Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6d40050b-c5d1-338c-9a5a-fd493e776beb.roa
File:                     6d40050b-c5d1-338c-9a5a-fd493e776beb.roa (raw, json)
Hash identifier:          2sjbm1bdbPa33H6pe1X0aFquJDQ1OCigwoLiV/7g6Mo=
Subject key identifier:   10:CF:36:4D:E6:F6:F4:60:DD:35:65:5A:EB:BB:70:6A:FA:C9:38:C7
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5DD1E353EA5B753FEE1E0C08
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6d40050b-c5d1-338c-9a5a-fd493e776beb.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     852
IP address blocks:        216.123.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e3:53:ea:5b:75:3f:ee:1e:0c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=e5cc3dfa-b6b7-4d3e-aa1c-7535544bd1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:3b:9e:7d:69:64:b2:eb:c7:4a:40:29:ea:
                    b4:e4:b5:0e:12:86:18:a6:ff:02:5e:15:d4:03:bc:
                    9a:7c:db:67:50:3f:f9:4e:01:42:6b:3e:eb:0e:a8:
                    ca:b0:31:a6:e6:a1:54:32:46:98:6e:d1:cc:53:47:
                    ac:33:59:6d:b1:47:66:ae:e8:8b:75:1f:01:66:d1:
                    03:9d:a1:a0:90:b7:e3:06:b5:75:b9:52:59:81:9d:
                    58:26:37:d8:92:8b:f5:bc:f6:ba:89:53:7f:dc:38:
                    9c:41:b9:14:bc:2d:e2:2b:aa:2e:07:37:d8:f1:94:
                    1c:a5:3b:ce:cf:81:61:1a:e6:34:26:8f:7c:7b:c5:
                    76:90:cf:d8:40:2d:aa:b7:eb:21:ca:b4:31:7e:41:
                    fd:4c:0f:11:bf:be:1c:74:77:53:09:27:03:fc:0f:
                    48:d9:9a:f8:93:9c:22:1d:4a:8f:06:35:75:ce:49:
                    51:34:97:3b:bb:c4:78:a7:8b:d0:91:d8:a5:1f:90:
                    9e:d8:3a:2e:14:b0:c9:26:6e:b5:6a:77:ba:eb:74:
                    75:b2:ab:44:5d:78:69:55:00:95:d3:03:1a:af:8a:
                    33:30:64:6f:70:c9:21:c6:6f:d0:d8:04:d6:87:7b:
                    65:53:3c:d6:82:73:83:fa:20:a2:02:e4:b5:bd:f9:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CF:36:4D:E6:F6:F4:60:DD:35:65:5A:EB:BB:70:6A:FA:C9:38:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6d40050b-c5d1-338c-9a5a-fd493e776beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:4a:31:d5:b6:5a:51:3c:99:33:1e:93:1f:05:be:73:e7:b2:
         aa:d9:50:91:93:ca:97:c1:09:d0:c9:70:70:88:51:28:b6:ee:
         37:f3:dd:47:3c:31:b4:37:97:68:2e:a4:52:95:30:03:b4:84:
         61:ff:c2:45:95:e4:6a:a4:df:12:c1:24:1d:52:51:74:db:58:
         88:ee:fc:56:48:20:aa:b1:15:2f:72:83:22:42:5a:6d:b4:f2:
         51:53:68:1e:4c:61:d3:dd:b2:76:dc:56:5a:c4:33:99:3a:eb:
         7c:6f:4c:31:83:06:df:23:e6:27:ab:ab:12:5e:ad:57:5c:f4:
         d7:24:8e:6f:a0:62:e3:3f:c3:1c:db:d5:40:0d:54:76:fd:89:
         c4:3c:0c:43:c1:68:ec:37:44:92:67:91:f4:80:78:0f:d6:31:
         c1:5c:5c:a0:38:2c:ad:e8:b1:01:b5:d8:6b:36:9c:69:4a:f4:
         5b:eb:85:c9:48:a9:f0:82:d0:24:fe:57:e8:2b:f5:99:7f:82:
         31:7b:2d:a5:7e:27:80:49:62:d6:fb:75:cb:bc:90:46:32:f4:
         f7:25:58:f9:56:32:b7:36:cd:ec:3c:95:4a:0b:10:37:17:6a:
         87:d3:e6:b6:fe:b3:f9:6e:b6:1a:f8:19:8d:24:d7:0e:85:40:
         6c:d4:2e:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0eNT6lt1P+4eDAgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk
ZTVjYzNkZmEtYjZiNy00ZDNlLWFhMWMtNzUzNTU0NGJkMWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvA7nn1pZLLrx0pAKeq05LUOEoYYpv8CXhXU
A7yafNtnUD/5TgFCaz7rDqjKsDGm5qFUMkaYbtHMU0esM1ltsUdmruiLdR8BZtED
naGgkLfjBrV1uVJZgZ1YJjfYkov1vPa6iVN/3DicQbkUvC3iK6ouBzfY8ZQcpTvO
z4FhGuY0Jo98e8V2kM/YQC2qt+shyrQxfkH9TA8Rv74cdHdTCScD/A9I2Zr4k5wi
HUqPBjV1zklRNJc7u8R4p4vQkdilH5Ce2DouFLDJJm61ane663R1sqtEXXhpVQCV
0wMar4ozMGRvcMkhxm/Q2ATWh3tlUzzWgnOD+iCiAuS1vfl1zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDPNk3m9vRg3TVlWuu7cGr6yTjHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNmQ0MDA1MGItYzVkMS0z
MzhjLTlhNWEtZmQ0OTNlNzc2YmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HvIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJKMdW2WlE8mTMekx8FvnPnsqrZUJGTypfBCdDJcHCIUSi27jfz3Uc8
MbQ3l2gupFKVMAO0hGH/wkWV5Gqk3xLBJB1SUXTbWIju/FZIIKqxFS9ygyJCWm20
8lFTaB5MYdPdsnbcVlrEM5k663xvTDGDBt8j5ierqxJerVdc9Nckjm+gYuM/wxzb
1UANVHb9icQ8DEPBaOw3RJJnkfSAeA/WMcFcXKA4LK3osQG12Gs2nGlK9FvrhclI
qfCC0CT+V+gr9Zl/gjF7LaV+J4BJYtb7dcu8kEYy9PclWPlWMrc2zew8lUoLEDcX
aofT5rb+s/luthr4GY0k1w6FQGzULrw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:49 2025 by rpki-client