Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/a43b6838-d24b-37e6-b592-03308743668e.roa
File:                     a43b6838-d24b-37e6-b592-03308743668e.roa (raw, json)
Hash identifier:          U/F9fLEelzuvDgW2LoFIgzJssosdkJ+qHbaFtKicgI0=
Subject key identifier:   0B:B7:47:A4:EF:2B:2C:0B:E6:EC:DE:3C:6C:73:7E:9E:C3:C6:3D:AE
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584B76F2A1A75A18D54234276580
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/a43b6838-d24b-37e6-b592-03308743668e.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     26229
IP address blocks:        162.138.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:a1:a7:5a:18:d5:42:34:27:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=9ca71bd5-472d-4f9b-afb3-8a51ee13dca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:31:53:64:4c:ee:81:3e:85:65:f2:b1:c1:
                    c0:26:d5:85:82:f9:a4:cc:6e:a3:51:59:95:4e:c7:
                    64:30:4f:0b:ef:c0:97:18:b8:a5:3c:1a:a2:83:19:
                    08:ce:7b:65:d0:ab:23:40:33:ae:75:75:df:2c:a2:
                    58:cb:77:b5:60:41:47:1b:ac:e4:58:1d:27:12:fc:
                    c4:bd:b6:a6:0e:0c:3d:0e:5c:eb:44:62:1f:a6:7b:
                    bf:ab:e7:8d:1e:94:3a:fe:4d:fd:cf:f6:58:83:0a:
                    b0:70:7a:dd:1f:64:d6:55:be:02:d2:c6:09:8c:c1:
                    39:d1:40:18:b6:a3:2d:ec:5c:13:d0:6b:e4:db:f5:
                    d1:ca:61:89:d5:56:75:99:16:bc:99:b3:61:4b:3f:
                    37:2a:cd:fb:30:d3:f9:df:26:26:a6:0f:60:d6:b0:
                    ba:3d:b6:94:3e:42:07:fa:5e:d1:ac:36:d5:84:bc:
                    67:97:37:89:2c:51:90:51:cb:5b:22:3c:81:64:1b:
                    67:3d:1b:61:21:fd:fa:e7:62:97:16:17:4a:ba:84:
                    55:45:ac:98:ae:5e:14:35:c1:53:ad:37:f4:dc:41:
                    71:b0:1b:b5:20:fb:3a:7c:32:57:f6:20:72:c7:52:
                    d3:cf:83:90:67:ef:40:ab:8b:2c:31:28:74:ae:8f:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B7:47:A4:EF:2B:2C:0B:E6:EC:DE:3C:6C:73:7E:9E:C3:C6:3D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/a43b6838-d24b-37e6-b592-03308743668e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e5:72:06:1f:c7:fa:84:86:f4:ad:a4:c4:e0:f1:af:7a:be:
         52:b9:5d:d1:9f:25:bb:7c:af:3a:0e:81:68:a0:33:e5:80:3b:
         3e:89:db:0e:a2:11:cb:f7:49:dc:33:07:84:d8:f0:be:11:54:
         ef:f9:4b:75:82:db:cb:96:20:44:84:8e:d2:de:26:8a:17:33:
         c2:3c:31:55:9b:4f:e5:74:73:a8:3d:ce:fb:d9:a9:e6:53:60:
         ec:1b:c6:e2:d7:a1:6a:ec:78:c5:b2:b9:ff:58:b6:35:21:10:
         c1:7c:cc:a3:be:a8:56:f7:94:b0:60:62:85:11:e2:0d:c4:50:
         df:ad:44:52:a9:c5:c0:11:10:96:02:e5:38:c4:99:ed:70:94:
         8f:f5:8c:2b:e9:0d:36:74:d3:9a:da:b3:d4:ab:fc:a9:82:fc:
         8a:8e:79:58:20:fa:ea:7c:21:41:8c:d8:dc:b1:a8:1f:1b:65:
         d7:1e:c0:41:c6:96:25:6c:69:fb:98:bb:8e:ff:e0:10:b1:f6:
         6b:24:03:6d:44:32:38:4b:71:17:bc:e6:84:2c:44:1f:e3:ea:
         b6:95:54:66:f3:e5:0e:5b:75:e0:45:03:d0:59:b3:37:41:41:
         d0:05:48:be:be:06:20:2c:40:13:df:07:5a:69:66:09:4b:c4:
         b5:61:b8:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28qGnWhjVQjQnZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA5ZjllOGItOTMwNy00ZWIwLWJhNzctOWIxNDE2OWJi
ZWJhMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
OWNhNzFiZDUtNDcyZC00ZjliLWFmYjMtOGE1MWVlMTNkY2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGQxU2RM7oE+hWXyscHAJtWFgvmkzG6jUVmV
TsdkME8L78CXGLilPBqigxkIzntl0KsjQDOudXXfLKJYy3e1YEFHG6zkWB0nEvzE
vbamDgw9DlzrRGIfpnu/q+eNHpQ6/k39z/ZYgwqwcHrdH2TWVb4C0sYJjME50UAY
tqMt7FwT0Gvk2/XRymGJ1VZ1mRa8mbNhSz83Ks37MNP53yYmpg9g1rC6PbaUPkIH
+l7RrDbVhLxnlzeJLFGQUctbIjyBZBtnPRthIf3652KXFhdKuoRVRayYrl4UNcFT
rTf03EFxsBu1IPs6fDJX9iByx1LTz4OQZ+9Aq4ssMSh0ro+3WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAu3R6TvKywL5uzePGxzfp7Dxj2uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlm
OWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0MTY5YmJlYmEvYTQzYjY4MzgtZDI0Yi0z
N2U2LWI1OTItMDMzMDg3NDM2NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzA5ZjllOGItOTMwNy00ZWIwLWJh
NzctOWIxNDE2OWJiZWJhL2MwOWY5ZThiLTkzMDctNGViMC1iYTc3LTliMTQxNjli
YmViYS5jcmwwHwYDVR0jBBgwFoAU/ZKogq57090/RlGRmqMOn6kqGMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlmOWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0
MTY5YmJlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoorKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADblcgYfx/qEhvStpMTg8a96vlK5XdGfJbt8rzoOgWigM+WAOz6J2w6i
Ecv3SdwzB4TY8L4RVO/5S3WC28uWIESEjtLeJooXM8I8MVWbT+V0c6g9zvvZqeZT
YOwbxuLXoWrseMWyuf9YtjUhEMF8zKO+qFb3lLBgYoUR4g3EUN+tRFKpxcAREJYC
5TjEme1wlI/1jCvpDTZ005ras9Sr/KmC/IqOeVgg+up8IUGM2NyxqB8bZdcewEHG
liVsafuYu47/4BCx9mskA21EMjhLcRe85oQsRB/j6raVVGbz5Q5bdeBFA9BZszdB
QdAFSL6+BiAsQBPfB1ppZglLxLVhuFc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:40 2025 by rpki-client