Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9df4c3a6-9de6-3577-bfb6-ce4b8baedc0c.roa
File:                     9df4c3a6-9de6-3577-bfb6-ce4b8baedc0c.roa (raw, json)
Hash identifier:          73ZxAQc5Ctzbb3xHt9d/0qJSfDqaDyzp6lY4TA1MUGY=
Subject key identifier:   5F:9F:4F:BB:D1:BF:80:78:FE:7E:FD:44:15:13:59:67:0B:DF:6E:0F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B679766EC87838498ABAF2D20
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9df4c3a6-9de6-3577-bfb6-ce4b8baedc0c.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     36492
IP address blocks:        64.9.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:66:ec:87:83:84:98:ab:af:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=2a5ec9fc-cdf4-402b-a1fd-23776504d212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:71:b4:1b:9e:ea:c4:c6:ce:49:d7:4b:9c:
                    4d:38:4f:c4:b3:4f:e6:1d:8f:d5:ba:a5:39:7f:74:
                    6d:40:7f:d9:34:bc:2b:32:00:07:ef:92:a5:6a:94:
                    ce:ee:18:cd:03:d8:c5:2f:aa:fd:cf:ec:2f:c6:55:
                    41:a8:75:66:78:8e:14:fa:f5:d4:e6:4e:cf:34:14:
                    3d:72:98:a9:9d:6a:e0:84:49:74:93:0e:19:e7:54:
                    c4:76:cc:8b:9f:c0:03:00:c5:8a:af:83:d1:e9:b5:
                    4f:22:82:ae:3a:18:6c:c2:69:d1:38:a5:46:53:47:
                    25:f9:85:e8:9a:7b:1b:74:8f:c1:f6:2e:f5:6d:13:
                    3e:1a:6d:5e:43:84:3a:c4:a0:e0:e6:b8:ba:c6:61:
                    1a:4b:39:42:31:8f:31:81:1a:2e:c0:1e:1a:a2:d4:
                    a9:38:af:e3:3c:ff:4f:ef:c6:8f:5c:bf:ca:a6:bc:
                    ae:b1:ac:ac:2a:69:8a:3c:ce:af:e2:08:20:1e:db:
                    db:2d:10:d8:ca:d7:d3:0d:b9:08:fd:f5:2a:0b:ca:
                    bc:ca:f6:af:61:91:ee:58:b4:a0:d3:ea:14:6c:4e:
                    11:9f:de:20:e5:aa:d7:6f:9a:48:0f:d5:e4:6b:03:
                    fa:05:70:00:99:9b:fe:b0:f1:51:db:32:cc:16:9d:
                    44:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9F:4F:BB:D1:BF:80:78:FE:7E:FD:44:15:13:59:67:0B:DF:6E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9df4c3a6-9de6-3577-bfb6-ce4b8baedc0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:81:c9:bf:27:b9:46:81:c5:f1:c7:e7:ea:a9:b1:6d:db:7c:
         90:ce:08:b5:b9:f6:c4:69:40:ff:98:b4:ec:0d:33:6f:c2:bc:
         68:f9:6a:ae:cc:b5:55:d5:30:1d:b2:33:f7:04:25:cd:f4:58:
         45:7a:80:03:7b:c9:c1:46:78:65:17:c4:5b:66:e6:ef:d8:4c:
         f1:82:b2:31:26:1f:08:61:fc:44:09:1c:c9:ce:1b:bb:5b:08:
         e7:7c:7e:b2:b7:c5:2b:ee:b1:11:7a:0d:34:f3:65:db:af:8f:
         2c:d8:c3:bc:1b:bd:5e:f1:8a:1e:da:5c:3c:4e:3a:65:72:1c:
         a2:96:28:ee:d9:0b:88:f5:1d:c6:0c:47:d1:9f:27:bb:50:b9:
         f5:19:3e:7e:c3:34:fe:3f:b5:2d:e1:ab:9d:cf:4a:26:6a:b6:
         dd:4b:1d:40:72:27:c7:05:95:6f:91:9d:50:a8:a9:ec:1b:69:
         09:4c:0a:0d:cb:21:fe:d1:ef:0d:82:60:86:bc:68:9a:26:44:
         2a:e1:4d:39:18:bf:30:e1:9e:af:d7:e0:2a:1f:31:37:28:6c:
         c4:b4:ac:6c:55:de:bd:4c:be:31:c3:ab:ad:b6:ff:be:29:32:
         ec:01:68:c9:7d:29:6e:ee:0a:f2:e1:59:e6:10:ea:67:e4:8d:
         7e:d6:63:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl2bsh4OEmKuvLSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
MmE1ZWM5ZmMtY2RmNC00MDJiLWExZmQtMjM3NzY1MDRkMjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgtxtBue6sTGzknXS5xNOE/Es0/mHY/VuqU5
f3RtQH/ZNLwrMgAH75KlapTO7hjNA9jFL6r9z+wvxlVBqHVmeI4U+vXU5k7PNBQ9
cpipnWrghEl0kw4Z51TEdsyLn8ADAMWKr4PR6bVPIoKuOhhswmnROKVGU0cl+YXo
mnsbdI/B9i71bRM+Gm1eQ4Q6xKDg5ri6xmEaSzlCMY8xgRouwB4aotSpOK/jPP9P
78aPXL/KpryusaysKmmKPM6v4gggHtvbLRDYytfTDbkI/fUqC8q8yvavYZHuWLSg
0+oUbE4Rn94g5arXb5pID9XkawP6BXAAmZv+sPFR2zLMFp1EZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF+fT7vRv4B4/n79RBUTWWcL324PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvOWRmNGMzYTYtOWRlNi0z
NTc3LWJmYjYtY2U0YjhiYWVkYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAn3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGByb8nuUaBxfHH5+qpsW3bfJDOCLW59sRpQP+YtOwNM2/CvGj5aq7M
tVXVMB2yM/cEJc30WEV6gAN7ycFGeGUXxFtm5u/YTPGCsjEmHwhh/EQJHMnOG7tb
COd8frK3xSvusRF6DTTzZduvjyzYw7wbvV7xih7aXDxOOmVyHKKWKO7ZC4j1HcYM
R9GfJ7tQufUZPn7DNP4/tS3hq53PSiZqtt1LHUByJ8cFlW+RnVCoqewbaQlMCg3L
If7R7w2CYIa8aJomRCrhTTkYvzDhnq/X4CofMTcobMS0rGxV3r1MvjHDq622/74p
MuwBaMl9KW7uCvLhWeYQ6mfkjX7WY6Q=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:39 2025 by rpki-client