Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/85cc95b5-f025-3e36-b069-0368e2daf0b6.roa
File:                     85cc95b5-f025-3e36-b069-0368e2daf0b6.roa (raw, json)
Hash identifier:          S83Q9iUT6MFGVOi1bg+W1EAeQPWdSlpHFZlxzkE2Qic=
Subject key identifier:   33:45:2E:7F:30:25:90:38:51:FF:D8:92:9E:25:94:18:69:38:80:A3
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584BB5C253AF33685CAFBA7892E0
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/85cc95b5-f025-3e36-b069-0368e2daf0b6.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     19905
IP address blocks:        99.217.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:53:af:33:68:5c:af:ba:78:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=b4c16804-fbde-47c7-a180-49617ea79bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e4:d9:96:cd:13:ac:07:aa:d2:49:f0:37:43:
                    30:3e:94:4c:1d:29:5a:3e:4b:3c:91:86:30:b9:98:
                    42:b3:7f:9f:f7:ce:16:ae:78:d2:27:8d:5a:62:d9:
                    85:d5:9f:63:40:9e:14:4b:8f:5f:b9:09:dd:85:b1:
                    91:eb:46:c9:3f:09:7f:b8:79:49:c0:7c:17:b0:6a:
                    ec:2c:dd:80:6e:35:7d:4d:2b:d3:54:07:ec:bf:29:
                    eb:2c:23:88:7f:07:12:b4:f9:0c:9e:45:ca:4b:a5:
                    d4:01:fe:5d:52:69:1c:a4:a1:54:6e:8e:ce:67:31:
                    de:fd:50:f8:7a:43:5f:39:5c:7f:f5:17:14:aa:15:
                    6d:1f:a5:c0:12:04:c2:78:f6:0a:84:6d:4f:de:03:
                    45:84:59:41:01:42:5e:83:37:e3:6c:08:0e:c2:bb:
                    64:6c:db:2f:90:2c:9e:22:3e:2b:c7:e7:d9:08:8d:
                    a8:de:e7:e8:33:20:07:28:72:85:fe:7b:da:ea:c7:
                    7a:e7:70:f3:f1:aa:ac:6b:9c:de:12:7f:02:e1:c4:
                    d9:b9:ba:0d:68:89:d5:51:4d:7f:2c:9a:3e:70:6e:
                    8b:b3:4c:b0:de:5e:10:35:1d:3e:09:bd:85:20:62:
                    44:16:6a:7a:08:6e:9c:c6:31:2c:83:c1:40:b2:1e:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:45:2E:7F:30:25:90:38:51:FF:D8:92:9E:25:94:18:69:38:80:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/85cc95b5-f025-3e36-b069-0368e2daf0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.217.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:4f:04:e2:79:ea:36:ee:85:96:9f:9d:0f:79:29:b0:26:25:
         ca:ba:44:4a:0d:3e:c9:29:09:c4:f9:74:9d:e9:d1:5a:a5:f0:
         6a:42:f2:0a:d5:7b:5d:6b:f8:89:d0:df:19:02:27:24:9c:b5:
         ea:ee:2d:be:39:0d:2c:db:84:96:9d:3e:50:8a:8b:dc:28:d1:
         6d:d1:b5:f4:d9:de:36:29:7f:95:dc:9a:47:82:47:8c:83:2f:
         ff:e5:14:cb:d7:e3:e6:92:6b:2b:63:d9:62:a0:e3:0f:90:17:
         01:00:cc:15:8d:8b:f3:66:1c:10:21:1e:2e:1f:3a:ad:60:ed:
         6e:2c:e5:a4:98:2e:da:3f:06:a0:91:2c:cc:8e:90:31:a3:40:
         7e:ab:c4:24:ab:d6:30:3c:37:22:98:4c:88:bb:22:73:3f:b4:
         82:ac:8b:7d:74:6a:b1:43:56:a1:72:ff:8b:04:e2:3c:60:5d:
         b9:99:4b:c6:49:d6:ab:01:e6:5d:2e:cc:fd:ee:1f:cb:3e:7b:
         16:66:8a:eb:67:f4:aa:ec:bd:38:ee:87:a5:9f:05:1c:18:d9:
         04:21:89:9b:df:37:c7:81:be:c9:f6:16:d2:2b:6c:7b:b5:6d:
         83:7e:35:7c:ea:6d:e8:24:47:b2:38:89:0c:77:8f:52:37:18:
         f2:04:40:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wlOvM2hcr7p4kuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUyNzk5MTgtZjViMS00M2Y3LTk3NDgtOTVhYTBjNjQ2
OWYzMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk
YjRjMTY4MDQtZmJkZS00N2M3LWExODAtNDk2MTdlYTc5YmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguTZls0TrAeq0knwN0MwPpRMHSlaPks8kYYw
uZhCs3+f984WrnjSJ41aYtmF1Z9jQJ4US49fuQndhbGR60bJPwl/uHlJwHwXsGrs
LN2AbjV9TSvTVAfsvynrLCOIfwcStPkMnkXKS6XUAf5dUmkcpKFUbo7OZzHe/VD4
ekNfOVx/9RcUqhVtH6XAEgTCePYKhG1P3gNFhFlBAUJegzfjbAgOwrtkbNsvkCye
Ij4rx+fZCI2o3ufoMyAHKHKF/nva6sd653Dz8aqsa5zeEn8C4cTZuboNaInVUU1/
LJo+cG6Ls0yw3l4QNR0+Cb2FIGJEFmp6CG6cxjEsg8FAsh6q0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNFLn8wJZA4Uf/Ykp4llBhpOICjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3
OTkxOC1mNWIxLTQzZjctOTc0OC05NWFhMGM2NDY5ZjMvODVjYzk1YjUtZjAyNS0z
ZTM2LWIwNjktMDM2OGUyZGFmMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDUyNzk5MTgtZjViMS00M2Y3LTk3
NDgtOTVhYTBjNjQ2OWYzLzA1Mjc5OTE4LWY1YjEtNDNmNy05NzQ4LTk1YWEwYzY0
NjlmMy5jcmwwHwYDVR0jBBgwFoAUcgH1iAdeZMnpAPYfP2ut8NzCz9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3OTkxOC1mNWIxLTQzZjctOTc0OC05NWFh
MGM2NDY5ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGY9mAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHdPBOJ56jbuhZafnQ95KbAmJcq6REoNPskpCcT5dJ3p0Vql8GpC8grV
e11r+InQ3xkCJyScteruLb45DSzbhJadPlCKi9wo0W3RtfTZ3jYpf5XcmkeCR4yD
L//lFMvX4+aSaytj2WKg4w+QFwEAzBWNi/NmHBAhHi4fOq1g7W4s5aSYLto/BqCR
LMyOkDGjQH6rxCSr1jA8NyKYTIi7InM/tIKsi310arFDVqFy/4sE4jxgXbmZS8ZJ
1qsB5l0uzP3uH8s+exZmiutn9KrsvTjuh6WfBRwY2QQhiZvfN8eBvsn2FtIrbHu1
bYN+NXzqbegkR7I4iQx3j1I3GPIEQBE=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:15:16 2025 by rpki-client