Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf/466fc952-8dcf-3a36-b88d-df3dd4887e3d.roa
File:                     466fc952-8dcf-3a36-b88d-df3dd4887e3d.roa (raw, json)
Hash identifier:          qnenRVo4rMoh3mAtbIT+ff52amBAfDQl1r0eKuXgce8=
Subject key identifier:   1F:03:9F:A6:6D:4D:71:73:16:B2:18:2A:FD:93:ED:30:EA:4A:6F:2A
Certificate issuer:       /CN=50387df9-d607-4f34-b9cc-5e58269883cf
Certificate serial:       010D0C9F4328584B970CF75957BE4547F3ABCA80
Authority key identifier: 4D:C8:A1:E2:8A:08:81:2C:49:EA:F8:18:50:83:6D:3D:A4:86:C9:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf/466fc952-8dcf-3a36-b88d-df3dd4887e3d.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     6079
IP address blocks:        209.250.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf/50387df9-d607-4f34-b9cc-5e58269883cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf/50387df9-d607-4f34-b9cc-5e58269883cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:f7:59:57:be:45:47:f3:ab:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50387df9-d607-4f34-b9cc-5e58269883cf
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=484bcb59-fa6b-46d6-9d6b-d62706d65171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cd:89:5f:25:de:a7:76:97:13:c3:69:54:5c:
                    4a:b9:aa:bd:90:4b:bd:bd:44:30:cc:65:91:2b:be:
                    71:44:01:be:cf:64:b9:34:b0:61:b0:94:7b:05:ec:
                    54:c9:6f:bd:cb:57:6f:f7:57:69:1a:8a:45:2d:a5:
                    e0:d6:b3:ac:a0:f3:27:8e:34:63:af:5e:a5:04:08:
                    24:7f:67:3c:1e:77:f2:b0:aa:47:62:39:7c:99:3c:
                    ab:8f:5c:12:ea:11:b9:07:50:21:e0:15:68:87:06:
                    69:ed:cb:f5:cb:30:9f:d1:a4:29:96:19:0a:0e:42:
                    50:82:79:3f:0b:61:15:8d:1e:3e:09:07:b3:be:a7:
                    8a:a4:43:f2:ba:42:70:be:90:c5:e5:ea:fc:01:b9:
                    0b:7a:9e:ea:6e:f0:e5:cc:32:a4:16:33:c5:0f:60:
                    df:60:ac:08:1f:31:1a:75:ff:e9:3c:9e:26:29:6a:
                    e6:3a:46:98:50:e4:32:23:27:82:e2:ca:67:3f:3a:
                    32:72:47:44:50:56:30:e2:50:49:33:7b:75:23:31:
                    20:3a:ee:d0:26:f5:d1:0c:51:e3:e4:af:be:89:8a:
                    45:59:a7:d0:41:74:fc:dd:82:6b:5e:7c:7a:b1:f0:
                    46:a6:e0:f2:9e:04:f1:d0:00:68:b2:ce:77:4d:82:
                    20:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:03:9F:A6:6D:4D:71:73:16:B2:18:2A:FD:93:ED:30:EA:4A:6F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf/466fc952-8dcf-3a36-b88d-df3dd4887e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf/50387df9-d607-4f34-b9cc-5e58269883cf.crl

            X509v3 Authority Key Identifier:
