Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/b9b863f4-1e9b-35b6-856e-0def881a13c7.roa
File:                     b9b863f4-1e9b-35b6-856e-0def881a13c7.roa (raw, json)
Hash identifier:          vlXU4eT2faLIk39wmxUQEO8QYtaWHpRL1+t9yH/Y0vI=
Subject key identifier:   27:A3:A1:8E:E9:AF:AA:13:8F:3C:50:B1:9B:89:DB:17:4B:7B:E0:92
Certificate issuer:       /CN=589a84a2-f62d-414f-915d-810c9265e5de
Certificate serial:       010D0C9F4328584B8AA317A8F2542B3E9006AB90
Authority key identifier: 39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/b9b863f4-1e9b-35b6-856e-0def881a13c7.roa
Signing time:             Thu 16 Oct 2025 14:17:52 +0000
ROA not before:           Thu 16 Oct 2025 14:17:52 +0000
ROA not after:            Wed 14 Jan 2026 15:17:52 +0000
asID:                     204769
IP address blocks:        198.202.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:a3:17:a8:f2:54:2b:3e:90:06:ab:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589a84a2-f62d-414f-915d-810c9265e5de
        Validity
            Not Before: Oct 16 14:17:52 2025 GMT
            Not After : Jan 14 15:17:52 2026 GMT
        Subject: CN=7f73723e-e1f6-4a13-b750-fa25c5a377af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ba:f9:4b:6d:69:42:20:21:07:1c:81:24:6c:
                    52:69:5b:57:e1:69:1e:6f:ec:1b:77:40:41:fe:5d:
                    7f:33:30:92:3f:9c:86:26:57:70:8d:83:9e:53:40:
                    9f:fd:0e:89:d8:46:18:01:e6:48:da:74:68:75:85:
                    c4:d5:f7:23:b8:48:1f:5f:0f:d0:5a:17:bb:ee:9f:
                    56:e0:ff:40:a9:43:66:95:51:19:5f:76:6e:89:cc:
                    42:24:c4:7b:29:ac:3b:29:ef:a8:9b:34:53:76:c3:
                    c5:5b:98:76:fa:47:c1:25:10:5d:7c:fa:77:8e:34:
                    43:c7:4f:4c:5a:c4:f1:a0:53:23:e4:19:28:99:e6:
                    9d:85:51:b8:6d:9e:94:0e:3b:b6:1f:79:fd:5f:08:
                    ca:8e:34:8b:0b:d0:34:e5:f3:10:c0:4b:0c:a4:5b:
                    0a:89:74:c4:a2:56:d9:4c:7d:be:e0:0d:27:c2:c8:
                    31:84:99:ea:e6:05:d9:0a:b5:83:df:4c:f9:6a:a1:
                    a7:a6:bc:13:a2:52:c4:32:1c:3d:b2:32:ab:4b:80:
                    16:e4:04:28:ca:14:2d:fc:68:01:5e:e6:c5:46:a4:
                    9f:d1:9a:0d:15:03:ed:c5:2c:dd:13:b8:10:0e:0f:
                    d0:7c:8c:22:34:33:03:81:4d:6a:9e:c0:23:00:ec:
                    7d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A3:A1:8E:E9:AF:AA:13:8F:3C:50:B1:9B:89:DB:17:4B:7B:E0:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/b9b863f4-1e9b-35b6-856e-0def881a13c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl

            X509v3 Authority Key Identifier:
                keyid:39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:fb:33:41:5a:01:58:e1:d9:df:06:ab:88:29:54:82:ad:
         a3:9a:51:97:f1:c4:f9:6f:1e:0c:74:ac:d9:8f:13:ed:06:6c:
         7d:7a:c9:c6:24:0b:01:e5:39:37:2f:65:e1:a4:61:3c:40:d9:
         af:d0:06:a1:08:c1:20:ed:1a:fe:41:17:30:b6:dc:ba:9a:b9:
         62:72:87:e4:cc:69:be:10:f6:b3:5f:69:18:67:5e:72:20:b9:
         90:e8:37:11:4c:ca:c5:06:98:01:f7:f9:cd:53:20:da:48:1f:
         c6:eb:2d:ba:ef:0e:ea:8f:20:03:17:eb:07:2d:94:ca:da:2e:
         cc:fc:6e:84:06:31:b1:49:a6:17:12:a8:4b:31:2a:e9:28:b2:
         e7:17:04:ad:d3:2c:aa:b2:c0:c6:3c:a9:02:05:2c:a3:b7:d8:
         a8:53:72:38:b7:1e:6c:0f:77:96:90:f2:8a:d6:b7:32:cf:a4:
         ab:a2:9d:22:88:66:97:48:b9:d2:b9:55:7d:d7:4a:fc:d9:3b:
         dd:35:f9:7e:b1:2a:db:ee:ec:94:01:38:9a:6b:4b:93:52:4e:
         1a:b9:19:68:86:26:9d:d0:5a:f1:d9:7c:e5:bc:85:1f:8f:c8:
         96:a4:20:3d:a9:7e:67:10:55:c8:da:e6:91:64:6c:6c:62:ad:
         d5:2e:0d:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKoxeo8lQrPpAGq5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTg5YTg0YTItZjYyZC00MTRmLTkxNWQtODEwYzkyNjVl
NWRlMB4XDTI1MTAxNjE0MTc1MloXDTI2MDExNDE1MTc1MlowLzEtMCsGA1UEAxMk
N2Y3MzcyM2UtZTFmNi00YTEzLWI3NTAtZmEyNWM1YTM3N2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLr5S21pQiAhBxyBJGxSaVtX4Wkeb+wbd0BB
/l1/MzCSP5yGJldwjYOeU0Cf/Q6J2EYYAeZI2nRodYXE1fcjuEgfXw/QWhe77p9W
4P9AqUNmlVEZX3ZuicxCJMR7Kaw7Ke+omzRTdsPFW5h2+kfBJRBdfPp3jjRDx09M
WsTxoFMj5BkomeadhVG4bZ6UDju2H3n9XwjKjjSLC9A05fMQwEsMpFsKiXTEolbZ
TH2+4A0nwsgxhJnq5gXZCrWD30z5aqGnprwTolLEMhw9sjKrS4AW5AQoyhQt/GgB
XubFRqSf0ZoNFQPtxSzdE7gQDg/QfIwiNDMDgU1qnsAjAOx9wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCejoY7pr6oTjzxQsZuJ2xdLe+CSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlh
ODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBjOTI2NWU1ZGUvYjliODYzZjQtMWU5Yi0z
NWI2LTg1NmUtMGRlZjg4MWExM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg5YTg0YTItZjYyZC00MTRmLTkx
NWQtODEwYzkyNjVlNWRlLzU4OWE4NGEyLWY2MmQtNDE0Zi05MTVkLTgxMGM5MjY1
ZTVkZS5jcmwwHwYDVR0jBBgwFoAUOWNzekScrv/UWgulI7hgQzXGX1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODlhODRhMi1mNjJkLTQxNGYtOTE1ZC04MTBj
OTI2NWU1ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsqSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/9+zNBWgFY4dnfBquIKVSCraOaUZfxxPlvHgx0rNmPE+0GbH16ycYk
CwHlOTcvZeGkYTxA2a/QBqEIwSDtGv5BFzC23LqauWJyh+TMab4Q9rNfaRhnXnIg
uZDoNxFMysUGmAH3+c1TINpIH8brLbrvDuqPIAMX6wctlMraLsz8boQGMbFJphcS
qEsxKukosucXBK3TLKqywMY8qQIFLKO32KhTcji3HmwPd5aQ8orWtzLPpKuinSKI
ZpdIudK5VX3XSvzZO901+X6xKtvu7JQBOJprS5NSThq5GWiGJp3QWvHZfOW8hR+P
yJakID2pfmcQVcja5pFkbGxirdUuDUs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:17 2025 by rpki-client