Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa
File:                     b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa (raw, json)
Hash identifier:          rE7p53KtTs6XPrM0Ry06dbx35/Jk8nFrs2Qjhzzcm5o=
Subject key identifier:   12:54:7B:14:10:0C:56:85:41:BC:C2:02:AD:3D:40:5E:FF:4C:D3:95
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584B970CCF20AF31485CD8A13C00
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     16904
IP address blocks:        68.169.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:cf:20:af:31:48:5c:d8:a1:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=b3c37c20-d8bf-466a-bcbd-19ee425019bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6b:63:c8:3d:72:3b:29:b4:cf:97:ad:0b:76:
                    16:03:d5:db:28:3e:c1:08:df:08:5e:7a:78:8a:43:
                    6a:86:59:b8:72:b5:1b:cc:f2:8f:43:fb:c1:5b:c1:
                    65:9e:1c:9b:21:85:68:fe:cd:23:5e:f9:ac:8a:28:
                    57:46:be:ec:36:9d:15:4e:fc:03:c6:ed:47:80:96:
                    9f:88:3c:16:4b:12:ac:7e:9a:30:c3:7f:2e:b5:f9:
                    48:ce:52:81:79:6a:2d:1b:a8:a7:de:44:73:d3:8f:
                    0a:e8:e9:71:e5:45:ac:00:c9:51:0c:c1:7e:d0:cf:
                    98:45:fe:b2:ba:be:df:c0:99:05:bd:aa:5e:68:4d:
                    5b:66:e6:e9:22:6e:f8:1f:3f:70:f7:34:fd:c1:1b:
                    67:d1:13:0b:11:b4:80:54:b5:b9:94:61:58:43:49:
                    ba:3f:9b:16:11:dd:7f:c1:c2:1b:64:da:52:41:e2:
                    3b:c6:46:49:e2:7a:74:d7:68:6e:e5:3b:7b:25:b1:
                    44:56:20:78:5a:98:04:c0:b6:8b:12:3b:8f:14:95:
                    7a:fd:5d:a9:1a:5f:94:08:0f:b6:3b:d1:76:78:c6:
                    10:5b:73:03:7f:7c:c6:c4:cf:60:0b:42:e0:e9:7e:
                    91:fb:3f:89:63:73:f7:54:4e:6e:61:6d:f5:89:29:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:54:7B:14:10:0C:56:85:41:BC:C2:02:AD:3D:40:5E:FF:4C:D3:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.169.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4d:3e:d9:b9:9c:42:e3:1a:54:01:fa:f2:42:8d:a8:96:3e:
         fa:6e:0a:92:7a:4e:de:9f:45:0b:d6:21:d4:92:19:cc:e3:3a:
         84:84:38:7a:a2:8d:7d:cf:b2:57:62:4c:4d:1e:77:c3:75:9d:
         54:94:a6:4b:6d:0d:3e:62:e0:d5:c8:cf:03:4e:c4:bb:e4:2c:
         b8:a6:ce:7b:6f:0e:ae:7e:03:f3:2b:2b:05:92:76:57:8e:c3:
         45:2f:37:3a:17:fd:21:e7:56:c8:1e:57:62:bc:cb:f6:1e:58:
         d9:9d:6c:05:04:07:19:40:11:2e:71:40:98:c5:14:80:28:2e:
         c5:87:ae:57:a1:04:8a:b3:8c:d0:95:ed:30:57:42:0d:3a:b6:
         85:80:bd:0a:09:cb:45:90:2c:03:1a:33:37:be:eb:46:33:6d:
         4e:ea:12:e8:00:12:9f:15:51:ac:8a:32:be:20:53:5a:48:15:
         e0:5b:fa:33:02:b9:29:83:07:4a:2b:26:39:cd:61:87:4d:64:
         df:60:7b:91:81:fd:51:5d:d3:ea:8f:11:c6:89:fc:91:83:ef:
         49:7b:a2:da:c2:95:92:3e:d9:cf:98:3d:08:bb:12:a0:69:b8:
         34:6e:93:e6:14:48:55:29:76:12:8c:65:06:55:72:b3:d5:1d:
         e0:22:d4:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDM8grzFIXNihPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
YjNjMzdjMjAtZDhiZi00NjZhLWJjYmQtMTllZTQyNTAxOWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mtjyD1yOym0z5etC3YWA9XbKD7BCN8IXnp4
ikNqhlm4crUbzPKPQ/vBW8FlnhybIYVo/s0jXvmsiihXRr7sNp0VTvwDxu1HgJaf
iDwWSxKsfpoww38utflIzlKBeWotG6in3kRz048K6Olx5UWsAMlRDMF+0M+YRf6y
ur7fwJkFvapeaE1bZubpIm74Hz9w9zT9wRtn0RMLEbSAVLW5lGFYQ0m6P5sWEd1/
wcIbZNpSQeI7xkZJ4np012hu5Tt7JbFEViB4WpgEwLaLEjuPFJV6/V2pGl+UCA+2
O9F2eMYQW3MDf3zGxM9gC0Lg6X6R+z+JY3P3VE5uYW31iSkWSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBJUexQQDFaFQbzCAq09QF7/TNOVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYjdiY2UwOTUtZTRkOC0z
ZTIwLWI2MjEtZmE1OGE5M2RkZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBNPtm5nELjGlQB+vJCjaiWPvpuCpJ6Tt6fRQvWIdSSGczjOoSEOHqi
jX3PsldiTE0ed8N1nVSUpkttDT5i4NXIzwNOxLvkLLimzntvDq5+A/MrKwWSdleO
w0UvNzoX/SHnVsgeV2K8y/YeWNmdbAUEBxlAES5xQJjFFIAoLsWHrlehBIqzjNCV
7TBXQg06toWAvQoJy0WQLAMaMze+60YzbU7qEugAEp8VUayKMr4gU1pIFeBb+jMC
uSmDB0orJjnNYYdNZN9ge5GB/VFd0+qPEcaJ/JGD70l7otrClZI+2c+YPQi7EqBp
uDRuk+YUSFUpdhKMZQZVcrPVHeAi1PE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:32:27 2025 by rpki-client