Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d746ae63-398e-335a-95e1-8d13ac476d9b.roa
File:                     d746ae63-398e-335a-95e1-8d13ac476d9b.roa (raw, json)
Hash identifier:          tfdrNeANIlCKv3gKW+cUEcWlraDN664ebCvD9tKqyIQ=
Subject key identifier:   55:CE:B7:D9:39:50:FF:F6:96:3F:D8:B1:1A:A9:A7:37:BA:9B:F4:29
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584BBB7590A756FE890752DA1240
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d746ae63-398e-335a-95e1-8d13ac476d9b.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     7018
IP address blocks:        69.91.129.0/24 maxlen: 24
                          69.91.133.0/24 maxlen: 24
                          69.91.137.0/24 maxlen: 24
                          69.91.141.0/24 maxlen: 24
                          69.91.145.0/24 maxlen: 24
                          69.91.153.0/24 maxlen: 24
                          69.91.157.0/24 maxlen: 24
                          69.91.161.0/24 maxlen: 24
                          69.91.165.0/24 maxlen: 24
                          69.91.169.0/24 maxlen: 24
                          69.91.173.0/24 maxlen: 24
                          69.91.177.0/24 maxlen: 24
                          69.91.181.0/24 maxlen: 24
                          69.91.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:90:a7:56:fe:89:07:52:da:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=00bee6d5-4e9d-476f-9335-1ff986003d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:b4:16:46:68:e5:b2:17:bf:bd:3f:a8:7c:
                    e9:d8:69:96:2c:0c:32:86:ea:04:7e:34:5a:aa:85:
                    e4:12:e4:ae:7f:ed:85:61:68:e4:cf:36:ea:ff:c6:
                    44:59:44:83:b3:e5:73:2f:14:b8:60:34:b2:8d:bc:
                    80:05:ce:6c:98:fa:1b:07:49:d5:cd:85:67:4f:35:
                    56:82:d0:78:21:51:3e:2f:ae:d6:1b:d1:70:73:5b:
                    4f:ac:b4:3c:c0:5f:b9:ec:c3:08:3d:b7:6f:23:d8:
                    ef:ff:17:e4:59:06:65:61:fb:37:67:65:69:09:0a:
                    f4:3e:ad:68:d0:8e:11:db:7a:a8:4f:fe:4e:50:c8:
                    e7:f0:a2:cb:0a:68:85:31:cd:a6:dd:96:cd:e2:07:
                    c7:9f:a0:55:3a:9b:0e:17:71:e9:1d:16:25:59:a6:
                    67:42:a1:61:70:89:eb:84:e1:77:f3:fa:3e:46:1e:
                    46:be:f0:ef:93:78:69:48:78:13:c2:7a:16:b5:c1:
                    02:d5:93:3c:e0:22:63:d0:43:e6:96:9b:03:ef:3a:
                    f1:7c:c4:e6:9d:a7:db:98:16:9b:7a:9c:19:75:e8:
                    92:4a:2c:d7:fa:c1:fd:b4:fd:43:9d:cf:e4:0d:27:
                    f3:14:54:9f:7a:23:f5:b4:ce:87:ed:83:73:bf:4f:
                    f0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CE:B7:D9:39:50:FF:F6:96:3F:D8:B1:1A:A9:A7:37:BA:9B:F4:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d746ae63-398e-335a-95e1-8d13ac476d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.91.129.0/24
