Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f040ad8b-1963-36d6-b7c3-c1993858c124.roa
File:                     f040ad8b-1963-36d6-b7c3-c1993858c124.roa (raw, json)
Hash identifier:          Ho/BH2G6OhP7mh4SONZMhOvAVxSz7yJ8FLOB02LHiFk=
Subject key identifier:   C4:38:BA:80:3B:A4:EB:87:82:CC:16:9A:97:81:27:22:D3:00:73:30
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584B6BC74979A1A081D06A8D9F80
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f040ad8b-1963-36d6-b7c3-c1993858c124.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     396982
IP address blocks:        50.6.138.0/23 maxlen: 23
                          69.49.227.0/24 maxlen: 24
                          69.49.232.0/23 maxlen: 23
                          69.49.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:49:79:a1:a0:81:d0:6a:8d:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=5b5c2017-c31e-427a-8157-86ac360bdde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:5b:85:26:cf:70:92:b7:79:a9:65:35:8a:
                    93:c6:46:f5:77:0d:2a:66:23:e9:0d:6e:9b:c5:81:
                    cb:b4:bd:59:f7:85:67:de:a7:db:28:3f:56:ab:d3:
                    5e:15:cc:1a:6a:f8:b7:b4:15:31:f1:9c:ef:cf:f0:
                    d3:db:89:15:cd:e1:fa:5f:04:21:33:99:47:68:9e:
                    31:9c:1f:fa:f5:2f:33:70:9e:99:0b:f0:70:65:a5:
                    b4:ff:28:03:48:04:09:e7:02:f9:8a:0a:20:a8:dd:
                    22:f9:00:57:89:99:62:f6:e1:fe:bf:4d:60:4c:4a:
                    a8:55:ab:a3:83:9e:48:93:48:b9:55:71:eb:a1:3a:
                    f1:a7:2a:e4:34:4e:1a:47:67:3e:d1:b7:4a:bd:47:
                    d2:84:c5:95:75:74:b2:02:88:c6:b2:aa:51:e1:0f:
                    29:0d:66:e2:8f:6c:fa:0c:30:98:25:04:a7:8b:10:
                    68:d9:6a:a0:1f:06:ca:e4:66:9a:66:c0:19:16:dc:
                    a3:28:76:51:5b:0e:56:7d:6b:26:32:ab:30:d8:90:
                    4e:56:ba:0e:dd:8f:78:b2:3d:e9:fc:c0:17:8d:17:
                    ca:cd:46:b9:a2:09:e1:7d:9d:be:74:c8:f2:39:ea:
                    5e:e6:3e:4d:71:f8:45:5e:6f:99:03:64:55:a4:10:
                    61:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:38:BA:80:3B:A4:EB:87:82:CC:16:9A:97:81:27:22:D3:00:73:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f040ad8b-1963-36d6-b7c3-c1993858c124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.138.0/23
                  69.49.227.0/24
                  69.49.232.0/23
                  69.49.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b4:eb:4f:3a:35:90:f1:fd:94:9b:b2:a4:f6:c8:d2:bc:84:
         97:a2:94:c7:b3:ef:98:a7:6e:f2:d6:12:ca:93:e9:ca:03:83:
         49:cf:8d:c4:3a:28:46:c3:5c:3c:cd:79:36:13:0a:7b:ca:ce:
         42:dc:d7:33:15:cb:9d:8b:5d:f9:5e:81:c8:16:2a:d2:cd:ae:
         53:d6:de:2c:40:9b:96:cd:1b:58:b0:23:78:59:1d:4e:ec:c8:
         fc:7c:69:49:36:e2:cd:7a:27:0c:63:23:a9:c9:2f:e4:91:c3:
         ca:49:58:54:2c:25:06:9f:d3:7f:ec:b7:1d:0f:87:b2:98:cb:
         f1:39:90:ec:30:61:eb:af:bd:e9:bd:18:4f:c6:1a:0a:21:5a:
         e2:73:e7:ef:76:e5:e8:a5:5e:30:79:40:6b:fa:89:5a:14:9f:
         e5:94:75:31:68:52:ac:02:e3:5e:59:18:17:b1:6b:8e:e0:fc:
         83:c7:c8:58:40:79:4d:8d:fa:db:90:5b:09:74:ad:6e:88:89:
         07:9d:e4:80:00:55:c5:78:85:cf:71:d2:33:ec:41:2a:1c:28:
         70:c2:88:14:6b:85:0b:4a:1d:9b:65:4f:ea:43:b4:ad:1d:89:
         15:98:a9:a7:ca:a5:82:5e:76:f5:71:a7:b5:e6:13:ee:a6:13:
         d6:a0:2c:7d
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEtrx0l5oaCB0GqNn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi
MDhlMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk
NWI1YzIwMTctYzMxZS00MjdhLTgxNTctODZhYzM2MGJkZGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroNbhSbPcJK3eallNYqTxkb1dw0qZiPpDW6b
xYHLtL1Z94Vn3qfbKD9Wq9NeFcwaavi3tBUx8Zzvz/DT24kVzeH6XwQhM5lHaJ4x
nB/69S8zcJ6ZC/BwZaW0/ygDSAQJ5wL5igogqN0i+QBXiZli9uH+v01gTEqoVauj
g55Ik0i5VXHroTrxpyrkNE4aR2c+0bdKvUfShMWVdXSyAojGsqpR4Q8pDWbij2z6
DDCYJQSnixBo2WqgHwbK5GaaZsAZFtyjKHZRWw5WfWsmMqsw2JBOVroO3Y94sj3p
/MAXjRfKzUa5ognhfZ2+dMjyOepe5j5NcfhFXm+ZA2RVpBBhcwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFMQ4uoA7pOuHgswWmpeBJyLTAHMwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz
Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvZjA0MGFkOGItMTk2My0z
NmQ2LWI3YzMtYzE5OTM4NThjMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1
ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy
YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4
MTU2MmIwOGUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBMgaKAwQA
RTHjAwQBRTHoAwQARTHxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFq06086NZDx/ZSbsqT2yNK8hJeilMez
75inbvLWEsqT6coDg0nPjcQ6KEbDXDzNeTYTCnvKzkLc1zMVy52LXflegcgWKtLN
rlPW3ixAm5bNG1iwI3hZHU7syPx8aUk24s16JwxjI6nJL+SRw8pJWFQsJQaf03/s
tx0Ph7KYy/E5kOwwYeuvvem9GE/GGgohWuJz5+925eilXjB5QGv6iVoUn+WUdTFo
UqwC415ZGBexa47g/IPHyFhAeU2N+tuQWwl0rW6IiQed5IAAVcV4hc9x0jPsQSoc
KHDCiBRrhQtKHZtlT+pDtK0diRWYqafKpYJedvVxp7XmE+6mE9agLH0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:54 2025 by rpki-client