Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/b066610a-1f22-30df-aa64-39fef0372ca7.roa
File:                     b066610a-1f22-30df-aa64-39fef0372ca7.roa (raw, json)
Hash identifier:          jW+s3XhxHOyaXfEu+e0OjiqFCVnkcE80fC2k0BIsP9o=
Subject key identifier:   2A:4A:AE:5B:79:2C:28:91:C5:D0:9B:05:E3:85:49:F4:03:24:63:15
Certificate issuer:       /CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
Certificate serial:       010D0C9F4328584B6E91F6396B46FF2B69582700
Authority key identifier: 27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/b066610a-1f22-30df-aa64-39fef0372ca7.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     36352
IP address blocks:        192.119.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:f6:39:6b:46:ff:2b:69:58:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=9bd1a042-10f3-4f1a-832c-69dd538d2f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:62:1b:09:0e:28:7f:a9:32:3d:8a:18:bc:16:
                    82:c3:c4:48:79:0b:a2:a3:00:75:db:82:d2:8c:97:
                    cb:c2:ec:9d:94:8a:76:0e:2a:9b:ca:9c:7b:90:44:
                    fb:53:62:92:db:de:d2:d1:69:da:e5:50:92:95:e8:
                    d0:23:c3:6a:e3:33:7e:17:fa:c0:fa:54:89:45:97:
                    76:78:d7:63:2a:dd:82:77:66:9f:d4:24:67:74:76:
                    a6:f4:84:fc:0f:c4:2e:ff:7e:82:8f:b8:db:23:4f:
                    23:84:c5:ce:ef:5d:c8:fb:29:18:95:f4:ab:04:00:
                    2f:ad:08:21:38:5f:75:e4:0f:dc:d6:27:36:8b:fa:
                    aa:67:3f:f9:a8:10:d8:08:0b:0d:33:21:ad:46:bb:
                    d3:4d:86:6e:60:38:68:be:aa:54:ee:bb:03:a4:83:
                    1f:4e:18:45:7c:7c:09:a3:e4:45:29:e6:1a:ea:cf:
                    32:4e:18:e7:c6:39:48:4a:c1:71:8d:40:ce:46:07:
                    45:84:a3:3e:30:47:41:dd:71:b6:d7:dd:88:84:ba:
                    26:45:d7:0a:55:14:fb:5f:bf:95:87:86:d0:4c:38:
                    7e:b0:34:21:d5:29:b6:6c:f2:25:44:2b:f7:00:1f:
                    6e:a6:b6:f5:74:9a:e7:f2:b9:60:71:40:8c:64:6e:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4A:AE:5B:79:2C:28:91:C5:D0:9B:05:E3:85:49:F4:03:24:63:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/b066610a-1f22-30df-aa64-39fef0372ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl

            X509v3 Authority Key Identifier:
                keyid:27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f3:86:58:a4:e6:7a:da:32:f9:84:3a:f3:82:67:90:ca:77:
         4f:e1:10:2f:d8:b6:9a:4d:7e:72:ea:f9:3e:c3:48:75:b0:85:
         c6:22:48:b3:3e:aa:20:fb:a5:3e:e1:8f:4b:25:00:df:45:0f:
         5a:48:a7:6a:30:9a:ad:a7:cb:ae:92:ae:f2:09:91:a1:a0:df:
         9a:61:a0:8b:24:34:44:9b:fe:c1:9f:da:90:2d:07:c8:17:56:
         7c:61:87:53:f9:80:ba:63:7f:4f:ba:22:9f:a0:76:16:48:54:
         df:34:c0:d3:26:81:2c:de:be:23:eb:f5:a2:9b:7f:15:8c:16:
         f7:a7:c2:f9:f6:45:bf:d1:17:6c:96:9f:88:7a:22:25:c9:c3:
         1e:df:a2:84:b3:65:10:77:ac:9b:00:89:01:d4:a2:0e:e2:38:
         82:fb:5c:49:c7:92:42:45:61:30:52:42:36:25:3b:c4:48:10:
         78:32:b5:e7:a6:47:da:0e:76:0e:a6:3c:fb:84:ff:16:54:29:
         f7:38:04:ae:27:37:a7:37:4d:bc:25:7e:b3:8b:85:2f:ee:b0:
         61:43:fa:e0:00:5a:59:b0:08:ff:c4:f5:d9:14:2b:5f:f2:97:
         75:65:92:a8:ea:fa:de:5a:ee:05:0a:b6:5f:a1:7f:01:86:d9:
         a3:10:c7:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfY5a0b/K2lYJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzI0MWJlNGMtOWRlZC00ZTExLWEyMGQtNWYyNDQ0ZjQ2
YjZhMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
OWJkMWEwNDItMTBmMy00ZjFhLTgzMmMtNjlkZDUzOGQyZjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2IbCQ4of6kyPYoYvBaCw8RIeQuiowB124LS
jJfLwuydlIp2Diqbypx7kET7U2KS297S0Wna5VCSlejQI8Nq4zN+F/rA+lSJRZd2
eNdjKt2Cd2af1CRndHam9IT8D8Qu/36Cj7jbI08jhMXO713I+ykYlfSrBAAvrQgh
OF915A/c1ic2i/qqZz/5qBDYCAsNMyGtRrvTTYZuYDhovqpU7rsDpIMfThhFfHwJ
o+RFKeYa6s8yThjnxjlISsFxjUDORgdFhKM+MEdB3XG2192IhLomRdcKVRT7X7+V
h4bQTDh+sDQh1Sm2bPIlRCv3AB9uprb1dJrn8rlgcUCMZG6WWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCpKrlt5LCiRxdCbBeOFSfQDJGMVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMjQx
YmU0Yy05ZGVkLTRlMTEtYTIwZC01ZjI0NDRmNDZiNmEvYjA2NjYxMGEtMWYyMi0z
MGRmLWFhNjQtMzlmZWYwMzcyY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzI0MWJlNGMtOWRlZC00ZTExLWEy
MGQtNWYyNDQ0ZjQ2YjZhL2MyNDFiZTRjLTlkZWQtNGUxMS1hMjBkLTVmMjQ0NGY0
NmI2YS5jcmwwHwYDVR0jBBgwFoAUJ44ic2ycL1URdLdN2iXBuNLTTu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMjQxYmU0Yy05ZGVkLTRlMTEtYTIwZC01ZjI0
NDRmNDZiNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHepMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrzhlik5nraMvmEOvOCZ5DKd0/hEC/YtppNfnLq+T7DSHWwhcYiSLM+
qiD7pT7hj0slAN9FD1pIp2owmq2ny66SrvIJkaGg35phoIskNESb/sGf2pAtB8gX
Vnxhh1P5gLpjf0+6Ip+gdhZIVN80wNMmgSzeviPr9aKbfxWMFvenwvn2Rb/RF2yW
n4h6IiXJwx7fooSzZRB3rJsAiQHUog7iOIL7XEnHkkJFYTBSQjYlO8RIEHgyteem
R9oOdg6mPPuE/xZUKfc4BK4nN6c3TbwlfrOLhS/usGFD+uAAWlmwCP/E9dkUK1/y
l3Vlkqjq+t5a7gUKtl+hfwGG2aMQxwA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:48:59 2025 by rpki-client