Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa
File:                     f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa (raw, json)
Hash identifier:          v8uoB2Opw8LOmMAmlo0O6KFZwj0HI2G4fVtq63pFZBY=
Subject key identifier:   22:63:0D:0F:1B:16:54:8B:C3:43:34:65:ED:52:88:78:30:A3:4C:77
Certificate issuer:       /CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b
Certificate serial:       010D0C9F4328584B821CC74B14D4AC9632BC7A00
Authority key identifier: 8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     16509
IP address blocks:        69.59.224.0/19 maxlen: 24
                          74.116.144.0/21 maxlen: 24
                          216.115.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c7:4b:14:d4:ac:96:32:bc:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fa7638-a775-4db8-9e8e-702cd8b26b9b
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=27b23675-bbba-43a3-aefd-d7e0558b6ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:9d:65:06:44:21:53:52:4a:3c:c0:bb:04:
                    88:ab:43:a3:f0:71:35:97:d4:cb:42:51:ce:af:b6:
                    81:9d:65:ce:ab:6a:aa:5a:23:d1:67:15:ca:fe:28:
                    df:c9:72:cb:18:86:06:db:f3:80:c6:eb:65:b8:98:
                    bb:73:8e:61:25:a0:26:54:18:bc:dc:36:aa:ae:35:
                    e1:1a:b9:b4:e5:73:1e:de:f5:b1:71:8c:1a:26:a6:
                    6b:d1:4b:dd:d3:07:ee:9f:85:4a:12:56:6b:a1:df:
                    7e:fe:47:a7:5b:99:2a:71:3a:3f:ba:01:5a:61:42:
                    65:66:28:14:ec:b1:2c:fe:46:18:a8:28:bd:4a:50:
                    b2:e7:1a:9f:15:18:1b:09:4a:ee:8b:9c:af:0d:0d:
                    27:62:7f:92:e9:b6:ac:14:3c:b2:68:77:76:24:25:
                    5d:92:96:31:77:92:c8:47:75:3a:79:fa:5e:66:11:
                    78:f5:57:71:0c:bb:97:67:a5:07:4b:3c:48:02:c2:
                    c0:b4:86:3f:39:c4:05:e7:e7:ea:05:70:b6:72:6b:
                    39:c0:2a:f8:fe:63:1a:f2:03:17:1b:85:98:af:6c:
                    71:f1:c2:f1:c2:04:19:f7:99:e5:a9:bd:1e:0c:7d:
                    84:73:8d:c8:ca:c9:87:36:41:8e:84:a3:00:bf:fc:
                    c0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:63:0D:0F:1B:16:54:8B:C3:43:34:65:ED:52:88:78:30:A3:4C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/f1ba9ac0-9cb7-3e9e-83d0-d8d6661a2bf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b/90fa7638-a775-4db8-9e8e-702cd8b26b9b.crl

            X509v3 Authority Key Identifier:
                keyid:8D:4E:E4:49:0A:C2:84:0E:14:E1:21:EB:7F:73:A6:E2:EC:11:CC:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90fa7638-a775-4db8-9e8e-702cd8b26b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.224.0/19
                  74.116.144.0/21
