Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/d887fb3d-8e82-3c9d-9309-efc92b755e5f.roa
File:                     d887fb3d-8e82-3c9d-9309-efc92b755e5f.roa (raw, json)
Hash identifier:          tpB9pDvh0hvyLL0r+xg7a7Y73wHlg0lE48lgPMJh94Y=
Subject key identifier:   51:0B:1E:DB:C3:87:31:32:78:9F:44:95:8A:F0:CA:6F:79:B1:4D:FA
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584BB2F82FD7E98FB4713CF40F80
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/d887fb3d-8e82-3c9d-9309-efc92b755e5f.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     30687
IP address blocks:        216.38.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:2f:d7:e9:8f:b4:71:3c:f4:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=79849766-3788-4431-b380-349a3eabbf5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:57:9c:44:b5:16:51:32:fa:67:9f:1e:c9:
                    28:44:11:c1:3c:ec:bb:52:44:7c:6d:55:a5:87:aa:
                    2f:4c:91:61:66:3a:c4:b5:4b:69:4a:76:ed:e4:51:
                    4b:67:80:23:c8:65:be:50:2a:a2:f2:82:1a:3e:4b:
                    17:ec:9c:e0:0c:91:be:72:ce:8d:61:25:bc:1c:24:
                    fb:35:bc:6c:98:b2:87:40:c6:24:f4:f9:6a:c6:10:
                    10:25:11:65:ab:25:e3:22:87:a4:0a:78:4a:aa:f2:
                    16:0e:28:b4:ce:e7:32:fd:e7:70:14:26:3b:f5:94:
                    98:10:21:c3:2e:9b:f4:b6:e2:5a:05:bf:75:c8:e7:
                    16:29:80:85:f1:26:d5:6b:6c:0c:7a:a0:5b:5b:d1:
                    d4:59:c4:8d:b6:94:1f:fa:f3:b5:90:bc:d9:88:2e:
                    ff:71:af:a6:a2:0f:20:ce:62:b3:69:95:61:86:c8:
                    91:37:24:ec:cc:1c:0e:2a:45:71:50:b2:b6:97:59:
                    f0:a6:73:02:74:ff:4f:10:e2:17:6d:6d:23:ad:1b:
                    d0:8e:4e:a8:0a:9a:7a:7b:af:80:66:5c:5d:f2:78:
                    75:10:ba:84:9f:ca:ca:d0:f1:f0:71:8d:30:f3:df:
                    2c:8a:8e:1b:f8:cc:fc:09:e9:ba:a3:40:f2:51:f4:
                    68:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0B:1E:DB:C3:87:31:32:78:9F:44:95:8A:F0:CA:6F:79:B1:4D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/d887fb3d-8e82-3c9d-9309-efc92b755e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:21:78:f8:c8:ce:25:2d:98:e8:02:7c:22:98:5e:1c:3b:fc:
         4f:2f:6b:a0:8f:75:41:12:5a:d6:da:10:f1:d1:3f:36:9a:39:
         87:82:a6:ff:8f:c1:aa:b7:af:d6:a1:54:e0:3a:fc:bf:05:00:
         51:06:b6:16:a9:57:74:5f:8a:f0:ec:bb:5d:33:ff:c9:62:cb:
         56:0d:f8:89:27:e2:f2:8f:ed:05:08:d4:c5:a0:cd:95:79:83:
         3a:2a:ed:ad:57:ab:28:bc:a8:5b:b0:64:a1:06:a7:f4:cf:b2:
         ad:1f:ae:a9:86:4c:4b:2d:12:29:65:19:db:92:e2:92:d7:b5:
         7b:b6:11:3f:ad:0d:43:6e:4f:ea:ec:08:66:c0:8e:1c:a4:e3:
         db:55:a4:02:4f:8d:84:f4:c1:5b:fa:5e:4c:1a:33:21:52:cc:
         ac:72:49:d5:3a:eb:e6:4a:06:e7:5d:3c:44:6e:b0:c6:14:1f:
         5e:4e:1b:e8:8c:16:eb:82:dd:b5:51:25:36:68:2f:63:f4:f5:
         49:14:69:d5:6d:70:74:f9:ec:ec:bb:a9:76:e9:07:18:5d:6b:
         df:2d:b6:98:36:00:9f:cc:85:a1:ba:f1:05:0c:a0:00:df:85:
         43:b3:87:b8:52:c2:d3:92:ce:71:70:7a:6b:4a:ba:98:e9:2d:
         a5:46:cc:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+C/X6Y+0cTz0D4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjgyODFhMGEtMDBmMi00YWFjLWIzMTEtZTk2MWE3Y2Nl
ZGZiMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
Nzk4NDk3NjYtMzc4OC00NDMxLWIzODAtMzQ5YTNlYWJiZjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjhXnES1FlEy+mefHskoRBHBPOy7UkR8bVWl
h6ovTJFhZjrEtUtpSnbt5FFLZ4AjyGW+UCqi8oIaPksX7JzgDJG+cs6NYSW8HCT7
NbxsmLKHQMYk9PlqxhAQJRFlqyXjIoekCnhKqvIWDii0zucy/edwFCY79ZSYECHD
Lpv0tuJaBb91yOcWKYCF8SbVa2wMeqBbW9HUWcSNtpQf+vO1kLzZiC7/ca+mog8g
zmKzaZVhhsiRNyTszBwOKkVxULK2l1nwpnMCdP9PEOIXbW0jrRvQjk6oCpp6e6+A
Zlxd8nh1ELqEn8rK0PHwcY0w898sio4b+Mz8Cem6o0DyUfRo8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFELHtvDhzEyeJ9ElYrwym95sU36MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4
MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYxYTdjY2VkZmIvZDg4N2ZiM2QtOGU4Mi0z
YzlkLTkzMDktZWZjOTJiNzU1ZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjgyODFhMGEtMDBmMi00YWFjLWIz
MTEtZTk2MWE3Y2NlZGZiL2I4MjgxYTBhLTAwZjItNGFhYy1iMzExLWU5NjFhN2Nj
ZWRmYi5jcmwwHwYDVR0jBBgwFoAUNfABs7MMIwjruQt82C4ceWMKjxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYx
YTdjY2VkZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkhePjIziUtmOgCfCKYXhw7/E8va6CPdUESWtbaEPHRPzaaOYeCpv+P
waq3r9ahVOA6/L8FAFEGthapV3RfivDsu10z/8liy1YN+Ikn4vKP7QUI1MWgzZV5
gzoq7a1Xqyi8qFuwZKEGp/TPsq0frqmGTEstEillGduS4pLXtXu2ET+tDUNuT+rs
CGbAjhyk49tVpAJPjYT0wVv6XkwaMyFSzKxySdU66+ZKBuddPERusMYUH15OG+iM
FuuC3bVRJTZoL2P09UkUadVtcHT57Oy7qXbpBxhda98ttpg2AJ/MhaG68QUMoADf
hUOzh7hSwtOSznFwemtKupjpLaVGzAA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:56:34 2025 by rpki-client