Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa
File:                     f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa (raw, json)
Hash identifier:          q+A1JzejnM39eqUpMXAIH1ZLaNZnR2iq6PupKGFO63s=
Subject key identifier:   E9:04:42:B4:7D:14:D6:A0:A9:22:63:18:98:2F:8D:7B:C8:25:48:BA
Certificate issuer:       /CN=66049fc9-3d05-426a-98ee-53b139a32165
Certificate serial:       010D0C9F4328584B9E0796A765505A783E374C00
Authority key identifier: CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        207.45.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:96:a7:65:50:5a:78:3e:37:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66049fc9-3d05-426a-98ee-53b139a32165
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=2e6ec56e-3d57-4eba-adb6-604f8156b134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:c1:5f:9c:a2:a9:bb:b7:a8:86:24:81:83:
                    15:51:c1:3b:a3:0e:91:16:e6:57:7a:01:ff:22:9a:
                    b1:63:13:25:ed:f1:cd:20:bb:9d:ad:e7:05:fc:ff:
                    e7:25:dc:fb:2a:b6:52:f2:48:c2:b5:ce:a8:ff:56:
                    61:bf:f8:11:db:a0:bb:be:6b:4d:44:bc:3e:78:95:
                    87:1b:d8:7a:5b:e6:ff:e5:2d:e1:22:97:dc:b6:5b:
                    03:65:e2:e7:a9:c7:7b:05:cf:94:fd:cf:83:c0:22:
                    59:5b:ba:0c:8b:c8:c8:a9:fe:a1:23:33:77:35:19:
                    fa:89:9c:97:9b:3a:03:54:e6:72:cf:4e:59:1f:f0:
                    e3:97:85:01:3c:14:5d:af:9e:55:d8:80:73:55:10:
                    99:e5:52:ea:7f:59:1c:ad:30:d1:2a:ab:83:52:b3:
                    c4:31:99:75:75:78:95:e2:92:29:bd:c1:90:ef:d1:
                    ee:69:c6:2f:fe:70:bc:c2:0f:18:ae:66:5a:e2:cf:
                    1c:48:af:05:47:be:75:86:1e:03:0c:37:28:a9:ca:
                    07:94:63:eb:08:e8:f0:6e:ff:71:b9:90:11:40:f9:
                    14:69:d2:34:45:db:65:24:f1:4c:ad:fc:da:61:fe:
                    31:bd:ed:d7:67:09:ba:16:f4:a5:45:79:c9:b1:63:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:04:42:B4:7D:14:D6:A0:A9:22:63:18:98:2F:8D:7B:C8:25:48:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/f9ce6e9e-a586-3d86-8bd2-1c410f17c72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165/66049fc9-3d05-426a-98ee-53b139a32165.crl

            X509v3 Authority Key Identifier:
                keyid:CE:47:99:91:0A:41:1F:3A:95:A8:1E:1F:0F:DC:2F:09:86:87:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66049fc9-3d05-426a-98ee-53b139a32165.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.45.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:78:d3:5f:c0:1c:c7:a0:bd:74:68:41:f6:7c:00:fb:f1:d9:
         20:26:04:6d:be:e2:f2:5a:a8:33:71:80:3a:1d:ab:9c:80:7b:
         73:84:cd:ba:92:62:52:77:99:aa:e7:df:ad:07:f1:dc:b7:3e:
         15:ae:7e:ab:b7:8b:32:64:f6:93:6a:73:cc:6d:2a:6c:43:e7:
         6c:14:d3:69:d8:af:41:c4:b8:bf:ea:2d:2e:50:3b:6f:36:cd:
         1e:ae:a2:b1:cb:1c:da:35:e4:5d:93:56:82:96:d9:e0:f1:0b:
         43:1e:18:00:15:2f:65:00:ca:dd:98:03:34:fb:e2:fa:d9:ec:
         64:5a:a4:1d:60:e8:14:41:6c:d0:14:5e:ff:10:3b:d7:b1:1f:
         3e:83:0d:f8:bd:ec:a1:0f:b0:2a:af:8e:6b:7e:dc:e0:5f:5a:
         03:a2:3a:d4:f9:f9:6c:9a:78:b0:1d:db:aa:fa:19:56:26:af:
         09:df:0a:f8:12:c6:7d:6e:a4:3d:81:8a:a5:9b:dc:7a:f9:b2:
         46:b3:9d:2e:b8:21:75:73:dc:be:b5:0d:18:2f:cb:07:5e:02:
         69:b7:c0:0b:80:8a:78:7b:a5:69:d4:b4:00:77:03:cd:aa:d9:
         4e:89:56:6e:36:24:92:9c:50:61:ed:fc:e6:71:2e:a1:cb:8a:
         50:c8:94:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5anZVBaeD43TAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjYwNDlmYzktM2QwNS00MjZhLTk4ZWUtNTNiMTM5YTMy
MTY1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
MmU2ZWM1NmUtM2Q1Ny00ZWJhLWFkYjYtNjA0ZjgxNTZiMTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTjBX5yiqbu3qIYkgYMVUcE7ow6RFuZXegH/
IpqxYxMl7fHNILudrecF/P/nJdz7KrZS8kjCtc6o/1Zhv/gR26C7vmtNRLw+eJWH
G9h6W+b/5S3hIpfctlsDZeLnqcd7Bc+U/c+DwCJZW7oMi8jIqf6hIzN3NRn6iZyX
mzoDVOZyz05ZH/Djl4UBPBRdr55V2IBzVRCZ5VLqf1kcrTDRKquDUrPEMZl1dXiV
4pIpvcGQ79HuacYv/nC8wg8YrmZa4s8cSK8FR751hh4DDDcoqcoHlGPrCOjwbv9x
uZARQPkUadI0RdtlJPFMrfzaYf4xve3XZwm6FvSlRXnJsWMdGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOkEQrR9FNagqSJjGJgvjXvIJUi6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82NjA0
OWZjOS0zZDA1LTQyNmEtOThlZS01M2IxMzlhMzIxNjUvZjljZTZlOWUtYTU4Ni0z
ZDg2LThiZDItMWM0MTBmMTdjNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjYwNDlmYzktM2QwNS00MjZhLTk4
ZWUtNTNiMTM5YTMyMTY1LzY2MDQ5ZmM5LTNkMDUtNDI2YS05OGVlLTUzYjEzOWEz
MjE2NS5jcmwwHwYDVR0jBBgwFoAUzkeZkQpBHzqVqB4fD9wvCYaHxzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82NjA0OWZjOS0zZDA1LTQyNmEtOThlZS01M2Ix
MzlhMzIxNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzy1PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADl401/AHMegvXRoQfZ8APvx2SAmBG2+4vJaqDNxgDodq5yAe3OEzbqS
YlJ3marn360H8dy3PhWufqu3izJk9pNqc8xtKmxD52wU02nYr0HEuL/qLS5QO282
zR6uorHLHNo15F2TVoKW2eDxC0MeGAAVL2UAyt2YAzT74vrZ7GRapB1g6BRBbNAU
Xv8QO9exHz6DDfi97KEPsCqvjmt+3OBfWgOiOtT5+WyaeLAd26r6GVYmrwnfCvgS
xn1upD2BiqWb3Hr5skaznS64IXVz3L61DRgvywdeAmm3wAuAinh7pWnUtAB3A82q
2U6JVm42JJKcUGHt/OZxLqHLilDIlAQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:28 2025 by rpki-client