Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f646d65-3376-3b91-8bad-f0eaa3e10959.roa
File:                     2f646d65-3376-3b91-8bad-f0eaa3e10959.roa (raw, json)
Hash identifier:          b6dkDfz/WRkRgmUYOZHrrcye7w+hHUkN6bZUlwaLr8o=
Subject key identifier:   B6:02:7D:8B:4D:5B:CA:F4:95:AB:61:87:7C:69:74:FF:EC:70:7B:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B98724EA598FE83FE1E87E300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f646d65-3376-3b91-8bad-f0eaa3e10959.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     0
IP address blocks:        205.205.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:4e:a5:98:fe:83:fe:1e:87:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=3308547b-6822-43ad-a951-9144c7e63999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:5a:36:eb:98:d3:71:05:d7:47:8b:46:d3:
                    6a:cb:83:19:5a:c3:4a:d7:ca:b3:f8:e6:dd:47:07:
                    1d:c0:c5:5b:32:8c:14:aa:d4:3c:1b:d5:de:8b:23:
                    0f:d2:69:3b:6b:b7:7e:b6:67:25:a3:b2:51:2f:b4:
                    cd:10:a7:4b:49:5e:20:00:02:72:cc:7a:ba:a9:c8:
                    27:f7:6e:78:56:82:5b:fc:20:c3:87:21:ac:33:10:
                    fd:87:11:d0:98:44:ba:12:e7:cb:85:b7:1f:8d:48:
                    a4:2e:da:7d:16:14:70:1c:eb:77:a5:a8:cc:51:82:
                    9f:c7:b0:fd:42:e6:d1:46:6b:84:48:ed:61:85:5f:
                    3c:bc:8e:14:82:00:9c:92:6f:21:19:77:d3:50:cc:
                    32:8d:e2:08:74:12:f2:88:85:cf:37:12:94:f1:75:
                    e6:a0:da:37:cd:96:8a:0d:82:70:97:1f:fa:80:54:
                    82:ee:8c:bc:67:93:5e:71:2f:e2:13:e6:51:16:d7:
                    79:4a:67:1e:4e:79:48:21:7e:10:69:60:00:58:be:
                    81:df:6d:a4:0e:37:d6:6f:f2:70:b9:8c:fe:f7:34:
                    fa:90:b8:4f:4e:b4:5d:67:e2:4b:94:5d:59:1f:5d:
                    25:54:c2:ca:5c:be:9b:e9:b7:31:58:78:41:a4:de:
                    19:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:02:7D:8B:4D:5B:CA:F4:95:AB:61:87:7C:69:74:FF:EC:70:7B:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f646d65-3376-3b91-8bad-f0eaa3e10959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.205.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:72:ae:56:1a:02:fe:0e:0a:76:ea:67:b1:30:34:4c:d5:5b:
         c8:f9:48:44:de:71:c4:16:41:fc:a7:3f:08:3f:df:93:6b:13:
         64:27:6f:c9:22:66:eb:0b:ce:6c:35:61:dc:c1:30:83:13:ce:
         52:ca:9c:46:f5:cb:8d:bd:9d:5e:84:e5:0a:1e:97:44:5f:85:
         f3:59:58:53:1e:18:80:eb:e9:fc:c9:bc:27:b2:41:4e:1d:b9:
         72:ba:06:78:7e:da:9b:87:d4:a6:dd:73:aa:91:79:1a:45:7d:
         b4:d4:77:47:e4:88:a2:56:75:72:6b:09:5b:cc:91:bb:f0:23:
         80:62:b6:4d:35:ee:d3:f8:b2:7a:d9:65:6c:93:17:90:8e:3e:
         97:ac:f8:aa:af:e8:aa:b3:d3:29:7a:dd:ab:a9:22:21:79:eb:
         5e:82:92:bc:bd:20:0b:2b:7f:92:1d:3f:66:74:ce:10:d1:66:
         f9:8b:b8:49:0d:be:e2:40:6f:4f:74:7a:eb:cd:9a:ef:f3:6b:
         93:7e:59:06:e2:26:0a:6a:43:38:e5:be:cf:ce:a8:e3:5d:38:
         54:7b:f6:40:12:68:23:40:8d:80:02:d1:36:9b:d3:9f:d3:c1:
         18:aa:db:c3:9a:61:f7:43:9f:e2:a9:48:83:12:b0:4c:40:ae:
         a4:c9:3d:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYck6lmP6D/h6H4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk
MzMwODU0N2ItNjgyMi00M2FkLWE5NTEtOTE0NGM3ZTYzOTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvdaNuuY03EF10eLRtNqy4MZWsNK18qz+Obd
RwcdwMVbMowUqtQ8G9XeiyMP0mk7a7d+tmclo7JRL7TNEKdLSV4gAAJyzHq6qcgn
9254VoJb/CDDhyGsMxD9hxHQmES6EufLhbcfjUikLtp9FhRwHOt3pajMUYKfx7D9
QubRRmuESO1hhV88vI4UggCckm8hGXfTUMwyjeIIdBLyiIXPNxKU8XXmoNo3zZaK
DYJwlx/6gFSC7oy8Z5NecS/iE+ZRFtd5SmceTnlIIX4QaWAAWL6B322kDjfWb/Jw
uYz+9zT6kLhPTrRdZ+JLlF1ZH10lVMLKXL6b6bcxWHhBpN4ZWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYCfYtNW8r0lathh3xpdP/scHuPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmY2NDZkNjUtMzM3Ni0z
YjkxLThiYWQtZjBlYWEzZTEwOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzc3iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVyrlYaAv4OCnbqZ7EwNEzVW8j5SETeccQWQfynPwg/35NrE2Qnb8ki
ZusLzmw1YdzBMIMTzlLKnEb1y429nV6E5Qoel0RfhfNZWFMeGIDr6fzJvCeyQU4d
uXK6Bnh+2puH1Kbdc6qReRpFfbTUd0fkiKJWdXJrCVvMkbvwI4Bitk017tP4snrZ
ZWyTF5COPpes+Kqv6Kqz0yl63aupIiF5616Ckry9IAsrf5IdP2Z0zhDRZvmLuEkN
vuJAb090euvNmu/za5N+WQbiJgpqQzjlvs/OqONdOFR79kASaCNAjYAC0Tab05/T
wRiq28OaYfdDn+KpSIMSsExArqTJPVA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:56:32 2025 by rpki-client