Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa
File:                     f6720a31-8263-3bb2-b646-ce9236139a67.roa (raw, json)
Hash identifier:          wBR36qlZ8C95ka/GvRm8A0ynjneWhOaF1aqcrqOBzLU=
Subject key identifier:   FA:C3:BE:31:99:E2:F0:7C:0E:CF:0D:03:B5:B2:5E:A4:7B:11:56:B1
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584B89177CC79EF97B2B094092C0
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     26341
IP address blocks:        198.29.16.0/22 maxlen: 24
                          2602:f9e7:20::/45 maxlen: 48
                          2602:f9e7:28::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:7c:c7:9e:f9:7b:2b:09:40:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=bc57029c-749e-44b0-8274-35914749f18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6a:9b:e7:3e:28:b8:e2:b8:72:95:ed:e1:a0:
                    96:52:86:71:0a:c1:2d:f1:3d:10:63:ca:92:aa:58:
                    6e:b7:10:a1:d3:6e:07:79:e7:e8:f2:6f:2a:fa:22:
                    4e:a8:39:79:7d:28:0a:f6:db:d0:2f:4e:51:e2:54:
                    49:51:aa:00:92:d1:73:53:85:bc:31:f7:77:e8:ab:
                    48:18:5c:00:3b:4c:35:8a:e7:37:1e:f8:b5:7b:09:
                    e7:6b:5b:84:cc:e5:ce:20:01:c3:d1:ca:a7:ea:6f:
                    d0:f8:3b:ff:2c:9b:da:21:87:67:80:f9:dc:c4:03:
                    1c:00:3c:01:3e:06:3b:c2:fe:40:a0:b4:92:1c:28:
                    0c:fe:0a:c7:71:e6:f5:46:a2:03:2d:34:f5:18:b4:
                    d7:c4:b2:5d:06:81:f4:1c:6f:2c:63:d7:39:6f:3e:
                    60:96:63:89:0a:54:bd:36:88:b3:78:a7:f0:b1:20:
                    f5:7c:42:24:0c:cd:4b:28:fc:72:8f:4a:11:0a:f6:
                    ec:42:e4:93:21:0b:24:ac:f2:a6:2e:3e:3f:b0:58:
                    6c:53:d1:e0:5a:31:89:7c:e5:5f:43:3a:9f:e7:d8:
                    d5:98:4e:60:8d:09:d4:18:d6:e6:60:05:da:e0:68:
                    0a:e3:d0:6b:11:08:c4:85:14:e6:0b:12:16:bd:15:
                    8b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C3:BE:31:99:E2:F0:7C:0E:CF:0D:03:B5:B2:5E:A4:7B:11:56:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.29.16.0/22
                IPv6:
                  2602:f9e7:20::-2602:f9e7:2b:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7a:6b:d4:8e:42:fa:d2:26:fe:14:9a:01:82:6b:9d:b6:ea:
         b1:20:a8:0e:ec:59:bd:03:f5:54:25:69:be:37:6d:d6:20:3c:
         d4:84:bf:26:54:1f:ff:1c:fd:2d:5d:df:89:5b:a6:c9:08:cb:
         b3:d6:a8:3d:66:6e:07:db:52:6e:87:95:cf:8e:d9:02:26:8e:
         4b:06:14:bd:6b:c5:30:b0:f2:57:cc:90:94:40:71:bd:b3:af:
         9a:10:90:b2:bb:d6:be:bb:74:3b:90:31:fd:8c:30:77:12:86:
         3c:ec:e3:e7:cf:ef:a9:d9:b7:48:d5:c2:46:c0:54:e9:b7:eb:
         f1:08:5a:a1:4d:22:e5:25:54:b2:6e:7c:70:8b:80:7f:16:69:
         39:88:9e:1e:6e:29:50:af:68:9c:05:c0:0e:86:e5:c0:07:65:
         b3:89:a3:b6:0b:1a:f8:7e:80:fc:9d:be:37:ad:0c:e6:35:32:
         be:5e:55:d3:b2:15:15:f0:6a:fa:f8:a3:69:11:81:b1:0e:8a:
         25:e6:96:30:c7:62:92:1e:43:38:02:3b:a6:9e:30:d8:6a:d7:
         ba:90:8f:01:b0:bd:b0:bd:0d:4c:35:73:d6:e3:3a:9a:56:45:
         3e:4a:fe:a2:a3:7b:58:2a:86:ff:39:50:87:e5:80:aa:01:64:
         3f:bb:d1:a4
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEuJF3zHnvl7KwlAksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj
MzRmMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
YmM1NzAyOWMtNzQ5ZS00NGIwLTgyNzQtMzU5MTQ3NDlmMThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2qb5z4ouOK4cpXt4aCWUoZxCsEt8T0QY8qS
qlhutxCh024Heefo8m8q+iJOqDl5fSgK9tvQL05R4lRJUaoAktFzU4W8Mfd36KtI
GFwAO0w1iuc3Hvi1ewnna1uEzOXOIAHD0cqn6m/Q+Dv/LJvaIYdngPncxAMcADwB
PgY7wv5AoLSSHCgM/grHceb1RqIDLTT1GLTXxLJdBoH0HG8sY9c5bz5glmOJClS9
NoizeKfwsSD1fEIkDM1LKPxyj0oRCvbsQuSTIQskrPKmLj4/sFhsU9HgWjGJfOVf
Qzqf59jVmE5gjQnUGNbmYAXa4GgK49BrEQjEhRTmCxIWvRWLGQIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFPrDvjGZ4vB8Ds8NA7WyXqR7EVaxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw
ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvZjY3MjBhMzEtODI2My0z
YmIyLWI2NDYtY2U5MjM2MTM5YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm
OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy
YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm
NDZmMmMzNGYuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQCxh0QMBoE
AgACMBQwEgMHBSYC+ecAIAMHAiYC+ecAKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWemvUjkL60ib+FJoB
gmudtuqxIKgO7Fm9A/VUJWm+N23WIDzUhL8mVB//HP0tXd+JW6bJCMuz1qg9Zm4H
21Juh5XPjtkCJo5LBhS9a8UwsPJXzJCUQHG9s6+aEJCyu9a+u3Q7kDH9jDB3EoY8
7OPnz++p2bdI1cJGwFTpt+vxCFqhTSLlJVSybnxwi4B/Fmk5iJ4ebilQr2icBcAO
huXAB2WziaO2Cxr4foD8nb43rQzmNTK+XlXTshUV8Gr6+KNpEYGxDool5pYwx2KS
HkM4AjumnjDYate6kI8BsL2wvQ1MNXPW4zqaVkU+Sv6io3tYKob/OVCH5YCqAWQ/
u9Gk
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:29 2025 by rpki-client