Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa
File:                     7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa (raw, json)
Hash identifier:          XEZGgUGjpn1Yic6Tf2uchpeUr9mIqOn6B8zXQoSQkZs=
Subject key identifier:   61:0E:7E:12:02:8E:66:91:87:75:FB:CD:7B:BD:F5:E0:D8:C7:7F:12
Certificate issuer:       /CN=ba461ed6-9748-4005-b669-8946003e1ae1
Certificate serial:       010D0C9F4328584B7F5215BB0F9ECB89EAFA1D00
Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     4246
IP address blocks:        128.235.241.0/24 maxlen: 24
                          128.235.249.0/24 maxlen: 24
                          128.235.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:15:bb:0f:9e:cb:89:ea:fa:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=adbe0b86-e743-4b3c-85f5-7e89ff190b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:d4:31:9b:bd:50:2f:44:7f:e4:a6:f4:69:
                    07:42:27:2b:ec:d3:2e:86:d0:be:6d:97:d3:e1:b7:
                    b9:ce:23:e3:41:1a:19:ef:6e:41:26:3e:01:9b:c8:
                    4b:d5:a4:ca:f5:90:76:de:91:ac:18:23:da:92:32:
                    96:16:7c:d9:c1:81:b7:2c:c9:f3:ec:0f:b5:10:4d:
                    9e:e1:fc:b6:db:40:fd:e2:36:6c:63:9e:8c:ed:34:
                    66:6e:4d:2e:bb:0c:24:8c:c9:17:32:68:b4:52:1e:
                    b6:1a:df:e1:9b:37:28:48:71:f5:1c:eb:05:b5:75:
                    58:48:8a:50:a6:3d:af:65:a4:21:e5:2c:6b:b0:b8:
                    44:fd:fb:4b:3c:a7:12:a2:44:b0:04:5e:e0:a7:f0:
                    82:ed:23:b0:d8:ce:91:80:b8:7d:7e:e6:17:f0:f2:
                    b0:00:b6:a3:4a:88:c9:f6:17:7c:88:07:60:49:d4:
                    2c:70:cb:49:bd:0e:31:c8:b0:82:d0:a9:d8:a5:ab:
                    2f:4b:a8:2c:26:2f:da:c9:55:ff:2a:25:10:87:97:
                    7c:0c:1d:c0:94:59:5c:e4:38:84:38:35:48:58:a3:
                    9e:13:cd:de:27:3f:dc:cc:04:5d:0a:ff:6b:29:d9:
                    f6:9b:5b:c0:62:05:be:ce:3e:3b:df:60:55:6f:13:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0E:7E:12:02:8E:66:91:87:75:FB:CD:7B:BD:F5:E0:D8:C7:7F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/7c02cb14-7ab0-38e2-86cb-f09009bc5549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl

            X509v3 Authority Key Identifier:
                keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.235.241.0/24
                  128.235.249.0/24
                  128.235.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0d:73:b5:48:5c:a1:98:28:ec:93:4b:38:dd:bd:52:a5:58:
         21:7c:67:5f:34:d1:1d:09:1c:9c:fd:bf:7b:01:5d:34:d8:70:
         d2:dd:5c:17:24:b2:f7:74:e3:f0:fb:04:15:c6:8f:ce:ba:39:
         9a:02:b2:28:70:0b:ad:5d:97:6c:13:06:a4:2f:66:22:c2:49:
         b2:84:07:02:7e:2b:02:a7:e1:4f:93:2c:2b:fe:fa:ad:76:31:
         c1:4a:2f:60:80:71:62:ad:59:a0:8e:5b:87:77:e0:6a:5a:6f:
         02:17:4d:eb:9f:a1:67:dc:0f:dd:d2:4f:68:5b:42:4c:3d:4c:
         85:67:a2:ef:9d:3b:14:6f:eb:60:23:5e:c8:15:cb:28:ab:dc:
         4d:a6:5f:91:cf:b2:a6:86:4a:62:3f:36:c4:a4:3f:c7:b9:77:
         f3:67:b8:73:61:ad:ee:62:c7:11:a0:b6:29:6a:7a:84:fd:b9:
         4e:9e:7a:38:f1:e0:2f:cf:a7:ff:e1:2f:16:d6:d4:13:8f:67:
         cd:ad:e6:66:bf:43:44:4f:87:72:0a:24:64:de:cb:99:34:64:
         e3:76:3b:58:48:a4:40:5f:41:0c:56:61:7a:b1:78:e3:f6:2b:
         d2:f2:2d:94:da:cd:d5:08:f6:4d:e9:8f:be:32:be:b5:92:c0:
         b6:05:ff:37
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEt/UhW7D57Lier6HQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux
YWUxMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
YWRiZTBiODYtZTc0My00YjNjLTg1ZjUtN2U4OWZmMTkwYjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCTUMZu9UC9Ef+Sm9GkHQicr7NMuhtC+bZfT
4be5ziPjQRoZ725BJj4Bm8hL1aTK9ZB23pGsGCPakjKWFnzZwYG3LMnz7A+1EE2e
4fy220D94jZsY56M7TRmbk0uuwwkjMkXMmi0Uh62Gt/hmzcoSHH1HOsFtXVYSIpQ
pj2vZaQh5SxrsLhE/ftLPKcSokSwBF7gp/CC7SOw2M6RgLh9fuYX8PKwALajSojJ
9hd8iAdgSdQscMtJvQ4xyLCC0KnYpasvS6gsJi/ayVX/KiUQh5d8DB3AlFlc5DiE
ODVIWKOeE83eJz/czARdCv9rKdn2m1vAYgW+zj4732BVbxPvFwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFGEOfhICjmaRh3X7zXu99eDYx38SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2
MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvN2MwMmNiMTQtN2FiMC0z
OGUyLTg2Y2ItZjA5MDA5YmM1NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2
NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl
MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2
MDAzZTFhZTEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAgOvxAwQA
gOv5AwQAgOv7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGYNc7VIXKGYKOyTSzjdvVKlWCF8Z1800R0JHJz9
v3sBXTTYcNLdXBcksvd04/D7BBXGj866OZoCsihwC61dl2wTBqQvZiLCSbKEBwJ+
KwKn4U+TLCv++q12McFKL2CAcWKtWaCOW4d34GpabwIXTeufoWfcD93ST2hbQkw9
TIVnou+dOxRv62AjXsgVyyir3E2mX5HPsqaGSmI/NsSkP8e5d/NnuHNhre5ixxGg
tilqeoT9uU6eejjx4C/Pp//hLxbW1BOPZ82t5ma/Q0RPh3IKJGTey5k0ZON2O1hI
pEBfQQxWYXqxeOP2K9LyLZTazdUI9k3pj74yvrWSwLYF/zc=
-----END CERTIFICATE-----
Generated at Wed Oct 22 00:44:08 2025 by rpki-client