Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/4e3dd55e-27c1-3045-9b2e-6664b598b276.roa
File:                     4e3dd55e-27c1-3045-9b2e-6664b598b276.roa (raw, json)
Hash identifier:          TtbBcvZJn3IefaoMCz38x9SQ4fk3eTlJIeJiztRI99c=
Subject key identifier:   49:DD:6F:B8:C8:97:01:F0:D6:E5:F2:F6:1E:55:25:A6:BD:8F:8B:AA
Certificate issuer:       /CN=fba63dff-a873-460d-a7e8-ce4e073bce67
Certificate serial:       010D0C9F4328584BA93274C88DCAC5720DD6C360
Authority key identifier: 1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/4e3dd55e-27c1-3045-9b2e-6664b598b276.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     14661
IP address blocks:        142.51.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:74:c8:8d:ca:c5:72:0d:d6:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba63dff-a873-460d-a7e8-ce4e073bce67
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=1aa94189-8f7d-437b-bc5b-525b3835ad0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:dd:c0:45:80:33:69:3d:58:69:9b:df:e6:
                    fa:bb:af:90:bf:a5:9d:1d:b5:9e:66:a6:94:3b:47:
                    d4:a8:07:c4:a6:04:81:9d:a8:0e:67:66:07:13:f0:
                    08:b7:78:08:83:ed:fb:63:38:21:3f:de:a3:e5:96:
                    57:8a:f2:44:dc:c1:73:0f:3c:92:55:bc:fe:32:25:
                    0c:1c:f5:9c:dd:09:07:98:95:01:37:02:f1:21:51:
                    52:bc:a8:d5:1f:d2:55:3e:f0:e6:58:d4:22:26:6b:
                    67:21:27:4d:6e:d9:45:df:19:2d:a8:68:c7:d7:06:
                    3c:2d:6e:71:42:40:09:ce:1b:ed:93:d8:02:30:7b:
                    8f:6c:33:d1:74:69:e6:c7:97:1d:18:c7:4a:40:5b:
                    2c:f5:a3:36:48:c4:8e:01:f1:35:d6:8f:09:00:c8:
                    c6:80:bb:13:35:5c:26:17:cb:ab:ac:fa:39:0f:ce:
                    25:e5:bf:d2:18:6c:a6:51:f3:1c:e9:ea:7e:00:b8:
                    2a:7d:52:76:e6:f6:37:3b:21:76:6d:96:bb:c7:d8:
                    57:d2:e1:fd:c7:10:6f:33:7f:ad:ac:1c:5c:76:d9:
                    b8:57:0b:80:dd:76:20:f8:be:f4:3f:8e:b0:80:e3:
                    17:bd:ba:0c:a3:d4:92:a4:95:98:1a:85:d2:cb:0d:
                    0c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DD:6F:B8:C8:97:01:F0:D6:E5:F2:F6:1E:55:25:A6:BD:8F:8B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/4e3dd55e-27c1-3045-9b2e-6664b598b276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl

            X509v3 Authority Key Identifier:
                keyid:1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.51.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:32:bf:ed:74:03:8c:ba:cb:47:cd:92:7c:e8:95:4b:60:4b:
         33:94:8d:98:a5:d0:3f:da:24:50:42:92:29:dc:cb:69:3c:13:
         11:6a:da:03:04:bc:26:ff:21:97:df:1b:5f:3a:e1:a1:c6:05:
         a0:ca:0d:f7:18:43:dc:f1:87:05:3e:09:89:51:05:7f:55:02:
         bc:eb:25:a9:13:67:c0:38:76:bb:20:80:00:a0:44:24:d8:49:
         41:c5:da:6e:b7:d8:97:ba:35:44:66:51:34:4d:7b:4e:56:f3:
         5e:fc:94:93:f2:65:db:36:98:7b:26:ab:47:61:e4:85:46:45:
         c6:2c:71:28:7b:83:08:a4:c3:a3:28:55:63:e6:3e:79:bc:43:
         b4:8c:e3:71:1d:72:3f:ed:7d:21:28:6b:e3:1e:20:c1:88:bc:
         18:db:eb:10:6c:d9:be:d0:62:65:11:7d:1c:7b:cd:ea:5c:cd:
         7d:6d:ed:2c:be:c7:69:7c:38:db:74:c2:af:e4:03:22:df:2a:
         a2:bc:70:5a:7d:25:60:11:34:72:8b:90:b2:5f:f0:c5:e2:ae:
         d3:4e:a4:e6:5e:f4:0e:63:63:7e:b9:9a:66:e1:91:36:b1:15:
         0f:dc:57:17:10:e5:3f:e4:f1:e5:20:9f:3c:4a:30:3c:1c:89:
         a5:b3:94:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnTIjcrFcg3Ww2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmJhNjNkZmYtYTg3My00NjBkLWE3ZTgtY2U0ZTA3M2Jj
ZTY3MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
MWFhOTQxODktOGY3ZC00MzdiLWJjNWItNTI1YjM4MzVhZDBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiHdwEWAM2k9WGmb3+b6u6+Qv6WdHbWeZqaU
O0fUqAfEpgSBnagOZ2YHE/AIt3gIg+37YzghP96j5ZZXivJE3MFzDzySVbz+MiUM
HPWc3QkHmJUBNwLxIVFSvKjVH9JVPvDmWNQiJmtnISdNbtlF3xktqGjH1wY8LW5x
QkAJzhvtk9gCMHuPbDPRdGnmx5cdGMdKQFss9aM2SMSOAfE11o8JAMjGgLsTNVwm
F8urrPo5D84l5b/SGGymUfMc6ep+ALgqfVJ25vY3OyF2bZa7x9hX0uH9xxBvM3+t
rBxcdtm4VwuA3XYg+L70P46wgOMXvboMo9SSpJWYGoXSyw0MbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEndb7jIlwHw1uXy9h5VJaa9j4uqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYmE2
M2RmZi1hODczLTQ2MGQtYTdlOC1jZTRlMDczYmNlNjcvNGUzZGQ1NWUtMjdjMS0z
MDQ1LTliMmUtNjY2NGI1OThiMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmJhNjNkZmYtYTg3My00NjBkLWE3
ZTgtY2U0ZTA3M2JjZTY3L2ZiYTYzZGZmLWE4NzMtNDYwZC1hN2U4LWNlNGUwNzNi
Y2U2Ny5jcmwwHwYDVR0jBBgwFoAUHDAi6rfmkCf6cEosqxC9fj7TAc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mYmE2M2RmZi1hODczLTQ2MGQtYTdlOC1jZTRl
MDczYmNlNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGjjOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoyv+10A4y6y0fNknzolUtgSzOUjZil0D/aJFBCkincy2k8ExFq2gME
vCb/IZffG1864aHGBaDKDfcYQ9zxhwU+CYlRBX9VArzrJakTZ8A4drsggACgRCTY
SUHF2m632Je6NURmUTRNe05W8178lJPyZds2mHsmq0dh5IVGRcYscSh7gwikw6Mo
VWPmPnm8Q7SM43Edcj/tfSEoa+MeIMGIvBjb6xBs2b7QYmURfRx7zepczX1t7Sy+
x2l8ONt0wq/kAyLfKqK8cFp9JWARNHKLkLJf8MXirtNOpOZe9A5jY365mmbhkTax
FQ/cVxcQ5T/k8eUgnzxKMDwciaWzlD4=
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:05:21 2025 by rpki-client