                  69.91.133.0/24
                  69.91.137.0/24
                  69.91.141.0/24
                  69.91.145.0/24
                  69.91.153.0/24
                  69.91.157.0/24
                  69.91.161.0/24
                  69.91.165.0/24
                  69.91.169.0/24
                  69.91.173.0/24
                  69.91.177.0/24
                  69.91.181.0/24
                  69.91.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ee:41:ac:99:0d:e0:51:05:e4:c3:22:59:d8:6d:d8:09:16:
         db:e8:3b:03:c8:9f:3c:ae:a1:6f:5e:71:4f:d4:88:8c:ee:b0:
         d2:2a:5e:a3:65:0d:36:85:ac:f4:96:12:a2:4b:54:49:04:31:
         63:91:28:20:b3:40:47:ad:1a:ee:d2:b8:5f:0a:a0:7f:9e:01:
         f6:7c:1b:1a:b6:c0:02:d2:9f:e0:7d:34:0a:76:89:51:08:2b:
         84:0d:30:01:b1:7a:d3:f9:f5:f5:82:39:b2:c9:8f:31:97:fb:
         05:50:36:c0:cd:0a:c4:8a:64:3f:91:28:03:34:4d:7a:96:96:
         a4:2e:ef:d5:28:41:51:49:70:ff:ed:e8:e6:ca:3b:75:9c:52:
         b2:ac:21:17:64:4a:ce:e6:6b:b0:87:70:38:de:2a:b5:35:83:
         62:81:3a:66:98:12:c9:f6:9c:8c:d3:4e:f4:4b:53:b9:ea:3d:
         65:ac:47:85:db:6c:1c:5e:63:1c:9c:c3:64:9c:ef:be:0f:bb:
         ee:c7:6d:29:77:31:90:8b:ef:32:43:8e:52:ac:d5:b2:a7:3d:
         4d:20:27:61:f3:4c:e2:c2:7d:c6:b3:8d:68:cf:82:7b:6a:bc:
         b1:68:33:88:76:be:b3:22:1d:af:65:41:3e:5a:08:ce:2f:67:
         09:c0:77:6e
-----BEGIN CERTIFICATE-----
MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWEu7dZCnVv6JB1LaEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk
MDBiZWU2ZDUtNGU5ZC00NzZmLTkzMzUtMWZmOTg2MDAzZDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvde0FkZo5bIXv70/qHzp2GmWLAwyhuoEfjRa
qoXkEuSuf+2FYWjkzzbq/8ZEWUSDs+VzLxS4YDSyjbyABc5smPobB0nVzYVnTzVW
gtB4IVE+L67WG9Fwc1tPrLQ8wF+57MMIPbdvI9jv/xfkWQZlYfs3Z2VpCQr0Pq1o
0I4R23qoT/5OUMjn8KLLCmiFMc2m3ZbN4gfHn6BVOpsOF3HpHRYlWaZnQqFhcInr
hOF38/o+Rh5GvvDvk3hpSHgTwnoWtcEC1ZM84CJj0EPmlpsD7zrxfMTmnafbmBab
epwZdeiSSizX+sH9tP1Dnc/kDSfzFFSfeiP1tM6H7YNzv0/w1wIDAQABo4IDozCC
A58wHQYDVR0OBBYEFFXOt9k5UP/2lj/YsRqppze6m/QpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDc0NmFlNjMtMzk4ZS0z
MzVhLTk1ZTEtOGQxM2FjNDc2ZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQARVuBAwQA
RVuFAwQARVuJAwQARVuNAwQARVuRAwQARVuZAwQARVudAwQARVuhAwQARVulAwQA
RVupAwQARVutAwQARVuxAwQARVu1AwQARVu9MFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAjuQayZDeBRBeTD
IlnYbdgJFtvoOwPInzyuoW9ecU/UiIzusNIqXqNlDTaFrPSWEqJLVEkEMWORKCCz
QEetGu7SuF8KoH+eAfZ8Gxq2wALSn+B9NAp2iVEIK4QNMAGxetP59fWCObLJjzGX
+wVQNsDNCsSKZD+RKAM0TXqWlqQu79UoQVFJcP/t6ObKO3WcUrKsIRdkSs7ma7CH
cDjeKrU1g2KBOmaYEsn2nIzTTvRLU7nqPWWsR4XbbBxeYxycw2Sc774Pu+7HbSl3
MZCL7zJDjlKs1bKnPU0gJ2HzTOLCfcazjWjPgntqvLFoM4h2vrMiHa9lQT5aCM4v
ZwnAd24=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:23 2025 by rpki-client