Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa
File:                     13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa (raw, json)
Hash identifier:          +hsBjJWL7ABlMudO9lJ+PyUJdyAQgoV0p24NL8oYQGE=
Subject key identifier:   C3:F0:CB:32:D3:B4:EB:15:2A:C9:49:57:FD:DF:59:72:8D:65:53:BF
Certificate issuer:       /CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
Certificate serial:       010D0C9F4328584B0B769DE205567FCC6B59F080
Authority key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     1007
IP address blocks:        149.112.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:9d:e2:05:56:7f:cc:6b:59:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=1c23b4d9-cea8-460b-bd77-a217d0e7f450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:19:db:62:b2:1b:14:fc:c8:4b:68:2e:2a:4d:
                    43:7b:21:b9:e4:8b:c1:a7:06:fb:3c:13:30:f9:45:
                    84:f7:b8:4a:ae:1d:a5:9c:b9:c4:4e:5e:63:df:10:
                    17:8b:fd:d3:4b:b4:46:40:ca:af:88:8f:ac:2f:bc:
                    1d:35:67:ca:25:5d:6a:07:8b:6a:4d:2f:d2:2c:42:
                    d1:ea:57:d4:f5:fe:ef:ae:29:ff:36:eb:52:e3:04:
                    b8:aa:be:a4:60:be:f8:e9:51:ac:d3:78:7f:cc:bb:
                    cb:0c:4b:07:22:58:4a:ba:82:cd:81:73:b5:4d:62:
                    c6:31:75:dd:92:20:d0:6d:94:44:75:83:21:23:93:
                    34:79:43:87:2a:3c:36:62:6a:e9:20:2f:72:35:8f:
                    a4:f5:6f:3e:e0:b8:75:fe:ed:d0:62:b7:51:55:39:
                    6e:c7:fb:e1:2f:94:2d:bf:0a:30:72:f7:90:06:26:
                    32:e8:f8:f3:3a:ea:1e:53:9a:b0:31:a7:7e:f9:28:
                    e6:71:9f:1b:dd:e7:32:81:c1:26:66:3a:34:ea:45:
                    ec:f1:53:68:98:11:46:72:7f:35:9b:31:87:d4:a4:
                    08:96:8b:eb:93:e0:69:b4:d3:c5:a6:2c:45:c6:77:
                    c5:9f:b8:71:1f:e1:02:20:67:69:fc:d0:cf:7d:84:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F0:CB:32:D3:B4:EB:15:2A:C9:49:57:FD:DF:59:72:8D:65:53:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/13b87a3b-b027-35b1-83fb-fd66e92f0e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.crl

            X509v3 Authority Key Identifier:
                keyid:06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:1e:cb:49:42:77:f4:ba:b3:8d:2d:a2:40:d5:cc:92:c1:2e:
         b3:fc:34:29:10:34:8f:f2:59:cf:85:a1:b8:7c:5c:18:16:c2:
         dc:0a:ef:34:f2:c6:0d:e3:36:1b:68:89:3d:39:7f:de:ac:8b:
         c7:6f:ab:ff:ea:d1:08:75:c8:36:54:f3:c0:5a:29:4b:33:dd:
         1b:c9:8d:da:7b:21:7f:38:94:77:63:49:52:01:d1:27:cb:75:
         23:cd:28:44:88:38:fe:04:44:dc:5a:b2:d8:89:16:84:36:e9:
         96:4d:e8:38:1d:b4:44:bf:fe:64:ff:c8:c4:44:48:8d:7b:a1:
         7c:b0:dc:ce:dc:54:7b:79:8a:cd:6d:1c:6f:bd:8c:51:80:ef:
         47:f5:1f:1f:1b:ab:51:92:e6:7d:02:99:2f:8a:77:d8:49:56:
         ce:18:99:24:e7:e0:8f:bf:f3:1e:1e:82:f1:a5:79:ef:d3:86:
         8c:48:7d:7d:a4:7e:9d:c1:e4:d0:af:e8:c2:c9:e3:b9:06:34:
         f6:32:01:71:47:77:56:4a:5d:20:ee:8a:b1:7a:4b:c4:9a:cb:
         ac:8e:f9:3b:50:a5:04:fd:bc:c2:30:c9:c2:4e:9f:f2:fe:ac:
         5c:e2:a5:de:4c:19:77:80:3b:c4:dd:a1:d1:fe:2e:ac:22:a8:
         75:8e:8f:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdp3iBVZ/zGtZ8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZhOGIwNjgtOTdiMi00YzUyLTkwNGYtZDc4YzRlNDZm
YjhjMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk
MWMyM2I0ZDktY2VhOC00NjBiLWJkNzctYTIxN2QwZTdmNDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhnbYrIbFPzIS2guKk1DeyG55IvBpwb7PBMw
+UWE97hKrh2lnLnETl5j3xAXi/3TS7RGQMqviI+sL7wdNWfKJV1qB4tqTS/SLELR
6lfU9f7vrin/NutS4wS4qr6kYL746VGs03h/zLvLDEsHIlhKuoLNgXO1TWLGMXXd
kiDQbZREdYMhI5M0eUOHKjw2YmrpIC9yNY+k9W8+4Lh1/u3QYrdRVTlux/vhL5Qt
vwowcveQBiYy6PjzOuoeU5qwMad++SjmcZ8b3ecygcEmZjo06kXs8VNomBFGcn81
mzGH1KQIlovrk+BptNPFpixFxnfFn7hxH+ECIGdp/NDPfYTrbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPwyzLTtOsVKslJV/3fWXKNZVO/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4
YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhjNGU0NmZiOGMvMTNiODdhM2ItYjAyNy0z
NWIxLTgzZmItZmQ2NmU5MmYwZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhOGIwNjgtOTdiMi00YzUyLTkw
NGYtZDc4YzRlNDZmYjhjL2FmYThiMDY4LTk3YjItNGM1Mi05MDRmLWQ3OGM0ZTQ2
ZmI4Yy5jcmwwHwYDVR0jBBgwFoAUBopEEXaNaepCVQwVrXi7rafxYlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmE4YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhj
NGU0NmZiOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXAuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEey0lCd/S6s40tokDVzJLBLrP8NCkQNI/yWc+Fobh8XBgWwtwK7zTy
xg3jNhtoiT05f96si8dvq//q0Qh1yDZU88BaKUsz3RvJjdp7IX84lHdjSVIB0SfL
dSPNKESIOP4ERNxastiJFoQ26ZZN6DgdtES//mT/yMRESI17oXyw3M7cVHt5is1t
HG+9jFGA70f1Hx8bq1GS5n0CmS+Kd9hJVs4YmSTn4I+/8x4egvGlee/ThoxIfX2k
fp3B5NCv6MLJ47kGNPYyAXFHd1ZKXSDuirF6S8Say6yO+TtQpQT9vMIwycJOn/L+
rFzipd5MGXeAO8TdodH+LqwiqHWOj1c=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:31:05 2025 by rpki-client