Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa
File:                     16315bab-49c8-3caf-be0c-7c6a9af964f5.roa (raw, json)
Hash identifier:          rQVIitaihoeVPMc6N/4yD/1fDs2qx1dCzslvdkCWC/E=
Subject key identifier:   B2:8C:0D:14:80:BB:A8:8D:34:6B:B0:F7:06:9F:CD:A9:71:C9:07:EB
Certificate issuer:       /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Certificate serial:       010D0C9F4328584BA0D245B2493E0E554B534380
Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        161.199.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:45:b2:49:3e:0e:55:4b:53:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=b3a4115c-a74c-4aee-948c-64e8c3feafc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:eb:0e:ea:55:e7:df:6e:71:89:24:c6:ff:18:
                    be:b0:a0:a8:fd:cd:d5:81:83:34:79:96:aa:b2:0e:
                    73:7a:86:b1:e2:a8:d5:7a:6c:00:20:5b:1e:f4:44:
                    c5:3a:7e:a1:ab:d4:d1:57:47:95:84:ea:db:1b:5c:
                    ef:bf:80:45:d7:0b:93:72:f4:32:27:5b:2a:e1:31:
                    ba:65:79:ac:2e:44:d4:6d:fe:93:e1:b3:87:c0:14:
                    92:68:68:fa:63:7c:16:9a:c8:01:49:f8:a4:2a:51:
                    d7:67:98:52:9c:44:73:82:22:60:e0:13:c2:14:80:
                    db:91:b8:b8:9d:50:5b:89:5a:2f:77:9d:60:83:b5:
                    79:a9:3a:f8:bf:5a:dd:13:85:d4:69:b0:83:d3:e9:
                    7c:86:df:92:bf:18:a3:a8:e9:d1:70:db:14:d3:bf:
                    84:83:1d:df:e8:b0:64:65:eb:7e:09:8c:84:1b:74:
                    e2:6a:41:2b:bb:7e:27:01:70:58:8b:7e:27:df:59:
                    4f:30:b9:db:02:5a:5b:b1:a1:a3:43:c3:f4:fb:06:
                    e1:6c:df:2f:f5:ec:49:c6:13:ba:0f:0e:85:6e:d9:
                    fb:f0:ea:84:da:ff:b1:29:87:8e:37:bc:c7:ed:4d:
                    7f:50:37:14:b1:46:aa:81:da:6e:53:84:fb:c9:ff:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8C:0D:14:80:BB:A8:8D:34:6B:B0:F7:06:9F:CD:A9:71:C9:07:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl

            X509v3 Authority Key Identifier:
                keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:71:bd:0c:a1:f5:89:8f:16:74:27:87:aa:9d:92:85:11:58:
         73:a4:c4:53:6f:aa:d3:5e:fb:34:51:b7:5e:47:10:1c:ea:4b:
         77:4e:4c:f6:7d:a3:d7:14:27:ee:6d:e0:06:23:90:4a:37:19:
         f2:90:6c:01:a0:d4:78:d2:40:89:16:3f:d3:9c:30:09:82:5b:
         2d:a0:9e:79:32:4c:00:bc:41:3c:71:15:6a:56:2e:d3:d8:16:
         63:6e:73:ad:d3:ef:ab:5b:6e:a9:14:56:7c:e2:61:b7:62:ae:
         20:b6:07:94:fa:3d:17:5d:62:7c:41:59:d6:8f:4b:e8:2a:6c:
         72:59:01:cf:a6:70:df:0e:22:1a:4a:be:b0:79:4c:88:5c:84:
         7d:57:f8:76:ed:c4:85:be:3d:65:5b:cf:bf:80:ea:92:49:96:
         de:6b:6f:51:f3:ad:f2:74:2a:48:f9:7f:3a:ca:4c:d9:e5:8c:
         b9:20:10:9f:f0:05:88:be:dc:71:d0:e9:13:db:86:9a:b8:d5:
         4c:6c:a2:37:fb:9d:a0:87:2f:85:48:d4:e9:fa:d5:30:d9:8b:
         e1:62:b0:4d:fc:f9:19:47:36:7b:ed:18:44:00:c1:6d:ed:11:
         06:04:d5:4e:a1:e1:07:c3:59:4c:db:b1:5c:3e:a6:a8:11:19:
         75:d2:3c:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kWyST4OVUtTQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjliNzk0NDctZGE4OC00NTI4LThmZjctMGQzNjdkMmQ3
NmU4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk
YjNhNDExNWMtYTc0Yy00YWVlLTk0OGMtNjRlOGMzZmVhZmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+sO6lXn325xiSTG/xi+sKCo/c3VgYM0eZaq
sg5zeoax4qjVemwAIFse9ETFOn6hq9TRV0eVhOrbG1zvv4BF1wuTcvQyJ1sq4TG6
ZXmsLkTUbf6T4bOHwBSSaGj6Y3wWmsgBSfikKlHXZ5hSnERzgiJg4BPCFIDbkbi4
nVBbiVovd51gg7V5qTr4v1rdE4XUabCD0+l8ht+SvxijqOnRcNsU07+Egx3f6LBk
Zet+CYyEG3TiakEru34nAXBYi34n31lPMLnbAlpbsaGjQ8P0+wbhbN8v9exJxhO6
Dw6Fbtn78OqE2v+xKYeON7zH7U1/UDcUsUaqgdpuU4T7yf8rwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLKMDRSAu6iNNGuw9wafzalxyQfrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3
OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2N2QyZDc2ZTgvMTYzMTViYWItNDljOC0z
Y2FmLWJlMGMtN2M2YTlhZjk2NGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjliNzk0NDctZGE4OC00NTI4LThm
ZjctMGQzNjdkMmQ3NmU4L2I5Yjc5NDQ3LWRhODgtNDUyOC04ZmY3LTBkMzY3ZDJk
NzZlOC5jcmwwHwYDVR0jBBgwFoAUHiwkM9lMpkRaA/NOR07DQO2LIoIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2
N2QyZDc2ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoceAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNxvQyh9YmPFnQnh6qdkoURWHOkxFNvqtNe+zRRt15HEBzqS3dOTPZ9
o9cUJ+5t4AYjkEo3GfKQbAGg1HjSQIkWP9OcMAmCWy2gnnkyTAC8QTxxFWpWLtPY
FmNuc63T76tbbqkUVnziYbdiriC2B5T6PRddYnxBWdaPS+gqbHJZAc+mcN8OIhpK
vrB5TIhchH1X+HbtxIW+PWVbz7+A6pJJlt5rb1HzrfJ0Kkj5fzrKTNnljLkgEJ/w
BYi+3HHQ6RPbhpq41Uxsojf7naCHL4VI1On61TDZi+FisE38+RlHNnvtGEQAwW3t
EQYE1U6h4QfDWUzbsVw+pqgRGXXSPDA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:45 2025 by rpki-client