Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/32c228e9-b2c7-3e67-80df-a033364558c9.roa
File:                     32c228e9-b2c7-3e67-80df-a033364558c9.roa (raw, json)
Hash identifier:          eMHQMp6DgiLXqn9l5epwsPQhzPbev1WUOGhfGX8wVeA=
Subject key identifier:   2B:66:7D:33:1E:8A:36:0D:11:35:91:6D:62:02:16:7F:F0:DA:59:CA
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584BBA10346A5F108B3A43359900
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/32c228e9-b2c7-3e67-80df-a033364558c9.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     37277
IP address blocks:        69.28.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:34:6a:5f:10:8b:3a:43:35:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=d0814ffc-8782-4ada-a65e-612a2a59d50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:e8:5f:41:bd:7f:ec:27:88:dd:06:95:dc:
                    db:53:cd:fc:c8:0c:50:a0:a5:a7:6a:0f:39:02:7d:
                    ed:7d:27:43:97:76:1d:52:a6:f0:05:21:09:ea:72:
                    50:1f:98:60:54:5c:d8:13:aa:ff:00:8a:2c:fa:fb:
                    8c:04:24:19:fe:78:b9:8d:00:cf:22:eb:bd:ac:0c:
                    29:2a:e3:e4:f9:ac:06:15:65:22:76:25:65:97:1c:
                    98:b3:12:ac:eb:77:61:1d:de:77:3f:7b:2d:46:a4:
                    c5:70:bc:03:ae:73:5d:32:a9:4c:e6:d1:11:91:23:
                    da:b5:0f:6e:ec:ea:4a:e9:35:03:ef:4c:1e:c8:67:
                    9b:5e:3f:1f:25:f8:35:e4:e1:eb:ff:4b:4b:f7:a7:
                    d5:02:53:ed:83:1d:83:bd:0d:d2:97:61:7f:78:e5:
                    5c:b2:a0:4c:5c:e4:42:14:91:83:c2:ed:22:03:5b:
                    80:7b:41:3a:b6:fa:3f:0e:85:1e:6b:b7:58:f2:41:
                    0a:4e:e7:46:0e:46:34:1a:ea:31:43:6b:c8:7e:a7:
                    36:f5:7e:c7:7c:b2:1a:61:3b:10:1b:35:d1:ca:2f:
                    1e:0a:fe:58:bc:9c:94:ab:bd:e6:fa:43:fd:ed:75:
                    d5:57:ad:2a:64:4f:d4:dc:40:35:35:5f:b5:db:0a:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:66:7D:33:1E:8A:36:0D:11:35:91:6D:62:02:16:7F:F0:DA:59:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/32c228e9-b2c7-3e67-80df-a033364558c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.28.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:95:0d:22:11:dc:02:97:17:27:04:15:76:be:7d:10:a9:a1:
         dc:0f:36:9b:fb:77:68:01:cf:21:10:3d:e3:32:64:89:19:4c:
         d0:43:43:59:4c:bd:42:73:3a:dd:c8:e7:bf:b8:77:6a:5e:2a:
         a0:af:b3:1e:24:c2:e5:b8:24:85:70:62:45:dd:91:40:5b:dc:
         4a:63:fa:56:9d:06:8d:8d:50:e4:d9:c1:c5:c7:26:8f:93:72:
         86:76:b1:15:17:fe:6c:54:15:d4:4a:6b:4d:02:c1:fd:fb:56:
         68:e1:35:8d:6f:1c:bd:aa:b9:64:63:63:56:f1:da:a8:84:dc:
         c1:61:21:4c:e3:a0:9c:40:f9:d2:fa:ad:13:fe:64:f1:82:9e:
         b3:38:12:5c:c4:de:59:97:f8:5a:41:4e:c3:65:a0:de:e6:a6:
         c8:97:7f:34:f5:09:c3:5c:85:b0:e3:94:1b:91:eb:8e:bc:0a:
         33:fa:45:77:ec:d3:7b:04:d6:8a:2f:2c:7a:92:7a:81:88:9f:
         93:44:81:31:37:e8:3b:e8:b5:72:40:86:33:15:8b:84:0a:13:
         55:2d:2f:4e:86:4f:3b:f0:52:d8:c6:d2:f3:28:81:f0:38:15:
         a6:c2:40:6d:d2:aa:a9:5a:a6:0b:52:5a:95:33:b5:11:85:c0:
         03:fe:a8:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDRqXxCLOkM1mQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk
ZDA4MTRmZmMtODc4Mi00YWRhLWE2NWUtNjEyYTJhNTlkNTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz/oX0G9f+wniN0GldzbU838yAxQoKWnag85
An3tfSdDl3YdUqbwBSEJ6nJQH5hgVFzYE6r/AIos+vuMBCQZ/ni5jQDPIuu9rAwp
KuPk+awGFWUidiVllxyYsxKs63dhHd53P3stRqTFcLwDrnNdMqlM5tERkSPatQ9u
7OpK6TUD70weyGebXj8fJfg15OHr/0tL96fVAlPtgx2DvQ3Sl2F/eOVcsqBMXORC
FJGDwu0iA1uAe0E6tvo/DoUea7dY8kEKTudGDkY0GuoxQ2vIfqc29X7HfLIaYTsQ
GzXRyi8eCv5YvJyUq73m+kP97XXVV60qZE/U3EA1NV+12wp7UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCtmfTMeijYNETWRbWICFn/w2lnKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvMzJjMjI4ZTktYjJjNy0z
ZTY3LTgwZGYtYTAzMzM2NDU1OGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRyPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGVDSIR3AKXFycEFXa+fRCpodwPNpv7d2gBzyEQPeMyZIkZTNBDQ1lM
vUJzOt3I57+4d2peKqCvsx4kwuW4JIVwYkXdkUBb3Epj+ladBo2NUOTZwcXHJo+T
coZ2sRUX/mxUFdRKa00Cwf37VmjhNY1vHL2quWRjY1bx2qiE3MFhIUzjoJxA+dL6
rRP+ZPGCnrM4ElzE3lmX+FpBTsNloN7mpsiXfzT1CcNchbDjlBuR6468CjP6RXfs
03sE1oovLHqSeoGIn5NEgTE36DvotXJAhjMVi4QKE1UtL06GTzvwUtjG0vMogfA4
FabCQG3SqqlapgtSWpUztRGFwAP+qA8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:08:37 2025 by rpki-client