Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f08eab06-e830-3df1-8437-affd489ba14b.roa
File:                     f08eab06-e830-3df1-8437-affd489ba14b.roa (raw, json)
Hash identifier:          tNmnYxbYw9dW2qvG5NWY+jGqPBHWytg0bw2QEqpDQxQ=
Subject key identifier:   49:27:AE:FC:5E:3A:FF:B5:65:B5:2E:B9:FF:E1:DD:12:E8:78:CB:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BABFD29D2B07EC4290BE96B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f08eab06-e830-3df1-8437-affd489ba14b.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     701
IP address blocks:        96.237.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:29:d2:b0:7e:c4:29:0b:e9:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=89f8ab8a-b83e-452e-b836-172c3b122df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:4a:87:8d:c8:d4:3e:fc:a4:ed:9c:52:ea:
                    be:6e:dc:04:46:a3:b3:13:c5:53:02:df:06:e6:51:
                    ec:8f:df:08:bb:8a:0d:f8:b4:db:64:a6:3b:cd:98:
                    38:76:08:96:de:fe:b8:9d:da:33:54:25:70:a5:e8:
                    e8:50:d6:70:8a:ee:dc:4d:b1:c6:a3:bd:20:4c:21:
                    37:e4:ad:22:c9:b7:78:f0:10:2f:41:87:5a:55:d2:
                    fa:ba:7e:37:f8:74:f5:36:f3:a2:56:7d:0b:1d:c4:
                    3f:c6:0a:b9:c8:22:63:97:a2:8b:c4:c2:44:7b:b7:
                    db:cc:da:d2:1b:9f:91:03:1a:d8:30:5b:27:e3:85:
                    53:52:de:32:d2:2d:90:9e:ba:99:31:26:a9:d7:c8:
                    a6:3f:4c:ae:2d:47:dd:ef:53:bb:83:41:49:f3:cf:
                    42:20:62:c3:c6:12:c0:be:76:c9:5b:e3:5b:b9:71:
                    4c:e1:de:2f:03:3a:13:f4:bb:08:4d:42:9f:73:18:
                    9e:af:c5:cd:33:e8:58:c0:81:78:82:82:bf:2b:71:
                    68:0b:7f:84:22:94:1a:a8:f7:ad:32:15:19:ab:e4:
                    ba:cf:1b:0b:78:fd:0c:24:6b:bd:9d:b7:fa:01:d6:
                    f1:1f:44:22:ba:78:86:4c:ff:df:e1:3c:1e:b1:4d:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:27:AE:FC:5E:3A:FF:B5:65:B5:2E:B9:FF:E1:DD:12:E8:78:CB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f08eab06-e830-3df1-8437-affd489ba14b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.237.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:90:5f:74:27:b3:20:c6:77:4f:18:5f:7b:dd:30:b9:80:ae:
         d3:8d:25:03:c9:1c:c9:1e:2b:bc:54:b5:ad:db:da:2b:8a:aa:
         6c:66:9e:ee:a1:2f:c0:9b:e5:06:bb:14:66:58:a6:0a:0b:3d:
         29:ec:38:26:b1:13:7a:81:bf:d1:f6:6d:ae:95:2e:88:0b:f6:
         f8:05:f2:77:3f:44:8a:fa:28:83:e3:de:6e:ea:16:3f:0b:58:
         0a:6c:c3:03:d8:5f:c8:1a:4d:de:df:de:f3:19:a9:a5:0a:46:
         e4:9d:10:e8:6c:5d:ad:a1:ff:6d:fd:df:08:cb:2a:cd:60:da:
         6d:50:aa:33:d0:bd:74:87:8b:6a:3b:78:c7:b5:2d:81:3c:59:
         84:d5:e5:9b:62:d5:f8:97:37:a8:c2:43:95:11:2f:85:69:60:
         01:27:a3:93:0b:4d:98:cf:87:1d:84:95:fa:19:7e:70:af:c9:
         9d:98:c7:18:41:7b:25:b9:81:d3:16:0f:fa:5d:6f:7c:3d:96:
         8f:70:db:82:79:10:1e:6d:3b:06:b6:9f:be:10:d1:e5:99:41:
         77:33:7a:63:94:b0:d3:04:37:3e:76:eb:10:05:5b:58:fd:6b:
         f5:ef:73:0e:de:0f:ea:c8:4b:a7:55:ff:19:52:22:a7:0e:bd:
         59:12:eb:3a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEur/SnSsH7EKQvpa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk
ODlmOGFiOGEtYjgzZS00NTJlLWI4MzYtMTcyYzNiMTIyZGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAZKh43I1D78pO2cUuq+btwERqOzE8VTAt8G
5lHsj98Iu4oN+LTbZKY7zZg4dgiW3v64ndozVCVwpejoUNZwiu7cTbHGo70gTCE3
5K0iybd48BAvQYdaVdL6un43+HT1NvOiVn0LHcQ/xgq5yCJjl6KLxMJEe7fbzNrS
G5+RAxrYMFsn44VTUt4y0i2QnrqZMSap18imP0yuLUfd71O7g0FJ889CIGLDxhLA
vnbJW+NbuXFM4d4vAzoT9LsITUKfcxier8XNM+hYwIF4goK/K3FoC3+EIpQaqPet
MhUZq+S6zxsLeP0MJGu9nbf6AdbxH0QiuniGTP/f4TwesU3PQwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEknrvxeOv+1ZbUuuf/h3RLoeMszMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjA4ZWFiMDYtZTgzMC0z
ZGYxLTg0MzctYWZmZDQ4OWJhMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYO0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAH5BfdCezIMZ3Txhfe90wuYCu040lA8kcyR4rvFS1rdvaK4qqbGae7qEv
wJvlBrsUZlimCgs9Kew4JrETeoG/0fZtrpUuiAv2+AXydz9Eivoog+PebuoWPwtY
CmzDA9hfyBpN3t/e8xmppQpG5J0Q6GxdraH/bf3fCMsqzWDabVCqM9C9dIeLajt4
x7UtgTxZhNXlm2LV+Jc3qMJDlREvhWlgASejkwtNmM+HHYSV+hl+cK/JnZjHGEF7
JbmB0xYP+l1vfD2Wj3DbgnkQHm07BrafvhDR5ZlBdzN6Y5Sw0wQ3PnbrEAVbWP1r
9e9zDt4P6shLp1X/GVIipw69WRLrOg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:30 2025 by rpki-client