Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c8c40dc4-f034-3dd1-bff5-bee652818245.roa
File:                     c8c40dc4-f034-3dd1-bff5-bee652818245.roa (raw, json)
Hash identifier:          UTliSoA9XdD3tc3YyKSEIPRo6+VtyU7vMA9nyYIUAig=
Subject key identifier:   5A:8C:54:DD:50:0F:11:17:01:19:9D:C8:4F:7E:42:C0:D8:E6:49:57
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B67974CE02D14C7B20A8B6600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c8c40dc4-f034-3dd1-bff5-bee652818245.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     36492
IP address blocks:        64.9.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:4c:e0:2d:14:c7:b2:0a:8b:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=3a8a7954-a176-49b6-8625-d856c195817c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:97:6a:ec:51:1f:3e:f6:c3:0b:8b:97:cd:29:
                    58:65:cb:f6:da:37:46:01:6f:d2:5d:a8:dc:75:08:
                    fb:c3:43:a2:c8:12:14:64:09:de:87:4d:04:a1:7f:
                    b6:5b:b6:2f:ad:f3:73:43:91:ec:76:d7:30:9c:69:
                    f8:dc:af:9a:f5:31:49:87:6d:f3:2a:8e:bd:be:e7:
                    73:ea:c5:ff:8a:85:51:6b:be:2d:30:5d:71:94:cb:
                    69:dd:93:f6:55:c5:26:5b:bb:e4:b9:f5:63:fd:8a:
                    f4:99:f1:da:e4:92:f8:bf:b2:bd:11:9f:7f:0e:08:
                    ab:06:86:55:27:33:4f:c0:94:55:d9:af:d8:9a:99:
                    21:c6:19:24:8f:14:b6:0d:ac:f8:9b:82:21:68:87:
                    ba:24:bc:28:e3:fa:59:4b:1c:9f:74:7a:16:a0:fe:
                    03:04:a9:ca:9f:90:60:15:69:46:07:9f:04:0c:a1:
                    a4:2a:08:16:5b:54:9a:10:7b:93:0d:85:dd:2d:5e:
                    70:3b:0b:57:55:43:c2:ce:11:40:9a:2a:4d:33:7e:
                    ff:97:ab:d7:07:92:83:df:d5:c0:6a:5f:60:ff:10:
                    a4:06:a6:17:4f:64:6e:ea:80:d8:04:0d:f5:34:dc:
                    f4:0d:69:f2:9a:7b:be:b0:8e:e5:8a:7c:6e:cd:c9:
                    8f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8C:54:DD:50:0F:11:17:01:19:9D:C8:4F:7E:42:C0:D8:E6:49:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c8c40dc4-f034-3dd1-bff5-bee652818245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:76:2b:f9:23:79:bf:64:e9:c3:59:a3:76:a1:5f:85:06:d8:
         f1:2b:f7:28:b9:62:ab:1d:60:68:b5:49:34:a3:20:76:08:fd:
         e4:6a:eb:68:12:50:7f:9b:31:72:1a:80:74:7c:9b:17:27:ae:
         c9:36:6e:e5:82:4d:fe:0d:03:14:3b:c1:4b:c4:1a:4b:f7:cf:
         f7:da:54:07:24:5f:93:b7:67:74:30:fb:83:e6:ed:55:90:89:
         5c:3b:65:5f:c2:85:bf:f3:ff:27:ae:c1:db:27:4f:97:55:1a:
         21:ca:24:e9:ef:c3:45:99:16:bc:f2:ae:84:ac:2a:80:f4:f8:
         bd:aa:05:11:e2:ae:a8:72:ad:ab:31:19:79:98:a5:2a:91:5f:
         8b:20:eb:29:43:43:5a:66:80:20:af:9a:f0:8d:1f:5b:87:03:
         c0:b6:86:dc:03:c3:64:36:61:f4:03:cd:bb:62:d7:f5:0b:1d:
         8d:68:a0:d5:f0:33:f3:aa:d0:fa:06:a3:9e:fd:9c:32:3b:86:
         bb:8a:ee:58:bc:03:84:17:53:5c:9c:1f:69:55:d1:1d:ad:b5:
         51:73:7c:d7:5b:fb:bd:87:c2:d7:42:1f:bb:e5:15:0a:ea:dd:
         be:40:55:57:ef:d9:27:75:4c:af:d4:15:45:98:e3:bc:d9:ee:
         8a:d8:b1:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0zgLRTHsgqLZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
M2E4YTc5NTQtYTE3Ni00OWI2LTg2MjUtZDg1NmMxOTU4MTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZdq7FEfPvbDC4uXzSlYZcv22jdGAW/SXajc
dQj7w0OiyBIUZAneh00EoX+2W7YvrfNzQ5HsdtcwnGn43K+a9TFJh23zKo69vudz
6sX/ioVRa74tMF1xlMtp3ZP2VcUmW7vkufVj/Yr0mfHa5JL4v7K9EZ9/DgirBoZV
JzNPwJRV2a/YmpkhxhkkjxS2Daz4m4IhaIe6JLwo4/pZSxyfdHoWoP4DBKnKn5Bg
FWlGB58EDKGkKggWW1SaEHuTDYXdLV5wOwtXVUPCzhFAmipNM37/l6vXB5KD39XA
al9g/xCkBqYXT2Ru6oDYBA31NNz0DWnymnu+sI7linxuzcmPuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqMVN1QDxEXARmdyE9+QsDY5klXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYzhjNDBkYzQtZjAzNC0z
ZGQxLWJmZjUtYmVlNjUyODE4MjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAn+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAB2K/kjeb9k6cNZo3ahX4UG2PEr9yi5YqsdYGi1STSjIHYI/eRq62gS
UH+bMXIagHR8mxcnrsk2buWCTf4NAxQ7wUvEGkv3z/faVAckX5O3Z3Qw+4Pm7VWQ
iVw7ZV/Chb/z/yeuwdsnT5dVGiHKJOnvw0WZFrzyroSsKoD0+L2qBRHirqhyrasx
GXmYpSqRX4sg6ylDQ1pmgCCvmvCNH1uHA8C2htwDw2Q2YfQDzbti1/ULHY1ooNXw
M/Oq0PoGo579nDI7hruK7li8A4QXU1ycH2lV0R2ttVFzfNdb+72HwtdCH7vlFQrq
3b5AVVfv2Sd1TK/UFUWY47zZ7orYsbo=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:43 2025 by rpki-client