Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa
File:                     fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa (raw, json)
Hash identifier:          Oatvk2FCUSdKAC8Rpgwb7MKN/M21GeysGuGPPvzUhLc=
Subject key identifier:   74:53:7F:EB:16:79:65:60:13:20:26:8C:C1:01:3D:C7:A8:6F:35:90
Certificate issuer:       /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial:       010D0C9F4328584B99D77BDDB61CEC0136F97A50
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        143.220.128.0/23 maxlen: 23
                          143.220.130.0/23 maxlen: 23
                          143.220.132.0/23 maxlen: 23
                          143.220.134.0/23 maxlen: 23
                          143.220.136.0/23 maxlen: 23
                          143.220.138.0/23 maxlen: 23
                          143.220.140.0/23 maxlen: 23
                          143.220.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:7b:dd:b6:1c:ec:01:36:f9:7a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=4f70354d-c79b-4747-98b3-154e954f5369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:66:85:6d:33:9e:1c:cf:ad:09:44:b6:f8:
                    30:96:94:7b:51:7a:1a:ee:6c:3a:e5:59:11:7b:6e:
                    c9:43:ee:3f:75:8a:34:6e:8c:ba:50:b6:ac:7e:8f:
                    c3:4b:d0:70:d6:99:ad:12:b9:a4:82:e4:41:f7:e9:
                    02:26:bd:fe:ad:7a:47:f1:61:1e:aa:42:8e:03:34:
                    ec:fd:f5:63:0a:04:f6:54:c8:09:a2:18:fe:1b:e4:
                    a2:3a:bb:be:45:92:77:4e:61:64:1f:51:c8:03:c6:
                    d3:9f:06:14:c4:54:68:14:c9:b1:ec:85:d3:66:9f:
                    23:de:14:98:b5:37:a8:57:42:6a:7f:cc:fd:87:f4:
                    45:d4:3d:87:51:d4:ee:fe:75:30:b7:bf:05:52:73:
                    e2:d6:79:bf:92:ee:3f:b1:6a:57:6f:63:a9:60:69:
                    57:fa:bf:7d:f0:aa:91:0e:fa:1f:da:ba:f0:c4:0a:
                    9c:e1:79:97:2e:60:16:ff:50:06:c4:ee:a6:1b:58:
                    28:63:d6:de:de:d9:69:7b:27:56:47:f7:17:09:2a:
                    6c:e5:a7:d1:72:92:41:87:38:2b:dd:49:f5:88:ce:
                    eb:40:64:f4:a5:eb:01:ab:11:71:5c:e5:17:31:2a:
                    55:8a:39:78:8a:7a:cf:2e:d7:dc:d2:47:73:8a:7e:
                    e3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:53:7F:EB:16:79:65:60:13:20:26:8C:C1:01:3D:C7:A8:6F:35:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.220.128.0-143.220.142.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1d:aa:01:4f:18:02:05:a8:2f:8e:bc:cb:c7:38:b8:45:df:
         8a:85:95:f5:c2:b5:8f:0b:ce:32:13:0e:7d:e8:ff:36:44:19:
         4f:75:37:45:c1:20:3d:60:37:0f:93:bc:6f:16:d4:62:d0:75:
         b8:79:7c:a7:05:a3:82:f8:29:fc:34:48:63:72:5a:9a:8d:38:
         42:13:09:e8:d5:19:4a:33:39:44:87:56:ee:92:d4:0e:57:2a:
         d9:6f:71:b0:fa:00:ef:64:ff:e3:ba:17:fd:d3:6f:2c:8e:49:
         dd:c8:e7:46:3a:84:a5:e7:97:dc:28:0d:83:d6:85:d9:03:f9:
         e6:97:d7:0b:10:23:af:96:52:20:16:ca:16:92:ab:68:53:e2:
         68:98:bd:18:e2:02:05:32:df:f1:6c:c1:ee:9c:12:af:63:db:
         ec:84:fc:3a:32:1b:0c:80:06:6f:b6:85:08:50:11:a8:c2:d1:
         f1:d6:d9:ba:5a:9b:84:1c:4c:39:ad:7b:8e:18:22:7d:f7:31:
         74:8e:4d:38:fa:82:9e:1c:6c:ed:32:08:82:3d:d4:ec:e7:fa:
         b8:d2:ec:47:27:4f:f1:6a:06:bc:01:cd:64:be:fa:ec:4a:51:
         10:6e:fb:8f:0d:67:3e:a7:f1:5c:e0:63:6a:da:b8:c4:55:c6:
         f8:d2:6e:41
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuZ13vdthzsATb5elAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3
ODliMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
NGY3MDM1NGQtYzc5Yi00NzQ3LTk4YjMtMTU0ZTk1NGY1MzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXZmhW0znhzPrQlEtvgwlpR7UXoa7mw65VkR
e27JQ+4/dYo0boy6ULasfo/DS9Bw1pmtErmkguRB9+kCJr3+rXpH8WEeqkKOAzTs
/fVjCgT2VMgJohj+G+SiOru+RZJ3TmFkH1HIA8bTnwYUxFRoFMmx7IXTZp8j3hSY
tTeoV0Jqf8z9h/RF1D2HUdTu/nUwt78FUnPi1nm/ku4/sWpXb2OpYGlX+r998KqR
Dvof2rrwxAqc4XmXLmAW/1AGxO6mG1goY9be3tlpeydWR/cXCSps5afRcpJBhzgr
3Un1iM7rQGT0pesBqxFxXOUXMSpVijl4inrPLtfc0kdzin7jfQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHRTf+sWeWVgEyAmjMEBPceobzWQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj
MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvZmRiMjZjNmQtZDg5Yi0z
NGNlLWE1MDYtYjUzYzYxMDEzYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw
Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy
Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex
ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAeP3IAD
BACP3I4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAYh2qAU8YAgWoL468y8c4uEXfioWV9cK1jwvOMhMOfej/
NkQZT3U3RcEgPWA3D5O8bxbUYtB1uHl8pwWjgvgp/DRIY3Jamo04QhMJ6NUZSjM5
RIdW7pLUDlcq2W9xsPoA72T/47oX/dNvLI5J3cjnRjqEpeeX3CgNg9aF2QP55pfX
CxAjr5ZSIBbKFpKraFPiaJi9GOICBTLf8WzB7pwSr2Pb7IT8OjIbDIAGb7aFCFAR
qMLR8dbZulqbhBxMOa17jhgiffcxdI5NOPqCnhxs7TIIgj3U7Of6uNLsRydP8WoG
vAHNZL767EpREG77jw1nPqfxXOBjatq4xFXG+NJuQQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:02:49 2025 by rpki-client