Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/6d92c9d0-bb20-3988-a4d4-9f1381a76fc8.roa
File:                     6d92c9d0-bb20-3988-a4d4-9f1381a76fc8.roa (raw, json)
Hash identifier:          dA+A1G3tl9b0nx9qGXIxQWpUzoT6y5+P1lQw/10qxc0=
Subject key identifier:   B6:70:DE:44:DD:29:39:A9:24:7E:F2:50:42:B5:DA:66:6E:65:2E:1F
Certificate issuer:       /CN=1611a391-6eb0-4dd1-aebb-1afecce05d9c
Certificate serial:       010D0C9F4328584BAA97B823D90BD77ADF3AE780
Authority key identifier: C2:E2:AA:67:FB:0B:CF:64:AF:2A:C4:E4:90:84:81:6E:B3:3B:D2:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/6d92c9d0-bb20-3988-a4d4-9f1381a76fc8.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/1611a391-6eb0-4dd1-aebb-1afecce05d9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/1611a391-6eb0-4dd1-aebb-1afecce05d9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:b8:23:d9:0b:d7:7a:df:3a:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1611a391-6eb0-4dd1-aebb-1afecce05d9c
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=91976b78-d3ef-4199-98e6-456aa589ba23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:bd:d3:60:3e:ef:5a:06:2e:75:fa:a9:96:
                    2f:41:a5:01:6c:a4:1e:7d:88:2e:34:00:66:33:31:
                    58:14:38:fc:6a:9e:60:18:93:17:21:f1:15:ab:4d:
                    81:00:d2:df:21:61:e6:8c:9e:25:31:5b:4e:2d:0e:
                    d8:c5:ed:5f:4c:b2:a2:79:3a:86:8d:89:9b:b2:8c:
                    27:f8:07:61:58:9f:1b:93:77:97:26:19:b1:07:dd:
                    62:1c:be:d4:cc:34:9f:c5:8c:b9:57:87:95:23:44:
                    6f:d3:66:ba:98:5e:a8:d0:24:3d:f1:33:69:e9:e0:
                    fc:1a:15:31:11:a9:ed:73:a2:6a:b8:f9:9c:9f:3c:
                    a8:df:24:8d:fd:fc:46:b8:37:ca:b4:51:e6:16:61:
                    f9:cd:df:1c:0e:65:81:b8:0a:bb:f6:f2:5b:aa:bd:
                    a2:66:24:55:2b:da:7a:62:dd:c2:8c:d1:3c:f8:09:
                    fa:6f:7b:5f:98:e2:27:8a:27:f3:b2:ee:ec:ac:0d:
                    a6:86:4d:b1:7c:07:ab:24:29:72:d8:5d:7f:82:e1:
                    0f:29:7b:58:88:69:a4:b1:dd:30:60:9a:f3:4c:98:
                    49:dc:e7:1d:80:32:4d:ff:54:b1:0e:bf:b8:17:c4:
                    5d:b0:84:2b:41:03:a1:83:47:13:57:ad:d1:60:32:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:70:DE:44:DD:29:39:A9:24:7E:F2:50:42:B5:DA:66:6E:65:2E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/6d92c9d0-bb20-3988-a4d4-9f1381a76fc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/1611a391-6eb0-4dd1-aebb-1afecce05d9c.crl

            X509v3 Authority Key Identifier:
