Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa
File:                     7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa (raw, json)
Hash identifier:          GflFWfjYcJ2xYAda8vobjKgtsQK4pAIj9D3IdYjj1Bs=
Subject key identifier:   77:C4:30:46:EC:CF:80:56:51:DC:DF:C4:57:8B:40:25:B5:CE:A6:8A
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584BB88D0CEE7989290711556F00
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     20471
IP address blocks:        209.124.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:0c:ee:79:89:29:07:11:55:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=bbdc79b2-5b6a-4bef-8598-a651b61e057c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:85:a6:16:31:2e:8a:81:a0:25:0e:25:4f:33:
                    20:c0:be:b5:c0:c9:91:d5:06:aa:61:29:ef:f8:38:
                    34:21:19:64:f6:dc:b7:51:0a:97:0a:f1:1f:03:d4:
                    91:35:a2:17:ab:0d:cb:e9:b3:90:0a:94:09:8f:ba:
                    6f:c0:13:62:fa:81:eb:db:c5:8d:59:fe:e5:e4:88:
                    c6:db:0c:d4:87:f1:39:26:37:db:0e:a3:f4:ee:67:
                    a0:3c:49:69:e3:13:8c:de:36:22:a6:df:ed:52:98:
                    3b:5e:42:0a:20:6b:4f:50:c7:73:ee:cc:ca:1d:23:
                    c5:58:d9:9a:d2:ed:12:6a:b1:59:e0:08:25:34:8f:
                    42:82:c9:d9:72:47:c2:f7:54:5f:bb:26:89:fa:45:
                    c6:b0:90:ce:ce:c9:13:fa:30:3f:f2:69:77:8a:68:
                    58:68:1d:17:c9:28:80:ae:32:8d:24:07:f7:34:32:
                    1c:05:79:74:7d:66:0e:d7:6c:99:91:40:49:82:bc:
                    a3:21:bd:0a:45:42:eb:13:82:57:05:ec:60:be:b2:
                    35:18:06:29:69:ba:e2:4a:d8:9c:a7:04:b5:7f:57:
                    d2:8b:0b:d4:ed:37:9d:28:6a:5c:9a:d7:7b:75:77:
                    e0:24:0e:2e:07:31:30:30:61:01:8f:d1:f6:87:42:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C4:30:46:EC:CF:80:56:51:DC:DF:C4:57:8B:40:25:B5:CE:A6:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/7c4313aa-d6c0-3d7a-b06c-c74e7368f2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a8:30:32:e5:d4:dc:68:b8:3b:98:dd:30:fa:45:16:6e:0f:
         db:70:7b:db:6e:81:c6:10:a3:8f:ff:68:25:96:c1:13:d7:5b:
         43:92:62:7f:6e:67:27:75:8b:34:ef:32:13:b9:d4:88:22:67:
         ff:7e:a9:c6:9f:c6:8c:27:17:a7:f4:71:ac:9c:97:38:00:93:
         db:1d:1c:21:9f:7b:1a:5b:d4:03:e8:bd:8c:f3:61:5b:42:4c:
         c1:7f:fb:4a:1b:11:dd:58:84:35:b2:4c:86:33:23:c3:86:5d:
         f8:6a:9b:cf:99:21:5f:5b:a4:f7:c3:d5:40:63:13:2a:30:e1:
         0e:45:69:6d:de:84:3d:39:ad:9d:b3:dc:1d:3d:79:9f:56:54:
         73:57:bd:84:64:06:a0:52:83:c3:f3:a5:62:51:f2:dc:c4:da:
         fa:54:ff:9f:72:84:cd:b5:01:ff:60:3f:d4:c2:56:2e:b3:cf:
         eb:4b:23:52:de:74:fb:a5:f7:22:0b:05:8b:0e:41:50:b1:2c:
         64:3a:25:e4:99:5c:22:b6:48:24:06:3c:3d:df:f5:cc:60:83:
         0e:72:12:2d:e3:b6:42:0e:f0:a6:d6:78:ab:c9:5e:da:49:29:
         07:fb:04:20:3c:a6:bf:7c:14:e9:f7:b8:0a:7f:8b:57:75:21:
         e7:6e:9e:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQzueYkpBxFVbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
YmJkYzc5YjItNWI2YS00YmVmLTg1OTgtYTY1MWI2MWUwNTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIWmFjEuioGgJQ4lTzMgwL61wMmR1QaqYSnv
+Dg0IRlk9ty3UQqXCvEfA9SRNaIXqw3L6bOQCpQJj7pvwBNi+oHr28WNWf7l5IjG
2wzUh/E5JjfbDqP07megPElp4xOM3jYipt/tUpg7XkIKIGtPUMdz7szKHSPFWNma
0u0SarFZ4AglNI9CgsnZckfC91RfuyaJ+kXGsJDOzskT+jA/8ml3imhYaB0XySiA
rjKNJAf3NDIcBXl0fWYO12yZkUBJgryjIb0KRULrE4JXBexgvrI1GAYpabriStic
pwS1f1fSiwvU7TedKGpcmtd7dXfgJA4uBzEwMGEBj9H2h0JPBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHfEMEbsz4BWUdzfxFeLQCW1zqaKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvN2M0MzEzYWEtZDZjMC0z
ZDdhLWIwNmMtYzc0ZTczNjhmMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAeoMDLl1NxouDuY3TD6RRZuD9twe9tugcYQo4//aCWWwRPXW0OSYn9u
Zyd1izTvMhO51IgiZ/9+qcafxownF6f0cayclzgAk9sdHCGfexpb1APovYzzYVtC
TMF/+0obEd1YhDWyTIYzI8OGXfhqm8+ZIV9bpPfD1UBjEyow4Q5FaW3ehD05rZ2z
3B09eZ9WVHNXvYRkBqBSg8PzpWJR8tzE2vpU/59yhM21Af9gP9TCVi6zz+tLI1Le
dPul9yILBYsOQVCxLGQ6JeSZXCK2SCQGPD3f9cxggw5yEi3jtkIO8KbWeKvJXtpJ
KQf7BCA8pr98FOn3uAp/i1d1IedunhA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:25:13 2025 by rpki-client