Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/87fabc47-ab1b-3d05-bd99-7b7b0a299e69.roa
File:                     87fabc47-ab1b-3d05-bd99-7b7b0a299e69.roa (raw, json)
Hash identifier:          87SucdYZBRpR7r/w/7IAirhv7PGXZ6j/zaW0lzLtEI4=
Subject key identifier:   11:75:BF:BF:91:D3:4A:D0:C7:27:3E:07:6E:37:88:97:20:A4:B1:CB
Certificate issuer:       /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
Certificate serial:       010D0C9F4328584B25FC489328DB71F261464040
Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/87fabc47-ab1b-3d05-bd99-7b7b0a299e69.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     30313
IP address blocks:        152.216.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:48:93:28:db:71:f2:61:46:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=d33a46ad-b0d3-4e4a-a7f7-2eafd121fdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:63:45:82:0d:31:84:85:50:d9:26:b2:43:6f:
                    4a:c9:05:54:a8:15:ff:9c:86:6d:5d:df:0b:80:af:
                    42:8b:15:63:7b:2d:3a:6c:ae:32:a6:ea:05:4e:7c:
                    7c:de:f0:cb:d3:12:de:5d:d6:5b:7a:63:5e:64:a7:
                    f4:31:7c:e6:e3:15:62:3b:50:d9:14:d1:f5:c0:3a:
                    b2:b1:04:0b:de:a7:43:46:7d:80:8a:bf:c8:b1:c0:
                    1b:5f:68:21:01:1e:a2:f7:45:ee:d6:15:33:94:f8:
                    d0:e0:7a:2f:99:33:a0:67:a6:4d:f6:4a:33:f2:7d:
                    89:e4:8f:38:84:dc:9f:8b:20:93:ed:fa:df:27:7a:
                    48:e7:55:cd:be:e9:84:c8:ac:ca:22:68:85:c5:0d:
                    71:e1:07:cb:a6:73:1a:12:7d:d1:2f:1b:ab:64:d6:
                    d1:52:d3:03:a0:45:5d:14:c4:2f:ec:25:41:cc:f8:
                    f1:8b:20:5b:c4:3f:40:56:f9:a5:85:7f:05:fa:29:
                    7c:7b:4e:82:8f:54:49:68:52:cc:a6:9e:76:80:a2:
                    69:e0:60:01:1b:5a:ce:b8:35:7a:47:38:6d:44:bf:
                    89:24:c2:ec:5c:12:fd:29:88:24:f0:58:f8:d6:bc:
                    10:ba:f8:88:73:76:28:93:e4:9d:cd:a4:fa:de:41:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:75:BF:BF:91:D3:4A:D0:C7:27:3E:07:6E:37:88:97:20:A4:B1:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/87fabc47-ab1b-3d05-bd99-7b7b0a299e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.216.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:05:6e:43:23:e7:f1:ee:31:e6:ab:d3:08:c5:50:ea:1d:
         7e:c2:b1:61:c1:62:90:7e:54:52:ca:39:05:c0:18:59:12:9a:
         8d:83:c6:fe:76:51:fb:26:ff:3b:12:5a:01:bd:e4:5e:5a:f1:
         6f:ac:ab:ee:0a:14:0c:91:87:65:11:d1:98:92:de:b0:fb:b3:
         d0:2c:f7:06:b7:3c:27:bd:91:95:8e:04:66:78:d1:c6:d1:fd:
         26:ec:42:6b:27:ea:ed:e1:06:30:40:42:c6:02:2a:ff:a0:20:
         d9:6a:ca:0b:ee:e3:b4:28:be:87:bd:16:f0:b8:e1:30:4b:60:
         6c:6d:76:e4:9c:39:6f:cb:e6:bc:e1:58:03:dd:c0:74:32:92:
         34:4f:9e:bc:8a:46:45:88:b7:d5:78:bc:eb:ae:da:9b:39:e9:
         3e:17:c2:72:11:a9:39:eb:84:f1:d6:23:14:ec:c6:7f:71:df:
         5a:6a:90:0c:c3:8c:01:3e:7c:76:03:d0:1f:cf:4c:c4:15:a7:
         7c:2e:c4:6d:98:8e:65:e4:33:9b:30:7a:c1:6f:37:ac:0c:36:
         fc:19:e7:18:0b:50:01:32:32:ad:85:dc:4f:cc:99:c1:e1:2a:
         54:f6:fd:1d:26:ef:78:40:a1:9a:7c:82:1e:55:a8:81:ae:e7:
         72:05:80:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EiTKNtx8mFGQEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm
YzdhMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk
ZDMzYTQ2YWQtYjBkMy00ZTRhLWE3ZjctMmVhZmQxMjFmZGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWNFgg0xhIVQ2SayQ29KyQVUqBX/nIZtXd8L
gK9CixVjey06bK4ypuoFTnx83vDL0xLeXdZbemNeZKf0MXzm4xViO1DZFNH1wDqy
sQQL3qdDRn2Air/IscAbX2ghAR6i90Xu1hUzlPjQ4HovmTOgZ6ZN9koz8n2J5I84
hNyfiyCT7frfJ3pI51XNvumEyKzKImiFxQ1x4QfLpnMaEn3RLxurZNbRUtMDoEVd
FMQv7CVBzPjxiyBbxD9AVvmlhX8F+il8e06Cj1RJaFLMpp52gKJp4GABG1rOuDV6
RzhtRL+JJMLsXBL9KYgk8Fj41rwQuviIc3Yok+SdzaT63kHrQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBF1v7+R00rQxyc+B243iJcgpLHLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi
Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvODdmYWJjNDctYWIxYi0z
ZDA1LWJkOTktN2I3YjBhMjk5ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4
NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw
ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx
MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHoBW5DI+fx7jHmq9MIxVDqHX7CsWHBYpB+VFLKOQXAGFkSmo2Dxv52
Ufsm/zsSWgG95F5a8W+sq+4KFAyRh2UR0ZiS3rD7s9As9wa3PCe9kZWOBGZ40cbR
/SbsQmsn6u3hBjBAQsYCKv+gINlqygvu47Qovoe9FvC44TBLYGxtduScOW/L5rzh
WAPdwHQykjRPnryKRkWIt9V4vOuu2ps56T4XwnIRqTnrhPHWIxTsxn9x31pqkAzD
jAE+fHYD0B/PTMQVp3wuxG2YjmXkM5swesFvN6wMNvwZ5xgLUAEyMq2F3E/MmcHh
KlT2/R0m73hAoZp8gh5VqIGu53IFgJE=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:59:24 2025 by rpki-client