Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/328acd99-4643-3ed8-b9f2-bab57c33866c.roa
File:                     328acd99-4643-3ed8-b9f2-bab57c33866c.roa (raw, json)
Hash identifier:          FScEoRG/DJ0bMPOxv/P7/5/iEq8xeC8+ycDNsflgLuU=
Subject key identifier:   28:BA:4E:C5:ED:08:49:2A:2B:1D:06:19:97:46:EA:50:79:85:E4:39
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584B8BE21D78250CE1E8E43EA7C0
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/328acd99-4643-3ed8-b9f2-bab57c33866c.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     47039
IP address blocks:        96.61.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:1d:78:25:0c:e1:e8:e4:3e:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=030e94e6-27c9-48e8-b493-d6a848fc46c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:fb:f9:d1:a8:a1:f9:00:6f:b7:b4:e7:06:
                    fa:fe:77:3e:d2:de:ab:4b:a2:bf:8d:e8:9f:5a:c8:
                    fe:47:ce:ec:47:2d:9f:b0:c0:34:74:b4:b8:72:e9:
                    93:e5:41:f9:1f:ca:9a:1f:07:a5:87:fc:52:db:43:
                    2b:04:5e:b3:4a:cf:c9:26:c6:d0:10:d9:75:03:78:
                    ff:30:7a:6b:a7:6b:43:ee:4c:fe:f2:73:42:3f:d2:
                    49:a2:c1:af:1a:0d:4b:2d:02:c7:b9:27:b2:73:e9:
                    be:30:49:7f:e5:78:47:0c:5d:a0:90:98:b7:68:b7:
                    1b:31:bf:38:76:d5:e8:24:a6:c1:91:42:f9:05:44:
                    d7:74:c9:46:ef:a3:b1:9d:e2:d7:e4:dd:aa:4e:56:
                    78:7f:5f:91:89:af:c4:85:41:16:25:8e:1b:c2:9c:
                    bd:13:d2:53:ca:db:33:8f:14:4a:26:74:b0:3d:f2:
                    81:dd:8a:73:69:20:5c:43:b2:41:9f:92:c5:c9:85:
                    54:61:52:9d:c6:5a:2e:1d:c0:5a:ce:3e:35:6d:cf:
                    39:f3:42:38:47:4a:b3:5c:a5:f0:b9:8d:d4:57:63:
                    e7:8d:87:63:ac:e5:11:4c:f5:20:47:39:8f:9a:4e:
                    77:9a:f9:8f:16:ef:7b:a9:66:87:6d:75:dd:3c:d9:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BA:4E:C5:ED:08:49:2A:2B:1D:06:19:97:46:EA:50:79:85:E4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/328acd99-4643-3ed8-b9f2-bab57c33866c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.61.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:90:24:12:ab:85:b9:dc:24:76:84:26:1a:8c:56:0b:71:99:
         1b:f7:3f:ca:ee:32:33:99:0c:e1:e2:ad:68:dc:a6:58:cb:bd:
         51:3e:98:ec:73:eb:8d:c2:44:14:d7:28:9a:34:8d:04:6a:ca:
         f4:29:88:da:94:2c:ff:4a:e1:4c:26:20:75:f7:4f:c3:da:f4:
         b3:8a:46:47:7d:86:15:3d:76:b8:39:76:5f:17:c5:5c:36:df:
         89:46:12:a1:b8:7b:51:4a:54:d8:d8:5e:94:3c:19:e2:90:19:
         6b:27:8a:df:5f:08:da:1f:de:48:b9:ae:80:da:5a:ca:5b:a3:
         d6:54:e8:2e:0f:95:d5:95:32:8b:f1:65:6c:b7:9a:f4:ac:e6:
         40:2e:a9:2d:bf:d2:e1:84:54:04:f5:5f:b1:94:f5:eb:1d:6e:
         e2:49:04:ce:01:76:ca:21:f8:10:d9:f5:73:52:05:7f:e7:3c:
         b8:03:bf:8e:85:22:b5:84:34:ad:25:eb:ff:62:26:e8:7e:14:
         2b:fe:48:c3:61:00:9f:5d:ef:e5:24:a5:6d:9a:9a:ee:bc:b4:
         ba:82:51:46:4b:fc:10:a7:70:e0:af:1f:a9:75:0d:1d:6a:03:
         51:f4:77:06:4b:0b:94:0e:d7:c1:cd:b2:10:68:03:c9:fe:59:
         c5:d3:8a:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4h14JQzh6OQ+p8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh
ZjAxMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
MDMwZTk0ZTYtMjdjOS00OGU4LWI0OTMtZDZhODQ4ZmM0NmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjT7+dGoofkAb7e05wb6/nc+0t6rS6K/jeif
Wsj+R87sRy2fsMA0dLS4cumT5UH5H8qaHwelh/xS20MrBF6zSs/JJsbQENl1A3j/
MHprp2tD7kz+8nNCP9JJosGvGg1LLQLHuSeyc+m+MEl/5XhHDF2gkJi3aLcbMb84
dtXoJKbBkUL5BUTXdMlG76OxneLX5N2qTlZ4f1+Ria/EhUEWJY4bwpy9E9JTytsz
jxRKJnSwPfKB3YpzaSBcQ7JBn5LFyYVUYVKdxlouHcBazj41bc8580I4R0qzXKXw
uY3UV2PnjYdjrOURTPUgRzmPmk53mvmPFu97qWaHbXXdPNmIGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCi6TsXtCEkqKx0GGZdG6lB5heQ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk
NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvMzI4YWNkOTktNDY0My0z
ZWQ4LWI5ZjItYmFiNTdjMzM4NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx
MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl
YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3
MWQ0ZWFmMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYD3jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+QJBKrhbncJHaEJhqMVgtxmRv3P8ruMjOZDOHirWjcpljLvVE+mOxz
643CRBTXKJo0jQRqyvQpiNqULP9K4UwmIHX3T8Pa9LOKRkd9hhU9drg5dl8XxVw2
34lGEqG4e1FKVNjYXpQ8GeKQGWsnit9fCNof3ki5roDaWspbo9ZU6C4PldWVMovx
ZWy3mvSs5kAuqS2/0uGEVAT1X7GU9esdbuJJBM4Bdsoh+BDZ9XNSBX/nPLgDv46F
IrWENK0l6/9iJuh+FCv+SMNhAJ9d7+UkpW2amu68tLqCUUZL/BCncOCvH6l1DR1q
A1H0dwZLC5QO18HNshBoA8n+WcXTitk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:31 2025 by rpki-client