Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/8baf5e5a-1784-3ae5-9e0f-6928152b1e46.roa
File:                     8baf5e5a-1784-3ae5-9e0f-6928152b1e46.roa (raw, json)
Hash identifier:          jJ0YPmu1mKY/U8Ov1GpdZ+uc+n+hEySg8F+jHLZ6ooc=
Subject key identifier:   1F:69:90:05:3A:87:D6:D7:5F:65:3E:C1:7D:7E:B9:3B:FE:7A:7F:81
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584B8D97688E559AA75B71B5DF40
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/8baf5e5a-1784-3ae5-9e0f-6928152b1e46.roa
Signing time:             Fri 17 Oct 2025 15:41:45 +0000
ROA not before:           Fri 17 Oct 2025 15:41:45 +0000
ROA not after:            Thu 15 Jan 2026 16:41:45 +0000
asID:                     18526
IP address blocks:        206.125.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:97:68:8e:55:9a:a7:5b:71:b5:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Oct 17 15:41:45 2025 GMT
            Not After : Jan 15 16:41:45 2026 GMT
        Subject: CN=d10fa755-f7aa-445b-9ffa-8e3f8a38ad83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:01:82:c8:e6:4e:9d:9a:fe:09:6b:4c:ae:17:
                    30:9e:a3:f9:e2:14:53:e6:f4:12:1d:5a:d9:e1:64:
                    a4:77:2e:b6:75:23:20:4c:0f:fd:ce:8d:9c:98:a2:
                    d9:b7:74:ba:75:d5:35:ef:16:ba:fd:00:0b:4e:ec:
                    e4:73:c3:21:39:44:f8:71:b2:12:eb:31:11:6e:51:
                    7d:a5:49:af:21:bf:e1:87:a4:94:4d:52:f1:82:2c:
                    c2:0e:d2:79:2e:50:d0:39:33:64:fc:d8:fd:a4:0b:
                    e9:d7:53:45:fa:ae:e1:16:41:81:26:85:fc:6a:e8:
                    c9:2b:8f:d3:90:64:3a:72:1a:58:c9:fc:5b:e6:2e:
                    b7:6f:72:2c:98:4e:10:cd:d5:84:53:a6:a5:79:a3:
                    58:ea:d6:23:82:8c:46:3d:bd:a1:95:ea:2b:16:01:
                    a7:56:1e:47:5c:ba:bb:c5:8d:5a:90:b6:db:39:73:
                    5b:6e:b2:52:18:8f:8f:6b:ae:7c:02:0b:79:58:f9:
                    48:05:f7:5d:e8:52:40:19:35:9b:2d:c8:e0:31:a4:
                    8d:a8:51:0c:fb:48:bb:83:00:b1:34:7e:ae:7f:64:
                    44:e6:1a:8e:e9:b1:d6:bd:3c:f4:fb:96:2d:b1:2b:
                    27:c3:88:0a:da:64:ab:10:8c:92:f4:53:e4:43:75:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:69:90:05:3A:87:D6:D7:5F:65:3E:C1:7D:7E:B9:3B:FE:7A:7F:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/8baf5e5a-1784-3ae5-9e0f-6928152b1e46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.125.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:03:9d:7c:2b:2a:ab:e3:de:36:87:7b:95:e6:fc:c1:2a:e1:
         8e:7d:fd:9a:61:05:63:37:bc:04:44:23:39:c7:d0:81:29:6a:
         9c:eb:22:5e:46:12:ba:ce:57:ae:3d:37:cb:6a:53:0e:82:dc:
         8b:51:7d:0e:f3:5c:17:69:06:f8:4c:3e:91:c2:60:68:a0:77:
         49:57:a4:84:3d:10:1a:87:95:f2:c8:d9:b2:76:c8:7e:37:61:
         b9:38:30:62:86:86:76:47:2b:17:44:e4:9d:4b:5c:1b:9c:0e:
         60:8a:c8:d5:8a:33:2e:35:b9:4a:8f:e0:b4:bc:b3:d3:f0:f5:
         f5:f2:92:06:c0:17:79:7c:03:4c:56:ed:43:ee:59:24:75:96:
         93:1f:47:93:c0:6e:45:fc:dc:b9:5e:78:d3:38:aa:37:bb:46:
         3f:cb:a7:1d:a7:d1:1d:20:d1:d5:02:e4:b3:7e:08:ec:a8:f6:
         b3:ed:10:0c:8f:0f:ea:66:72:f6:02:7d:98:96:a9:a3:3f:fe:
         1a:7d:9b:31:1a:6a:6a:85:41:8f:0a:50:b8:f6:23:e8:be:64:
         68:5d:36:82:1e:ee:63:b0:4e:66:74:94:05:79:d4:fa:ac:d6:
         d5:42:92:f8:17:9d:3d:e4:66:24:b5:b3:0e:6d:5e:a8:c3:90:
         ce:45:ab:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNl2iOVZqnW3G130AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2YTEzYTItZmJmYi00OWVkLTg5YzMtMjMzYzc0NWZm
YTUyMB4XDTI1MTAxNzE1NDE0NVoXDTI2MDExNTE2NDE0NVowLzEtMCsGA1UEAxMk
ZDEwZmE3NTUtZjdhYS00NDViLTlmZmEtOGUzZjhhMzhhZDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wGCyOZOnZr+CWtMrhcwnqP54hRT5vQSHVrZ
4WSkdy62dSMgTA/9zo2cmKLZt3S6ddU17xa6/QALTuzkc8MhOUT4cbIS6zERblF9
pUmvIb/hh6SUTVLxgizCDtJ5LlDQOTNk/Nj9pAvp11NF+q7hFkGBJoX8aujJK4/T
kGQ6chpYyfxb5i63b3IsmE4QzdWEU6aleaNY6tYjgoxGPb2hleorFgGnVh5HXLq7
xY1akLbbOXNbbrJSGI+Pa658Agt5WPlIBfdd6FJAGTWbLcjgMaSNqFEM+0i7gwCx
NH6uf2RE5hqO6bHWvTz0+5YtsSsnw4gK2mSrEIyS9FPkQ3V/gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB9pkAU6h9bXX2U+wX1+uTv+en+BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjZh
MTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNjNzQ1ZmZhNTIvOGJhZjVlNWEtMTc4NC0z
YWU1LTllMGYtNjkyODE1MmIxZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjI2YTEzYTItZmJmYi00OWVkLTg5
YzMtMjMzYzc0NWZmYTUyLzIyNmExM2EyLWZiZmItNDllZC04OWMzLTIzM2M3NDVm
ZmE1Mi5jcmwwHwYDVR0jBBgwFoAUN5551oIyh9VQnzmjJFrhIZTZyhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjZhMTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNj
NzQ1ZmZhNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn2vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANIDnXwrKqvj3jaHe5Xm/MEq4Y59/ZphBWM3vAREIznH0IEpapzrIl5G
ErrOV649N8tqUw6C3ItRfQ7zXBdpBvhMPpHCYGigd0lXpIQ9EBqHlfLI2bJ2yH43
Ybk4MGKGhnZHKxdE5J1LXBucDmCKyNWKMy41uUqP4LS8s9Pw9fXykgbAF3l8A0xW
7UPuWSR1lpMfR5PAbkX83LleeNM4qje7Rj/Lpx2n0R0g0dUC5LN+COyo9rPtEAyP
D+pmcvYCfZiWqaM//hp9mzEaamqFQY8KULj2I+i+ZGhdNoIe7mOwTmZ0lAV51Pqs
1tVCkvgXnT3kZiS1sw5tXqjDkM5Fq8A=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:25 2025 by rpki-client