Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa
File:                     9a56588a-a022-38cf-a593-5622658a6eae.roa (raw, json)
Hash identifier:          ZuqzyS+15wri5gR3Rg3Bw4RIYt7tLN3u5DFRiSywHaw=
Subject key identifier:   3D:DA:8A:82:0E:E3:26:F6:7A:9B:5E:DC:5B:55:0B:EB:31:E0:6D:7C
Certificate issuer:       /CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e
Certificate serial:       010D0C9F4328584B4D11DDF08DE350BCE7A51B80
Authority key identifier: 68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     8075
IP address blocks:        207.229.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:dd:f0:8d:e3:50:bc:e7:a5:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=57693144-8760-43a6-b19f-63162fb3f0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:3a:ce:6e:ae:22:97:b0:c9:77:ea:d8:0a:
                    0f:2a:e3:82:cb:c7:d6:36:13:dc:24:5f:b7:de:c7:
                    ba:31:f0:2e:f2:e4:c6:cb:28:cb:ff:e0:f6:43:57:
                    a4:7d:d6:a2:7f:0f:79:96:df:20:8f:73:21:44:6e:
                    0c:aa:ca:ff:c8:16:ed:3d:52:49:ad:15:51:d5:45:
                    21:5a:45:40:68:1d:29:6d:c0:16:a1:eb:ef:b4:b9:
                    b4:1b:4c:ad:f7:23:63:7b:38:0d:13:d6:1e:97:04:
                    29:ca:7d:17:20:d8:a9:02:a2:d5:63:5d:ec:79:9a:
                    e5:bb:a4:53:95:24:04:57:6f:b4:4f:bd:bf:39:29:
                    47:17:7c:b2:78:5e:0b:c7:d2:64:9b:b7:de:b2:08:
                    79:82:c9:f8:d2:e3:67:e9:b5:6d:0a:6f:5b:54:5d:
                    f7:32:48:7f:f2:97:02:ad:36:98:10:a8:06:03:1b:
                    4d:4a:15:6b:b8:2e:f8:a6:5c:75:a1:37:45:89:bf:
                    02:2e:4b:b7:63:f9:12:92:1f:69:63:80:b0:6c:a5:
                    b9:0e:e5:4c:52:3e:62:eb:cb:a3:6b:9d:2f:cb:84:
                    f7:0c:a0:db:fc:57:bc:f8:b8:ee:b7:e9:8d:2b:03:
                    8b:90:4d:9b:4e:3b:15:98:59:e5:fc:4c:ee:6b:b4:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DA:8A:82:0E:E3:26:F6:7A:9B:5E:DC:5B:55:0B:EB:31:E0:6D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/9a56588a-a022-38cf-a593-5622658a6eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl

            X509v3 Authority Key Identifier:
                keyid:68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e4:3f:8b:59:94:ad:b6:4f:c9:25:ae:b1:ac:2d:e0:47:66:
         c5:c9:3d:ec:0b:18:e8:b9:b7:1b:4c:22:b7:b0:8c:54:01:22:
         f7:d4:65:70:a5:45:27:71:89:d9:6d:9b:ff:20:bd:b5:6b:9d:
         76:2a:7b:9a:44:5e:16:60:46:5d:c3:84:c6:9a:c2:94:1d:7b:
         c3:a7:07:ca:e2:7c:3a:13:9d:6a:31:19:31:90:5d:6e:6b:d0:
         46:52:b9:72:af:a5:7c:9c:89:47:79:be:a9:6d:20:16:6b:fd:
         5e:2c:59:e6:4e:5e:bd:92:85:d8:78:65:31:97:1c:5b:ba:81:
         4e:c2:54:bb:7f:81:04:39:43:b6:5f:cd:67:fb:98:6c:10:c4:
         77:b6:b7:b7:61:60:7f:86:91:db:e0:46:eb:78:57:f5:7e:5a:
         f7:e3:34:2a:e7:4f:74:17:e7:a0:bb:71:4f:31:f4:9e:bb:7b:
         99:5a:76:da:47:a9:47:7f:57:08:0b:fb:3c:c4:dc:8d:af:a3:
         9e:0c:7f:fc:c9:2a:62:09:f0:d5:90:f7:00:f6:1a:f5:3d:9e:
         97:2a:aa:7a:98:cb:85:9f:a3:6b:69:ae:da:59:22:4f:15:9c:
         7a:f8:c8:5d:95:47:a0:d2:07:45:6d:60:9c:d8:35:ea:92:d0:
         22:c0:65:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEd3wjeNQvOelG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUyZjNiNDItMmMxOS00MTQxLThkOGEtZmE4NGIzZDZh
NDllMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk
NTc2OTMxNDQtODc2MC00M2E2LWIxOWYtNjMxNjJmYjNmMGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RY6zm6uIpewyXfq2AoPKuOCy8fWNhPcJF+3
3se6MfAu8uTGyyjL/+D2Q1ekfdaifw95lt8gj3MhRG4Mqsr/yBbtPVJJrRVR1UUh
WkVAaB0pbcAWoevvtLm0G0yt9yNjezgNE9YelwQpyn0XINipAqLVY13seZrlu6RT
lSQEV2+0T72/OSlHF3yyeF4Lx9Jkm7fesgh5gsn40uNn6bVtCm9bVF33Mkh/8pcC
rTaYEKgGAxtNShVruC74plx1oTdFib8CLku3Y/kSkh9pY4CwbKW5DuVMUj5i68uj
a50vy4T3DKDb/Fe8+Ljut+mNKwOLkE2bTjsVmFnl/Ezua7SjEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3aioIO4yb2epte3FtVC+sx4G18MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJm
M2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0YjNkNmE0OWUvOWE1NjU4OGEtYTAyMi0z
OGNmLWE1OTMtNTYyMjY1OGE2ZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUyZjNiNDItMmMxOS00MTQxLThk
OGEtZmE4NGIzZDZhNDllL2E1MmYzYjQyLTJjMTktNDE0MS04ZDhhLWZhODRiM2Q2
YTQ5ZS5jcmwwHwYDVR0jBBgwFoAUaFJMWQoxo0Idq3/2fxcNn2S+QUowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJmM2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0
YjNkNmE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+V1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALHkP4tZlK22T8klrrGsLeBHZsXJPewLGOi5txtMIrewjFQBIvfUZXCl
RSdxidltm/8gvbVrnXYqe5pEXhZgRl3DhMaawpQde8OnB8rifDoTnWoxGTGQXW5r
0EZSuXKvpXyciUd5vqltIBZr/V4sWeZOXr2Shdh4ZTGXHFu6gU7CVLt/gQQ5Q7Zf
zWf7mGwQxHe2t7dhYH+GkdvgRut4V/V+WvfjNCrnT3QX56C7cU8x9J67e5ladtpH
qUd/VwgL+zzE3I2vo54Mf/zJKmIJ8NWQ9wD2GvU9npcqqnqYy4Wfo2tprtpZIk8V
nHr4yF2VR6DSB0VtYJzYNeqS0CLAZUo=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:31 2025 by rpki-client