Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/de432176-2d10-3942-a16c-5375defb30e7.roa
File:                     de432176-2d10-3942-a16c-5375defb30e7.roa (raw, json)
Hash identifier:          xcIzUFMquDhL9stNPRVuxkpj0OVOyTLikZw6Wt+ZtQo=
Subject key identifier:   6F:BC:CA:8A:32:AA:01:D6:3F:D8:A1:CB:B4:A4:CC:82:18:D9:C4:8D
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B98F365F840D89ABBB3649E80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/de432176-2d10-3942-a16c-5375defb30e7.roa
Signing time:             Tue 21 Oct 2025 17:20:59 +0000
ROA not before:           Tue 21 Oct 2025 17:20:59 +0000
ROA not after:            Mon 19 Jan 2026 18:20:59 +0000
asID:                     397301
IP address blocks:        216.110.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:f3:65:f8:40:d8:9a:bb:b3:64:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct 21 17:20:59 2025 GMT
            Not After : Jan 19 18:20:59 2026 GMT
        Subject: CN=00212006-8764-44a9-9c01-6269e19a7afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:43:8c:54:1f:ed:da:2a:73:11:73:2e:65:b0:
                    a6:e2:e4:b8:2b:df:7c:76:13:1c:01:4d:9a:d8:9b:
                    55:eb:93:a3:d4:a2:02:32:6b:1d:9b:41:dd:76:1e:
                    76:73:b0:09:53:06:6b:85:5e:38:c0:82:f0:8b:de:
                    c7:10:42:61:83:19:35:08:ad:e5:d5:39:4b:c6:7a:
                    33:b4:21:fd:38:05:94:c3:07:96:1a:20:a3:b1:b7:
                    ab:32:1e:86:5b:8f:9b:95:4c:fa:16:25:6f:36:21:
                    72:7d:53:dc:4b:70:53:9e:06:8e:9e:87:bf:86:70:
                    81:26:18:9f:63:e4:71:ed:f3:c5:43:70:d7:c0:a4:
                    38:c9:1c:ce:68:7d:e0:5d:61:fb:6d:b3:41:04:a6:
                    fe:a0:9a:48:9f:e1:2f:2d:31:43:1f:f1:bb:bb:62:
                    6f:59:83:2a:f2:c7:69:f5:ca:b0:03:ab:a9:43:8e:
                    ca:7e:83:c7:65:a2:c6:52:82:1d:42:a4:80:34:00:
                    c8:00:e5:f1:60:02:19:b4:72:a1:63:a5:71:54:63:
                    e9:c9:37:70:7d:6c:1f:a0:fa:ab:fd:c3:e4:63:58:
                    48:33:50:da:14:57:0f:b3:fa:f4:b6:8d:ea:db:80:
                    bc:60:92:f6:e1:0c:0e:01:41:d9:b4:6a:ec:01:c9:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BC:CA:8A:32:AA:01:D6:3F:D8:A1:CB:B4:A4:CC:82:18:D9:C4:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/de432176-2d10-3942-a16c-5375defb30e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:4d:1d:cc:a2:4b:5a:64:53:31:1d:e2:e9:86:ec:48:cf:d7:
         78:df:6d:fb:68:30:b8:3c:2f:91:49:a2:96:97:55:a4:1a:50:
         4b:e7:83:e1:21:6f:58:93:49:ca:3d:6b:20:4d:2c:fd:f3:60:
         91:1d:17:dc:24:ba:03:fc:a4:e3:ba:fa:e2:15:0f:2d:0f:72:
         cc:8a:19:64:d7:96:f2:02:4f:a4:af:68:bb:50:e7:48:77:96:
         84:72:d1:24:fc:d7:da:e9:fd:c0:18:8e:d0:98:48:56:d2:ec:
         c2:45:ba:de:ee:72:82:4b:d2:9a:bf:19:24:fe:27:29:93:e6:
         0e:c8:41:2e:c5:d1:95:1f:9d:be:f4:cf:97:0e:6d:29:1a:4b:
         7e:69:6c:93:73:25:e8:85:28:38:bd:e6:47:6a:eb:d3:38:d6:
         1a:0d:16:26:b7:65:0b:47:dd:fa:de:70:38:b1:15:87:3a:bd:
         2c:95:a1:2a:c3:6e:28:a2:29:e9:26:f6:78:22:00:32:0a:1a:
         b0:3c:8b:25:46:25:84:31:86:c9:e5:91:5a:1a:12:36:97:a7:
         0c:23:63:63:40:30:5e:7b:fb:b6:fd:45:1b:07:17:65:a3:3c:
         7e:ba:40:30:4f:de:0a:9f:54:b8:25:bc:72:44:30:9d:af:da:
         a1:93:35:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuY82X4QNiau7NknoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MTAyMTE3MjA1OVoXDTI2MDExOTE4MjA1OVowLzEtMCsGA1UEAxMk
MDAyMTIwMDYtODc2NC00NGE5LTljMDEtNjI2OWUxOWE3YWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEOMVB/t2ipzEXMuZbCm4uS4K998dhMcAU2a
2JtV65Oj1KICMmsdm0Hddh52c7AJUwZrhV44wILwi97HEEJhgxk1CK3l1TlLxnoz
tCH9OAWUwweWGiCjsberMh6GW4+blUz6FiVvNiFyfVPcS3BTngaOnoe/hnCBJhif
Y+Rx7fPFQ3DXwKQ4yRzOaH3gXWH7bbNBBKb+oJpIn+EvLTFDH/G7u2JvWYMq8sdp
9cqwA6upQ47KfoPHZaLGUoIdQqSANADIAOXxYAIZtHKhY6VxVGPpyTdwfWwfoPqr
/cPkY1hIM1DaFFcPs/r0to3q24C8YJL24QwOAUHZtGrsAcnUwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG+8yooyqgHWP9ihy7SkzIIY2cSNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGU0MzIxNzYtMmQxMC0z
OTQyLWExNmMtNTM3NWRlZmIzMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G7FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBNHcyiS1pkUzEd4umG7EjP13jfbftoMLg8L5FJopaXVaQaUEvng+Eh
b1iTSco9ayBNLP3zYJEdF9wkugP8pOO6+uIVDy0PcsyKGWTXlvICT6SvaLtQ50h3
loRy0ST819rp/cAYjtCYSFbS7MJFut7ucoJL0pq/GST+JymT5g7IQS7F0ZUfnb70
z5cObSkaS35pbJNzJeiFKDi95kdq69M41hoNFia3ZQtH3frecDixFYc6vSyVoSrD
biiiKekm9ngiADIKGrA8iyVGJYQxhsnlkVoaEjaXpwwjY2NAMF57+7b9RRsHF2Wj
PH66QDBP3gqfVLglvHJEMJ2v2qGTNcs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:49:31 2025 by rpki-client