                keyid:C2:E2:AA:67:FB:0B:CF:64:AF:2A:C4:E4:90:84:81:6E:B3:3B:D2:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:38:70:25:47:62:ab:12:4a:df:f8:50:71:01:f0:ed:0a:0e:
         09:37:f6:b8:e7:da:4c:88:b9:eb:a9:c2:1c:7c:df:d7:ba:7d:
         25:bf:eb:27:41:92:ce:7b:85:0d:f8:5a:b1:8a:4d:e8:67:8b:
         81:a7:93:c6:6a:7f:f0:a3:72:9e:be:1e:b7:5f:ab:fb:eb:25:
         99:3b:bb:63:a6:c1:b4:b8:34:f9:4b:07:2b:56:ff:41:e6:c2:
         f0:e0:53:51:2c:90:9d:3c:68:33:e1:61:37:92:c6:6c:55:d9:
         98:d7:d5:00:64:3b:9a:4b:9e:f2:82:f5:29:46:75:33:11:f8:
         15:f4:50:6c:de:e4:35:0d:d7:fc:d2:4f:54:4c:68:06:7a:62:
         d1:7c:e9:5d:31:9e:4e:4a:d4:00:69:04:b4:1c:d7:34:98:71:
         37:42:cd:eb:cc:3e:d3:ec:13:b5:f9:61:1b:a4:22:0d:d4:09:
         81:d5:33:f7:dc:d7:91:de:2e:f4:4b:0a:bf:20:66:1e:bb:84:
         26:c3:f8:ec:18:99:a1:5f:2f:fe:02:f8:d0:8c:52:70:23:9a:
         f8:04:0d:69:d9:dc:6d:02:f5:13:87:de:51:7e:c9:5a:01:19:
         f3:90:61:55:be:d9:fd:3f:4b:79:e0:f5:36:d0:78:70:97:ff:
         86:4d:45:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7gj2QvXet8654AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTYxMWEzOTEtNmViMC00ZGQxLWFlYmItMWFmZWNjZTA1
ZDljMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk
OTE5NzZiNzgtZDNlZi00MTk5LTk4ZTYtNDU2YWE1ODliYTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhW902A+71oGLnX6qZYvQaUBbKQefYguNABm
MzFYFDj8ap5gGJMXIfEVq02BANLfIWHmjJ4lMVtOLQ7Yxe1fTLKieTqGjYmbsown
+AdhWJ8bk3eXJhmxB91iHL7UzDSfxYy5V4eVI0Rv02a6mF6o0CQ98TNp6eD8GhUx
Eantc6JquPmcnzyo3ySN/fxGuDfKtFHmFmH5zd8cDmWBuAq79vJbqr2iZiRVK9p6
Yt3CjNE8+An6b3tfmOIniifzsu7srA2mhk2xfAerJCly2F1/guEPKXtYiGmksd0w
YJrzTJhJ3OcdgDJN/1SxDr+4F8RdsIQrQQOhg0cTV63RYDJX2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZw3kTdKTmpJH7yUEK12mZuZS4fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xNjEx
YTM5MS02ZWIwLTRkZDEtYWViYi0xYWZlY2NlMDVkOWMvNmQ5MmM5ZDAtYmIyMC0z
OTg4LWE0ZDQtOWYxMzgxYTc2ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTYxMWEzOTEtNmViMC00ZGQxLWFl
YmItMWFmZWNjZTA1ZDljLzE2MTFhMzkxLTZlYjAtNGRkMS1hZWJiLTFhZmVjY2Uw
NWQ5Yy5jcmwwHwYDVR0jBBgwFoAUwuKqZ/sLz2SvKsTkkISBbrM70howDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8xNjExYTM5MS02ZWIwLTRkZDEtYWViYi0xYWZl
Y2NlMDVkOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADA4cCVHYqsSSt/4UHEB8O0KDgk39rjn2kyIueupwhx839e6fSW/6ydB
ks57hQ34WrGKTehni4Gnk8Zqf/Cjcp6+Hrdfq/vrJZk7u2OmwbS4NPlLBytW/0Hm
wvDgU1EskJ08aDPhYTeSxmxV2ZjX1QBkO5pLnvKC9SlGdTMR+BX0UGze5DUN1/zS
T1RMaAZ6YtF86V0xnk5K1ABpBLQc1zSYcTdCzevMPtPsE7X5YRukIg3UCYHVM/fc
15HeLvRLCr8gZh67hCbD+OwYmaFfL/4C+NCMUnAjmvgEDWnZ3G0C9ROH3lF+yVoB
GfOQYVW+2f0/S3ng9TbQeHCX/4ZNRWg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:43:25 2025 by rpki-client