Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa
File:                     aec344a8-4f5c-3241-ae81-d26a1958ad45.roa (raw, json)
Hash identifier:          7P5jYz95uZUq827bqEVYdoh9wfE8XlXuCtPBOq1VMcA=
Subject key identifier:   5D:0F:88:F5:8C:03:42:C4:31:A5:64:F1:7B:9F:87:03:7F:E0:03:41
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B6797960A4C4A133A463E2880
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     36492
IP address blocks:        64.9.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:96:0a:4c:4a:13:3a:46:3e:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=c9e81bd1-7d35-4c48-9421-c6836cc3163a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:4a:e2:b1:83:a2:38:d8:57:f9:84:be:f2:
                    92:0d:09:44:b4:2b:6f:80:42:d7:71:52:b5:4a:db:
                    49:9a:83:ef:91:d1:99:09:fc:5e:21:8c:4e:b9:db:
                    33:f3:86:71:64:f9:18:44:27:45:1b:d4:e6:98:8a:
                    9a:98:ea:09:4e:52:87:c5:6f:91:ca:8a:08:f5:3f:
                    ec:8c:59:11:3c:31:c8:4d:ef:7b:52:87:fb:c5:0e:
                    9f:dc:af:ef:64:20:4a:56:0f:3c:81:de:ee:8b:b3:
                    bc:0d:96:d1:93:72:a1:2d:a1:74:44:e7:65:df:18:
                    9d:68:b8:ef:f4:67:31:76:d9:f4:90:77:2e:66:1e:
                    5d:15:80:4a:ef:b9:14:22:76:1d:88:b4:29:bd:49:
                    79:73:08:14:62:e3:93:6e:13:24:38:18:c9:51:63:
                    8f:a7:6b:3f:3c:79:02:f3:50:75:16:75:9b:1b:1c:
                    8b:58:9a:38:3a:9d:a1:2a:3b:1d:3b:e4:b5:9f:37:
                    34:e3:83:c4:3f:51:0f:ad:87:38:4d:0e:2e:2c:41:
                    3c:1d:cb:e5:1b:6c:a7:e4:7e:a8:7e:d2:a6:8a:e2:
                    ab:54:0d:45:92:86:b9:46:77:9c:96:50:e9:a8:73:
                    57:9b:64:a1:e6:9b:90:31:2a:ef:53:a8:e1:10:9b:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:88:F5:8C:03:42:C4:31:A5:64:F1:7B:9F:87:03:7F:E0:03:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a4:84:b1:55:8e:44:e2:11:4e:52:9b:97:78:f9:ca:40:e9:
         dd:4d:ff:35:ea:42:6a:32:0a:51:90:2f:7c:5a:17:44:7b:09:
         9d:06:93:b0:5b:c1:be:d0:d8:c2:2b:67:40:9c:1b:00:fe:86:
         04:54:f6:1f:dc:eb:78:d8:65:75:13:ae:bb:46:0a:1c:8b:48:
         ea:79:85:cd:98:b6:ea:29:01:10:81:01:ed:6f:9c:b2:77:91:
         63:1a:f9:e2:26:53:59:5a:ea:21:52:df:6b:8e:24:51:0d:af:
         b2:7e:08:b7:9e:43:97:b3:88:4e:99:aa:4a:c5:a7:c6:b7:77:
         53:c1:d8:a6:4e:5d:2e:d5:4c:7e:03:77:d0:2e:d4:d4:40:37:
         fc:fc:68:f3:2a:25:33:e4:82:f9:ae:99:86:bc:9c:9d:e1:4e:
         ba:2b:c0:e3:aa:52:d6:2e:7e:c0:2e:ce:94:10:30:7e:1f:b5:
         60:94:f7:ba:35:cb:45:c5:0d:e0:4c:7c:a1:6d:c4:64:8b:33:
         27:fd:93:61:e5:48:91:53:d6:69:72:dc:65:a3:4d:5a:0b:c9:
         eb:86:ae:7e:b5:79:90:8f:99:46:f8:8a:c0:d0:d6:43:55:91:
         1f:ad:24:14:8e:4b:b9:58:1c:da:2d:7d:39:20:4d:44:4b:3f:
         26:be:a3:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl5YKTEoTOkY+KIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
YzllODFiZDEtN2QzNS00YzQ4LTk0MjEtYzY4MzZjYzMxNjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/NK4rGDojjYV/mEvvKSDQlEtCtvgELXcVK1
SttJmoPvkdGZCfxeIYxOudsz84ZxZPkYRCdFG9TmmIqamOoJTlKHxW+RyooI9T/s
jFkRPDHITe97Uof7xQ6f3K/vZCBKVg88gd7ui7O8DZbRk3KhLaF0ROdl3xidaLjv
9Gcxdtn0kHcuZh5dFYBK77kUInYdiLQpvUl5cwgUYuOTbhMkOBjJUWOPp2s/PHkC
81B1FnWbGxyLWJo4Op2hKjsdO+S1nzc044PEP1EPrYc4TQ4uLEE8HcvlG2yn5H6o
ftKmiuKrVA1Fkoa5RnecllDpqHNXm2Sh5puQMSrvU6jhEJtAVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0PiPWMA0LEMaVk8XufhwN/4ANBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYWVjMzQ0YTgtNGY1Yy0z
MjQxLWFlODEtZDI2YTE5NThhZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAnrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCkhLFVjkTiEU5Sm5d4+cpA6d1N/zXqQmoyClGQL3xaF0R7CZ0Gk7Bb
wb7Q2MIrZ0CcGwD+hgRU9h/c63jYZXUTrrtGChyLSOp5hc2YtuopARCBAe1vnLJ3
kWMa+eImU1la6iFS32uOJFENr7J+CLeeQ5eziE6ZqkrFp8a3d1PB2KZOXS7VTH4D
d9Au1NRAN/z8aPMqJTPkgvmumYa8nJ3hTrorwOOqUtYufsAuzpQQMH4ftWCU97o1
y0XFDeBMfKFtxGSLMyf9k2HlSJFT1mly3GWjTVoLyeuGrn61eZCPmUb4isDQ1kNV
kR+tJBSOS7lYHNotfTkgTURLPya+o7o=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:46 2025 by rpki-client