Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa
File:                     bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa (raw, json)
Hash identifier:          /2JrHEPbN4v6XWf7XaTbccM6gEsrvFAHWeJOfbfONt0=
Subject key identifier:   70:DD:DC:A8:D9:3A:C0:0E:49:3E:71:D0:28:83:47:25:1A:CA:ED:63
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1965B36D63B8B7F4B92A600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     25946
IP address blocks:        199.243.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:5b:36:d6:3b:8b:7f:4b:92:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4fb8fcd3-580d-41d3-bdd0-a91d5d99fd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:75:4e:33:7a:98:73:9e:92:18:f5:9e:89:36:
                    60:0d:ae:86:d2:15:c7:09:8f:73:19:a4:25:ff:c6:
                    42:2a:eb:15:d6:99:f9:5a:f0:ba:27:2e:d7:5e:64:
                    30:57:8e:d5:f1:0c:79:0a:76:a1:5e:96:60:54:c2:
                    45:b5:b4:b4:62:c5:e4:c2:59:0f:42:70:32:e1:83:
                    a8:f1:41:73:63:9b:11:9e:be:3f:fb:09:b9:93:7a:
                    87:ab:76:d6:bd:65:4d:cb:34:39:ba:06:15:7d:5e:
                    57:5c:8b:62:28:5e:3b:04:c7:b7:d3:fb:b7:be:36:
                    49:9a:31:04:2d:9c:dd:6c:01:b0:83:4b:ec:65:7f:
                    4e:1b:12:a0:41:a0:9b:7c:40:ba:88:82:93:db:e7:
                    09:66:47:97:f2:e1:d6:a1:e7:17:5a:9f:53:b8:86:
                    5a:db:49:bd:b0:1c:88:25:a9:cb:8c:52:ca:fe:5d:
                    3d:c4:1b:99:9a:2d:17:8e:3b:18:05:92:01:78:a7:
                    17:a0:7e:b5:68:89:d4:30:03:f9:73:3e:39:96:bb:
                    1c:85:ab:9c:34:c6:31:c8:6f:0a:e3:6e:a6:08:22:
                    59:64:17:f5:03:13:3d:30:41:7c:81:68:7b:cb:4f:
                    cc:d9:e4:0e:0e:88:8d:d5:f3:9f:28:98:7c:3f:19:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DD:DC:A8:D9:3A:C0:0E:49:3E:71:D0:28:83:47:25:1A:CA:ED:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bb0c3b0f-4081-3982-a48f-54b3041b51a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8f:75:78:c9:40:1b:ba:bf:8f:d5:95:5a:66:5f:3c:4a:2a:
         73:a3:70:59:03:a4:b3:e3:c3:00:26:ba:c6:4a:ba:af:b3:40:
         35:9d:fb:c7:ae:e3:d3:0b:ec:4b:41:5a:e6:0f:ab:2f:55:91:
         52:1e:72:02:70:c0:1f:18:8f:5d:80:09:34:db:83:d8:46:19:
         ce:d6:b1:6e:21:cc:17:7e:cb:76:e1:d9:96:7b:f9:40:89:e5:
         cd:83:48:f2:87:86:78:78:9d:d0:2b:53:07:f3:d7:90:7c:f5:
         fc:16:fe:24:4c:b1:14:f5:0a:05:e4:f7:f4:6b:11:4f:63:64:
         11:5f:c7:ec:19:3d:87:70:70:6b:4b:60:78:24:74:55:8a:e8:
         eb:65:1f:61:07:9e:04:c0:14:c9:7a:93:c5:89:e8:8f:d0:d6:
         45:18:b8:c1:38:76:b9:98:d3:6f:70:70:0c:3d:3e:03:9d:3e:
         05:43:af:5d:f4:06:23:89:bc:73:9d:f9:3f:f7:3a:b2:8b:dd:
         7b:a6:50:d1:df:30:ea:87:3a:be:5d:e4:2d:e3:28:34:95:a7:
         69:58:31:58:0e:b2:2d:b7:be:09:82:d5:8b:b1:00:b6:91:6e:
         83:c0:33:23:35:e2:0e:11:a7:c5:72:cd:8d:e1:4b:8a:7b:a8:
         68:11:fa:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlls21juLf0uSpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
NGZiOGZjZDMtNTgwZC00MWQzLWJkZDAtYTkxZDVkOTlmZDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHVOM3qYc56SGPWeiTZgDa6G0hXHCY9zGaQl
/8ZCKusV1pn5WvC6Jy7XXmQwV47V8Qx5CnahXpZgVMJFtbS0YsXkwlkPQnAy4YOo
8UFzY5sRnr4/+wm5k3qHq3bWvWVNyzQ5ugYVfV5XXItiKF47BMe30/u3vjZJmjEE
LZzdbAGwg0vsZX9OGxKgQaCbfEC6iIKT2+cJZkeX8uHWoecXWp9TuIZa20m9sByI
JanLjFLK/l09xBuZmi0XjjsYBZIBeKcXoH61aInUMAP5cz45lrschaucNMYxyG8K
426mCCJZZBf1AxM9MEF8gWh7y0/M2eQODoiN1fOfKJh8PxnoNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDd3KjZOsAOST5x0CiDRyUayu1jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYmIwYzNiMGYtNDA4MS0z
OTgyLWE0OGYtNTRiMzA0MWI1MWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/PhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJmPdXjJQBu6v4/VlVpmXzxKKnOjcFkDpLPjwwAmusZKuq+zQDWd+8eu
49ML7EtBWuYPqy9VkVIecgJwwB8Yj12ACTTbg9hGGc7WsW4hzBd+y3bh2ZZ7+UCJ
5c2DSPKHhnh4ndArUwfz15B89fwW/iRMsRT1CgXk9/RrEU9jZBFfx+wZPYdwcGtL
YHgkdFWK6OtlH2EHngTAFMl6k8WJ6I/Q1kUYuME4drmY029wcAw9PgOdPgVDr130
BiOJvHOd+T/3OrKL3XumUNHfMOqHOr5d5C3jKDSVp2lYMVgOsi23vgmC1YuxALaR
boPAMyM14g4Rp8VyzY3hS4p7qGgR+i8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:56:49 2025 by rpki-client