Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4c482e31-7964-358b-816f-6025ba55fb2d.roa
File:                     4c482e31-7964-358b-816f-6025ba55fb2d.roa (raw, json)
Hash identifier:          nH+c5/3DniczkyCE480NKjJh1PlRix87BvQFOHXHYQs=
Subject key identifier:   B2:A4:8E:2C:BC:48:CB:A8:CF:6C:75:65:B8:83:13:84:DB:9A:21:0E
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584B966792746B619ACF257A2680
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4c482e31-7964-358b-816f-6025ba55fb2d.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     19901
IP address blocks:        143.103.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:96:67:92:74:6b:61:9a:cf:25:7a:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=386aed49-6f74-4220-b709-34943f145dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:77:f6:cf:06:ab:20:78:91:de:14:ee:3d:
                    0b:63:70:f2:8c:0a:02:c7:cd:c7:f2:99:96:11:b4:
                    98:31:c6:8d:2a:2f:2f:d9:23:01:09:2b:ff:33:8f:
                    3b:b5:c4:71:52:db:ec:da:85:8b:f6:cf:1b:d5:80:
                    7b:42:8a:52:1e:fd:59:65:e1:ca:89:c5:7d:a4:de:
                    01:df:19:c1:5a:cd:d3:95:20:a4:06:62:0a:7a:43:
                    07:f2:1f:8c:71:cb:22:4d:e8:d9:0c:98:74:32:6f:
                    8b:cd:45:1c:e7:dc:15:9f:3c:6d:eb:cc:c4:3a:37:
                    16:31:d0:f7:8a:0c:5d:77:62:52:45:1a:fb:7d:0f:
                    46:ff:31:2a:49:1b:ec:df:f3:b9:3c:58:54:8e:4e:
                    88:00:c2:d9:f3:9a:e5:51:55:35:96:a3:a2:8e:c5:
                    3e:f3:db:39:a7:78:64:46:19:93:ac:4a:4c:8e:47:
                    31:f1:1d:f8:97:66:76:f6:44:f8:12:4f:af:5f:66:
                    60:a9:bd:98:8d:0b:f9:ea:2d:32:7f:bc:50:b4:2c:
                    0b:6b:7b:d9:64:64:94:75:8b:46:ea:4a:f3:f1:ea:
                    8b:7e:6c:46:b8:ff:b5:76:ab:dd:da:e2:d2:af:57:
                    72:85:c9:c6:94:1f:64:2e:ce:0f:1f:c6:2c:11:d9:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A4:8E:2C:BC:48:CB:A8:CF:6C:75:65:B8:83:13:84:DB:9A:21:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4c482e31-7964-358b-816f-6025ba55fb2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.103.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:64:d2:30:1a:ec:59:bf:ec:0b:fc:d3:cb:78:5d:31:41:a8:
         18:bd:31:e2:a1:0c:32:ce:22:21:a0:0e:08:e0:7b:4a:fc:10:
         a7:11:d5:b9:0a:42:9b:df:33:cd:4b:43:a6:ca:1c:c9:a0:42:
         bc:cb:39:b0:3c:5d:a8:b5:cd:bc:98:97:b8:2f:59:96:81:3e:
         96:10:58:35:f0:62:8c:fb:74:2c:dc:f0:23:ee:9c:25:68:49:
         12:92:99:4f:3b:4a:2c:26:65:72:b3:a3:60:ba:24:b1:db:4b:
         e8:56:71:50:89:47:0e:dc:0c:fe:02:c8:db:07:4a:dc:07:18:
         61:31:41:b0:be:c7:e8:59:ef:9c:34:ac:bc:82:99:18:65:be:
         b9:89:70:d6:1e:98:19:8e:d1:70:51:3f:e2:a4:cc:64:b4:05:
         c9:29:29:00:94:30:43:38:5c:09:89:c2:8e:8d:aa:47:8d:22:
         fb:40:a9:2b:3c:e2:1f:08:59:05:88:b5:36:1b:93:e4:32:76:
         12:91:3a:97:14:bd:fa:64:cd:88:5a:c2:3f:33:17:85:6b:ec:
         3e:89:7c:10:fc:74:13:6f:04:55:43:9e:a2:ea:4f:a1:6e:00:
         83:7b:95:ae:da:82:f1:a9:5b:62:86:39:8b:1d:30:51:51:f4:
         6c:65:ab:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuWZ5J0a2GazyV6JoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk
Mzg2YWVkNDktNmY3NC00MjIwLWI3MDktMzQ5NDNmMTQ1ZGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLt39s8GqyB4kd4U7j0LY3DyjAoCx83H8pmW
EbSYMcaNKi8v2SMBCSv/M487tcRxUtvs2oWL9s8b1YB7QopSHv1ZZeHKicV9pN4B
3xnBWs3TlSCkBmIKekMH8h+MccsiTejZDJh0Mm+LzUUc59wVnzxt68zEOjcWMdD3
igxdd2JSRRr7fQ9G/zEqSRvs3/O5PFhUjk6IAMLZ85rlUVU1lqOijsU+89s5p3hk
RhmTrEpMjkcx8R34l2Z29kT4Ek+vX2Zgqb2YjQv56i0yf7xQtCwLa3vZZGSUdYtG
6krz8eqLfmxGuP+1dqvd2uLSr1dyhcnGlB9kLs4PH8YsEdku5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLKkjiy8SMuoz2x1ZbiDE4TbmiEOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNGM0ODJlMzEtNzk2NC0z
NThiLTgxNmYtNjAyNWJhNTVmYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj2eQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpk0jAa7Fm/7Av808t4XTFBqBi9MeKhDDLOIiGgDgjge0r8EKcR1bkK
QpvfM81LQ6bKHMmgQrzLObA8Xai1zbyYl7gvWZaBPpYQWDXwYoz7dCzc8CPunCVo
SRKSmU87SiwmZXKzo2C6JLHbS+hWcVCJRw7cDP4CyNsHStwHGGExQbC+x+hZ75w0
rLyCmRhlvrmJcNYemBmO0XBRP+KkzGS0BckpKQCUMEM4XAmJwo6NqkeNIvtAqSs8
4h8IWQWItTYbk+QydhKROpcUvfpkzYhawj8zF4Vr7D6JfBD8dBNvBFVDnqLqT6Fu
AIN7la7agvGpW2KGOYsdMFFR9Gxlq8k=
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:06:26 2025 by rpki-client