                  216.115.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:78:50:da:9a:9f:fe:5c:b9:84:ca:58:68:37:c4:fd:85:f7:
         00:75:fb:e6:22:c2:cc:90:90:fc:fb:e2:9a:dc:f4:19:70:86:
         bb:ad:4c:54:ba:98:63:97:ce:0e:c1:65:04:b0:06:5b:4e:2f:
         72:c0:de:28:8d:54:f0:cd:60:c9:ff:33:d4:3f:5d:7b:5f:ca:
         96:1f:c3:d4:a1:e9:32:c6:6a:bd:d9:1e:51:73:2a:1c:dd:48:
         43:23:b0:31:34:28:fa:79:5d:88:db:5a:e1:ee:e6:d8:5c:e5:
         b7:f7:29:c0:73:fa:25:92:f4:14:2c:70:7c:88:09:29:80:86:
         9d:63:de:00:53:3c:11:be:a3:ab:7d:a6:7b:21:a9:dd:21:9c:
         85:68:ce:2c:cc:7e:2a:28:9a:41:4d:e8:39:9a:c3:76:38:e3:
         b9:f5:35:50:91:0f:53:7f:3e:83:25:ab:63:58:f4:62:a0:62:
         1b:98:48:aa:75:d7:5a:5d:01:b6:67:dd:23:e7:b7:75:0b:d1:
         69:8d:4a:75:8b:53:46:41:68:32:33:c2:a3:4e:4f:bb:ac:87:
         0e:62:b4:01:a1:4d:b8:04:a3:4a:12:3e:5f:12:58:b9:be:e4:
         ba:74:5e:22:01:fd:63:f0:a6:bf:87:bb:67:f4:a7:09:e7:08:
         31:25:2b:40
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEuCHMdLFNSsljK8egAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBmYTc2MzgtYTc3NS00ZGI4LTllOGUtNzAyY2Q4YjI2
YjliMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MjdiMjM2NzUtYmJiYS00M2EzLWFlZmQtZDdlMDU1OGI2YWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljudZQZEIVNSSjzAuwSIq0Oj8HE1l9TLQlHO
r7aBnWXOq2qqWiPRZxXK/ijfyXLLGIYG2/OAxutluJi7c45hJaAmVBi83DaqrjXh
Grm05XMe3vWxcYwaJqZr0Uvd0wfun4VKElZrod9+/kenW5kqcTo/ugFaYUJlZigU
7LEs/kYYqCi9SlCy5xqfFRgbCUrui5yvDQ0nYn+S6basFDyyaHd2JCVdkpYxd5LI
R3U6efpeZhF49VdxDLuXZ6UHSzxIAsLAtIY/OcQF5+fqBXC2cms5wCr4/mMa8gMX
G4WYr2xx8cLxwgQZ95nlqb0eDH2Ec43IysmHNkGOhKMAv/zAPwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFCJjDQ8bFlSLw0M0Ze1SiHgwo0x3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MGZh
NzYzOC1hNzc1LTRkYjgtOWU4ZS03MDJjZDhiMjZiOWIvZjFiYTlhYzAtOWNiNy0z
ZTllLTgzZDAtZDhkNjY2MWEyYmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTBmYTc2MzgtYTc3NS00ZGI4LTll
OGUtNzAyY2Q4YjI2YjliLzkwZmE3NjM4LWE3NzUtNGRiOC05ZThlLTcwMmNkOGIy
NmI5Yi5jcmwwHwYDVR0jBBgwFoAUjU7kSQrChA4U4SHrf3Om4uwRzKYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MGZhNzYzOC1hNzc1LTRkYjgtOWU4ZS03MDJj
ZDhiMjZiOWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFRTvgAwQD
SnSQAwQE2HMQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAC14UNqan/5cuYTKWGg3xP2F9wB1++YiwsyQkPz7
4prc9BlwhrutTFS6mGOXzg7BZQSwBltOL3LA3iiNVPDNYMn/M9Q/XXtfypYfw9Sh
6TLGar3ZHlFzKhzdSEMjsDE0KPp5XYjbWuHu5thc5bf3KcBz+iWS9BQscHyICSmA
hp1j3gBTPBG+o6t9pnshqd0hnIVozizMfioomkFN6Dmaw3Y447n1NVCRD1N/PoMl
q2NY9GKgYhuYSKp111pdAbZn3SPnt3UL0WmNSnWLU0ZBaDIzwqNOT7ushw5itAGh
TbgEo0oSPl8SWLm+5Lp0XiIB/WPwpr+Hu2f0pwnnCDElK0A=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:12:28 2025 by rpki-client