Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/591868d1-442c-3020-a90b-c97ab7b8d284.roa
File:                     591868d1-442c-3020-a90b-c97ab7b8d284.roa (raw, json)
Hash identifier:          TQNoroVyh/ioY3ivM7NsH1WZEO3KqSlii45Q8LmwwSg=
Subject key identifier:   0E:59:6D:B9:AC:2F:BF:A8:D8:11:63:6B:0F:CE:10:77:C3:D5:B7:10
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BA7CCF3B64BC6888D0ED70C80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/591868d1-442c-3020-a90b-c97ab7b8d284.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     23235
IP address blocks:        209.249.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:f3:b6:4b:c6:88:8d:0e:d7:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=5751d47d-0125-427d-ac6f-1b7bce66437c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:00:9e:d1:ec:63:d9:43:96:6b:9b:e6:7d:
                    18:bb:b3:c9:80:d9:b9:a5:47:f6:1b:4b:43:c2:d0:
                    8f:7e:99:65:6f:0a:85:02:cd:6c:ef:08:d5:eb:1d:
                    8d:22:d9:10:a9:15:06:34:bd:54:25:41:1d:64:a6:
                    4e:27:74:96:09:47:f0:09:eb:e7:4c:66:4d:f5:db:
                    8d:e6:47:bc:d9:32:45:54:9a:0c:d1:a9:34:d7:26:
                    c3:a2:9c:02:f2:9a:2a:64:6f:ec:09:db:fc:f7:b6:
                    cd:d1:a9:78:9f:9f:fd:80:cf:1d:40:a3:ea:79:2e:
                    c9:a8:02:50:f4:6b:ce:ac:e5:41:2a:10:f9:5a:17:
                    8e:ce:f1:d1:c7:90:be:18:7b:e1:47:b5:98:fb:6a:
                    8e:aa:3f:53:76:d9:84:31:51:a0:89:14:a8:15:e1:
                    fd:c4:97:1a:2a:66:31:09:74:7e:af:eb:38:ef:33:
                    99:77:2b:67:af:1f:94:a5:cf:80:4a:dc:c2:df:53:
                    44:7f:b8:af:bd:8a:17:ff:ce:68:c1:b0:cc:fd:9e:
                    d9:ac:9c:ea:4f:f9:ae:af:fb:71:cf:73:fc:42:28:
                    d3:3a:b7:a3:ca:01:bd:2e:81:c4:e2:e5:ba:aa:a6:
                    d3:7b:f2:c2:eb:33:ec:ef:ba:b2:f0:20:c8:9f:e3:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:59:6D:B9:AC:2F:BF:A8:D8:11:63:6B:0F:CE:10:77:C3:D5:B7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/591868d1-442c-3020-a90b-c97ab7b8d284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:27:6e:db:94:3d:ea:8a:d2:99:b7:48:0b:35:99:d1:11:b4:
         53:0c:4b:e2:5d:bd:d2:a1:8f:e1:e6:1d:d6:54:82:1b:8c:4d:
         16:5b:3b:0d:a7:e1:97:90:31:5b:95:29:cd:75:28:9a:f9:a0:
         bc:27:54:c8:ff:41:98:92:35:4c:c4:00:72:e4:60:bc:73:7f:
         fb:55:df:e2:7f:09:f4:97:7a:b8:7d:18:71:79:12:51:9b:8b:
         b0:b6:80:80:45:8d:8a:e5:e3:dc:7e:c4:88:89:9e:80:ce:4a:
         8a:41:ed:aa:10:4b:9a:8c:37:7f:a6:ef:75:84:7a:63:a4:43:
         11:80:9f:ee:f8:01:9b:b7:f2:77:2b:c9:05:c9:08:95:22:8b:
         9f:c9:46:85:ad:e4:45:32:7f:10:77:01:fb:ea:ee:36:c6:8e:
         3e:49:93:02:19:ce:9e:07:2f:02:8f:3c:29:fc:42:43:d9:e4:
         38:4d:fe:8d:7e:7f:6d:c6:c9:bf:b4:43:56:dc:d6:b0:c3:41:
         80:72:c5:7b:18:d0:52:3e:58:9d:45:bc:29:cb:c3:70:d6:53:
         2d:12:58:98:f1:1e:3d:3b:35:6a:e7:5b:f5:fb:88:e8:ad:2b:
         4a:fa:5f:52:b7:7e:46:3f:ea:70:bd:14:53:d2:dc:a3:1f:45:
         33:f1:7c:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPO2S8aIjQ7XDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
NTc1MWQ0N2QtMDEyNS00MjdkLWFjNmYtMWI3YmNlNjY0MzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZIAntHsY9lDlmub5n0Yu7PJgNm5pUf2G0tD
wtCPfpllbwqFAs1s7wjV6x2NItkQqRUGNL1UJUEdZKZOJ3SWCUfwCevnTGZN9duN
5ke82TJFVJoM0ak01ybDopwC8poqZG/sCdv897bN0al4n5/9gM8dQKPqeS7JqAJQ
9GvOrOVBKhD5WheOzvHRx5C+GHvhR7WY+2qOqj9TdtmEMVGgiRSoFeH9xJcaKmYx
CXR+r+s47zOZdytnrx+Upc+AStzC31NEf7ivvYoX/85owbDM/Z7ZrJzqT/mur/tx
z3P8QijTOrejygG9LoHE4uW6qqbTe/LC6zPs77qy8CDIn+MboQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5ZbbmsL7+o2BFjaw/OEHfD1bcQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNTkxODY4ZDEtNDQyYy0z
MDIwLWE5MGItYzk3YWI3YjhkMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0flwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYnbtuUPeqK0pm3SAs1mdERtFMMS+JdvdKhj+HmHdZUghuMTRZbOw2n
4ZeQMVuVKc11KJr5oLwnVMj/QZiSNUzEAHLkYLxzf/tV3+J/CfSXerh9GHF5ElGb
i7C2gIBFjYrl49x+xIiJnoDOSopB7aoQS5qMN3+m73WEemOkQxGAn+74AZu38ncr
yQXJCJUii5/JRoWt5EUyfxB3Afvq7jbGjj5JkwIZzp4HLwKPPCn8QkPZ5DhN/o1+
f23Gyb+0Q1bc1rDDQYByxXsY0FI+WJ1FvCnLw3DWUy0SWJjxHj07NWrnW/X7iOit
K0r6X1K3fkY/6nC9FFPS3KMfRTPxfM8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:08:45 2025 by rpki-client