Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa
File:                     bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa (raw, json)
Hash identifier:          cbrMRV/xbwKSGmIn5R5nqQpI+5SQvUK8yCqTjNtShIE=
Subject key identifier:   31:C7:A9:D6:83:A4:47:79:38:95:F9:C3:C3:E5:34:5E:46:25:46:DD
Certificate issuer:       /CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
Certificate serial:       010D0C9F4328584B89177C05887B7D9F4520EE60
Authority key identifier: A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     30197
IP address blocks:        206.201.168.0/24 maxlen: 24
                          206.201.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:7c:05:88:7b:7d:9f:45:20:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=a395e288-3b40-4ffa-93a8-0e8b96ca5258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:d5:46:1f:78:f2:49:5e:e4:18:42:65:ce:
                    f9:da:38:e4:31:48:c5:00:58:59:27:36:6c:0a:27:
                    ce:9b:c9:07:8e:b1:bd:33:59:39:81:6c:d2:c1:ce:
                    75:f9:e9:f0:21:93:90:ca:33:ed:fe:ad:fb:ba:73:
                    fe:45:93:d6:88:67:50:33:48:f4:eb:54:1b:3a:34:
                    8e:65:ed:32:b7:e1:e2:e6:87:d5:d6:5f:b3:e1:82:
                    3e:7f:40:75:5d:5e:b9:85:7f:ae:c5:f1:6c:f5:48:
                    c8:f7:91:a5:52:a7:4c:2f:cd:41:43:2b:4d:90:35:
                    ca:1f:59:6e:bc:02:21:65:c8:df:a5:aa:2b:88:d4:
                    ce:d4:37:1e:9b:76:c4:a2:a9:fa:88:22:78:62:49:
                    ed:ad:52:77:2f:d3:12:53:a8:29:8b:e1:97:cd:11:
                    39:cc:de:0b:ad:e4:ef:e4:c0:10:bb:0f:54:93:fa:
                    d8:77:33:b9:fc:9d:2e:33:f6:0b:6d:1b:5a:94:e5:
                    ba:f3:0f:12:e7:73:2c:09:0a:7d:f8:ce:c0:10:3c:
                    81:d4:d5:95:62:49:31:bd:10:f4:a7:f2:56:2c:1d:
                    bd:95:f5:5d:17:cb:fc:21:12:dd:16:2e:07:17:58:
                    25:45:0d:f6:88:21:56:a5:94:4b:24:48:59:b4:f9:
                    31:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C7:A9:D6:83:A4:47:79:38:95:F9:C3:C3:E5:34:5E:46:25:46:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl

            X509v3 Authority Key Identifier:
                keyid:A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:3b:03:2a:a7:1d:08:17:a8:6b:34:de:8e:c6:14:56:42:
         8a:cb:9d:46:a3:f3:ea:c1:23:91:64:e1:8e:d1:cf:30:70:44:
         bd:53:31:84:43:04:eb:9b:87:51:30:5a:5c:13:09:8e:2e:3b:
         24:c1:3e:7d:36:92:7e:4e:78:d9:2b:c3:ff:a4:07:6f:5f:2d:
         1a:5a:ab:0c:52:6f:33:61:61:ee:a5:77:26:db:a8:56:cd:13:
         f2:de:28:59:cc:96:7b:6d:5a:c2:38:15:12:7c:50:72:1c:47:
         a1:4a:8d:b7:1d:c7:e1:2c:23:7d:c3:ba:1a:77:bb:0f:f7:d8:
         f5:0d:3f:9d:4b:a5:a9:9f:de:e9:46:2b:ae:81:2e:0a:69:e8:
         d8:94:8b:25:6f:12:ed:32:6c:41:70:04:2e:e4:eb:49:5f:fc:
         29:23:fa:32:81:a7:b8:30:60:9d:91:ff:aa:d7:58:45:d6:cd:
         db:3b:93:71:54:3d:08:4e:3c:84:ec:46:6a:ff:3a:da:41:60:
         4e:ff:6b:70:3b:39:03:22:5f:63:6d:cd:15:ea:a7:2e:f0:ed:
         d3:6f:fe:a4:69:35:91:55:95:db:96:a3:3b:63:2a:b0:02:fb:
         a9:a7:b0:19:e7:df:80:be:20:7d:64:aa:61:42:7b:11:70:33:
         6f:58:03:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3wFiHt9n0Ug7mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY1ZTliNWMtMDU2ZS00NWQzLTg5YjItNjNjYjYyYjg0
MjEwMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
YTM5NWUyODgtM2I0MC00ZmZhLTkzYTgtMGU4Yjk2Y2E1MjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8jVRh948kle5BhCZc752jjkMUjFAFhZJzZs
CifOm8kHjrG9M1k5gWzSwc51+enwIZOQyjPt/q37unP+RZPWiGdQM0j061QbOjSO
Ze0yt+Hi5ofV1l+z4YI+f0B1XV65hX+uxfFs9UjI95GlUqdML81BQytNkDXKH1lu
vAIhZcjfpaoriNTO1Dcem3bEoqn6iCJ4YkntrVJ3L9MSU6gpi+GXzRE5zN4LreTv
5MAQuw9Uk/rYdzO5/J0uM/YLbRtalOW68w8S53MsCQp9+M7AEDyB1NWVYkkxvRD0
p/JWLB29lfVdF8v8IRLdFi4HF1glRQ32iCFWpZRLJEhZtPkxlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHHqdaDpEd5OJX5w8PlNF5GJUbdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mNjVl
OWI1Yy0wNTZlLTQ1ZDMtODliMi02M2NiNjJiODQyMTAvYmQwOWE4ZjItMDRiMi0z
Y2Q5LWI2YjItOTEzY2M4Zjk1MDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjY1ZTliNWMtMDU2ZS00NWQzLTg5
YjItNjNjYjYyYjg0MjEwL2Y2NWU5YjVjLTA1NmUtNDVkMy04OWIyLTYzY2I2MmI4
NDIxMC5jcmwwHwYDVR0jBBgwFoAUo5pTCNpO4oU1ZvDqjbS6GOe0ZkIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mNjVlOWI1Yy0wNTZlLTQ1ZDMtODliMi02M2Ni
NjJiODQyMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzsmoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYuOwMqpx0IF6hrNN6OxhRWQorLnUaj8+rBI5Fk4Y7RzzBwRL1TMYRD
BOubh1EwWlwTCY4uOyTBPn02kn5OeNkrw/+kB29fLRpaqwxSbzNhYe6ldybbqFbN
E/LeKFnMlnttWsI4FRJ8UHIcR6FKjbcdx+EsI33Duhp3uw/32PUNP51Lpamf3ulG
K66BLgpp6NiUiyVvEu0ybEFwBC7k60lf/Ckj+jKBp7gwYJ2R/6rXWEXWzds7k3FU
PQhOPITsRmr/OtpBYE7/a3A7OQMiX2NtzRXqpy7w7dNv/qRpNZFVlduWoztjKrAC
+6mnsBnn34C+IH1kqmFCexFwM29YA6Q=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:10 2025 by rpki-client