Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07a39338-ce2a-3cc7-b2a5-84442bcc34a5.roa
File:                     07a39338-ce2a-3cc7-b2a5-84442bcc34a5.roa (raw, json)
Hash identifier:          TrFvkNVHjIV7mPOLdeD3kNxBn4+nmF3kwkM2J5AKGx8=
Subject key identifier:   AA:F3:21:46:7E:3F:4A:F6:85:9E:62:84:3A:FE:E3:9D:BF:8C:40:17
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BAEC7B9BC21E0C759C6933440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07a39338-ce2a-3cc7-b2a5-84442bcc34a5.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     16224
IP address blocks:        206.136.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b9:bc:21:e0:c7:59:c6:93:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=0072e107-6648-4e8e-b418-806d5bd37596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:83:d7:3b:06:9c:c4:a4:a5:63:22:ca:83:
                    8c:2e:09:85:9f:7a:0f:05:bc:fc:5e:49:d8:0d:91:
                    97:9d:bf:ca:b0:4c:62:9e:fb:c3:df:c4:e0:97:ab:
                    27:35:61:e7:3f:32:3e:7b:7c:81:fa:3b:c3:54:11:
                    01:09:ac:49:55:52:7b:1b:fd:7d:35:00:ba:47:0e:
                    1c:40:ab:ae:11:4c:fb:a7:68:a1:a3:a8:a9:17:16:
                    94:c4:23:17:c6:b5:46:66:c7:38:5f:48:cd:5b:09:
                    f4:97:0b:5e:cc:13:b3:7c:f8:f3:81:08:26:ba:58:
                    17:cf:f9:e9:4f:d1:20:f2:ca:42:d6:66:ae:48:6e:
                    fe:f9:5d:17:4c:a7:04:19:41:16:d4:4d:e9:e6:13:
                    6b:80:fd:8c:44:55:0b:2b:0d:7f:fb:0d:04:b6:ba:
                    b6:7a:03:06:23:5f:5d:64:f8:56:4e:72:87:ed:72:
                    a2:30:96:a5:fc:27:0d:ea:e6:c1:7e:58:97:93:76:
                    44:ee:ff:de:64:cf:a9:11:45:09:36:e5:27:5e:c2:
                    f1:ae:f1:39:af:46:94:ea:d0:96:46:c4:94:83:5d:
                    f9:4d:a6:2e:33:e5:75:cb:a7:c1:40:9d:39:52:59:
                    c1:ce:81:df:cb:04:81:38:a3:16:2c:18:c3:f3:b3:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F3:21:46:7E:3F:4A:F6:85:9E:62:84:3A:FE:E3:9D:BF:8C:40:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07a39338-ce2a-3cc7-b2a5-84442bcc34a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.136.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e5:81:75:5b:6a:44:76:a2:53:8b:e6:e9:55:4c:d8:2a:d1:
         14:d1:32:23:0b:7d:97:30:f3:d0:12:cd:21:f3:b2:46:13:07:
         4e:7e:72:c4:23:39:76:2e:30:83:6d:47:10:5a:94:8d:c9:33:
         e3:b9:ae:43:0f:36:5f:8e:bf:0c:80:dd:c8:f0:9e:05:fe:e9:
         a5:85:6a:07:90:0e:7f:7b:9b:e4:e7:22:ce:58:25:9c:db:60:
         ff:3d:4b:06:39:45:5f:a7:3a:95:96:6a:b7:9f:1e:11:7a:0b:
         fe:69:5a:12:56:62:e7:5f:9b:1d:d6:e2:0d:17:15:90:a6:b1:
         bf:00:1b:28:b5:3a:f2:e4:2d:3f:ce:14:85:7f:29:cc:b8:b2:
         d1:93:2c:bf:47:b8:52:f6:1b:ae:5f:f8:3c:74:4d:46:f6:14:
         32:01:c7:b9:11:c6:f7:b3:d7:fd:41:ab:4e:66:8f:7e:db:45:
         da:63:c0:fe:36:79:72:22:a4:03:41:b2:f7:00:01:ad:ee:2b:
         73:36:50:fc:8d:28:28:68:af:0a:cc:37:a2:fc:ab:21:a4:b9:
         99:17:fd:b8:19:25:d1:7a:04:2f:4f:20:23:cc:7a:b7:0b:5e:
         24:cf:f3:71:8a:02:da:b2:04:c6:40:30:8e:78:44:ba:d7:da:
         e4:18:bb:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7m8IeDHWcaTNEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk
MDA3MmUxMDctNjY0OC00ZThlLWI0MTgtODA2ZDViZDM3NTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmmD1zsGnMSkpWMiyoOMLgmFn3oPBbz8XknY
DZGXnb/KsExinvvD38Tgl6snNWHnPzI+e3yB+jvDVBEBCaxJVVJ7G/19NQC6Rw4c
QKuuEUz7p2iho6ipFxaUxCMXxrVGZsc4X0jNWwn0lwtezBOzfPjzgQgmulgXz/np
T9Eg8spC1mauSG7++V0XTKcEGUEW1E3p5hNrgP2MRFULKw1/+w0Etrq2egMGI19d
ZPhWTnKH7XKiMJal/CcN6ubBfliXk3ZE7v/eZM+pEUUJNuUnXsLxrvE5r0aU6tCW
RsSUg135TaYuM+V1y6fBQJ05UlnBzoHfywSBOKMWLBjD87MruwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKrzIUZ+P0r2hZ5ihDr+452/jEAXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDdhMzkzMzgtY2UyYS0z
Y2M3LWIyYTUtODQ0NDJiY2MzNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzohwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/lgXVbakR2olOL5ulVTNgq0RTRMiMLfZcw89ASzSHzskYTB05+csQj
OXYuMINtRxBalI3JM+O5rkMPNl+OvwyA3cjwngX+6aWFageQDn97m+TnIs5YJZzb
YP89SwY5RV+nOpWWarefHhF6C/5pWhJWYudfmx3W4g0XFZCmsb8AGyi1OvLkLT/O
FIV/Kcy4stGTLL9HuFL2G65f+Dx0TUb2FDIBx7kRxvez1/1Bq05mj37bRdpjwP42
eXIipANBsvcAAa3uK3M2UPyNKChorwrMN6L8qyGkuZkX/bgZJdF6BC9PICPMercL
XiTP83GKAtqyBMZAMI54RLrX2uQYux4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:43:39 2025 by rpki-client