Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/86badedb-ef58-3875-b838-1315e8e93125.roa
File:                     86badedb-ef58-3875-b838-1315e8e93125.roa (raw, json)
Hash identifier:          16+szmiPKhGriKAo2/gUzY6uCKUyZzIDbFD0z4Y6OqY=
Subject key identifier:   7E:51:3A:DF:7C:CA:93:FC:6C:DB:01:59:E3:D2:EE:7A:84:A5:54:6F
Certificate issuer:       /CN=20a16a9a-6641-447a-8644-025fca0c6683
Certificate serial:       010D0C9F4328584B0477C25441744634186AD340
Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/86badedb-ef58-3875-b838-1315e8e93125.roa
Signing time:             Fri 29 Aug 2025 12:52:14 +0000
ROA not before:           Fri 29 Aug 2025 12:52:14 +0000
ROA not after:            Thu 27 Nov 2025 13:52:14 +0000
asID:                     212335
IP address blocks:        140.235.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:77:c2:54:41:74:46:34:18:6a:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683
        Validity
            Not Before: Aug 29 12:52:14 2025 GMT
            Not After : Nov 27 13:52:14 2025 GMT
        Subject: CN=3a6d228d-ae13-4aa0-bbfd-bba346adc9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d0:a0:ce:b3:1f:29:fa:c6:38:32:06:52:9a:
                    0b:d9:00:e7:0e:96:88:9f:06:a5:b5:8c:63:17:5c:
                    73:6d:3b:18:14:75:6c:69:83:d0:b5:45:2b:b1:0d:
                    af:e2:71:38:6f:76:e5:6e:37:4a:68:72:cb:6c:13:
                    9b:0c:ec:f5:2b:64:00:ae:04:9d:8d:47:60:9d:0f:
                    bd:dd:a5:f7:17:d5:76:02:5f:3f:4b:18:a8:09:66:
                    52:56:28:85:14:6d:ae:f9:41:47:27:17:e9:90:47:
                    92:2f:e4:1d:8b:7d:37:fb:49:6e:55:8b:cd:9a:9d:
                    b8:e8:cc:72:d6:e5:cb:4b:74:5f:78:c7:6b:9e:45:
                    a6:1a:06:9a:1c:17:cd:1b:dd:02:0e:e5:ac:4b:df:
                    ca:88:26:16:f0:4e:60:c3:1f:01:42:43:ed:61:d2:
                    8f:11:9d:ff:db:e4:81:82:da:af:11:a3:41:24:5b:
                    3a:99:a8:e9:31:35:0d:b7:30:8e:21:51:76:06:a3:
                    06:d7:6f:c1:b0:87:3e:6e:c4:2f:c1:60:61:de:2d:
                    fb:38:6f:97:a5:31:c3:20:37:83:f9:09:dd:d7:af:
                    00:70:43:8c:12:2d:77:6e:46:b1:bf:04:5f:69:5d:
                    b9:23:56:14:4b:99:3d:3d:48:54:a6:08:e5:50:fd:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:51:3A:DF:7C:CA:93:FC:6C:DB:01:59:E3:D2:EE:7A:84:A5:54:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/86badedb-ef58-3875-b838-1315e8e93125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl

            X509v3 Authority Key Identifier:
                keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9d:a2:79:68:cd:02:13:58:41:d6:bf:15:f2:cb:5e:92:73:
