Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa
File:                     193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa (raw, json)
Hash identifier:          mRVYcIv5v+ajtNxGPe7iV/CKXXvii96KuJHjdg44Sbo=
Subject key identifier:   5D:C9:00:A2:29:C3:CE:3E:35:1E:39:45:54:9E:AC:8E:E4:14:C9:17
Certificate issuer:       /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial:       010D0C9F4328584B891782C7669E4DAEFA5B3C00
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     398465
IP address blocks:        209.250.8.0/23 maxlen: 23
                          209.250.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:82:c7:66:9e:4d:ae:fa:5b:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=29e0334e-589e-48f8-a31e-f57340422571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:67:6f:7b:40:fb:50:0d:b4:6e:32:a5:fb:
                    0c:f3:26:a9:3b:6d:33:90:94:05:1e:a6:31:10:0e:
                    e1:7f:b1:b6:94:52:26:68:04:b7:5d:c8:74:f4:81:
                    32:94:d7:8b:7e:77:de:85:85:3e:f6:51:b6:e4:8b:
                    ac:0b:08:7a:b1:ba:3e:50:4d:23:87:92:be:ba:01:
                    e1:8b:a1:4c:9e:92:ab:58:4a:15:65:f7:09:17:2b:
                    69:0a:fd:75:13:e0:09:89:70:32:e4:1a:2d:58:77:
                    83:4d:9c:3c:0f:35:a1:74:9e:41:9a:8f:9b:cc:74:
                    63:1b:c2:75:f1:65:e6:b3:6f:29:97:51:b9:f0:56:
                    df:ed:dd:6c:3f:c3:1a:27:a3:a6:3a:0a:0f:9c:7a:
                    14:e7:cb:cc:d0:24:96:93:89:e8:70:b4:f1:80:bf:
                    a0:58:2d:17:48:4e:7d:85:15:54:3f:c7:7f:f8:77:
                    66:12:83:5b:c1:fb:4a:4a:8d:fb:0b:42:08:98:ab:
                    f7:d8:1e:8f:6a:17:90:63:91:9e:8c:65:e2:59:1d:
                    7c:96:d5:a5:bc:4c:56:a6:ad:b3:a7:49:ec:1b:41:
                    53:bc:61:f2:90:9d:10:c7:ae:06:a3:19:0a:7e:54:
                    58:a8:3e:d9:e6:17:5a:db:01:19:23:00:9b:fb:d3:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C9:00:A2:29:C3:CE:3E:35:1E:39:45:54:9E:AC:8E:E4:14:C9:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/193a1e6c-bcd1-3017-8bd4-9101cdc1d7e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl

            X509v3 Authority Key Identifier:
                keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.8.0/23
                  209.250.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:36:33:8a:22:91:b3:c4:9a:b3:f0:8d:d8:73:b6:36:08:
         97:c8:9c:34:f6:c6:55:0d:12:54:55:59:24:03:22:7c:8b:d9:
         22:8d:2c:7b:cd:e3:80:05:49:e3:01:86:b1:67:85:c4:58:95:
         18:1b:c8:6e:e6:83:e2:db:99:a1:4c:7d:a5:f7:7e:7e:78:74:
         b8:50:7f:a4:ac:a3:6c:26:2a:5b:55:5a:93:bd:ca:34:51:74:
         6a:aa:b4:fc:6d:3a:cf:e0:55:3c:70:cb:98:97:f7:dd:6a:c5:
         fb:22:1c:26:b1:1b:4b:03:10:52:84:df:d5:1b:10:9e:58:7b:
         c8:fa:7c:89:16:b6:33:7c:d5:75:89:c0:0f:b8:81:f0:22:1e:
         1b:bc:2a:75:a5:e9:c7:62:51:9c:e9:e0:c1:0a:67:03:51:f0:
         8d:e4:e1:33:e6:10:c1:85:4d:cd:d6:d9:85:a5:f5:7a:da:8f:
         40:d2:bb:18:c8:4c:9d:3b:3d:48:4e:af:f5:29:ce:b9:b6:1f:
         d9:74:5b:e1:90:e5:e5:ee:6e:02:a4:cd:7c:e5:39:72:a5:67:
         56:24:01:a4:f4:48:ba:b2:e3:34:7b:9c:09:9a:ca:11:f8:2d:
         c7:97:27:c7:17:c1:fb:f2:97:16:17:c3:18:9d:48:78:03:9d:
         b4:08:2e:85
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuJF4LHZp5NrvpbPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3
ZGQ0MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
MjllMDMzNGUtNTg5ZS00OGY4LWEzMWUtZjU3MzQwNDIyNTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BBnb3tA+1ANtG4ypfsM8yapO20zkJQFHqYx
EA7hf7G2lFImaAS3Xch09IEylNeLfnfehYU+9lG25IusCwh6sbo+UE0jh5K+ugHh
i6FMnpKrWEoVZfcJFytpCv11E+AJiXAy5BotWHeDTZw8DzWhdJ5Bmo+bzHRjG8J1
8WXms28pl1G58Fbf7d1sP8MaJ6OmOgoPnHoU58vM0CSWk4nocLTxgL+gWC0XSE59
hRVUP8d/+HdmEoNbwftKSo37C0IImKv32B6PaheQY5GejGXiWR18ltWlvExWpq2z
p0nsG0FTvGHykJ0Qx64GoxkKflRYqD7Z5hda2wEZIwCb+9OV3wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFF3JAKIpw84+NR45RVSerI7kFMkXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi
NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvMTkzYTFlNmMtYmNkMS0z
MDE3LThiZDQtOTEwMWNkYzFkN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz
NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj
N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2
ZmNkYzdkZDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0foIAwQB
0foMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABw3NjOKIpGzxJqz8I3Yc7Y2CJfInDT2xlUNElRVWSQDInyL
2SKNLHvN44AFSeMBhrFnhcRYlRgbyG7mg+LbmaFMfaX3fn54dLhQf6Sso2wmKltV
WpO9yjRRdGqqtPxtOs/gVTxwy5iX991qxfsiHCaxG0sDEFKE39UbEJ5Ye8j6fIkW
tjN81XWJwA+4gfAiHhu8KnWl6cdiUZzp4MEKZwNR8I3k4TPmEMGFTc3W2YWl9Xra
j0DSuxjITJ07PUhOr/Upzrm2H9l0W+GQ5eXubgKkzXzlOXKlZ1YkAaT0SLqy4zR7
nAmayhH4LceXJ8cXwfvylxYXwxidSHgDnbQILoU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:51:18 2025 by rpki-client