Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/ba13bec1-c34c-3863-b274-69146af12c2e.roa
File:                     ba13bec1-c34c-3863-b274-69146af12c2e.roa (raw, json)
Hash identifier:          5hNigqgxTwGG8w3iHwHWT+eKvLmIZ0KorG19BZpB9ac=
Subject key identifier:   62:2B:0D:B0:E8:42:AE:AB:99:60:01:EA:41:9D:DA:3F:22:DE:A5:72
Certificate issuer:       /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Certificate serial:       010D0C9F4328584BA932733911F4BC3CA67CD380
Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/ba13bec1-c34c-3863-b274-69146af12c2e.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        208.66.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:73:39:11:f4:bc:3c:a6:7c:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=f31a016c-9a5d-472f-8465-cf5b30cea0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:2e:be:11:bb:f8:3e:1b:9f:e2:36:aa:4a:
                    c9:94:06:df:57:b9:d1:c4:c0:2b:b7:82:d3:71:8b:
                    13:2b:7c:c3:64:7f:31:e2:28:de:fd:ca:6f:b8:c0:
                    5b:10:af:9c:90:a0:32:24:ea:09:95:34:a4:a6:df:
                    30:ad:a2:88:53:00:82:fa:1c:44:c3:2b:57:37:99:
                    91:9b:6c:95:09:e2:3b:f5:b3:29:0f:06:e0:d9:1d:
                    5d:e7:60:29:e1:29:cd:d7:6c:f6:a0:63:28:82:e2:
                    86:be:b4:04:e0:9b:e0:7e:a6:10:aa:9c:9c:55:83:
                    2b:e8:6d:1f:17:4c:d2:7e:1b:d0:d7:aa:bc:52:b0:
                    54:19:db:61:0f:38:21:45:65:f8:ec:d1:73:8c:4c:
                    cb:d6:66:78:9e:a6:4e:da:92:b4:28:fb:02:1d:2b:
                    b8:30:9b:52:d5:d6:27:2b:06:af:0f:7f:c1:b1:d2:
                    49:30:ce:b3:72:9f:c6:da:1e:b7:5c:47:2d:e2:58:
                    ac:0b:45:02:2b:cf:ea:0a:5c:e8:2b:23:15:41:34:
                    8c:3f:1d:59:14:9b:8a:13:a6:03:e4:cc:cc:58:bd:
                    7e:8b:55:2e:a3:e4:18:90:28:4b:a0:6b:d6:94:51:
                    b7:8f:af:48:e3:ad:5e:4e:a7:29:ae:7e:43:96:d6:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2B:0D:B0:E8:42:AE:AB:99:60:01:EA:41:9D:DA:3F:22:DE:A5:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/ba13bec1-c34c-3863-b274-69146af12c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl

            X509v3 Authority Key Identifier:
                keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e1:61:01:10:45:d7:d7:3e:11:3b:af:ba:b7:ab:c8:59:4f:
         81:26:78:ec:9a:9c:ee:de:64:a0:3e:6f:50:2e:97:bc:6a:17:
         95:fe:e0:03:79:98:6a:72:3e:8f:bc:41:bd:92:78:50:4f:0b:
         40:c5:95:90:ce:a3:8c:50:91:30:50:12:ff:eb:20:e9:2f:77:
         94:39:c4:41:8b:9e:da:66:59:fd:69:72:01:19:ef:ab:c9:70:
         40:7d:3a:de:a6:10:79:84:12:7d:9f:fe:40:1e:4f:a4:13:be:
         e8:f0:47:e6:3b:e5:46:fe:50:6a:5f:a4:b0:d9:e5:4f:b5:eb:
         82:67:df:64:82:34:f2:cd:e1:e0:97:a8:79:dd:ae:60:0b:72:
         c6:57:13:7d:ea:44:21:b2:8c:7a:36:5d:6f:a9:68:44:ec:17:
         87:91:32:8a:6b:9d:50:a1:54:09:0a:5a:3f:ee:3a:7d:8e:c2:
         44:b9:74:2a:be:4a:04:1f:78:9c:76:c8:d9:92:87:35:b6:c7:
         ce:cd:c9:97:51:b2:a6:1a:00:62:fb:b0:38:3a:fc:4f:5b:b0:
         c6:af:15:e3:2e:fa:82:4e:2e:0d:3e:4c:42:02:46:53:3f:a7:
         cb:9d:4d:99:3c:91:ec:fa:da:ad:b6:dd:d2:89:86:25:ff:b3:
         40:70:70:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnM5EfS8PKZ804AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk0ZTdmYzMtMjE2OS00Njc2LTkzZmItZmUxYTU1Yjlh
MmIwMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZjMxYTAxNmMtOWE1ZC00NzJmLTg0NjUtY2Y1YjMwY2VhMGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9QuvhG7+D4bn+I2qkrJlAbfV7nRxMArt4LT
cYsTK3zDZH8x4ije/cpvuMBbEK+ckKAyJOoJlTSkpt8wraKIUwCC+hxEwytXN5mR
m2yVCeI79bMpDwbg2R1d52Ap4SnN12z2oGMoguKGvrQE4JvgfqYQqpycVYMr6G0f
F0zSfhvQ16q8UrBUGdthDzghRWX47NFzjEzL1mZ4nqZO2pK0KPsCHSu4MJtS1dYn
KwavD3/BsdJJMM6zcp/G2h63XEct4lisC0UCK8/qClzoKyMVQTSMPx1ZFJuKE6YD
5MzMWL1+i1Uuo+QYkChLoGvWlFG3j69I461eTqcprn5DltboMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIrDbDoQq6rmWAB6kGd2j8i3qVyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOTRl
N2ZjMy0yMTY5LTQ2NzYtOTNmYi1mZTFhNTViOWEyYjAvYmExM2JlYzEtYzM0Yy0z
ODYzLWIyNzQtNjkxNDZhZjEyYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTk0ZTdmYzMtMjE2OS00Njc2LTkz
ZmItZmUxYTU1YjlhMmIwL2U5NGU3ZmMzLTIxNjktNDY3Ni05M2ZiLWZlMWE1NWI5
YTJiMC5jcmwwHwYDVR0jBBgwFoAUeSzaFy0pIOWgmosSyK1fVxVcm/8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOTRlN2ZjMy0yMTY5LTQ2NzYtOTNmYi1mZTFh
NTViOWEyYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EIqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACfhYQEQRdfXPhE7r7q3q8hZT4EmeOyanO7eZKA+b1Aul7xqF5X+4AN5
mGpyPo+8Qb2SeFBPC0DFlZDOo4xQkTBQEv/rIOkvd5Q5xEGLntpmWf1pcgEZ76vJ
cEB9Ot6mEHmEEn2f/kAeT6QTvujwR+Y75Ub+UGpfpLDZ5U+164Jn32SCNPLN4eCX
qHndrmALcsZXE33qRCGyjHo2XW+paETsF4eRMoprnVChVAkKWj/uOn2OwkS5dCq+
SgQfeJx2yNmShzW2x87NyZdRsqYaAGL7sDg6/E9bsMavFeMu+oJOLg0+TEICRlM/
p8udTZk8kez62q223dKJhiX/s0BwcMg=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:07:47 2025 by rpki-client