         d0:57:63:0d:d9:2c:29:b1:a4:0d:33:cd:6f:d2:74:05:a1:c4:
         23:48:cc:9c:1d:ae:58:5e:26:47:ef:38:f7:33:af:1c:27:c5:
         56:46:02:eb:35:59:db:18:71:df:eb:68:ec:04:9c:30:1f:0c:
         09:47:7f:86:3a:86:d9:7b:ab:c7:69:bb:13:4d:6e:0c:0d:53:
         ec:90:37:b8:a1:71:46:c7:22:fa:3e:2c:4e:e1:29:ec:69:db:
         0f:10:99:a5:26:a7:12:2a:5b:6d:4a:47:07:6e:84:ea:86:fc:
         0a:ba:f5:4c:d1:3a:5a:9b:3a:ff:fe:f8:12:19:73:a7:56:14:
         df:ca:e8:27:82:b2:68:1e:0c:94:51:a0:c4:ac:9b:3a:1a:e4:
         d3:e5:27:8a:84:8a:a3:0f:bb:5c:3f:f4:87:14:39:ab:52:04:
         0b:f5:83:8e:f9:f9:3d:ef:e4:38:5c:c4:05:dd:6d:21:f2:d8:
         b6:da:76:82:c1:38:f9:6d:62:9a:20:e9:3d:70:01:6c:d5:5e:
         d0:41:f8:65:78:fa:5a:b6:04:36:9b:d3:8d:27:4e:3e:05:b5:
         e3:e6:d6:2f:07:99:3a:88:5a:96:87:e8:33:95:49:a1:32:a7:
         c8:28:91:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEd8JUQXRGNBhq00AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBhMTZhOWEtNjY0MS00NDdhLTg2NDQtMDI1ZmNhMGM2
NjgzMB4XDTI1MDgyOTEyNTIxNFoXDTI1MTEyNzEzNTIxNFowLzEtMCsGA1UEAxMk
M2E2ZDIyOGQtYWUxMy00YWEwLWJiZmQtYmJhMzQ2YWRjOWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdCgzrMfKfrGODIGUpoL2QDnDpaInwaltYxj
F1xzbTsYFHVsaYPQtUUrsQ2v4nE4b3blbjdKaHLLbBObDOz1K2QArgSdjUdgnQ+9
3aX3F9V2Al8/SxioCWZSViiFFG2u+UFHJxfpkEeSL+Qdi303+0luVYvNmp246Mxy
1uXLS3RfeMdrnkWmGgaaHBfNG90CDuWsS9/KiCYW8E5gwx8BQkPtYdKPEZ3/2+SB
gtqvEaNBJFs6majpMTUNtzCOIVF2BqMG12/BsIc+bsQvwWBh3i37OG+XpTHDIDeD
+Qnd168AcEOMEi13bkaxvwRfaV25I1YUS5k9PUhUpgjlUP2lDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5ROt98ypP8bNsBWePS7nqEpVRvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGEx
NmE5YS02NjQxLTQ0N2EtODY0NC0wMjVmY2EwYzY2ODMvODZiYWRlZGItZWY1OC0z
ODc1LWI4MzgtMTMxNWU4ZTkzMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBhMTZhOWEtNjY0MS00NDdhLTg2
NDQtMDI1ZmNhMGM2NjgzLzIwYTE2YTlhLTY2NDEtNDQ3YS04NjQ0LTAyNWZjYTBj
NjY4My5jcmwwHwYDVR0jBBgwFoAUts8sCD3xQj5nbO2j387su5swxgMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGExNmE5YS02NjQxLTQ0N2EtODY0NC0wMjVm
Y2EwYzY2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOtuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACidonlozQITWEHWvxXyy16Sc9BXYw3ZLCmxpA0zzW/SdAWhxCNIzJwd
rlheJkfvOPczrxwnxVZGAus1WdsYcd/raOwEnDAfDAlHf4Y6htl7q8dpuxNNbgwN
U+yQN7ihcUbHIvo+LE7hKexp2w8QmaUmpxIqW21KRwduhOqG/Aq69UzROlqbOv/+
+BIZc6dWFN/K6CeCsmgeDJRRoMSsmzoa5NPlJ4qEiqMPu1w/9IcUOatSBAv1g475
+T3v5DhcxAXdbSHy2LbadoLBOPltYpog6T1wAWzVXtBB+GV4+lq2BDab040nTj4F
tePm1i8HmTqIWpaH6DOVSaEyp8gokdo=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:56:29 2025 by rpki-client