Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba2deaf8-6b80-3906-a981-2f43a849d9d4.roa
File:                     ba2deaf8-6b80-3906-a981-2f43a849d9d4.roa (raw, json)
Hash identifier:          2EbxA3b4s90Aa/dqRF3b0JOU6j4nu2ROgCwegUG54Fw=
Subject key identifier:   30:CD:45:D6:72:2D:F7:5E:10:05:37:07:46:92:18:9C:04:72:45:34
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B87CF22673457C65A6989E2BE
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba2deaf8-6b80-3906-a981-2f43a849d9d4.roa
Signing time:             Wed 15 Oct 2025 13:59:11 +0000
ROA not before:           Wed 15 Oct 2025 13:59:11 +0000
ROA not after:            Tue 13 Jan 2026 14:59:11 +0000
asID:                     23473
IP address blocks:        173.230.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:cf:22:67:34:57:c6:5a:69:89:e2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 15 13:59:11 2025 GMT
            Not After : Jan 13 14:59:11 2026 GMT
        Subject: CN=238d2e02-ab39-4472-938c-c5259609b6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:ac:b9:82:ba:6d:b3:39:96:4e:18:0d:f6:
                    4b:5e:c4:ec:b5:66:e0:1a:d3:ff:20:cd:50:71:07:
                    90:fc:01:3e:8e:ef:64:d4:ae:5d:97:3d:fe:63:79:
                    9f:b7:54:28:10:08:c4:7c:0c:af:07:53:6f:b7:67:
                    b3:f4:6c:1f:d4:51:4b:d7:b0:6b:c3:df:29:7d:f0:
                    1e:1d:03:4f:70:79:d6:e8:b8:ea:74:fc:dc:ff:b3:
                    cd:83:c4:fd:fa:b9:b8:ea:91:6f:93:13:5b:31:b4:
                    d8:1b:5f:ca:35:64:81:a2:51:ae:28:69:c4:11:b1:
                    c6:d0:56:1e:18:a2:18:27:9e:7e:3a:93:f4:32:47:
                    14:5c:d8:60:8d:95:2b:89:d0:af:9b:38:fd:7c:ec:
                    61:86:3d:50:1b:13:d6:ed:03:ca:65:23:56:66:96:
                    10:a5:c4:dc:d9:f9:6b:ff:2b:2c:46:1d:5a:ed:d6:
                    25:81:be:75:42:0a:fa:d3:de:ff:19:60:ba:fc:a8:
                    fa:0d:4c:8b:ab:e0:85:7d:32:e7:56:49:2f:63:2d:
                    76:20:03:84:12:5f:a1:3c:f9:33:b8:72:01:9c:09:
                    a3:81:90:62:b7:90:82:25:e2:4b:df:30:67:83:6e:
                    7b:3c:87:21:e6:19:97:77:a5:e0:2c:eb:ec:13:a8:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CD:45:D6:72:2D:F7:5E:10:05:37:07:46:92:18:9C:04:72:45:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ba2deaf8-6b80-3906-a981-2f43a849d9d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a5:e1:8d:43:2b:1d:f5:be:aa:6a:d5:96:d3:a9:9c:5b:c9:
         e0:f8:b9:3e:34:2d:a4:51:4f:54:d6:d6:de:c3:59:ed:5a:c3:
         a5:a1:22:fd:44:17:2a:ca:36:e5:32:4c:63:9a:2b:68:b3:48:
         ef:40:76:bd:1c:a2:96:25:0e:a4:f2:7b:59:75:65:f8:0c:18:
         29:71:72:30:ea:77:4e:c7:95:c6:73:8f:63:2c:2a:63:b2:21:
         ca:62:c4:cc:0b:57:1c:bf:53:dd:46:69:75:d8:05:0b:0a:5c:
         ad:20:5c:9c:77:37:01:01:fd:c2:d7:9b:e9:ee:e5:f6:c2:7b:
         fb:83:8d:a5:0f:87:0c:5d:4c:85:cc:de:ef:49:2f:9b:e4:6a:
         0e:3e:c5:6c:83:a4:f1:5f:c0:56:58:37:e9:16:40:dc:1d:13:
         22:a5:6a:9c:ad:2f:3a:bd:9d:22:2b:8a:6c:21:d2:29:64:e0:
         6e:48:be:1a:c3:52:13:07:c0:16:63:56:ac:79:44:e8:09:65:
         96:a1:bf:ce:68:de:94:47:dd:31:42:1d:ae:48:9d:69:3a:fa:
         55:cd:a5:1c:66:d4:ad:5d:f7:b2:f9:1d:a5:e3:31:76:8c:f9:
         54:bd:f4:25:b0:c8:7f:4e:7d:fa:96:8c:94:75:93:da:06:5d:
         39:e9:2c:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHzyJnNFfGWmmJ4r4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MTAxNTEzNTkxMVoXDTI2MDExMzE0NTkxMVowLzEtMCsGA1UEAxMk
MjM4ZDJlMDItYWIzOS00NDcyLTkzOGMtYzUyNTk2MDliNmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkOsuYK6bbM5lk4YDfZLXsTstWbgGtP/IM1Q
cQeQ/AE+ju9k1K5dlz3+Y3mft1QoEAjEfAyvB1Nvt2ez9Gwf1FFL17Brw98pffAe
HQNPcHnW6LjqdPzc/7PNg8T9+rm46pFvkxNbMbTYG1/KNWSBolGuKGnEEbHG0FYe
GKIYJ55+OpP0MkcUXNhgjZUridCvmzj9fOxhhj1QGxPW7QPKZSNWZpYQpcTc2flr
/yssRh1a7dYlgb51Qgr6097/GWC6/Kj6DUyLq+CFfTLnVkkvYy12IAOEEl+hPPkz
uHIBnAmjgZBit5CCJeJL3zBng257PIch5hmXd6XgLOvsE6haAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDDNRdZyLfdeEAU3B0aSGJwEckU0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmEyZGVhZjgtNmI4MC0z
OTA2LWE5ODEtMmY0M2E4NDlkOWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBreZyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFel4Y1DKx31vqpq1ZbTqZxbyeD4uT40LaRRT1TW1t7DWe1aw6WhIv1E
FyrKNuUyTGOaK2izSO9Adr0copYlDqTye1l1ZfgMGClxcjDqd07HlcZzj2MsKmOy
IcpixMwLVxy/U91GaXXYBQsKXK0gXJx3NwEB/cLXm+nu5fbCe/uDjaUPhwxdTIXM
3u9JL5vkag4+xWyDpPFfwFZYN+kWQNwdEyKlapytLzq9nSIrimwh0ilk4G5IvhrD
UhMHwBZjVqx5ROgJZZahv85o3pRH3TFCHa5InWk6+lXNpRxm1K1d97L5HaXjMXaM
+VS99CWwyH9OffqWjJR1k9oGXTnpLNk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:14 2025 by rpki-client