Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/96e0cb0e-2194-3606-ba20-c6b4a42b98c2.roa
File:                     96e0cb0e-2194-3606-ba20-c6b4a42b98c2.roa (raw, json)
Hash identifier:          T/l7i74iIiDkelC7CVEP/udcB5wjPrBhF5C4sKfFmV4=
Subject key identifier:   73:88:3C:1E:F2:3D:3A:0A:AD:85:E4:1A:73:81:37:2B:22:9C:80:D5
Certificate issuer:       /CN=f42ba754-2a4d-4b4e-b364-698af500fc82
Certificate serial:       010D0C9F4328584B76F2587E490F8DB87FF03F60
Authority key identifier: 7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/96e0cb0e-2194-3606-ba20-c6b4a42b98c2.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     396982
IP address blocks:        168.100.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:58:7e:49:0f:8d:b8:7f:f0:3f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42ba754-2a4d-4b4e-b364-698af500fc82
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=dc78d539-6906-4952-ad37-6d17d1fe8f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bf:5e:90:98:25:f8:66:9c:45:c5:92:db:5f:
                    eb:b0:0b:f5:1b:bb:c7:50:69:8d:f5:f3:3f:d3:15:
                    66:a5:5c:21:62:5a:17:5e:27:91:46:33:c8:c9:09:
                    e3:44:44:1f:9e:d3:8e:a7:8a:57:74:d8:b6:3b:c2:
                    0d:b7:c9:c1:4d:9e:4b:3d:cf:20:ea:b1:b5:98:ea:
                    47:d2:d1:ab:e5:83:c2:47:cb:07:bb:3f:76:63:89:
                    73:a2:80:8f:89:0d:99:4c:62:1d:09:ba:74:bc:37:
                    cb:f7:27:b2:3b:3e:40:9e:8c:2b:b2:13:37:89:81:
                    0a:7e:c4:7d:44:69:d3:7f:32:07:8f:ff:7f:01:3d:
                    a0:09:e3:95:10:9b:40:d9:11:29:35:f1:da:37:00:
                    e2:75:47:35:43:55:2a:4d:1a:7b:18:8b:cf:96:a4:
                    93:cd:07:3b:d9:18:ac:51:c1:00:91:42:74:55:77:
                    51:63:6f:c0:3c:de:a6:d6:ba:f7:a8:41:d5:37:85:
                    c4:67:76:41:0c:34:9a:8c:f4:4a:24:e1:a4:cb:80:
                    02:b9:1b:0e:16:ae:32:3b:03:8b:a3:0a:5d:1a:af:
                    50:9f:1c:26:26:21:11:76:97:7f:2a:f2:13:6d:da:
                    a5:7a:a2:88:53:b6:49:ae:1e:ae:24:03:1a:75:76:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:88:3C:1E:F2:3D:3A:0A:AD:85:E4:1A:73:81:37:2B:22:9C:80:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/96e0cb0e-2194-3606-ba20-c6b4a42b98c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl

            X509v3 Authority Key Identifier:
                keyid:7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8f:64:6d:99:fc:94:66:ab:7c:49:79:06:14:5e:77:7c:98:
         06:47:42:5d:40:74:1f:e8:7d:59:a2:78:51:6a:09:09:db:6f:
         08:38:c4:0b:5a:22:65:a5:3a:3b:61:42:6e:58:0a:89:33:fb:
         27:ee:b3:20:15:20:00:07:1f:46:92:2e:6c:04:cc:b1:ba:2d:
         6f:85:a5:50:fa:29:9e:35:98:c9:7d:93:9c:28:28:8d:c0:aa:
         58:ca:76:e4:22:76:b4:3f:8f:46:0b:0b:fa:fe:d6:0d:9f:2e:
         b3:f7:a9:ae:f1:44:fb:0e:06:d2:76:26:a6:d9:65:99:c9:73:
         d7:27:e1:36:53:89:da:c7:89:64:cd:71:d1:fb:80:84:02:52:
         e1:7e:fb:1f:61:30:d0:c5:82:96:17:59:a4:be:ef:a8:7a:b9:
         79:64:3f:a9:2e:c3:d8:17:3c:2c:51:c3:a9:9d:44:02:7f:bf:
         67:b5:2e:0a:18:d9:8c:50:fb:38:a0:0c:e9:c6:0e:0e:a9:03:
         5a:13:3a:33:70:d7:58:03:19:66:ac:2d:b5:14:5b:37:92:d6:
         ec:11:b9:c9:d0:9a:72:37:16:13:c8:7f:6e:09:03:48:1d:b4:
         6f:7b:a1:d8:10:98:b1:01:01:ef:1e:d3:38:b7:5f:f3:5f:c8:
         2e:6e:7d:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lh+SQ+NuH/wP2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQyYmE3NTQtMmE0ZC00YjRlLWIzNjQtNjk4YWY1MDBm
YzgyMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
ZGM3OGQ1MzktNjkwNi00OTUyLWFkMzctNmQxN2QxZmU4ZjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb9ekJgl+GacRcWS21/rsAv1G7vHUGmN9fM/
0xVmpVwhYloXXieRRjPIyQnjREQfntOOp4pXdNi2O8INt8nBTZ5LPc8g6rG1mOpH
0tGr5YPCR8sHuz92Y4lzooCPiQ2ZTGIdCbp0vDfL9yeyOz5AnowrshM3iYEKfsR9
RGnTfzIHj/9/AT2gCeOVEJtA2REpNfHaNwDidUc1Q1UqTRp7GIvPlqSTzQc72Ris
UcEAkUJ0VXdRY2/APN6m1rr3qEHVN4XEZ3ZBDDSajPRKJOGky4ACuRsOFq4yOwOL
owpdGq9QnxwmJiERdpd/KvITbdqleqKIU7ZJrh6uJAMadXZU9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOIPB7yPToKrYXkGnOBNysinIDVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mNDJi
YTc1NC0yYTRkLTRiNGUtYjM2NC02OThhZjUwMGZjODIvOTZlMGNiMGUtMjE5NC0z
NjA2LWJhMjAtYzZiNGE0MmI5OGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjQyYmE3NTQtMmE0ZC00YjRlLWIz
NjQtNjk4YWY1MDBmYzgyL2Y0MmJhNzU0LTJhNGQtNGI0ZS1iMzY0LTY5OGFmNTAw
ZmM4Mi5jcmwwHwYDVR0jBBgwFoAUfsLfJrmIxRGU87wsRBE0DcJaDAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mNDJiYTc1NC0yYTRkLTRiNGUtYjM2NC02OThh
ZjUwMGZjODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGT/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6PZG2Z/JRmq3xJeQYUXnd8mAZHQl1AdB/ofVmieFFqCQnbbwg4xAta
ImWlOjthQm5YCokz+yfusyAVIAAHH0aSLmwEzLG6LW+FpVD6KZ41mMl9k5woKI3A
qljKduQidrQ/j0YLC/r+1g2fLrP3qa7xRPsOBtJ2JqbZZZnJc9cn4TZTidrHiWTN
cdH7gIQCUuF++x9hMNDFgpYXWaS+76h6uXlkP6kuw9gXPCxRw6mdRAJ/v2e1LgoY
2YxQ+zigDOnGDg6pA1oTOjNw11gDGWasLbUUWzeS1uwRucnQmnI3FhPIf24JA0gd
tG97odgQmLEBAe8e0zi3X/NfyC5ufYY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:03 2025 by rpki-client