Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/bec8433e-ca77-345b-a21e-fe59884c8789.roa
File:                     bec8433e-ca77-345b-a21e-fe59884c8789.roa (raw, json)
Hash identifier:          rHhYM/VmLHbk9jjcic5w9vrYT9naseom0DMdaFfwI1s=
Subject key identifier:   9C:FF:57:54:77:44:A9:98:C1:0B:99:AA:26:AE:31:7B:6C:69:27:AA
Certificate issuer:       /CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83
Certificate serial:       010D0C9F4328584B9F6CDEDF51DD374D9B6CCE60
Authority key identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/bec8433e-ca77-345b-a21e-fe59884c8789.roa
Signing time:             Fri 24 Oct 2025 01:00:30 +0000
ROA not before:           Fri 24 Oct 2025 01:00:30 +0000
ROA not after:            Thu 22 Jan 2026 02:00:30 +0000
asID:                     10753
IP address blocks:        161.203.15.0/24 maxlen: 24
                          161.203.16.0/24 maxlen: 24
                          161.203.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9f:6c:de:df:51:dd:37:4d:9b:6c:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83
        Validity
            Not Before: Oct 24 01:00:30 2025 GMT
            Not After : Jan 22 02:00:30 2026 GMT
        Subject: CN=618bd66d-29b2-43f7-ae27-784a88b5f24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:f2:83:4d:36:db:8f:b9:d8:8e:c9:87:6e:
                    4b:d0:2f:b9:6d:f3:7c:1e:41:4e:88:7c:e3:9e:c2:
                    35:7f:d5:fe:58:8f:b6:09:d0:a9:19:b4:ab:0e:a3:
                    21:c3:ba:45:85:5d:b6:7c:40:e0:84:8e:79:5f:12:
                    bf:9f:ce:8f:17:b5:f9:35:88:43:e9:a2:3a:ce:f6:
                    78:cf:6b:ed:f9:ab:2d:a8:dd:6a:88:1f:f7:55:fd:
                    73:03:82:ea:b0:e9:53:31:3d:c4:09:45:d5:1b:a3:
                    12:39:6c:e9:10:ee:23:6d:9c:24:0a:43:b4:c1:52:
                    6b:4c:c9:37:a2:46:3a:57:69:56:52:4d:fc:f3:05:
                    14:2f:79:82:2c:8e:c2:1c:d6:26:01:ae:5b:5f:45:
                    c5:0e:96:cb:a7:48:59:73:c5:45:49:9d:91:69:0c:
                    15:92:40:5c:3e:66:e9:35:68:02:85:59:04:ff:c4:
                    f3:e1:33:94:22:d6:2b:c0:cc:e1:c1:57:69:bf:95:
                    32:22:5d:05:2c:9d:3d:55:13:2d:33:cd:fd:4f:81:
                    2d:2f:85:c6:4e:41:71:9d:9a:d6:30:ed:7a:41:f4:
                    a2:78:4e:1f:c1:cb:34:f4:fd:be:9e:09:cd:97:18:
                    07:0c:e5:3f:85:75:4f:37:9a:61:d3:3d:a4:8e:ea:
                    22:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FF:57:54:77:44:A9:98:C1:0B:99:AA:26:AE:31:7B:6C:69:27:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/bec8433e-ca77-345b-a21e-fe59884c8789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl

            X509v3 Authority Key Identifier:
                keyid:14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.203.15.0-161.203.16.255
