            X509v3 Authority Key Identifier:
                keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1d:9c:c0:42:2b:19:e2:ab:dd:a1:80:e7:1e:1a:b9:05:53:
         64:b9:8f:0e:04:a3:df:ad:ed:63:45:41:7a:0c:6a:2a:3a:3f:
         b6:30:cc:26:2e:e3:de:e3:d3:a4:80:6b:1a:5b:f9:eb:24:4f:
         c0:32:f7:47:4b:27:41:c2:06:4e:68:d6:50:ac:04:73:e7:2c:
         3f:58:8c:c7:2e:0e:86:33:92:75:16:32:1c:35:24:8f:90:b3:
         1c:c9:2c:7d:86:d6:a8:ae:a8:82:86:f8:03:ed:d6:a2:b4:9a:
         26:ae:38:01:23:5b:03:bc:90:94:ee:de:63:24:f0:8e:33:e7:
         9e:b6:26:c2:43:97:fa:b6:ff:6f:91:bf:bb:5d:cf:2c:df:5e:
         85:83:67:2c:1b:ed:c1:16:94:23:e6:6b:37:fb:4b:90:ac:45:
         e0:d6:26:25:b8:33:d2:8e:cf:07:6f:d4:17:be:4f:96:6b:56:
         ac:95:fb:d0:c7:08:80:ac:9d:70:d9:5a:6a:31:73:cd:6e:c7:
         a5:05:d7:7a:9a:a7:65:2e:25:13:ec:53:dd:fc:7f:24:ec:fc:
         4d:9d:e7:33:92:0b:35:10:fb:3c:41:17:11:e4:6f:22:25:d5:
         82:31:0b:e3:b9:fd:ec:0a:2b:2b:3e:72:7b:e7:13:75:e5:38:
         4e:a7:ec:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96hNm1NWok92bwQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRkMzQ0MTEtMjM1ZC00ZGJlLThhOWMtZjJkYzExZDc1
NTY2MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
NTA0YjExMjAtZDZhNi00ZDYzLTg0MGYtMmUwMGFkYzNmNGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw/JR2QmKAkY5eSwNiUMziTL1/7zsly9r3Dc
D3XMvdljZNRZWGy7/CrLfWc1RWzIMxfFAMJRKscJ2aY6tsyZX2L1RGNqQl+3umsK
Aja+fGOxsr7Vk+FhKDgDfQjdapefS31xKj/v0+kWAarZQzlsPsgVkuVNEWobYDUj
MxbnOi7V+1VbcW5Bgs/j4PkrY5nR+lYI4/x4gC3ORZsIUffxO10ZO3XqChrBg94L
ZVsl0jg9dYs2PqSu6emjeA70alWGH0Z/ksu6Vac7NssGU0+HNkiUyOevShDbjBn+
1yLNmDbNdRQFlSkGEFTp7DBSbvkUDY5byU2GlJGkvg9pXT3KfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFROg4Cwj6cEPS7OCbiXpQai6J9oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQz
NDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRjMTFkNzU1NjYvZjUxM2Q3MWMtOGY2MC0z
M2JlLWJkNzgtNDFiMDZkNDMzNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjRkMzQ0MTEtMjM1ZC00ZGJlLThh
OWMtZjJkYzExZDc1NTY2L2Y0ZDM0NDExLTIzNWQtNGRiZS04YTljLWYyZGMxMWQ3
NTU2Ni5jcmwwHwYDVR0jBBgwFoAU1gky9BKV+ISXC+5uyq+8ckes3QowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNGQzNDQxMS0yMzVkLTRkYmUtOGE5Yy1mMmRj
MTFkNzU1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OtSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4dnMBCKxniq92hgOceGrkFU2S5jw4Eo9+t7WNFQXoMaio6P7YwzCYu
497j06SAaxpb+eskT8Ay90dLJ0HCBk5o1lCsBHPnLD9YjMcuDoYzknUWMhw1JI+Q
sxzJLH2G1qiuqIKG+APt1qK0miauOAEjWwO8kJTu3mMk8I4z5562JsJDl/q2/2+R
v7tdzyzfXoWDZywb7cEWlCPmazf7S5CsReDWJiW4M9KOzwdv1Be+T5ZrVqyV+9DH
CICsnXDZWmoxc81ux6UF13qap2UuJRPsU938fyTs/E2d5zOSCzUQ+zxBFxHkbyIl
1YIxC+O5/ewKKys+cnvnE3XlOE6n7J0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:36:08 2025 by rpki-client