Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3949741b-f187-3edd-a5a3-67a7c6b7b81b.roa
File:                     3949741b-f187-3edd-a5a3-67a7c6b7b81b.roa (raw, json)
Hash identifier:          PvcMzYKftmKJjvj0RB6PObd3KAKVx/dTJ/xg7GrjYuc=
Subject key identifier:   8F:8B:4E:7E:81:1D:EF:18:A9:70:57:06:1A:44:46:BE:CD:5C:3A:6D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584B4081B308CE47B509466F5F80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3949741b-f187-3edd-a5a3-67a7c6b7b81b.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     1008
IP address blocks:        206.54.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:b3:08:ce:47:b5:09:46:6f:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=9a9109ef-568a-47cf-9655-296c374b65dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:04:59:9a:08:b4:a4:ee:bf:b1:a4:bf:3d:
                    a9:60:c0:a6:9d:7d:6e:ee:61:e0:43:f8:9d:d4:c9:
                    16:13:5e:b3:61:01:72:03:a5:a3:91:8e:97:50:cb:
                    b0:25:08:86:a0:84:b5:9a:3d:0c:9e:ce:6a:fe:8f:
                    74:f6:34:40:80:53:40:1f:30:b2:a1:c1:85:50:65:
                    03:98:26:2b:23:84:f3:22:44:e8:8d:7d:35:cb:80:
                    65:4f:72:2d:90:8a:ba:14:d5:7f:3c:a1:9d:ac:3b:
                    7b:fa:86:74:76:65:43:01:d8:be:37:a1:12:0c:4d:
                    ad:91:ae:f1:29:71:0a:15:e3:ee:cd:ef:56:11:05:
                    8e:6c:1c:0f:27:bb:b0:5c:c2:10:3a:74:8e:43:fe:
                    31:3f:11:94:07:e4:bc:4e:a4:c3:bc:83:0b:a8:b4:
                    36:e2:a4:1d:84:5d:65:a9:ea:36:dd:55:18:42:c3:
                    f4:21:2e:b5:a3:a9:39:c1:4e:22:95:4f:ee:c0:eb:
                    1d:18:f5:93:24:61:78:5c:74:c4:e4:0d:a7:ca:5e:
                    fc:a5:23:0b:2a:3a:be:af:d9:7d:c4:7a:35:62:2f:
                    fe:7b:24:c7:73:01:ae:83:ef:94:2e:66:1a:9e:93:
                    21:8c:2a:f0:4b:9b:70:3c:6f:1d:8d:e3:f1:e0:dd:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8B:4E:7E:81:1D:EF:18:A9:70:57:06:1A:44:46:BE:CD:5C:3A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3949741b-f187-3edd-a5a3-67a7c6b7b81b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.54.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:42:0a:5e:82:bf:29:2c:57:38:56:de:ca:59:de:72:e8:20:
         b1:27:c2:55:1e:77:fe:07:ae:ef:b2:d0:bf:81:60:0b:64:b5:
         56:2a:97:6c:98:d2:41:84:86:29:d7:c8:72:f6:2f:4b:8b:c9:
         cb:11:1c:07:fd:bb:a4:c0:64:2d:3f:db:aa:65:dc:a3:41:6e:
         3f:84:72:cc:99:0e:56:13:eb:1f:17:e6:ab:3e:ec:64:35:60:
         fa:50:cb:04:26:a4:9d:5c:c6:9c:58:99:87:0d:75:d8:46:8b:
         bb:b8:a2:94:32:19:2f:5d:7f:19:8f:a6:f0:79:9c:f2:dd:a2:
         d6:c9:4a:e5:e3:13:85:b3:e2:fc:83:00:d7:6f:76:c7:c5:a2:
         dc:e7:d7:82:68:dc:b5:34:71:43:e9:f6:e2:19:5d:68:3a:e4:
         bf:ce:ca:23:b6:35:8a:44:ad:72:e6:ce:14:64:3b:72:c0:84:
         eb:a3:70:b7:53:f3:21:e4:fc:c1:da:a6:7f:05:eb:ae:5f:ef:
         2b:80:15:27:94:f7:11:f4:a1:cf:d8:c4:b6:6f:d7:f7:5c:e7:
         ef:93:4d:3f:ee:bf:0e:92:5b:9e:2f:63:21:d0:a7:8e:ac:cb:
         40:7d:fb:6e:05:01:2a:00:8c:09:d3:19:be:42:67:07:21:de:
         51:5c:94:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgbMIzke1CUZvX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk
OWE5MTA5ZWYtNTY4YS00N2NmLTk2NTUtMjk2YzM3NGI2NWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjygEWZoItKTuv7Gkvz2pYMCmnX1u7mHgQ/id
1MkWE16zYQFyA6WjkY6XUMuwJQiGoIS1mj0Mns5q/o909jRAgFNAHzCyocGFUGUD
mCYrI4TzIkTojX01y4BlT3ItkIq6FNV/PKGdrDt7+oZ0dmVDAdi+N6ESDE2tka7x
KXEKFePuze9WEQWObBwPJ7uwXMIQOnSOQ/4xPxGUB+S8TqTDvIMLqLQ24qQdhF1l
qeo23VUYQsP0IS61o6k5wU4ilU/uwOsdGPWTJGF4XHTE5A2nyl78pSMLKjq+r9l9
xHo1Yi/+eyTHcwGug++ULmYanpMhjCrwS5twPG8djePx4N02owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+LTn6BHe8YqXBXBhpERr7NXDptMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzk0OTc0MWItZjE4Ny0z
ZWRkLWE1YTMtNjdhN2M2YjdiODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5CCl6CvyksVzhW3spZ3nLoILEnwlUed/4Hru+y0L+BYAtktVYql2yY
0kGEhinXyHL2L0uLycsRHAf9u6TAZC0/26pl3KNBbj+EcsyZDlYT6x8X5qs+7GQ1
YPpQywQmpJ1cxpxYmYcNddhGi7u4opQyGS9dfxmPpvB5nPLdotbJSuXjE4Wz4vyD
ANdvdsfFotzn14Jo3LU0cUPp9uIZXWg65L/OyiO2NYpErXLmzhRkO3LAhOujcLdT
8yHk/MHapn8F665f7yuAFSeU9xH0oc/YxLZv1/dc5++TTT/uvw6SW54vYyHQp46s
y0B9+24FASoAjAnTGb5CZwch3lFclNM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:13:14 2025 by rpki-client