Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/73691726-2b71-3c13-8f40-33360fe608ad.roa
File:                     73691726-2b71-3c13-8f40-33360fe608ad.roa (raw, json)
Hash identifier:          YxmSs9rvXTG4XveZJQtaVkXV7ngex0hR9VTQ0Af/V5I=
Subject key identifier:   B5:8B:75:C0:E7:B4:BD:BE:79:AF:05:AA:AE:9C:12:A6:4D:A0:19:76
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F4328584BB2F7CCCD4F07D1AB33A66600
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/73691726-2b71-3c13-8f40-33360fe608ad.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     3755
IP address blocks:        199.109.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:cc:cd:4f:07:d1:ab:33:a6:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=f7569d17-72bf-47f8-952b-8d3957962fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:59:9c:fe:5e:89:60:dd:44:a4:18:2c:c0:29:
                    47:88:3e:55:ab:6a:61:e8:4b:cc:c4:ba:e2:be:78:
                    cb:04:62:bd:0a:06:43:a7:95:bb:fd:76:db:a6:10:
                    80:05:b0:40:09:60:13:12:2e:31:1d:91:2a:2d:6a:
                    99:a8:f1:65:d2:33:78:7d:c1:ef:ca:41:56:5d:f2:
                    71:06:9d:7c:33:ec:a1:75:ba:cc:0f:9e:46:44:34:
                    00:aa:fa:88:22:8d:c1:c6:25:70:2c:fd:d2:e2:f8:
                    8a:62:1a:f2:b4:1b:52:6f:fd:4a:25:2c:2f:e7:91:
                    92:26:e1:8a:f0:f5:34:7b:70:20:19:44:cf:0e:c2:
                    55:a3:7c:9a:0c:0c:9c:a7:2a:de:5c:71:2a:35:6a:
                    dc:18:c3:b6:5a:25:5d:e7:f4:b9:34:9c:2d:d0:a4:
                    8d:09:9b:6e:31:b3:7b:43:f4:e9:3d:e2:4f:fd:54:
                    a7:39:68:07:e9:77:a2:5f:ff:7c:c2:a8:66:f6:0d:
                    c3:e9:d0:b0:27:42:30:70:64:d7:5f:9d:38:1a:27:
                    ec:95:09:cc:e3:bc:9e:e5:47:ec:52:4d:92:f0:aa:
                    7d:4c:54:bb:73:4b:0d:0b:49:54:02:17:e8:e9:ca:
                    d4:08:38:33:ae:92:c4:05:43:72:ec:b6:08:ef:ec:
                    29:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8B:75:C0:E7:B4:BD:BE:79:AF:05:AA:AE:9C:12:A6:4D:A0:19:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/73691726-2b71-3c13-8f40-33360fe608ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:60:09:60:ce:2f:c4:5e:75:9b:eb:02:0c:95:b1:e6:11:20:
         e1:43:ca:3a:54:99:6f:c2:8b:4c:9e:4a:06:bb:5f:3e:c3:dc:
         f1:d3:95:81:79:e2:62:ec:0a:7c:13:d9:df:ca:6d:5d:ce:d8:
         d3:a1:4e:70:b3:4e:25:da:a9:e2:e0:07:39:14:6c:14:dc:c7:
         1b:32:5b:b9:9f:91:b9:f6:1c:c6:58:39:74:f9:e7:8f:58:f5:
         34:bf:98:98:65:bf:cb:c4:92:94:cd:bf:d0:82:c6:f2:37:8d:
         81:3e:a8:7d:80:f2:e4:45:da:f5:19:26:36:2c:fe:4c:09:3c:
         24:ca:48:32:e8:91:9d:df:dc:21:a1:95:46:3e:e2:94:3c:f4:
         8e:6d:b0:de:35:cc:d3:26:b2:4a:a7:40:24:14:69:e2:cd:1c:
         b6:d9:9c:21:df:f3:b3:7f:b3:9d:8f:21:6a:1b:d3:41:35:3b:
         76:3d:22:75:11:e7:55:8c:eb:f1:e1:88:0f:8d:cd:5e:5b:c7:
         33:e5:0c:c0:4d:a9:6c:3b:1a:8e:f3:d0:00:34:8f:03:a4:cc:
         18:f8:24:f5:50:54:b1:74:01:46:8c:fe:26:00:87:09:67:37:
         70:59:3c:b7:e5:18:8c:1d:5a:27:06:d2:3f:aa:91:f8:df:e3:
         0a:03:38:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98zNTwfRqzOmZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz
ODdjMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
Zjc1NjlkMTctNzJiZi00N2Y4LTk1MmItOGQzOTU3OTYyZmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lmc/l6JYN1EpBgswClHiD5Vq2ph6EvMxLri
vnjLBGK9CgZDp5W7/XbbphCABbBACWATEi4xHZEqLWqZqPFl0jN4fcHvykFWXfJx
Bp18M+yhdbrMD55GRDQAqvqIIo3BxiVwLP3S4viKYhrytBtSb/1KJSwv55GSJuGK
8PU0e3AgGUTPDsJVo3yaDAycpyreXHEqNWrcGMO2WiVd5/S5NJwt0KSNCZtuMbN7
Q/TpPeJP/VSnOWgH6XeiX/98wqhm9g3D6dCwJ0IwcGTXX504GifslQnM47ye5Ufs
Uk2S8Kp9TFS7c0sNC0lUAhfo6crUCDgzrpLEBUNy7LYI7+wp/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWLdcDntL2+ea8Fqq6cEqZNoBl2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm
NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvNzM2OTE3MjYtMmI3MS0z
YzEzLThmNDAtMzMzNjBmZTYwOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0
ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4
Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy
OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdgCWDOL8RedZvrAgyVseYRIOFDyjpUmW/Ci0yeSga7Xz7D3PHTlYF5
4mLsCnwT2d/KbV3O2NOhTnCzTiXaqeLgBzkUbBTcxxsyW7mfkbn2HMZYOXT5549Y
9TS/mJhlv8vEkpTNv9CCxvI3jYE+qH2A8uRF2vUZJjYs/kwJPCTKSDLokZ3f3CGh
lUY+4pQ89I5tsN41zNMmskqnQCQUaeLNHLbZnCHf87N/s52PIWob00E1O3Y9InUR
51WM6/HhiA+NzV5bxzPlDMBNqWw7Go7z0AA0jwOkzBj4JPVQVLF0AUaM/iYAhwln
N3BZPLflGIwdWicG0j+qkfjf4woDON8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:19:23 2025 by rpki-client