                  161.203.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:69:5b:01:4a:e3:04:2c:42:c2:1f:05:ac:46:93:b7:ff:8f:
         50:a3:16:14:b4:ce:37:87:73:47:30:5e:68:cf:75:68:de:20:
         ce:70:4f:f0:79:02:01:1f:97:d8:cf:25:31:2a:70:3c:4d:5e:
         97:85:11:a8:34:7b:20:7e:53:3d:ad:b1:91:80:51:8a:12:8d:
         29:9d:ca:cf:37:c1:7a:c4:f6:8a:1d:be:c0:c2:44:87:44:13:
         ec:ca:0b:c8:f9:fb:6c:b6:c2:89:a5:89:83:14:d4:04:52:4e:
         4f:53:00:88:2b:80:b3:a6:a9:c8:22:2d:6c:4a:97:4b:b9:7f:
         ff:7d:bd:fc:49:52:c3:69:c1:83:2d:0c:a1:7c:7e:84:ed:48:
         17:b9:96:5b:a7:fb:1d:c3:47:e9:c7:e0:fb:f4:22:5a:58:5d:
         01:28:cd:32:45:83:35:7e:45:30:f4:c6:d2:c9:d5:a4:e0:fd:
         d3:93:68:cf:5a:87:02:63:e6:6b:81:8d:17:52:8d:6b:5c:14:
         46:8c:1b:94:30:ee:4b:ad:9b:39:44:af:29:81:bf:50:25:6e:
         e6:b0:13:e8:75:9e:28:a1:82:c0:05:f9:f3:50:f8:cf:15:5b:
         91:2a:3a:e2:24:b6:25:74:ce:a9:14:fa:de:8c:1f:24:3b:cb:
         1f:d6:ae:e5
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEufbN7fUd03TZtszmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBmOWJmNDEtMzljZC00ZmM1LTk2N2MtZDJhNGFiMGQ5
YzgzMB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk
NjE4YmQ2NmQtMjliMi00M2Y3LWFlMjctNzg0YTg4YjVmMjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lTyg00224+52I7Jh25L0C+5bfN8HkFOiHzj
nsI1f9X+WI+2CdCpGbSrDqMhw7pFhV22fEDghI55XxK/n86PF7X5NYhD6aI6zvZ4
z2vt+astqN1qiB/3Vf1zA4LqsOlTMT3ECUXVG6MSOWzpEO4jbZwkCkO0wVJrTMk3
okY6V2lWUk388wUUL3mCLI7CHNYmAa5bX0XFDpbLp0hZc8VFSZ2RaQwVkkBcPmbp
NWgChVkE/8Tz4TOUItYrwMzhwVdpv5UyIl0FLJ09VRMtM839T4EtL4XGTkFxnZrW
MO16QfSieE4fwcs09P2+ngnNlxgHDOU/hXVPN5ph0z2kjuoiJwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFJz/V1R3RKmYwQuZqiauMXtsaSeqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5
YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0YWIwZDljODMvYmVjODQzM2UtY2E3Ny0z
NDViLWEyMWUtZmU1OTg4NGM4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDBmOWJmNDEtMzljZC00ZmM1LTk2
N2MtZDJhNGFiMGQ5YzgzL2QwZjliZjQxLTM5Y2QtNGZjNS05NjdjLWQyYTRhYjBk
OWM4My5jcmwwHwYDVR0jBBgwFoAUFA/qJiHpv8fsdjogCg5MFHhraggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0
YWIwZDljODMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAChyw8D
BAChyxADBAChyxMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAYWlbAUrjBCxCwh8FrEaTt/+PUKMWFLTON4dz
RzBeaM91aN4gznBP8HkCAR+X2M8lMSpwPE1el4URqDR7IH5TPa2xkYBRihKNKZ3K
zzfBesT2ih2+wMJEh0QT7MoLyPn7bLbCiaWJgxTUBFJOT1MAiCuAs6apyCItbEqX
S7l//329/ElSw2nBgy0MoXx+hO1IF7mWW6f7HcNH6cfg+/QiWlhdASjNMkWDNX5F
MPTG0snVpOD905Noz1qHAmPma4GNF1KNa1wURowblDDuS62bOUSvKYG/UCVu5rAT
6HWeKKGCwAX581D4zxVbkSo64iS2JXTOqRT63owfJDvLH9au5Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:27 2025 by rpki-client