Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/517bbca5-17e1-3242-a695-67fa19c954bc.roa
File:                     517bbca5-17e1-3242-a695-67fa19c954bc.roa (raw, json)
Hash identifier:          kGp8TEWL88DU+xaQbS/iS76+nQUoA3dPnio6CnIRgJQ=
Subject key identifier:   B6:FC:F9:DD:D6:0E:61:FE:5E:1F:B0:A9:AD:F2:39:C1:93:CD:03:5E
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F4328584B5B074939ECB673095AFD6E80
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/517bbca5-17e1-3242-a695-67fa19c954bc.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     23341
IP address blocks:        143.55.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:49:39:ec:b6:73:09:5a:fd:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=cdd6b1bd-8a43-4ec6-8f7b-b4b7dc07a5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:69:25:13:46:d6:32:63:86:ce:71:3f:6f:9f:
                    4f:ff:49:df:25:6a:53:2c:5a:86:f3:44:b3:66:0f:
                    1e:b5:eb:6c:05:c2:46:3e:25:c9:7b:f9:b8:dd:ca:
                    4f:19:61:26:ba:e2:9a:83:43:b8:8e:03:96:3a:0e:
                    6b:ac:a0:e4:6b:74:6f:bf:2f:a6:5a:a5:fa:67:de:
                    23:44:04:8a:cf:e6:99:90:80:32:37:8a:48:28:c7:
                    d5:d3:a4:18:fa:ec:56:b6:42:3a:17:ef:b1:2b:4c:
                    9d:ed:77:21:3e:5b:a2:e8:53:4a:66:a2:50:c8:d3:
                    b9:12:d5:dd:86:42:2d:99:be:d2:87:14:42:dd:8b:
                    3a:e2:64:29:1c:ad:61:ce:17:82:7e:94:91:36:00:
                    a2:a5:3d:78:69:92:71:36:51:97:4a:eb:4b:5a:0f:
                    95:af:3c:f3:6d:31:0f:c4:1f:d4:25:78:25:aa:5c:
                    3e:12:c8:29:cd:de:7a:d7:07:9b:51:a4:db:ac:26:
                    37:15:a2:1b:f2:2a:e5:7e:3d:8c:1d:17:a7:6d:f3:
                    a0:77:28:59:8e:73:a5:b0:89:a5:91:62:b7:09:f6:
                    a6:44:dd:57:50:b1:22:bc:3f:35:10:3e:66:c5:2b:
                    90:11:3a:2a:cb:1c:ed:e7:53:ac:cd:f0:2d:23:75:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FC:F9:DD:D6:0E:61:FE:5E:1F:B0:A9:AD:F2:39:C1:93:CD:03:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/517bbca5-17e1-3242-a695-67fa19c954bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:01:4c:7c:a8:c8:01:3d:5c:bd:a6:0c:0a:24:d9:87:d9:3b:
         00:58:47:fa:70:18:5f:bc:c4:c7:b4:f9:93:c4:82:ca:48:91:
         30:67:10:cf:76:a7:6e:d5:e5:ef:54:ab:99:12:a6:5b:42:0b:
         80:32:e5:77:88:10:7e:9f:b0:7c:99:85:db:0c:6d:eb:da:f9:
         aa:24:ca:9b:4b:0f:05:66:19:59:77:b4:c1:03:69:65:92:04:
         d5:e5:6a:5c:e3:07:1e:61:bf:02:82:21:8b:92:b0:2c:52:3c:
         34:fd:3b:8d:50:74:2a:76:87:31:69:61:00:08:67:7d:aa:c9:
         3d:6b:7e:38:6f:0e:3c:a0:44:7a:c1:ab:1d:77:7d:76:58:26:
         67:16:de:02:87:3d:67:94:f2:a0:49:d4:f7:03:1e:84:c6:40:
         9b:f7:3b:2a:c7:4c:77:c6:1c:92:42:d8:df:c6:dd:f2:ec:f9:
         c7:ef:d9:9e:57:01:f4:af:8b:f0:46:6a:10:7a:4b:40:84:af:
         28:76:76:e2:d9:d4:b8:c7:7f:e0:b1:f2:65:5e:bc:05:d9:58:
         cb:5f:87:23:08:a0:8e:b3:87:f2:79:93:de:5b:4a:c7:c6:cf:
         c8:31:43:09:4e:89:08:6d:8e:10:b3:ae:6c:48:31:eb:ff:3e:
         68:67:6f:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0k57LZzCVr9boAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI2ZmQyNjItOTRlYS00ZTMzLWFmM2UtMjEyYWJlMGZj
NjI4MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
Y2RkNmIxYmQtOGE0My00ZWM2LThmN2ItYjRiN2RjMDdhNWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mklE0bWMmOGznE/b59P/0nfJWpTLFqG80Sz
Zg8etetsBcJGPiXJe/m43cpPGWEmuuKag0O4jgOWOg5rrKDka3Rvvy+mWqX6Z94j
RASKz+aZkIAyN4pIKMfV06QY+uxWtkI6F++xK0yd7XchPlui6FNKZqJQyNO5EtXd
hkItmb7ShxRC3Ys64mQpHK1hzheCfpSRNgCipT14aZJxNlGXSutLWg+VrzzzbTEP
xB/UJXglqlw+Esgpzd561webUaTbrCY3FaIb8irlfj2MHRenbfOgdyhZjnOlsIml
kWK3CfamRN1XULEivD81ED5mxSuQEToqyxzt51OszfAtI3WvwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLb8+d3WDmH+Xh+wqa3yOcGTzQNeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YjZm
ZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJhYmUwZmM2MjgvNTE3YmJjYTUtMTdlMS0z
MjQyLWE2OTUtNjdmYTE5Yzk1NGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWI2ZmQyNjItOTRlYS00ZTMzLWFm
M2UtMjEyYWJlMGZjNjI4LzViNmZkMjYyLTk0ZWEtNGUzMy1hZjNlLTIxMmFiZTBm
YzYyOC5jcmwwHwYDVR0jBBgwFoAUNjzIUHmlbKUy9HhU//w8/Bj4M/cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81YjZmZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJh
YmUwZmM2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjzcMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUBTHyoyAE9XL2mDAok2YfZOwBYR/pwGF+8xMe0+ZPEgspIkTBnEM92
p27V5e9Uq5kSpltCC4Ay5XeIEH6fsHyZhdsMbeva+aokyptLDwVmGVl3tMEDaWWS
BNXlalzjBx5hvwKCIYuSsCxSPDT9O41QdCp2hzFpYQAIZ32qyT1rfjhvDjygRHrB
qx13fXZYJmcW3gKHPWeU8qBJ1PcDHoTGQJv3OyrHTHfGHJJC2N/G3fLs+cfv2Z5X
AfSvi/BGahB6S0CEryh2duLZ1LjHf+Cx8mVevAXZWMtfhyMIoI6zh/J5k95bSsfG
z8gxQwlOiQhtjhCzrmxIMev/Pmhnb8U=
-----END CERTIFICATE-----
Generated at Wed Oct 22 02:46:53 2025 by rpki-client