Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b2188f36-e13a-337b-8ee0-f7260f41812c.roa
File:                     b2188f36-e13a-337b-8ee0-f7260f41812c.roa (raw, json)
Hash identifier:          zv9UTA5ukpOK03BfP+ZJT372PqcqffH3Th1OjuhZqDI=
Subject key identifier:   25:93:CE:2C:04:3F:C6:FC:0A:B5:27:87:08:AB:8A:66:8A:A7:FD:A4
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584B328C50C66A3A16B25883F1C0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b2188f36-e13a-337b-8ee0-f7260f41812c.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     7862
IP address blocks:        146.23.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:50:c6:6a:3a:16:b2:58:83:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=e4c0c230-016f-4949-aafc-3895dc6d565a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:94:73:17:47:9e:f3:af:77:2d:47:8a:a8:
                    bc:2e:16:0c:2a:16:b4:40:28:20:b2:41:a4:c3:de:
                    92:e0:d6:89:34:23:64:c5:67:ec:2e:73:21:89:56:
                    f4:88:cf:4e:b6:8d:51:c4:3d:f0:e8:68:f7:6d:25:
                    68:86:ac:4b:bc:7b:8b:0f:54:03:fa:cb:07:57:f1:
                    49:23:fa:c7:df:07:c5:34:f7:ff:78:19:f5:6f:c5:
                    3c:f8:82:f5:93:14:03:cd:08:e4:a4:49:62:49:5b:
                    26:95:d4:af:c2:5c:9c:b5:dd:09:81:97:c4:4c:73:
                    5c:43:4d:9d:e1:8b:ad:73:fd:81:35:2a:3c:9f:42:
                    04:c9:cd:d8:91:16:ec:17:b5:dc:c2:90:c4:e6:f1:
                    2f:b1:e6:b1:ee:c4:52:19:27:4a:37:cf:37:8b:75:
                    ec:5c:62:cc:13:70:e1:20:a4:7e:30:a2:f4:0f:9b:
                    6a:2b:c9:2a:d9:3e:e1:bc:a1:d2:df:c8:1a:8e:f5:
                    27:20:93:46:bc:09:10:61:d3:94:91:f4:11:7f:ff:
                    ea:04:6e:3a:03:5e:3f:a6:cc:16:f1:fa:9a:71:48:
                    83:c2:1c:7a:d5:6c:94:60:f2:80:f5:37:4e:65:62:
                    09:2a:48:b5:f7:3d:f3:f2:81:57:e2:f7:18:89:f5:
                    66:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:CE:2C:04:3F:C6:FC:0A:B5:27:87:08:AB:8A:66:8A:A7:FD:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/b2188f36-e13a-337b-8ee0-f7260f41812c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:3a:76:cd:c0:a6:fc:c0:c1:89:a7:75:af:6c:6b:ab:0a:16:
         24:28:ee:3c:88:a4:14:6d:94:e4:1b:3a:54:bf:a8:09:16:b2:
         18:33:6a:14:86:d7:1f:9c:9e:1f:ed:47:08:6a:ba:cb:8c:5f:
         9b:35:83:33:12:f6:60:1b:fb:fa:50:0a:1f:6a:99:d8:07:1a:
         4a:90:68:98:e7:3c:80:de:d7:9b:44:9c:11:65:9f:f6:1a:52:
         35:0a:30:f4:69:fd:01:8e:72:28:bf:91:a3:61:19:84:24:32:
         8e:ad:63:1e:09:7f:8f:07:78:f1:b2:bf:e2:30:48:00:96:d0:
         6f:9a:80:a8:ae:d4:82:45:c9:53:c4:d7:5f:c5:1c:7d:5b:99:
         f9:64:e8:b9:2e:e9:86:aa:0f:08:8e:51:05:fc:02:51:ed:04:
         02:ee:7f:5c:73:1b:d6:ea:65:3b:ad:78:20:65:56:eb:00:a3:
         93:e8:49:05:3d:af:b2:87:00:44:d4:f8:3e:0b:09:87:e1:35:
         bb:c9:b8:6a:2d:bc:ae:48:32:1c:44:ed:ba:df:b1:88:bb:11:
         68:1f:be:bb:d0:63:0e:a1:ec:e0:9b:56:3f:f0:77:b5:b0:ef:
         52:90:f5:97:dc:e3:59:aa:5f:28:5e:1d:8b:80:eb:cc:a3:1b:
         b2:61:55:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjFDGajoWsliD8cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm
MmJkMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZTRjMGMyMzAtMDE2Zi00OTQ5LWFhZmMtMzg5NWRjNmQ1NjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywOUcxdHnvOvdy1Hiqi8LhYMKha0QCggskGk
w96S4NaJNCNkxWfsLnMhiVb0iM9Oto1RxD3w6Gj3bSVohqxLvHuLD1QD+ssHV/FJ
I/rH3wfFNPf/eBn1b8U8+IL1kxQDzQjkpEliSVsmldSvwlyctd0JgZfETHNcQ02d
4Yutc/2BNSo8n0IEyc3YkRbsF7XcwpDE5vEvseax7sRSGSdKN883i3XsXGLME3Dh
IKR+MKL0D5tqK8kq2T7hvKHS38gajvUnIJNGvAkQYdOUkfQRf//qBG46A14/pswW
8fqacUiDwhx61WyUYPKA9TdOZWIJKki19z3z8oFX4vcYifVmvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWTziwEP8b8CrUnhwirimaKp/2kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh
ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvYjIxODhmMzYtZTEzYS0z
MzdiLThlZTAtZjcyNjBmNDE4MTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz
ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi
ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz
MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJs6ds3ApvzAwYmnda9sa6sKFiQo7jyIpBRtlOQbOlS/qAkWshgzahSG
1x+cnh/tRwhqusuMX5s1gzMS9mAb+/pQCh9qmdgHGkqQaJjnPIDe15tEnBFln/Ya
UjUKMPRp/QGOcii/kaNhGYQkMo6tYx4Jf48HePGyv+IwSACW0G+agKiu1IJFyVPE
11/FHH1bmflk6Lku6YaqDwiOUQX8AlHtBALuf1xzG9bqZTuteCBlVusAo5PoSQU9
r7KHAETU+D4LCYfhNbvJuGotvK5IMhxE7brfsYi7EWgfvrvQYw6h7OCbVj/wd7Ww
71KQ9Zfc41mqXyheHYuA68yjG7JhVXU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:07:43 2025 by rpki-client