Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5a66c245-1026-3b1c-b93a-be33fd9c87c4.roa
File:                     5a66c245-1026-3b1c-b93a-be33fd9c87c4.roa (raw, json)
Hash identifier:          0/WdtNR4OuDTztbgcy5WkVLpGCr8SB2NhJEdcYHGLQ8=
Subject key identifier:   24:82:92:C4:42:F5:C0:1A:CA:66:0A:5B:C2:8B:73:0D:A9:EA:BC:C7
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584B434CA68C0014548C5B151200
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5a66c245-1026-3b1c-b93a-be33fd9c87c4.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     26930
IP address blocks:        208.99.44.0/24 maxlen: 24
                          209.151.125.0/24 maxlen: 24
                          2602:fa7c:10::/44 maxlen: 44
                          2602:fa7c:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:a6:8c:00:14:54:8c:5b:15:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=0e57d98e-9711-4d93-ac7f-7cea420dd365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:59:4e:e5:f8:6b:64:8b:3a:c1:18:ab:20:
                    d5:16:02:3d:74:e4:b1:18:3f:ac:c9:8e:24:11:2f:
                    ed:8a:6e:fb:f7:89:00:4c:e7:5b:a1:fe:93:00:13:
                    68:57:d2:ba:e2:f6:57:a4:97:bf:e2:49:84:53:bb:
                    a7:56:84:6d:dd:73:4b:cf:e0:b0:90:0b:6f:80:ea:
                    12:ef:b3:20:34:d4:ca:bf:1e:b6:ca:cc:f3:11:00:
                    56:3f:66:58:84:d6:7b:08:ab:dc:ac:ba:bf:6b:70:
                    ad:c9:23:69:7f:4e:d8:08:3f:f8:d6:f1:18:76:09:
                    8b:92:1f:10:84:b6:40:aa:b7:e4:ed:2e:b5:04:cb:
                    97:0a:41:12:99:7d:b1:24:94:48:35:81:7e:80:aa:
                    89:64:77:d0:20:08:d9:ca:8f:0f:f1:6c:ea:6e:8f:
                    cd:4c:3a:6a:a3:8a:cf:92:3c:a0:4f:b3:d6:09:59:
                    07:97:e6:f7:62:27:e3:38:03:b9:90:25:ec:00:0f:
                    55:cd:a3:e9:cd:a7:a3:75:c3:74:83:8e:cc:5b:14:
                    ff:63:7d:12:8d:85:d7:79:29:23:f9:26:ce:3d:07:
                    f8:56:c7:5f:09:6c:e4:36:ab:8a:29:41:b4:8a:51:
                    22:42:fa:8c:61:97:82:5a:5e:97:65:b0:9a:5f:0f:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:82:92:C4:42:F5:C0:1A:CA:66:0A:5B:C2:8B:73:0D:A9:EA:BC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5a66c245-1026-3b1c-b93a-be33fd9c87c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.44.0/24
                  209.151.125.0/24
                IPv6:
                  2602:fa7c:10::/44
                  2602:fa7c:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c5:06:58:45:cc:4c:1e:71:28:0f:f2:cf:4e:e4:00:d0:fe:
         b7:2b:01:0b:17:42:56:a8:12:b5:b5:24:f4:a7:b8:22:89:2e:
         18:a7:e7:06:44:21:4c:33:f8:cd:c9:09:dc:d3:d8:59:84:72:
         e9:78:c9:26:97:08:a0:60:f1:14:d7:0b:88:b0:7d:aa:2e:a0:
         03:ab:1b:d9:e6:3e:10:3e:33:38:4a:a9:c7:19:ca:f8:9f:b8:
         43:61:7b:dc:8c:21:47:e4:dc:94:97:50:81:9e:33:f5:96:13:
         a0:23:df:46:dd:fc:63:d8:f9:be:2b:0f:ed:6d:cb:37:79:ca:
         96:92:fe:c5:1c:a3:f5:28:7d:45:96:68:55:ab:59:b4:10:1c:
         55:47:4e:89:15:e9:09:5f:dc:49:df:4f:68:a4:5f:d3:cf:8d:
         89:87:c3:57:dd:cd:9b:bb:c2:6e:c3:b7:79:89:43:a8:59:6f:
         c5:15:f8:65:3e:79:e0:4d:a3:4f:6c:24:5b:de:c2:bc:69:55:
         f7:e5:37:33:b8:5c:12:9e:aa:83:94:8f:ef:b0:a9:6b:93:96:
         f5:06:40:19:20:18:22:5e:80:ff:2a:76:87:6a:0b:f8:1b:5f:
         7c:93:03:61:7d:e4:93:37:e4:c8:e4:1e:c3:32:22:aa:e3:11:
         c8:08:7d:7b
-----BEGIN CERTIFICATE-----
MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWEtDTKaMABRUjFsVEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz
MmIzMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
MGU1N2Q5OGUtOTcxMS00ZDkzLWFjN2YtN2NlYTQyMGRkMzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq5ZTuX4a2SLOsEYqyDVFgI9dOSxGD+syY4k
ES/tim7794kATOdbof6TABNoV9K64vZXpJe/4kmEU7unVoRt3XNLz+CwkAtvgOoS
77MgNNTKvx62yszzEQBWP2ZYhNZ7CKvcrLq/a3CtySNpf07YCD/41vEYdgmLkh8Q
hLZAqrfk7S61BMuXCkESmX2xJJRINYF+gKqJZHfQIAjZyo8P8Wzqbo/NTDpqo4rP
kjygT7PWCVkHl+b3YifjOAO5kCXsAA9VzaPpzaejdcN0g47MWxT/Y30SjYXXeSkj
+SbOPQf4VsdfCWzkNquKKUG0ilEiQvqMYZeCWl6XZbCaXw9nsQIDAQABo4IDdDCC
A3AwHQYDVR0OBBYEFCSCksRC9cAaymYKW8KLcw2p6rzHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5
YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNWE2NmMyNDUtMTAyNi0z
YjFjLWI5M2EtYmUzM2ZkOWM4N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0
ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx
MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh
ZjhjMTMyYjMuY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQA0GMsAwQA
0Zd9MBcEAgACMBEDBwQmAvp8ABADBgAmAvp8ATBUBgNVHSABAf8ESjBIMEYGCCsG
AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291
cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCfxQZYRcxMHnEo
D/LPTuQA0P63KwELF0JWqBK1tST0p7giiS4Yp+cGRCFMM/jNyQnc09hZhHLpeMkm
lwigYPEU1wuIsH2qLqADqxvZ5j4QPjM4SqnHGcr4n7hDYXvcjCFH5NyUl1CBnjP1
lhOgI99G3fxj2Pm+Kw/tbcs3ecqWkv7FHKP1KH1FlmhVq1m0EBxVR06JFekJX9xJ
309opF/Tz42Jh8NX3c2bu8Juw7d5iUOoWW/FFfhlPnngTaNPbCRb3sK8aVX35Tcz
uFwSnqqDlI/vsKlrk5b1BkAZIBgiXoD/KnaHagv4G198kwNhfeSTN+TI5B7DMiKq
4xHICH17
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:35 2025 by rpki-client