Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87618e35-5125-3a43-9bc1-fa27174b3c50.roa
File:                     87618e35-5125-3a43-9bc1-fa27174b3c50.roa (raw, json)
Hash identifier:          1JsfY0Ib7GsvCQk4lXEQ2PMgQeTsGB9SLtsRdqmtVcM=
Subject key identifier:   18:44:D4:E0:0E:1E:77:92:59:42:D6:DE:C1:F6:4A:B4:F1:4F:F2:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F80F17343992D4EC450360
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87618e35-5125-3a43-9bc1-fa27174b3c50.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        130.81.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:0f:17:34:39:92:d4:ec:45:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=be8d52ba-701f-4aea-856f-8eae7c92e85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:5b:00:10:44:5b:88:d0:77:f1:60:3b:5a:
                    32:df:1f:63:02:ce:db:f6:1f:e7:02:09:aa:4e:a3:
                    2b:28:a5:c3:10:a9:80:4f:62:19:8d:be:72:fe:ef:
                    6b:80:52:0d:7b:75:03:cc:82:6a:88:f1:46:f4:de:
                    81:1a:43:f6:96:0e:21:45:8c:1a:52:e6:e3:51:97:
                    7e:a0:d7:ae:21:8d:3d:96:88:15:30:e4:23:a8:24:
                    43:07:e1:17:1b:e2:31:07:34:f2:4e:6f:cf:2e:16:
                    eb:48:3f:d5:e3:24:60:4f:20:8c:7b:63:a0:47:3e:
                    c8:00:4c:9d:5a:bb:6d:58:85:f5:fc:b2:a6:63:c1:
                    2a:fc:8e:71:e4:ab:3d:78:7d:ec:49:25:ce:65:56:
                    74:5f:1a:a6:d2:72:b4:12:fb:38:50:ad:7f:29:74:
                    9e:8a:6b:d6:e8:43:8c:92:bd:fd:9d:2f:28:e6:8a:
                    27:2d:9a:57:2b:03:cf:a2:34:12:0d:e1:03:14:b3:
                    a7:31:79:11:d8:1b:09:24:59:60:ce:1b:03:e8:5b:
                    e6:38:60:5a:ee:88:b9:34:1c:a9:97:e0:64:89:f7:
                    79:a7:d5:b9:28:6e:8a:19:eb:76:ea:fa:a4:1c:b8:
                    0f:e8:eb:17:b1:d6:dd:9e:47:b1:b9:dc:1f:35:1b:
                    1f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:44:D4:E0:0E:1E:77:92:59:42:D6:DE:C1:F6:4A:B4:F1:4F:F2:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87618e35-5125-3a43-9bc1-fa27174b3c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.81.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d2:4b:7b:1f:81:76:b2:8d:17:71:39:d8:41:dd:63:ad:ec:
         9a:13:86:2e:53:8b:66:0f:d2:1d:a0:67:7a:69:7a:8c:31:8c:
         9d:49:45:10:34:f8:85:52:9e:c6:df:4c:85:ce:3a:35:c0:81:
         dd:b0:80:d0:4a:0d:c2:59:5e:c8:03:51:a0:30:fd:25:ca:8a:
         49:26:99:0e:b0:8e:8e:ce:1e:5a:fb:bb:e4:f2:3c:e7:87:91:
         12:69:c3:6d:6f:35:04:39:d8:7a:3a:1f:ce:a3:13:37:fe:16:
         47:d9:ff:a3:e5:b4:90:ca:f6:9d:dd:cd:b0:fc:68:cd:b4:e1:
         81:9d:85:89:53:90:42:ef:61:ce:30:f3:d9:c3:37:16:8e:64:
         30:bf:ed:0a:ea:9c:33:e2:31:a0:de:a6:09:94:07:9e:b8:e5:
         b1:13:39:a1:92:e4:49:2d:c7:a7:15:bd:03:72:02:f8:9f:ea:
         62:99:7a:b9:bc:c9:09:52:7a:18:62:d3:05:f0:bb:f2:a8:d2:
         39:d6:f3:f8:4f:df:38:36:8f:db:ed:57:00:f1:6f:dd:7c:5d:
         56:40:0a:5c:c5:fa:3d:d3:a7:5c:37:f7:e8:97:1f:d5:50:29:
         45:8c:bc:b4:78:7e:09:65:fe:60:2a:e7:fd:de:a1:5a:62:58:
         58:1d:db:62
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy+A8XNDmS1OxFA2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
YmU4ZDUyYmEtNzAxZi00YWVhLTg1NmYtOGVhZTdjOTJlODVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm11bABBEW4jQd/FgO1oy3x9jAs7b9h/nAgmq
TqMrKKXDEKmAT2IZjb5y/u9rgFINe3UDzIJqiPFG9N6BGkP2lg4hRYwaUubjUZd+
oNeuIY09logVMOQjqCRDB+EXG+IxBzTyTm/PLhbrSD/V4yRgTyCMe2OgRz7IAEyd
WrttWIX1/LKmY8Eq/I5x5Ks9eH3sSSXOZVZ0Xxqm0nK0Evs4UK1/KXSeimvW6EOM
kr39nS8o5oonLZpXKwPPojQSDeEDFLOnMXkR2BsJJFlgzhsD6FvmOGBa7oi5NByp
l+Bkifd5p9W5KG6KGet26vqkHLgP6OsXsdbdnkexudwfNRsfEwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBhE1OAOHneSWULW3sH2SrTxT/LQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODc2MThlMzUtNTEyNS0z
YTQzLTliYzEtZmEyNzE3NGIzYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAglEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATdJLex+BdrKNF3E52EHdY63smhOGLlOLZg/SHaBneml6jDGMnUlFEDT4
hVKext9Mhc46NcCB3bCA0EoNwlleyANRoDD9JcqKSSaZDrCOjs4eWvu75PI854eR
EmnDbW81BDnYejofzqMTN/4WR9n/o+W0kMr2nd3NsPxozbThgZ2FiVOQQu9hzjDz
2cM3Fo5kML/tCuqcM+IxoN6mCZQHnrjlsRM5oZLkSS3HpxW9A3IC+J/qYpl6ubzJ
CVJ6GGLTBfC78qjSOdbz+E/fODaP2+1XAPFv3XxdVkAKXMX6PdOnXDf36Jcf1VAp
RYy8tHh+CWX+YCrn/d6hWmJYWB3bYg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:27:48 2025 by rpki-client