Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/ad0b5035-0ce7-36fb-b0c0-a0fa205aed5a.roa
File:                     ad0b5035-0ce7-36fb-b0c0-a0fa205aed5a.roa (raw, json)
Hash identifier:          wzY17ItXrIGhhRYdGNjeKS9wA8mKpea+XqvCDmA4Qgg=
Subject key identifier:   89:DA:36:75:E2:E3:C4:1E:AB:64:72:92:AF:6E:41:0D:6F:3C:3D:90
Certificate issuer:       /CN=e1244068-c968-4296-891d-ffade60c06ee
Certificate serial:       010D0C9F4328584B92DCD581F40EFC26DFAB4B00
Authority key identifier: 12:D0:A8:1B:ED:15:C2:E9:1F:03:D1:EA:57:63:09:94:13:E6:E9:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/ad0b5035-0ce7-36fb-b0c0-a0fa205aed5a.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        110.44.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/e1244068-c968-4296-891d-ffade60c06ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/e1244068-c968-4296-891d-ffade60c06ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:d5:81:f4:0e:fc:26:df:ab:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1244068-c968-4296-891d-ffade60c06ee
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=9f4cc91a-10f3-4d63-ba14-07f3dd0611ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:9b:32:8e:a9:d9:cd:a8:0f:e6:59:5c:96:
                    33:37:2e:cc:0f:e0:a8:f9:6a:1c:9a:0f:13:a0:5f:
                    f1:e5:f4:86:7e:1b:bf:1d:09:ce:a2:23:34:38:5a:
                    aa:d3:6c:79:65:2a:8d:81:28:69:e8:8e:e3:e9:31:
                    37:7d:2f:72:3f:82:f3:6f:d2:95:4c:1a:42:da:b1:
                    b4:37:b6:21:ec:8c:1d:8c:1e:90:18:6e:3f:ef:72:
                    42:4e:2d:59:f0:44:68:d3:1b:2a:9f:62:8d:11:2c:
                    52:3b:95:38:62:ad:d1:ec:69:a2:09:b0:4e:0e:82:
                    ca:43:52:32:a2:99:9e:8f:19:ad:9c:37:b5:22:f3:
                    79:07:ae:b0:5b:8f:18:6e:8b:ef:2d:33:55:74:43:
                    76:ff:eb:5e:b1:63:04:b0:57:bc:80:bd:23:6c:78:
                    ea:39:85:2f:f3:2d:a5:00:87:f3:3f:b0:58:fc:f3:
                    09:95:71:eb:73:62:ca:54:67:cf:b9:8a:71:55:b7:
                    52:31:6c:c1:9b:e2:9d:fa:3b:e4:1a:a7:fa:da:aa:
                    ca:f7:2a:4f:be:83:d6:e3:e5:e7:0c:4f:24:95:fd:
                    c7:e8:35:8f:76:8b:fb:ac:0b:e6:3d:de:96:87:dc:
                    6e:f7:09:01:d7:23:f2:59:b7:c1:56:0c:63:3e:8a:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DA:36:75:E2:E3:C4:1E:AB:64:72:92:AF:6E:41:0D:6F:3C:3D:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/ad0b5035-0ce7-36fb-b0c0-a0fa205aed5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/e1244068-c968-4296-891d-ffade60c06ee.crl

            X509v3 Authority Key Identifier:
