Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/9030577a-ba2d-33c2-b5ce-423360fa0234.roa
File:                     9030577a-ba2d-33c2-b5ce-423360fa0234.roa (raw, json)
Hash identifier:          +XVwkmgB0VyzGfbvnafCloB+i2PmI0jNmL4WPyVtVRw=
Subject key identifier:   9C:08:20:0B:A2:1C:A8:8D:FF:94:7C:79:D2:69:95:9B:04:22:A4:66
Certificate issuer:       /CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
Certificate serial:       010D0C9F4328584B583C8BC01096F0D025BB7900
Authority key identifier: 77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/9030577a-ba2d-33c2-b5ce-423360fa0234.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     20119
IP address blocks:        142.202.12.0/24 maxlen: 24
                          142.202.13.0/24 maxlen: 24
                          142.202.14.0/24 maxlen: 24
                          142.202.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:8b:c0:10:96:f0:d0:25:bb:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=6c6c24f6-fc30-4da9-b25a-1eaf8ce60f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:08:94:76:48:a9:a8:2f:f9:46:b0:5b:50:
                    bc:3f:2d:ea:cb:49:01:94:8d:4f:e3:ea:c5:a8:2c:
                    c9:7c:5f:50:b6:63:12:b6:c6:9b:57:89:e2:42:0a:
                    ed:ae:52:f5:1b:53:c9:69:a4:4a:db:94:f4:63:43:
                    ac:3f:8a:12:41:b9:9f:61:c1:a4:12:90:6d:5c:a5:
                    c1:83:59:32:28:7f:43:52:92:2c:b9:d4:7e:12:34:
                    36:2b:b7:42:08:0b:b1:d2:ec:82:06:cb:9c:58:0c:
                    ca:7b:08:4e:f5:1d:ff:7c:52:6f:45:90:85:ec:11:
                    9c:6b:fc:3d:83:37:27:2c:57:5a:68:a3:98:dc:4c:
                    b1:67:f9:4c:27:71:32:fd:56:76:5b:0e:a9:8e:a9:
                    ee:82:77:6d:9a:39:22:58:f0:7a:72:59:6c:26:bb:
                    a3:35:a3:30:66:0b:30:46:9a:8d:51:2b:9a:79:11:
                    de:d1:30:4a:c1:91:6e:3e:6b:c3:c9:10:10:5a:fa:
                    71:46:70:1d:00:fc:d5:73:58:aa:46:d8:ef:fd:07:
                    63:ca:80:2a:97:45:56:41:cb:90:9c:f5:ca:48:5f:
                    75:2e:a4:dc:a7:07:ea:65:a5:df:58:86:83:ce:9c:
                    12:47:17:96:e9:59:bd:54:ca:71:9f:11:19:23:55:
                    cd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:08:20:0B:A2:1C:A8:8D:FF:94:7C:79:D2:69:95:9B:04:22:A4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/9030577a-ba2d-33c2-b5ce-423360fa0234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl

            X509v3 Authority Key Identifier:
                keyid:77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f9:7e:73:8a:b2:70:63:5d:15:2e:6e:d4:d7:04:ec:7d:4b:
         37:f8:c5:fb:e4:45:84:28:81:11:ab:90:95:b8:6f:61:70:71:
         01:56:de:ef:4e:df:a5:f7:44:b0:1c:2a:41:04:70:25:9d:4a:
         33:8a:5c:35:82:51:2c:1e:bb:bd:33:d1:5b:0c:eb:70:25:0a:
         c7:03:46:0c:26:d5:19:16:aa:ea:fc:8a:f0:9b:27:47:7e:73:
         e4:45:0b:19:71:56:f3:a5:61:3c:5e:4f:ca:e6:8b:6d:0d:62:
         fa:74:45:4f:ca:e7:ab:a3:24:5f:f0:0e:7b:0f:5b:0e:21:27:
         c1:36:63:22:26:b5:0c:5d:f3:72:be:b6:30:04:78:3d:80:77:
         05:3b:8c:a5:ed:c9:3c:f4:ef:cc:4c:2a:0b:01:1f:1c:7c:4a:
         5f:d7:8c:70:c9:48:26:37:12:a0:fe:97:95:81:cf:ea:9b:ab:
         93:47:03:9d:8d:fc:54:34:19:26:e9:21:89:b3:f6:57:af:56:
         95:57:e3:7b:52:e3:d2:6f:fe:58:50:fa:1e:0c:e6:6c:30:61:
         df:42:e0:b0:88:f7:cc:60:ad:9c:64:c5:5e:37:82:9d:e8:9d:
         90:c8:53:39:19:53:ed:5f:42:f0:9d:5a:8f:0e:61:84:9f:2f:
         60:18:25:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIvAEJbw0CW7eQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTBmMWJiYzYtYjZlNy00ZTE5LWFlMjktNWVlYzY4Yzlm
MjZkMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
NmM2YzI0ZjYtZmMzMC00ZGE5LWIyNWEtMWVhZjhjZTYwZjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnIIlHZIqagv+UawW1C8Py3qy0kBlI1P4+rF
qCzJfF9QtmMStsabV4niQgrtrlL1G1PJaaRK25T0Y0OsP4oSQbmfYcGkEpBtXKXB
g1kyKH9DUpIsudR+EjQ2K7dCCAux0uyCBsucWAzKewhO9R3/fFJvRZCF7BGca/w9
gzcnLFdaaKOY3EyxZ/lMJ3Ey/VZ2Ww6pjqnugndtmjkiWPB6cllsJrujNaMwZgsw
RpqNUSuaeRHe0TBKwZFuPmvDyRAQWvpxRnAdAPzVc1iqRtjv/QdjyoAql0VWQcuQ
nPXKSF91LqTcpwfqZaXfWIaDzpwSRxeW6Vm9VMpxnxEZI1XNmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJwIIAuiHKiN/5R8edJplZsEIqRmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGYx
YmJjNi1iNmU3LTRlMTktYWUyOS01ZWVjNjhjOWYyNmQvOTAzMDU3N2EtYmEyZC0z
M2MyLWI1Y2UtNDIzMzYwZmEwMjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTBmMWJiYzYtYjZlNy00ZTE5LWFl
MjktNWVlYzY4YzlmMjZkLzEwZjFiYmM2LWI2ZTctNGUxOS1hZTI5LTVlZWM2OGM5
ZjI2ZC5jcmwwHwYDVR0jBBgwFoAUdx6796Yo4OWqiQvWT4K9ecy5bUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGYxYmJjNi1iNmU3LTRlMTktYWUyOS01ZWVj
NjhjOWYyNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsoMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF75fnOKsnBjXRUubtTXBOx9Szf4xfvkRYQogRGrkJW4b2FwcQFW3u9O
36X3RLAcKkEEcCWdSjOKXDWCUSweu70z0VsM63AlCscDRgwm1RkWqur8ivCbJ0d+
c+RFCxlxVvOlYTxeT8rmi20NYvp0RU/K56ujJF/wDnsPWw4hJ8E2YyImtQxd83K+
tjAEeD2AdwU7jKXtyTz078xMKgsBHxx8Sl/XjHDJSCY3EqD+l5WBz+qbq5NHA52N
/FQ0GSbpIYmz9levVpVX43tS49Jv/lhQ+h4M5mwwYd9C4LCI98xgrZxkxV43gp3o
nZDIUzkZU+1fQvCdWo8OYYSfL2AYJfs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:45:56 2025 by rpki-client