                keyid:4D:C8:A1:E2:8A:08:81:2C:49:EA:F8:18:50:83:6D:3D:A4:86:C9:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50387df9-d607-4f34-b9cc-5e58269883cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:db:43:a5:ef:97:f8:10:1a:0f:52:59:37:b8:0f:f2:17:20:
         dc:bd:b8:7c:0b:04:46:96:29:54:be:b5:ab:2f:0b:f3:46:63:
         33:76:d8:7a:ae:0e:a8:f4:13:b4:03:da:21:06:da:0e:b6:8a:
         83:8f:a0:67:f2:40:46:90:a6:c1:e3:2a:19:db:c7:3b:b2:99:
         e0:3a:d2:81:c2:b3:8b:6a:7f:de:01:e9:70:91:15:3c:64:54:
         12:81:58:73:f2:ca:bd:08:68:dd:de:9a:6a:d7:33:ec:88:bc:
         fc:b6:33:66:6b:21:7e:df:c5:62:c9:7c:9f:35:0b:50:a8:ac:
         0c:8e:48:15:c7:26:1c:70:83:b8:04:7e:f2:89:d3:5a:be:22:
         08:bf:11:de:28:89:dd:3f:19:99:a9:d5:76:cf:80:e6:5a:8a:
         1e:8b:0c:00:4b:c3:b8:63:11:57:07:8c:40:f0:88:e1:c0:b2:
         b8:17:42:48:4e:15:71:15:94:7c:11:56:08:66:c5:6c:4d:f1:
         0d:b7:ad:c2:a1:a3:fe:14:74:d4:36:fe:fa:ab:04:16:0d:bb:
         d1:f1:52:70:e1:4e:d1:2e:ab:a5:39:5e:53:54:66:49:08:6c:
         30:7d:d8:7e:6f:59:75:66:77:b5:4a:11:8e:99:11:51:a8:2b:
         dd:18:e9:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPdZV75FR/OryoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTAzODdkZjktZDYwNy00ZjM0LWI5Y2MtNWU1ODI2OTg4
M2NmMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
NDg0YmNiNTktZmE2Yi00NmQ2LTlkNmItZDYyNzA2ZDY1MTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis2JXyXep3aXE8NpVFxKuaq9kEu9vUQwzGWR
K75xRAG+z2S5NLBhsJR7BexUyW+9y1dv91dpGopFLaXg1rOsoPMnjjRjr16lBAgk
f2c8HnfysKpHYjl8mTyrj1wS6hG5B1Ah4BVohwZp7cv1yzCf0aQplhkKDkJQgnk/
C2EVjR4+CQezvqeKpEPyukJwvpDF5er8AbkLep7qbvDlzDKkFjPFD2DfYKwIHzEa
df/pPJ4mKWrmOkaYUOQyIyeC4spnPzoyckdEUFYw4lBJM3t1IzEgOu7QJvXRDFHj
5K++iYpFWafQQXT83YJrXnx6sfBGpuDyngTx0ABoss53TYIgVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8Dn6ZtTXFzFrIYKv2T7TDqSm8qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MDM4
N2RmOS1kNjA3LTRmMzQtYjljYy01ZTU4MjY5ODgzY2YvNDY2ZmM5NTItOGRjZi0z
YTM2LWI4OGQtZGYzZGQ0ODg3ZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTAzODdkZjktZDYwNy00ZjM0LWI5
Y2MtNWU1ODI2OTg4M2NmLzUwMzg3ZGY5LWQ2MDctNGYzNC1iOWNjLTVlNTgyNjk4
ODNjZi5jcmwwHwYDVR0jBBgwFoAUTcih4ooIgSxJ6vgYUINtPaSGya0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81MDM4N2RmOS1kNjA3LTRmMzQtYjljYy01ZTU4
MjY5ODgzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0fpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7bQ6Xvl/gQGg9SWTe4D/IXINy9uHwLBEaWKVS+tasvC/NGYzN22Hqu
Dqj0E7QD2iEG2g62ioOPoGfyQEaQpsHjKhnbxzuymeA60oHCs4tqf94B6XCRFTxk
VBKBWHPyyr0IaN3emmrXM+yIvPy2M2ZrIX7fxWLJfJ81C1CorAyOSBXHJhxwg7gE
fvKJ01q+Igi/Ed4oid0/GZmp1XbPgOZaih6LDABLw7hjEVcHjEDwiOHAsrgXQkhO
FXEVlHwRVghmxWxN8Q23rcKho/4UdNQ2/vqrBBYNu9HxUnDhTtEuq6U5XlNUZkkI
bDB92H5vWXVmd7VKEY6ZEVGoK90Y6fo=
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:59:36 2025 by rpki-client