Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa
File:                     b6aef4d5-7853-36ff-91b5-a441b0020316.roa (raw, json)
Hash identifier:          xQc0Fm5chmSlMGdrdPL7VFVcylq/+GwxWb6AlmfePWo=
Subject key identifier:   DA:0E:3B:C0:7C:C5:80:ED:7B:2D:49:44:F2:D2:50:0B:BB:1F:AD:E7
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584B80B768D342959469C53F8C40
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     1403
IP address blocks:        96.127.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:68:d3:42:95:94:69:c5:3f:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=428b3116-ba0f-403b-ade6-2fb5291b6ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:7b:11:bc:65:77:03:3f:48:71:c0:02:c4:
                    83:fb:dd:ec:d3:4e:d4:50:94:17:f7:b2:6c:07:0e:
                    60:4f:10:77:a4:91:69:55:88:64:71:2e:dc:bb:4b:
                    73:ad:50:d4:c6:ff:0f:17:d2:63:ae:15:4f:0a:a8:
                    94:33:a7:6e:9c:f4:a8:3d:20:f4:e9:ae:90:50:42:
                    4d:e8:0d:0d:18:45:b4:c7:16:2f:27:d1:07:06:09:
                    6c:79:d3:08:39:4f:4b:60:66:5e:15:f6:56:10:b8:
                    43:6e:6b:1f:76:6b:b0:d6:44:d6:92:d6:12:ed:ec:
                    6f:b6:d1:f4:69:06:17:79:f7:e6:bd:c0:ac:14:d5:
                    fb:eb:ae:1a:c3:a8:4b:82:ef:bd:f5:04:63:01:73:
                    75:0b:d2:64:51:f5:21:60:59:da:37:13:f8:38:6a:
                    45:bc:ea:20:46:f4:37:25:23:f0:46:44:80:08:ef:
                    de:bb:1e:59:5d:92:4d:39:81:6c:52:8d:09:ed:86:
                    64:7c:f9:79:04:a7:96:9f:0c:7c:43:07:56:f1:c3:
                    f2:b7:34:46:88:a1:d1:08:4f:93:b6:d6:61:89:1e:
                    5f:c1:5b:b7:fb:b6:32:dd:84:ab:71:c3:01:89:59:
                    df:80:a0:f7:74:f0:c4:1d:45:a4:e7:5b:03:4c:c5:
                    af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0E:3B:C0:7C:C5:80:ED:7B:2D:49:44:F2:D2:50:0B:BB:1F:AD:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e1:0a:7f:94:34:a2:87:51:d4:0d:e1:37:11:b6:e5:ce:b5:
         44:ff:87:c1:7f:e3:1c:b0:f5:d5:bf:e2:b3:b2:c5:7a:d0:60:
         20:cc:3a:5e:f8:f6:d7:91:a4:28:cd:3f:69:a5:7a:8d:39:50:
         8e:02:38:13:6e:94:55:9a:5e:c3:c9:e6:24:60:50:a1:e1:25:
         dd:00:6b:0f:a0:11:b2:02:9d:be:9a:a2:26:e3:16:ac:72:8d:
         0e:23:39:ca:df:db:e4:da:75:62:21:7d:e4:ee:91:cb:48:e3:
         b2:dd:6d:a8:7d:69:07:6a:29:0f:fb:c1:83:35:86:ee:dd:3c:
         0c:32:64:2c:fc:e0:5e:22:b1:31:b8:fe:1d:36:4a:28:cf:aa:
         e4:02:c0:1d:92:7a:c5:7b:5e:bf:62:c9:07:18:26:80:6b:1d:
         2c:6f:70:bc:b9:ac:35:c6:8f:f7:e9:f8:e5:ab:27:1c:0d:f3:
         fc:72:7f:5c:f3:c5:ea:70:e4:4f:89:94:a4:e9:7f:9c:50:12:
         9e:9c:c3:42:0d:67:1b:7f:82:0c:4d:4a:4d:e0:f4:f0:96:8a:
         0d:0c:41:16:4c:37:7c:bb:b0:8a:23:89:59:5c:91:78:62:31:
         e3:23:ae:7b:31:d9:b4:f3:58:4d:a3:b9:e1:a5:cd:4d:56:04:
         32:f0:85:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2jTQpWUacU/jEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2
Nzk4MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
NDI4YjMxMTYtYmEwZi00MDNiLWFkZTYtMmZiNTI5MWI2ZWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnal7EbxldwM/SHHAAsSD+93s007UUJQX97Js
Bw5gTxB3pJFpVYhkcS7cu0tzrVDUxv8PF9JjrhVPCqiUM6dunPSoPSD06a6QUEJN
6A0NGEW0xxYvJ9EHBglsedMIOU9LYGZeFfZWELhDbmsfdmuw1kTWktYS7exvttH0
aQYXeffmvcCsFNX7664aw6hLgu+99QRjAXN1C9JkUfUhYFnaNxP4OGpFvOogRvQ3
JSPwRkSACO/eux5ZXZJNOYFsUo0J7YZkfPl5BKeWnwx8QwdW8cPytzRGiKHRCE+T
ttZhiR5fwVu3+7Yy3YSrccMBiVnfgKD3dPDEHUWk51sDTMWvUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNoOO8B8xYDtey1JRPLSUAu7H63nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh
YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvYjZhZWY0ZDUtNzg1My0z
NmZmLTkxYjUtYTQ0MWIwMDIwMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz
N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj
Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl
YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYH/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHhCn+UNKKHUdQN4TcRtuXOtUT/h8F/4xyw9dW/4rOyxXrQYCDMOl74
9teRpCjNP2mleo05UI4COBNulFWaXsPJ5iRgUKHhJd0Aaw+gEbICnb6aoibjFqxy
jQ4jOcrf2+TadWIhfeTukctI47Ldbah9aQdqKQ/7wYM1hu7dPAwyZCz84F4isTG4
/h02SijPquQCwB2SesV7Xr9iyQcYJoBrHSxvcLy5rDXGj/fp+OWrJxwN8/xyf1zz
xepw5E+JlKTpf5xQEp6cw0INZxt/ggxNSk3g9PCWig0MQRZMN3y7sIojiVlckXhi
MeMjrnsx2bTzWE2jueGlzU1WBDLwhac=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:03 2025 by rpki-client