Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9779babf-eb6d-3cfe-b868-c6596e52d2c3.roa
File:                     9779babf-eb6d-3cfe-b868-c6596e52d2c3.roa (raw, json)
Hash identifier:          S4QrsoLrZMcbCo/ewFJeRoYfUh9M6C3x7bs+LnxKwJo=
Subject key identifier:   9B:B0:21:4B:CA:D0:3A:B1:F0:AA:67:49:F7:68:C5:28:7E:67:26:0C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B583CAE503D749FCA7EDF1580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9779babf-eb6d-3cfe-b868-c6596e52d2c3.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     396590
IP address blocks:        198.41.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:ae:50:3d:74:9f:ca:7e:df:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=09738aae-dbb0-4f4e-ace2-aef5174d32cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:02:bc:e8:9b:95:c7:57:b2:a4:7d:cf:95:
                    6f:ab:ab:f5:b0:db:c8:99:c4:15:75:64:8b:66:88:
                    af:ef:39:9b:96:1a:c5:91:5b:17:c7:3e:64:08:3d:
                    2a:5c:00:39:3a:b8:ee:69:07:35:71:40:d3:08:26:
                    d5:a2:84:ba:cb:76:be:42:c3:cf:32:90:68:e9:20:
                    08:c5:b4:c3:59:b7:94:8d:7d:f9:4b:ac:2b:da:82:
                    51:43:64:60:33:c6:e4:23:86:31:d5:0e:33:df:27:
                    6e:7d:3b:d7:fe:2e:d2:12:54:35:92:ce:b0:d2:f5:
                    4b:72:c7:09:bf:fa:9a:0f:70:2e:3c:51:33:a5:cd:
                    bd:d3:1f:03:12:54:ea:f2:34:e0:d7:ae:5d:fe:86:
                    18:d2:17:2f:04:14:63:79:a1:8b:e4:ec:35:96:45:
                    e6:4a:db:1d:7c:5a:db:1c:10:5b:94:84:9c:f7:f3:
                    c9:c8:b9:8b:53:7a:ab:6a:1b:ff:b0:ff:6b:c9:2c:
                    2a:9c:04:4f:80:fb:6f:b5:5e:7d:7c:8d:5f:d8:29:
                    b4:7a:bb:6c:e8:92:25:78:81:50:61:f5:59:0d:32:
                    2c:37:53:a3:77:17:1b:9d:a4:09:1d:8e:64:71:3a:
                    e0:ed:25:68:22:63:fb:19:5e:f2:de:cd:8d:90:e5:
                    d7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B0:21:4B:CA:D0:3A:B1:F0:AA:67:49:F7:68:C5:28:7E:67:26:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9779babf-eb6d-3cfe-b868-c6596e52d2c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:12:bd:34:16:a6:a2:d6:04:32:66:d6:8d:f1:d3:f4:b2:89:
         f5:8d:ad:80:b9:4b:7d:13:f8:92:f3:e0:fb:0f:cc:44:39:d1:
         f9:6e:6c:0c:af:9b:b6:1b:60:f2:8a:7b:33:0b:ce:06:2f:52:
         3f:e6:36:69:6a:bf:a8:fb:c3:1f:d7:c9:9c:04:b8:2c:cf:ae:
         b1:32:d8:c3:68:c1:02:b5:7b:85:c5:bf:5c:da:4b:35:74:00:
         c9:04:6b:b0:fc:d7:5a:be:14:fb:34:a9:79:32:bc:53:cc:90:
         08:5b:3d:cc:58:87:a6:83:ff:67:e9:15:d5:13:8e:44:d1:33:
         a3:ee:32:ee:fb:67:5e:1b:18:58:ae:6e:3c:3c:27:e0:30:d1:
         85:64:86:4f:74:44:35:5b:b3:e9:bb:d3:58:e2:df:88:64:f8:
         88:05:e8:96:da:d7:c4:26:c7:72:72:9d:40:88:05:ed:3c:a5:
         62:6c:24:f0:00:4a:53:47:c3:1d:85:f2:66:3d:c8:c7:60:e2:
         86:f5:a5:6a:64:58:d8:bc:34:66:30:3c:f0:3e:12:61:be:ca:
         1f:c3:95:08:d9:1b:76:60:c3:63:e9:ea:7b:78:77:01:52:e8:
         b9:eb:ef:8f:ac:a9:cd:db:b0:76:b9:f6:c3:62:ec:bf:71:42:
         c2:35:9d:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK5QPXSfyn7fFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
MDk3MzhhYWUtZGJiMC00ZjRlLWFjZTItYWVmNTE3NGQzMmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxkCvOiblcdXsqR9z5Vvq6v1sNvImcQVdWSL
Zoiv7zmblhrFkVsXxz5kCD0qXAA5OrjuaQc1cUDTCCbVooS6y3a+QsPPMpBo6SAI
xbTDWbeUjX35S6wr2oJRQ2RgM8bkI4Yx1Q4z3ydufTvX/i7SElQ1ks6w0vVLcscJ
v/qaD3AuPFEzpc290x8DElTq8jTg165d/oYY0hcvBBRjeaGL5Ow1lkXmStsdfFrb
HBBblISc9/PJyLmLU3qrahv/sP9rySwqnARPgPtvtV59fI1f2Cm0erts6JIleIFQ
YfVZDTIsN1OjdxcbnaQJHY5kcTrg7SVoImP7GV7y3s2NkOXXLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJuwIUvK0Dqx8KpnSfdoxSh+ZyYMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTc3OWJhYmYtZWI2ZC0z
Y2ZlLWI4NjgtYzY1OTZlNTJkMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQSvTQWpqLWBDJm1o3x0/SyifWNrYC5S30T+JLz4PsPzEQ50flubAyv
m7YbYPKKezMLzgYvUj/mNmlqv6j7wx/XyZwEuCzPrrEy2MNowQK1e4XFv1zaSzV0
AMkEa7D811q+FPs0qXkyvFPMkAhbPcxYh6aD/2fpFdUTjkTRM6PuMu77Z14bGFiu
bjw8J+Aw0YVkhk90RDVbs+m701ji34hk+IgF6Jba18Qmx3JynUCIBe08pWJsJPAA
SlNHwx2F8mY9yMdg4ob1pWpkWNi8NGYwPPA+EmG+yh/DlQjZG3Zgw2Pp6nt4dwFS
6Lnr74+sqc3bsHa59sNi7L9xQsI1nV4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:21:19 2025 by rpki-client