                keyid:12:D0:A8:1B:ED:15:C2:E9:1F:03:D1:EA:57:63:09:94:13:E6:E9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:6a:1e:1a:55:0e:9a:d3:2c:b5:45:35:e7:ca:8d:da:9a:be:
         2c:fd:d5:d6:6b:05:de:74:32:bb:3d:67:01:d4:0d:ad:4f:e8:
         ba:9f:7e:b8:c4:db:d8:1b:a0:ba:f4:77:c7:49:71:46:49:ac:
         63:31:7f:01:26:1e:04:0e:ce:a0:b9:99:ac:94:e4:fa:f6:cc:
         dc:31:a2:a6:78:e5:e2:aa:5f:fa:ce:0e:1f:ad:6b:5b:01:0a:
         13:75:2d:63:4e:2b:16:f9:15:48:a3:ac:01:4e:bd:5e:33:50:
         fc:b5:cf:5f:16:e4:5f:28:a4:51:69:db:2b:25:0a:44:f6:79:
         72:ff:78:a9:fa:4f:04:cb:ad:3b:46:31:ef:46:6a:94:29:62:
         a4:0f:f3:6f:2c:aa:42:57:6d:8f:1e:ac:dc:d1:a4:3e:0d:f4:
         b5:c2:e7:6d:35:8e:cb:a5:60:af:35:bd:61:16:4f:0c:d6:f6:
         61:ca:32:fe:4c:b4:dd:da:95:ad:84:16:df:77:48:a3:97:37:
         44:36:74:75:05:b5:9a:f7:8b:7f:55:04:d0:e2:e0:ce:9e:f3:
         df:07:89:00:31:ec:9f:5b:67:bf:ac:60:33:6d:b5:bd:54:4d:
         79:a7:87:c0:17:be:57:a4:7c:dc:bd:8e:9b:22:5c:c5:3f:95:
         a5:d2:00:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3NWB9A78Jt+rSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTEyNDQwNjgtYzk2OC00Mjk2LTg5MWQtZmZhZGU2MGMw
NmVlMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
OWY0Y2M5MWEtMTBmMy00ZDYzLWJhMTQtMDdmM2RkMDYxMWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljCbMo6p2c2oD+ZZXJYzNy7MD+Co+Wocmg8T
oF/x5fSGfhu/HQnOoiM0OFqq02x5ZSqNgShp6I7j6TE3fS9yP4Lzb9KVTBpC2rG0
N7Yh7IwdjB6QGG4/73JCTi1Z8ERo0xsqn2KNESxSO5U4Yq3R7GmiCbBODoLKQ1Iy
opmejxmtnDe1IvN5B66wW48YbovvLTNVdEN2/+tesWMEsFe8gL0jbHjqOYUv8y2l
AIfzP7BY/PMJlXHrc2LKVGfPuYpxVbdSMWzBm+Kd+jvkGqf62qrK9ypPvoPW4+Xn
DE8klf3H6DWPdov7rAvmPd6Wh9xu9wkB1yPyWbfBVgxjPor4dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFInaNnXi48Qeq2Rykq9uQQ1vPD2QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMTI0
NDA2OC1jOTY4LTQyOTYtODkxZC1mZmFkZTYwYzA2ZWUvYWQwYjUwMzUtMGNlNy0z
NmZiLWIwYzAtYTBmYTIwNWFlZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTEyNDQwNjgtYzk2OC00Mjk2LTg5
MWQtZmZhZGU2MGMwNmVlL2UxMjQ0MDY4LWM5NjgtNDI5Ni04OTFkLWZmYWRlNjBj
MDZlZS5jcmwwHwYDVR0jBBgwFoAUEtCoG+0VwukfA9HqV2MJlBPm6WswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lMTI0NDA2OC1jOTY4LTQyOTYtODkxZC1mZmFk
ZTYwYzA2ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbiwGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABpqHhpVDprTLLVFNefKjdqaviz91dZrBd50Mrs9ZwHUDa1P6LqffrjE
29gboLr0d8dJcUZJrGMxfwEmHgQOzqC5mayU5Pr2zNwxoqZ45eKqX/rODh+ta1sB
ChN1LWNOKxb5FUijrAFOvV4zUPy1z18W5F8opFFp2yslCkT2eXL/eKn6TwTLrTtG
Me9GapQpYqQP828sqkJXbY8erNzRpD4N9LXC5201jsulYK81vWEWTwzW9mHKMv5M
tN3ala2EFt93SKOXN0Q2dHUFtZr3i39VBNDi4M6e898HiQAx7J9bZ7+sYDNttb1U
TXmnh8AXvlekfNy9jpsiXMU/laXSABs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:55:15 2025 by rpki-client