Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e0f9df8-97d8-3cb6-862f-a8e8b5df9aa0.roa
File:                     3e0f9df8-97d8-3cb6-862f-a8e8b5df9aa0.roa (raw, json)
Hash identifier:          3ju5YaEZZ1b7ijrEyKYMEFWuqubsIMS0IpNIMql1ido=
Subject key identifier:   79:E6:A2:8A:BE:86:69:5A:89:19:8B:A4:DD:8B:72:24:BB:68:F0:6D
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6EF4E2C3E6F5F460DC00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e0f9df8-97d8-3cb6-862f-a8e8b5df9aa0.roa
Signing time:             Fri 10 Oct 2025 15:41:22 +0000
ROA not before:           Fri 10 Oct 2025 15:41:22 +0000
ROA not after:            Thu 08 Jan 2026 16:41:22 +0000
asID:                     81
IP address blocks:        192.101.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:6e:f4:e2:c3:e6:f5:f4:60:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:22 2025 GMT
            Not After : Jan  8 16:41:22 2026 GMT
        Subject: CN=82b0273b-7d1e-4c8c-863f-a5252aa4e185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:07:ee:4c:1f:9b:ac:97:a9:09:b7:56:60:
                    b6:2e:9a:c3:34:8c:d1:48:7c:c5:98:f9:a9:5b:59:
                    5a:e9:8b:ab:ba:9a:6e:a5:bc:5d:c3:2e:28:51:29:
                    0e:a6:2b:08:6f:8d:1d:78:ba:22:11:e2:73:10:dc:
                    10:60:d4:8b:66:69:19:f2:ef:67:58:bb:44:19:08:
                    ff:7b:08:33:93:67:38:5f:cd:09:ed:9f:5a:f2:9b:
                    a6:87:c0:4c:cd:d5:62:1d:7e:cb:b0:40:fd:b2:1f:
                    88:33:70:24:e5:7d:4a:3d:7f:45:c5:ce:72:02:77:
                    c3:8c:68:ac:fa:e6:33:c5:63:05:03:25:2e:90:64:
                    fb:c7:5f:c8:30:e8:dd:69:4d:82:94:a7:af:d3:33:
                    08:b1:db:03:06:94:2f:2a:b0:ef:86:da:02:81:73:
                    f0:c5:a5:8e:7c:d7:88:b5:74:70:a2:c4:a5:90:4d:
                    7c:c6:a3:94:da:ba:f7:72:23:29:75:7b:1d:76:44:
                    f0:8b:0d:06:87:8b:dc:cb:c3:59:0f:9d:26:2c:63:
                    20:d4:86:43:14:dc:67:f7:f7:5b:cc:f9:4a:48:f5:
                    71:e1:8f:86:35:5f:57:52:98:4c:86:2c:e2:1f:b2:
                    3c:89:6f:aa:59:f2:b9:03:97:3d:4f:02:00:fd:da:
                    e6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E6:A2:8A:BE:86:69:5A:89:19:8B:A4:DD:8B:72:24:BB:68:F0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e0f9df8-97d8-3cb6-862f-a8e8b5df9aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:8d:1a:5d:4a:8b:78:8d:f1:70:0d:13:5e:7c:f9:b2:82:a8:
         3d:8d:23:76:22:2c:26:e4:0e:bf:65:09:b8:29:86:b6:04:5a:
         c4:53:b4:ca:10:18:ce:a8:b8:69:cf:b0:43:48:9c:3c:e5:ff:
         97:0b:b1:29:57:81:84:5b:6d:3a:0f:15:5c:b3:0b:59:bf:fe:
         c8:ae:d5:87:f1:e1:b3:6f:43:32:49:85:43:b5:20:21:73:6b:
         dd:dc:15:4e:c1:d6:ec:e5:08:0a:19:82:bb:bb:03:f7:08:ca:
         89:d0:43:3e:dc:e2:9f:ad:f0:c1:2c:7c:d2:59:65:70:a3:31:
         b2:20:42:07:05:7a:38:3f:27:bc:c2:60:a1:f0:a0:ea:43:30:
         1c:9d:f7:86:9c:c6:16:73:2e:b9:b1:6b:bf:3f:2c:ae:73:33:
         b4:f0:0e:80:47:79:51:5f:bd:15:3f:f3:76:9f:5d:56:66:6f:
         4a:be:2d:78:c6:3e:ec:ba:6d:ab:2f:2b:54:60:14:b8:3f:9d:
         82:40:68:22:ab:61:04:fd:7c:21:b3:3a:95:01:ce:bb:ee:da:
         b0:f0:05:e1:c7:f1:cc:d3:43:dc:7d:82:21:42:6a:d6:e2:b5:
         ae:83:85:ef:9c:29:ec:e6:1f:b3:0c:b2:7d:e1:6c:91:e4:d7:
         92:be:70:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG704sPm9fRg3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MTAxMDE1NDEyMloXDTI2MDEwODE2NDEyMlowLzEtMCsGA1UEAxMk
ODJiMDI3M2ItN2QxZS00YzhjLTg2M2YtYTUyNTJhYTRlMTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBMH7kwfm6yXqQm3VmC2LprDNIzRSHzFmPmp
W1la6Yuruppupbxdwy4oUSkOpisIb40deLoiEeJzENwQYNSLZmkZ8u9nWLtEGQj/
ewgzk2c4X80J7Z9a8pumh8BMzdViHX7LsED9sh+IM3Ak5X1KPX9Fxc5yAnfDjGis
+uYzxWMFAyUukGT7x1/IMOjdaU2ClKev0zMIsdsDBpQvKrDvhtoCgXPwxaWOfNeI
tXRwosSlkE18xqOU2rr3ciMpdXsddkTwiw0Gh4vcy8NZD50mLGMg1IZDFNxn9/db
zPlKSPVx4Y+GNV9XUphMhiziH7I8iW+qWfK5A5c9TwIA/drmpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHnmooq+hmlaiRmLpN2LciS7aPBtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2UwZjlkZjgtOTdkOC0z
Y2I2LTg2MmYtYThlOGI1ZGY5YWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGUWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESNGl1Ki3iN8XANE158+bKCqD2NI3YiLCbkDr9lCbgphrYEWsRTtMoQ
GM6ouGnPsENInDzl/5cLsSlXgYRbbToPFVyzC1m//siu1Yfx4bNvQzJJhUO1ICFz
a93cFU7B1uzlCAoZgru7A/cIyonQQz7c4p+t8MEsfNJZZXCjMbIgQgcFejg/J7zC
YKHwoOpDMByd94acxhZzLrmxa78/LK5zM7TwDoBHeVFfvRU/83afXVZmb0q+LXjG
Puy6basvK1RgFLg/nYJAaCKrYQT9fCGzOpUBzrvu2rDwBeHH8czTQ9x9giFCatbi
ta6Dhe+cKezmH7MMsn3hbJHk15K+cBk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:50 2025 by rpki-client