Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/6056d4c7-5491-3e11-933d-f4b61c2d9eac.roa
File:                     6056d4c7-5491-3e11-933d-f4b61c2d9eac.roa (raw, json)
Hash identifier:          4+szrbZps0ahwOAYKG6zEgscFkvt7d6+4JNMzZu6D2w=
Subject key identifier:   4A:D4:A0:B7:7F:8E:98:3D:CB:04:BB:FB:C9:FF:BD:C4:B1:7A:7B:7B
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584BB02D15C1432B63B77A8432C0
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/6056d4c7-5491-3e11-933d-f4b61c2d9eac.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     203724
IP address blocks:        131.229.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:15:c1:43:2b:63:b7:7a:84:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=f3c5a062-9982-4234-938e-b7fdd3353064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:fe:4e:ac:a2:a7:4e:b9:be:a9:36:98:92:
                    b7:4c:9a:6d:e0:6f:6e:41:1b:45:4f:0d:9a:38:57:
                    8a:b0:d7:16:8f:0e:85:e5:1f:e5:96:bf:30:27:75:
                    8c:0b:bd:62:90:04:ba:04:fc:c5:62:d6:f7:dc:cd:
                    9f:54:27:35:dd:a3:39:38:16:47:89:f3:d1:95:40:
                    40:7c:02:fa:4b:83:03:99:16:00:9e:59:9a:9e:73:
                    0e:ff:f5:37:84:5c:4e:45:64:3e:c9:ac:44:f9:b9:
                    2b:c0:20:5d:35:ca:00:9a:93:68:8c:cc:30:2e:33:
                    7d:bd:dd:0d:7f:bb:43:ca:12:07:3e:98:ad:d4:db:
                    30:ad:84:2e:2d:05:39:0b:92:38:8d:dc:a5:82:28:
                    64:96:99:8b:2e:ba:3b:50:79:f7:8c:d6:fc:1f:b3:
                    5f:93:f5:e2:00:7d:9e:6d:94:9f:57:cb:99:73:6e:
                    44:34:ec:70:7d:33:62:3b:65:10:9a:7e:6b:9c:44:
                    5d:22:d6:0a:2f:0f:01:e9:47:70:1d:c8:7c:b2:5f:
                    ff:a7:da:2b:6f:51:b2:b3:73:bd:1a:a9:9c:b4:4a:
                    32:b3:15:b9:43:d8:1b:f9:a4:ef:27:c8:38:04:e0:
                    26:c5:26:dd:a6:38:a2:66:62:ac:38:d1:eb:e3:7a:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D4:A0:B7:7F:8E:98:3D:CB:04:BB:FB:C9:FF:BD:C4:B1:7A:7B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/6056d4c7-5491-3e11-933d-f4b61c2d9eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:11:4a:15:f6:54:76:70:e9:59:69:d3:29:94:d9:d9:f5:d7:
         f0:a4:f4:f3:19:c3:ba:83:d0:12:89:ec:9d:ae:37:4c:0a:93:
         c3:9f:78:b3:6f:7f:12:26:4b:be:89:a6:01:f4:33:2c:51:55:
         b0:e9:40:05:dd:b4:c6:43:fc:e1:55:07:97:3a:60:17:b8:c0:
         87:af:55:62:8b:ee:e4:73:2a:ee:7f:db:1b:fa:17:29:17:37:
         40:48:5e:12:27:f4:2f:07:16:56:5e:66:28:1b:b2:9f:7d:24:
         e8:08:c6:e8:a9:11:dc:a4:cb:ae:ae:e9:4c:83:b4:21:90:84:
         6b:56:44:cb:be:12:14:d5:4b:dd:06:85:10:c3:80:2f:11:e6:
         ef:49:12:91:16:7b:87:f7:eb:8f:b0:bf:85:06:69:49:65:84:
         1a:be:ad:08:bc:5c:2a:50:6d:7f:98:b2:bc:a3:b9:1b:a2:db:
         b2:94:ea:2e:66:f8:c3:d8:85:2b:d3:35:0d:ac:2c:e8:58:c1:
         bd:c4:6a:ae:45:26:64:ae:5f:30:fd:f4:31:5d:a6:47:76:b7:
         fe:cb:24:15:c4:ed:00:11:0b:d9:9b:e2:97:5f:0e:11:49:c1:
         a7:72:e3:e9:c3:37:2b:a5:6f:cf:68:78:c8:04:7e:63:dd:41:
         83:f9:f1:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLRXBQytjt3qEMsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3
Yjc0MB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk
ZjNjNWEwNjItOTk4Mi00MjM0LTkzOGUtYjdmZGQzMzUzMDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJb+Tqyip065vqk2mJK3TJpt4G9uQRtFTw2a
OFeKsNcWjw6F5R/llr8wJ3WMC71ikAS6BPzFYtb33M2fVCc13aM5OBZHifPRlUBA
fAL6S4MDmRYAnlmannMO//U3hFxORWQ+yaxE+bkrwCBdNcoAmpNojMwwLjN9vd0N
f7tDyhIHPpit1NswrYQuLQU5C5I4jdylgihklpmLLro7UHn3jNb8H7Nfk/XiAH2e
bZSfV8uZc25ENOxwfTNiO2UQmn5rnERdItYKLw8B6UdwHch8sl//p9orb1Gys3O9
GqmctEoysxW5Q9gb+aTvJ8g4BOAmxSbdpjiiZmKsONHr43rp5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErUoLd/jpg9ywS7+8n/vcSxent7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5
MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNjA1NmQ0YzctNTQ5MS0z
ZTExLTkzM2QtZjRiNjFjMmQ5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl
ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5
N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll
OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHERShX2VHZw6Vlp0ymU2dn11/Ck9PMZw7qD0BKJ7J2uN0wKk8OfeLNv
fxImS76JpgH0MyxRVbDpQAXdtMZD/OFVB5c6YBe4wIevVWKL7uRzKu5/2xv6FykX
N0BIXhIn9C8HFlZeZigbsp99JOgIxuipEdyky66u6UyDtCGQhGtWRMu+EhTVS90G
hRDDgC8R5u9JEpEWe4f364+wv4UGaUllhBq+rQi8XCpQbX+YsryjuRui27KU6i5m
+MPYhSvTNQ2sLOhYwb3Eaq5FJmSuXzD99DFdpkd2t/7LJBXE7QARC9mb4pdfDhFJ
wady4+nDNyulb89oeMgEfmPdQYP58ck=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:04 2025 by rpki-client