Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fff213e1-4c40-384e-a94d-b128794724e5.roa
File:                     fff213e1-4c40-384e-a94d-b128794724e5.roa (raw, json)
Hash identifier:          4qXYImbORH/iGWp5laZm/hd9tFXUQJDZEtoBfwErC0w=
Subject key identifier:   F0:B8:1A:45:2E:67:B6:BD:63:52:F6:82:1B:44:F6:C5:71:25:4B:1A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B5B074512526D69CB1F7D9A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fff213e1-4c40-384e-a94d-b128794724e5.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     397630
IP address blocks:        208.52.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:45:12:52:6d:69:cb:1f:7d:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=bbde7830-7978-49d0-aed3-5361ed0c8d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b0:5e:a1:61:2c:82:14:d0:4f:f1:d7:6e:b8:
                    19:33:66:7b:bb:54:ba:8f:8e:06:b7:3d:05:cf:de:
                    0b:d2:ce:30:ce:01:ec:6c:d6:92:5c:6f:03:60:d0:
                    6f:43:d9:3c:c3:4e:1a:ff:01:41:a8:49:93:94:50:
                    5b:e7:61:5c:10:9e:0c:73:0b:24:06:9c:7e:12:1d:
                    7d:62:89:39:e3:94:ad:2b:60:d4:5b:dc:5b:1e:f9:
                    81:57:7b:03:8a:25:f6:71:85:8e:db:22:af:29:45:
                    a7:df:42:b4:d4:e2:70:73:cd:90:92:61:6b:fa:bc:
                    ce:9a:c6:1c:85:6f:8f:33:ff:9d:ec:59:88:d5:7c:
                    59:59:70:c1:21:d3:5e:87:01:fb:bc:77:b7:ea:fe:
                    eb:1c:f9:0d:2a:f3:ad:49:27:bb:72:9d:fb:a8:37:
                    3b:bc:5b:ce:91:39:fc:63:3d:d5:e3:b9:f3:f4:53:
                    7f:a6:fc:17:6a:a8:bc:9c:46:6b:bd:a6:9a:c0:3a:
                    a3:32:31:f1:90:7f:1a:72:38:2f:27:99:fd:35:9f:
                    5f:98:2d:2d:1b:55:53:23:0c:80:9d:85:08:54:90:
                    b6:6f:9b:de:25:63:14:60:eb:a8:3b:d9:11:ef:f5:
                    0e:67:f3:cd:a3:21:95:32:a7:3d:d6:e2:5d:06:59:
                    66:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B8:1A:45:2E:67:B6:BD:63:52:F6:82:1B:44:F6:C5:71:25:4B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fff213e1-4c40-384e-a94d-b128794724e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:a3:3f:a8:86:05:35:7a:46:ac:aa:2b:93:9c:a3:2e:80:16:
         57:40:8e:af:ac:b1:1c:27:cb:45:5e:2e:13:3e:40:4f:ea:83:
         b6:9b:52:10:e0:28:a6:d2:d6:79:18:e4:40:74:3a:dd:f2:8e:
         f9:9f:7d:fe:52:f1:98:df:f2:2f:ad:ee:1c:05:00:b5:40:a7:
         7b:3d:28:2b:2d:12:92:44:f8:19:74:f7:20:33:b4:6a:91:f8:
         7e:0e:99:cc:76:36:58:4e:04:61:d9:ec:42:5a:2e:92:57:6f:
         11:ad:d4:6a:fc:e4:76:09:f5:c8:30:38:e7:a3:48:dc:f8:32:
         ab:fc:56:d6:cc:d1:ce:4e:2f:2d:27:15:df:33:91:21:e8:36:
         0e:19:ba:d4:41:e4:68:59:23:a9:8a:1b:e2:e4:ef:41:88:76:
         71:32:a8:03:f4:62:a2:cc:e5:51:b9:14:1a:aa:4e:58:0e:20:
         98:47:37:95:e6:99:af:ff:fa:e1:eb:ae:e5:1d:66:69:3e:da:
         bf:0a:31:e0:d3:e6:34:34:79:47:e9:cb:c4:b7:c9:bc:1f:7e:
         68:3b:37:db:44:f3:79:90:33:79:e7:56:bc:b7:3d:4e:ab:2c:
         f0:02:8a:7f:b9:af:e9:41:34:62:75:4a:d7:e5:c6:2c:11:27:
         a0:ad:a0:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0USUm1pyx99moAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
YmJkZTc4MzAtNzk3OC00OWQwLWFlZDMtNTM2MWVkMGM4ZDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rBeoWEsghTQT/HXbrgZM2Z7u1S6j44Gtz0F
z94L0s4wzgHsbNaSXG8DYNBvQ9k8w04a/wFBqEmTlFBb52FcEJ4McwskBpx+Eh19
Yok545StK2DUW9xbHvmBV3sDiiX2cYWO2yKvKUWn30K01OJwc82QkmFr+rzOmsYc
hW+PM/+d7FmI1XxZWXDBIdNehwH7vHe36v7rHPkNKvOtSSe7cp37qDc7vFvOkTn8
Yz3V47nz9FN/pvwXaqi8nEZrvaaawDqjMjHxkH8acjgvJ5n9NZ9fmC0tG1VTIwyA
nYUIVJC2b5veJWMUYOuoO9kR7/UOZ/PNoyGVMqc91uJdBllmPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPC4GkUuZ7a9Y1L2ghtE9sVxJUsaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZmZmMjEzZTEtNGM0MC0z
ODRlLWE5NGQtYjEyODc5NDcyNGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DS1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALajP6iGBTV6RqyqK5Ocoy6AFldAjq+ssRwny0VeLhM+QE/qg7abUhDg
KKbS1nkY5EB0Ot3yjvmfff5S8Zjf8i+t7hwFALVAp3s9KCstEpJE+Bl09yAztGqR
+H4Omcx2NlhOBGHZ7EJaLpJXbxGt1Gr85HYJ9cgwOOejSNz4Mqv8VtbM0c5OLy0n
Fd8zkSHoNg4ZutRB5GhZI6mKG+Lk70GIdnEyqAP0YqLM5VG5FBqqTlgOIJhHN5Xm
ma//+uHrruUdZmk+2r8KMeDT5jQ0eUfpy8S3ybwffmg7N9tE83mQM3nnVry3PU6r
LPACin+5r+lBNGJ1StflxiwRJ6CtoEc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:35:42 2025 by rpki-client