Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/70ac753a-869d-37cc-a658-9fca476fd37f.roa
File:                     70ac753a-869d-37cc-a658-9fca476fd37f.roa (raw, json)
Hash identifier:          Off4cBn/JPGi0dN13jwKH+0in7xc6+NKKhT/H0qVPTY=
Subject key identifier:   5F:C0:7E:2A:36:C9:3D:99:71:7F:88:F3:92:84:E3:19:C2:57:8A:A7
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B85151E179FD759E71ABAD880
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/70ac753a-869d-37cc-a658-9fca476fd37f.roa
Signing time:             Tue 14 Oct 2025 14:32:46 +0000
ROA not before:           Tue 14 Oct 2025 14:32:46 +0000
ROA not after:            Mon 12 Jan 2026 15:32:46 +0000
asID:                     23473
IP address blocks:        173.230.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:85:15:1e:17:9f:d7:59:e7:1a:ba:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 14 14:32:46 2025 GMT
            Not After : Jan 12 15:32:46 2026 GMT
        Subject: CN=c5ca273e-c4ae-4ac5-b6a0-0a19a642bf16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:d0:4e:7a:d7:cf:05:80:60:5e:b9:78:82:
                    42:20:92:ea:10:ef:02:a9:8c:4f:e6:3e:d5:b7:c2:
                    01:ec:cb:c9:1c:01:2a:f1:e5:10:b1:06:48:da:c9:
                    c2:cc:84:b8:16:ba:55:0a:e1:5c:8b:b7:c5:e2:10:
                    c6:53:86:27:18:5d:a3:a1:9f:47:cb:d9:24:dd:ac:
                    8d:66:d0:20:af:a7:30:7c:2f:6b:8b:10:d3:20:92:
                    3f:6f:42:f3:e6:d7:ac:c0:77:b0:ed:84:40:9d:ee:
                    91:dc:cc:82:9a:a6:fa:98:f3:1f:fe:61:34:16:ac:
                    46:c1:d8:36:24:af:0c:3e:d1:b1:31:bd:b3:3b:72:
                    3c:5a:3d:80:d3:e3:6c:b8:7e:a4:36:d4:b5:f1:20:
                    09:0b:7e:37:d9:d3:5c:f1:63:19:b1:e9:f9:57:50:
                    19:1c:e3:17:51:d9:01:e9:50:16:a3:aa:13:be:7f:
                    63:d6:c5:2f:ac:6e:e3:84:75:9b:d5:31:25:8e:9c:
                    f7:68:d8:2c:07:1a:95:4a:21:ce:b6:9c:3f:9d:27:
                    5e:2d:69:0e:0f:c3:09:4a:4d:ab:6e:f7:64:08:19:
                    d2:1e:ad:73:69:11:c7:cb:8a:bb:e2:f0:65:fd:20:
                    8c:3b:9f:6c:c4:77:a4:8c:0d:f1:87:6b:8d:9e:bf:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C0:7E:2A:36:C9:3D:99:71:7F:88:F3:92:84:E3:19:C2:57:8A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/70ac753a-869d-37cc-a658-9fca476fd37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:69:a6:e0:2a:78:1e:63:01:d8:dc:8d:fb:1d:71:db:79:fd:
         e3:40:2c:17:15:58:7f:f6:7c:a3:c0:13:e9:09:47:31:5e:41:
         a7:f4:4c:84:66:b4:0d:f0:75:ce:26:63:3a:7c:23:00:04:4c:
         4c:26:c3:8f:7c:ff:7e:f7:0f:a5:6a:cd:92:0a:5d:9c:83:08:
         f7:1d:0e:83:36:a8:81:d6:0f:23:b3:6c:68:a0:f6:dc:70:47:
         79:6e:46:d1:e3:b4:63:fd:d5:0c:e8:b6:04:fd:29:98:05:ec:
         8f:74:61:26:3a:ce:e5:a1:19:d0:4b:32:65:66:03:10:74:28:
         3d:5b:53:69:72:d5:7d:43:71:18:0b:09:07:1d:d8:63:eb:f3:
         cd:fa:9f:b2:0d:71:eb:51:31:3f:24:a5:9e:a2:79:d2:21:f4:
         68:57:61:69:63:d8:ed:d1:d1:e9:5c:37:4a:94:bf:0d:64:1e:
         64:6a:74:0c:b4:ad:bd:dd:cd:55:b9:4b:e3:f8:71:e0:4d:45:
         42:84:bd:12:3a:f2:11:e4:52:1f:a2:94:4b:90:54:8d:fb:a9:
         db:9e:61:27:02:c0:21:d8:3e:31:df:30:33:f8:72:61:3b:15:
         10:b9:9f:02:f2:e9:c2:ef:ed:78:cc:2c:2a:00:47:71:15:25:
         cc:c6:2b:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFFR4Xn9dZ5xq62IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MTAxNDE0MzI0NloXDTI2MDExMjE1MzI0NlowLzEtMCsGA1UEAxMk
YzVjYTI3M2UtYzRhZS00YWM1LWI2YTAtMGExOWE2NDJiZjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvnQTnrXzwWAYF65eIJCIJLqEO8CqYxP5j7V
t8IB7MvJHAEq8eUQsQZI2snCzIS4FrpVCuFci7fF4hDGU4YnGF2joZ9Hy9kk3ayN
ZtAgr6cwfC9rixDTIJI/b0Lz5teswHew7YRAne6R3MyCmqb6mPMf/mE0FqxGwdg2
JK8MPtGxMb2zO3I8Wj2A0+NsuH6kNtS18SAJC3432dNc8WMZsen5V1AZHOMXUdkB
6VAWo6oTvn9j1sUvrG7jhHWb1TEljpz3aNgsBxqVSiHOtpw/nSdeLWkOD8MJSk2r
bvdkCBnSHq1zaRHHy4q74vBl/SCMO59sxHekjA3xh2uNnr/rVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/Afio2yT2ZcX+I85KE4xnCV4qnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNzBhYzc1M2EtODY5ZC0z
N2NjLWE2NTgtOWZjYTQ3NmZkMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreYwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlppuAqeB5jAdjcjfsdcdt5/eNALBcVWH/2fKPAE+kJRzFeQaf0TIRm
tA3wdc4mYzp8IwAETEwmw498/373D6VqzZIKXZyDCPcdDoM2qIHWDyOzbGig9txw
R3luRtHjtGP91QzotgT9KZgF7I90YSY6zuWhGdBLMmVmAxB0KD1bU2ly1X1DcRgL
CQcd2GPr8836n7INcetRMT8kpZ6iedIh9GhXYWlj2O3R0elcN0qUvw1kHmRqdAy0
rb3dzVW5S+P4ceBNRUKEvRI68hHkUh+ilEuQVI37qdueYScCwCHYPjHfMDP4cmE7
FRC5nwLy6cLv7XjMLCoAR3EVJczGK5g=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:15 2025 by rpki-client