Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa
File:                     7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa (raw, json)
Hash identifier:          VmVPdlJ2JwoWVUyAtZ9UIFp0qnS8qhdXcTJV+5G4kEI=
Subject key identifier:   AB:B1:EF:26:DA:A6:8B:6D:0B:41:32:9F:47:D0:6A:09:A2:6F:C2:B8
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F4328584BBFA5A3273BD4DB27EB3E5900
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     30698
IP address blocks:        216.213.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a3:27:3b:d4:db:27:eb:3e:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=7431003f-a42a-4a67-a34e-3a83e47f9ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:72:a4:78:c7:c2:4e:4c:a7:5b:40:f5:f5:
                    43:fc:ef:08:a3:9d:17:dd:52:3c:d7:4e:46:11:4c:
                    cc:c7:87:80:9b:d2:07:44:39:ec:11:ad:b6:2b:de:
                    94:22:f3:cb:0c:ac:36:62:19:bb:2a:be:d4:5d:0f:
                    75:65:6c:54:ff:d6:a9:4e:a2:f6:2f:6c:8c:38:52:
                    78:a9:5f:7a:12:f6:8e:b8:b6:69:60:92:04:d8:d9:
                    3e:97:c4:46:c6:51:61:19:51:9a:a7:60:e6:19:96:
                    7b:15:dd:cc:c5:f3:31:fc:af:10:7f:7d:03:1e:2f:
                    51:95:bc:e4:9e:67:06:65:eb:79:0a:2f:dc:31:45:
                    52:2a:c3:87:06:cd:c1:6a:5d:41:c8:a7:88:d6:35:
                    28:f2:5f:1b:89:bf:97:b9:a3:9a:e4:98:12:42:bb:
                    14:0a:23:cf:a5:14:1f:bc:0f:e2:29:3e:bf:ea:4a:
                    05:ae:8f:66:9e:13:f1:26:59:bf:ec:ac:5c:72:d1:
                    78:08:dd:cf:4e:56:08:15:ce:d5:6d:ac:4a:f3:83:
                    1b:37:29:a0:17:ca:29:ae:f5:66:8a:e7:d6:43:51:
                    0e:29:d5:2b:7c:77:a4:14:47:a4:52:a9:4e:dd:bd:
                    8f:c5:ab:49:8e:7e:b6:8d:c0:9b:b8:a7:e2:21:dc:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B1:EF:26:DA:A6:8B:6D:0B:41:32:9F:47:D0:6A:09:A2:6F:C2:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c3:c5:cb:64:44:be:ce:96:3c:5b:b3:37:d5:ec:48:1a:87:
         ec:74:7e:45:7d:6f:94:2a:3d:7a:5a:55:cf:9a:3b:84:d5:84:
         17:45:f2:1a:e8:0e:cd:92:4b:7f:fe:bf:1f:74:86:ca:d7:f4:
         f9:64:e1:74:fd:17:19:dc:1f:5b:0e:ed:1e:2a:15:c7:14:47:
         22:b7:e9:fc:fe:16:31:db:42:d4:8e:2f:2f:8b:2f:15:cd:3c:
         ce:07:42:3d:2c:31:90:18:d7:8a:8b:1e:99:92:58:dc:34:26:
         1b:08:0e:ad:6c:83:6e:15:43:6c:f2:98:5f:78:96:2e:bc:8e:
         0e:e4:a9:e2:cc:eb:a9:3c:33:fb:e9:1e:21:fa:40:ef:b8:56:
         56:14:30:01:93:1a:57:fc:06:4f:19:24:c8:a4:4b:5f:f0:a5:
         e0:ec:2a:e3:2c:dd:79:5a:56:bd:e3:a8:87:a3:8d:b4:4f:cf:
         85:26:22:68:dc:a6:d2:a6:f4:66:ea:9f:37:79:ec:23:da:7a:
         fe:2d:9c:42:fc:78:e7:a4:1b:a6:f9:d3:c7:11:8d:4f:5b:e2:
         d6:f9:bf:6d:e2:93:4b:c7:49:af:97:87:3c:41:67:88:87:46:
         75:0d:b6:51:5c:ef:17:4d:a9:36:86:60:7e:3b:0b:2b:72:09:
         fd:6f:2e:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paMnO9TbJ+s+WQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl
YjQ5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk
NzQzMTAwM2YtYTQyYS00YTY3LWEzNGUtM2E4M2U0N2Y5YWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk65ypHjHwk5Mp1tA9fVD/O8Io50X3VI8105G
EUzMx4eAm9IHRDnsEa22K96UIvPLDKw2Yhm7Kr7UXQ91ZWxU/9apTqL2L2yMOFJ4
qV96EvaOuLZpYJIE2Nk+l8RGxlFhGVGap2DmGZZ7Fd3MxfMx/K8Qf30DHi9Rlbzk
nmcGZet5Ci/cMUVSKsOHBs3Bal1ByKeI1jUo8l8bib+XuaOa5JgSQrsUCiPPpRQf
vA/iKT6/6koFro9mnhPxJlm/7KxcctF4CN3PTlYIFc7VbaxK84MbNymgF8oprvVm
iufWQ1EOKdUrfHekFEekUqlO3b2PxatJjn62jcCbuKfiIdye+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKux7ybapottC0Eyn0fQagmib8K4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0
OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvN2UxNGVjNGYtZGFhOC0z
MDBmLWE5YTktMzkyYzY1ZWU3OTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl
YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl
ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw
M2E2ZWViNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2NU4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTDxctkRL7OljxbszfV7Egah+x0fkV9b5QqPXpaVc+aO4TVhBdF8hro
Ds2SS3/+vx90hsrX9Plk4XT9FxncH1sO7R4qFccURyK36fz+FjHbQtSOLy+LLxXN
PM4HQj0sMZAY14qLHpmSWNw0JhsIDq1sg24VQ2zymF94li68jg7kqeLM66k8M/vp
HiH6QO+4VlYUMAGTGlf8Bk8ZJMikS1/wpeDsKuMs3XlaVr3jqIejjbRPz4UmImjc
ptKm9Gbqnzd57CPaev4tnEL8eOekG6b508cRjU9b4tb5v23ik0vHSa+XhzxBZ4iH
RnUNtlFc7xdNqTaGYH47CytyCf1vLoo=
-----END CERTIFICATE-----
Generated at Fri Nov 7 11:24:34 2025 by rpki-client