Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa
File:                     b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa (raw, json)
Hash identifier:          wMbFVbLY9QuQHWV8e92jRuPwusxIiozXj5ygWB8DJLk=
Subject key identifier:   0B:76:F9:25:4D:8B:CB:CE:A1:FD:93:A0:29:BD:CB:06:DD:32:8A:AE
Certificate issuer:       /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial:       010D0C9F4328584BBA105B89AF384863CC637E60
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     32723
IP address blocks:        216.6.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:5b:89:af:38:48:63:cc:63:7e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=46b9d689-e3b1-466e-9fb7-b3816ca77377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:e8:79:de:d6:60:16:f5:9e:3a:39:66:ca:
                    a8:db:ee:cd:79:35:47:db:72:ed:fd:8c:93:45:e6:
                    1b:30:31:c6:a9:35:a5:cb:7f:dc:e5:3d:e7:47:4c:
                    c4:47:c9:59:d8:62:ba:06:af:52:61:0a:84:e6:dc:
                    13:a6:9b:77:b1:73:32:98:f6:9b:0f:46:46:90:76:
                    f1:af:54:f3:38:18:9d:4c:54:9b:7c:19:e2:31:82:
                    5e:de:0d:ad:69:27:98:16:18:d1:f8:be:74:99:7a:
                    6e:84:75:ac:a5:ec:7b:99:6e:da:56:7b:db:29:e3:
                    dc:64:8c:fd:ba:be:4a:d8:a4:1e:5d:67:bf:72:cd:
                    2b:a9:2d:d7:a8:40:24:f1:05:e4:4d:29:97:31:3b:
                    5a:69:6a:6a:2e:d8:f3:e4:fd:62:94:01:e7:cd:59:
                    dd:7a:30:b1:f5:63:9f:08:54:8f:a1:08:54:74:02:
                    cd:4b:fb:b1:63:a6:74:be:79:44:f4:30:ae:94:9c:
                    f8:90:d9:3d:cc:4c:e6:25:44:7f:e9:57:c2:dd:79:
                    86:2b:56:7d:b4:b9:f2:4a:82:6d:43:a0:14:9e:4b:
                    8a:13:35:c6:c2:5d:e1:73:c7:14:ca:c5:4a:34:34:
                    8c:ef:a5:85:40:94:b9:56:41:e6:94:7a:62:10:84:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:76:F9:25:4D:8B:CB:CE:A1:FD:93:A0:29:BD:CB:06:DD:32:8A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl

            X509v3 Authority Key Identifier:
                keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:4f:ae:98:fe:c1:ba:f9:52:01:e6:33:74:45:9e:64:5a:23:
         19:37:ff:ef:aa:f4:e5:eb:69:6c:ba:b3:f8:b1:43:e9:db:85:
         40:44:87:e3:c3:fe:e1:6c:35:15:0b:d9:af:de:55:dc:3a:bb:
         8a:79:54:2b:23:6b:b4:f8:8d:6c:76:85:b2:7a:dc:4e:8a:7f:
         a9:da:11:05:29:01:1a:71:96:b0:ec:3f:2c:c9:bf:c8:a1:37:
         72:90:4c:0a:dd:48:0b:be:c4:6d:32:12:d4:56:54:6f:f8:dd:
         0e:0c:f1:87:7e:d5:2d:15:3e:1e:1d:61:e3:82:af:18:8d:b1:
         3c:f0:94:5e:6a:61:64:a7:db:0e:2f:89:fd:40:2f:25:2c:4a:
         f9:c4:e4:e2:66:a8:69:40:75:14:ab:f2:a3:93:f5:49:a9:74:
         22:46:51:20:09:e5:df:d3:55:b2:22:83:c0:cc:54:aa:52:5c:
         21:07:84:1b:85:c1:6c:29:eb:8c:dd:99:e7:86:a3:6a:5f:08:
         f6:2f:90:e3:2c:f8:68:13:fa:2c:45:07:e4:18:c5:1b:43:ac:
         1b:0e:90:c5:f2:26:fb:d5:c6:1e:95:c6:27:de:8c:03:61:6f:
         9d:7e:ca:45:50:67:64:f0:07:e1:06:91:fb:be:54:6a:0a:ef:
         ea:8a:78:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EFuJrzhIY8xjfmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw
MDEyMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk
NDZiOWQ2ODktZTNiMS00NjZlLTlmYjctYjM4MTZjYTc3Mzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU7oed7WYBb1njo5Zsqo2+7NeTVH23Lt/YyT
ReYbMDHGqTWly3/c5T3nR0zER8lZ2GK6Bq9SYQqE5twTppt3sXMymPabD0ZGkHbx
r1TzOBidTFSbfBniMYJe3g2taSeYFhjR+L50mXpuhHWspex7mW7aVnvbKePcZIz9
ur5K2KQeXWe/cs0rqS3XqEAk8QXkTSmXMTtaaWpqLtjz5P1ilAHnzVndejCx9WOf
CFSPoQhUdALNS/uxY6Z0vnlE9DCulJz4kNk9zEzmJUR/6VfC3XmGK1Z9tLnySoJt
Q6AUnkuKEzXGwl3hc8cUysVKNDSM76WFQJS5VkHmlHpiEITPOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAt2+SVNi8vOof2ToCm9ywbdMoquMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1
MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvYjcxYWUzZDMtMzIxMS0z
MzQwLTk4YzEtZWY4OGZjNTFlZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm
NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh
MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx
NzI5YTAwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2AaOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVPrpj+wbr5UgHmM3RFnmRaIxk3/++q9OXraWy6s/ixQ+nbhUBEh+PD
/uFsNRUL2a/eVdw6u4p5VCsja7T4jWx2hbJ63E6Kf6naEQUpARpxlrDsPyzJv8ih
N3KQTArdSAu+xG0yEtRWVG/43Q4M8Yd+1S0VPh4dYeOCrxiNsTzwlF5qYWSn2w4v
if1ALyUsSvnE5OJmqGlAdRSr8qOT9UmpdCJGUSAJ5d/TVbIig8DMVKpSXCEHhBuF
wWwp64zdmeeGo2pfCPYvkOMs+GgT+ixFB+QYxRtDrBsOkMXyJvvVxh6VxifejANh
b51+ykVQZ2TwB+EGkfu+VGoK7+qKeHo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:28:28 2025 by rpki-client