Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/edf7067b-47be-35b5-80dc-82c3ba48aa19.roa
File:                     edf7067b-47be-35b5-80dc-82c3ba48aa19.roa (raw, json)
Hash identifier:          p/5BESg4F78v1xnuIJLoNv6RiSYCJ6AT77t+IflkNSU=
Subject key identifier:   75:B9:8F:3E:4C:22:CC:70:AE:70:7A:43:1A:E7:0F:A1:ED:1E:09:56
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584B8EACD4FADE76349BA1256600
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/edf7067b-47be-35b5-80dc-82c3ba48aa19.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     139267
IP address blocks:        142.202.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d4:fa:de:76:34:9b:a1:25:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=6bbc4902-caf7-47e4-8c5c-e91b7cbd6377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:14:4e:0e:1a:24:00:d1:16:d9:f6:37:f8:e7:
                    b8:a6:80:5c:57:8d:f8:11:6d:f1:35:5e:c2:64:35:
                    d1:a8:94:b4:83:a9:b5:d5:e4:67:0b:2a:7d:26:34:
                    34:96:ae:bc:fe:fd:b8:9b:f4:de:75:94:93:c5:97:
                    df:0f:36:5c:5a:52:ea:44:ba:2a:93:4c:af:e9:e9:
                    6b:22:cf:50:76:99:54:a7:37:e9:36:07:3d:d1:64:
                    9e:20:f5:7c:cb:a4:9b:54:d2:72:82:e7:52:1d:ab:
                    b3:38:c3:31:d6:aa:82:03:c5:31:ca:9d:f8:41:44:
                    be:ca:c1:8c:8f:fe:1a:b1:69:ae:58:a8:43:5d:de:
                    70:64:4c:0d:ca:92:7e:fc:80:b7:a3:fb:c3:6a:4a:
                    60:53:f0:af:12:29:a7:dd:c5:9a:09:66:86:3e:6f:
                    8c:70:0d:50:f6:b0:34:45:68:ad:0d:7b:5d:6d:f2:
                    24:df:cd:4c:eb:5f:a2:22:47:b8:c6:ea:de:c1:a4:
                    16:f9:f1:f1:de:20:70:59:3d:df:63:4b:b0:03:6f:
                    00:2c:83:e9:19:aa:6e:0f:34:1b:5b:4b:2a:27:21:
                    97:0b:eb:60:f7:c6:73:57:18:dc:5a:6e:9d:43:00:
                    02:1f:eb:7b:2c:e4:ac:a0:a5:d1:16:f8:14:e9:b1:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B9:8F:3E:4C:22:CC:70:AE:70:7A:43:1A:E7:0F:A1:ED:1E:09:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/edf7067b-47be-35b5-80dc-82c3ba48aa19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:f4:7a:d3:6b:13:ec:34:4c:ff:fd:2b:15:94:ff:d1:a9:
         7a:58:fa:81:88:c5:41:80:59:d7:f6:4f:40:69:fe:82:23:9e:
         9a:85:dc:87:92:53:34:b7:94:d8:e3:f3:b4:a7:97:68:eb:77:
         11:a2:94:71:47:fa:24:aa:bd:94:05:45:26:0e:8c:26:98:24:
         10:12:f5:11:60:19:5c:e1:e1:4b:1d:f3:f6:99:f9:5b:77:ac:
         3a:f1:f4:02:6d:b3:4a:37:b8:43:d3:e0:d9:10:4a:1e:53:13:
         a7:0b:fb:7c:41:10:20:9b:42:0e:6c:d1:17:1f:50:5a:a8:2b:
         c1:8f:9a:a3:d8:4f:71:e4:f5:e3:5a:60:93:6a:a8:e3:05:0c:
         3b:7c:08:0f:2f:fa:ae:4a:3f:5f:d6:61:5e:02:c8:38:ec:ab:
         1f:1e:01:a3:db:06:8c:49:ac:8a:00:65:fa:6a:51:1a:26:b4:
         68:5e:95:55:e5:69:ee:a4:53:4a:e9:5c:7f:a3:d5:f2:75:1c:
         53:a5:46:4d:f4:f4:db:e6:b5:82:36:d7:bd:3a:99:37:07:91:
         cc:98:82:fe:a1:d1:da:d6:e1:c2:6c:d4:e4:c7:ae:ed:f7:15:
         cd:c3:c9:a3:80:71:f5:e6:dd:73:78:14:3a:27:72:be:29:6e:
         65:8a:b1:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNT63nY0m6ElZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx
NTE5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
NmJiYzQ5MDItY2FmNy00N2U0LThjNWMtZTkxYjdjYmQ2Mzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RRODhokANEW2fY3+Oe4poBcV434EW3xNV7C
ZDXRqJS0g6m11eRnCyp9JjQ0lq68/v24m/TedZSTxZffDzZcWlLqRLoqk0yv6elr
Is9QdplUpzfpNgc90WSeIPV8y6SbVNJygudSHauzOMMx1qqCA8Uxyp34QUS+ysGM
j/4asWmuWKhDXd5wZEwNypJ+/IC3o/vDakpgU/CvEimn3cWaCWaGPm+McA1Q9rA0
RWitDXtdbfIk381M61+iIke4xurewaQW+fHx3iBwWT3fY0uwA28ALIPpGapuDzQb
W0sqJyGXC+tg98ZzVxjcWm6dQwACH+t7LOSsoKXRFvgU6bFiNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHW5jz5MIsxwrnB6QxrnD6HtHglWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl
YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvZWRmNzA2N2ItNDdiZS0z
NWI1LTgwZGMtODJjM2JhNDhhYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx
ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx
MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk
MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdd9HrTaxPsNEz//SsVlP/RqXpY+oGIxUGAWdf2T0Bp/oIjnpqF3IeS
UzS3lNjj87Snl2jrdxGilHFH+iSqvZQFRSYOjCaYJBAS9RFgGVzh4Usd8/aZ+Vt3
rDrx9AJts0o3uEPT4NkQSh5TE6cL+3xBECCbQg5s0RcfUFqoK8GPmqPYT3Hk9eNa
YJNqqOMFDDt8CA8v+q5KP1/WYV4CyDjsqx8eAaPbBoxJrIoAZfpqURomtGhelVXl
ae6kU0rpXH+j1fJ1HFOlRk309NvmtYI21706mTcHkcyYgv6h0drW4cJs1OTHru33
Fc3DyaOAcfXm3XN4FDoncr4pbmWKseQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:14:00 2025 by rpki-client