Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/7916e50c-664f-3512-92cb-34931aefe663.roa
File:                     7916e50c-664f-3512-92cb-34931aefe663.roa (raw, json)
Hash identifier:          Mwbx+yuF0UDwerN378zqJ0bF9s9VhLR2vC2fEqeJp4M=
Subject key identifier:   27:A2:DF:12:DF:F1:F9:50:FA:24:F1:E0:21:88:72:ED:27:B9:9A:2C
Certificate issuer:       /CN=741b6a9d-4a31-4062-8784-4f1a436ab121
Certificate serial:       010D0C9F4328584B583C812E6B5EE817014B0540
Authority key identifier: B3:FC:7F:0C:CA:DC:F9:E4:0E:B5:62:6C:EB:65:03:14:8C:02:CF:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/7916e50c-664f-3512-92cb-34931aefe663.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     400478
IP address blocks:        173.243.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:81:2e:6b:5e:e8:17:01:4b:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741b6a9d-4a31-4062-8784-4f1a436ab121
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=a9df6477-8dd3-4feb-9150-bb6c1e307abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:57:95:00:4e:10:69:b1:83:68:ab:14:f0:
                    74:fa:ae:69:6b:c7:bf:29:06:66:06:3c:f5:71:06:
                    e0:b9:df:c9:9a:97:d4:d6:e1:79:a6:0a:aa:94:8b:
                    5f:4d:75:04:ad:ec:2c:2f:73:29:be:fe:00:53:da:
                    06:e4:a3:b5:1b:30:e9:3e:42:b4:fd:3b:bd:f0:f6:
                    74:10:bc:e0:cb:e1:ff:64:63:58:43:25:d1:91:d9:
                    e4:5b:fc:2b:b4:88:71:02:b0:0f:af:cb:f2:10:43:
                    09:72:03:53:37:02:f3:dd:15:89:16:09:8d:6c:ea:
                    ee:27:2e:8a:a2:3d:2c:74:70:90:05:20:c5:52:2d:
                    ff:2f:1f:85:e7:38:e1:4a:df:90:84:5d:7a:ed:93:
                    1c:23:c2:ca:e7:78:c3:a9:27:3d:45:2e:7e:5f:5d:
                    84:51:1f:fd:e2:7e:53:f6:40:11:34:99:97:0e:2d:
                    cd:eb:f4:43:21:c6:61:7f:88:62:da:48:a2:66:05:
                    1f:2f:1b:b3:63:dd:12:fb:4b:5c:76:00:ae:c0:55:
                    d2:be:cb:3d:3e:2d:27:24:29:7e:22:7b:3f:c6:2a:
                    92:44:39:56:f3:d9:93:48:c2:1a:fd:43:06:7e:aa:
                    77:e0:98:a2:23:63:11:7c:c0:fc:50:09:34:7e:d1:
                    05:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A2:DF:12:DF:F1:F9:50:FA:24:F1:E0:21:88:72:ED:27:B9:9A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/7916e50c-664f-3512-92cb-34931aefe663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.crl

            X509v3 Authority Key Identifier:
                keyid:B3:FC:7F:0C:CA:DC:F9:E4:0E:B5:62:6C:EB:65:03:14:8C:02:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:35:23:c9:87:d4:b9:ec:72:ed:9e:6f:e3:cf:b8:70:cf:86:
         a1:32:ca:7b:7d:fb:69:cc:43:e3:79:df:05:e2:e8:32:97:e6:
         a6:72:af:58:d3:19:78:de:bf:66:20:05:7e:9a:ed:55:50:da:
         7f:ff:db:66:cb:33:0f:7a:32:8f:b7:ca:7e:ad:92:d5:3a:9f:
         03:88:60:9a:e7:6a:99:88:83:ae:cd:a8:5d:aa:74:47:4a:0b:
         b5:ff:de:0f:f1:4e:70:5d:ef:14:c1:9f:75:1a:0e:45:4a:19:
         42:fe:5b:9b:d2:b1:b9:59:34:5e:34:ff:0c:53:68:d5:98:87:
         e5:ce:58:47:d1:b9:c5:96:6a:b1:6f:de:cd:05:23:cd:e2:13:
         c1:d7:44:35:48:fb:7a:1a:f8:72:db:48:e7:da:8c:a5:41:2b:
         84:14:49:6a:65:3b:12:33:b8:28:a9:00:75:cc:99:8e:3f:5e:
         16:52:97:1e:3d:fa:a5:af:cf:fc:c9:2f:23:26:d6:56:ba:d6:
         d5:25:52:36:ff:53:03:77:b5:b7:a5:c8:ce:f0:86:ba:aa:c5:
         e9:a5:64:7d:43:69:f4:24:e8:89:a0:10:63:58:65:53:db:db:
         0a:ef:c7:92:61:38:82:fb:ba:ef:ba:dd:81:84:7a:50:7b:5f:
         65:41:b3:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIEua17oFwFLBUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQxYjZhOWQtNGEzMS00MDYyLTg3ODQtNGYxYTQzNmFi
MTIxMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
YTlkZjY0NzctOGRkMy00ZmViLTkxNTAtYmI2YzFlMzA3YWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3ZXlQBOEGmxg2irFPB0+q5pa8e/KQZmBjz1
cQbgud/JmpfU1uF5pgqqlItfTXUErewsL3Mpvv4AU9oG5KO1GzDpPkK0/Tu98PZ0
ELzgy+H/ZGNYQyXRkdnkW/wrtIhxArAPr8vyEEMJcgNTNwLz3RWJFgmNbOruJy6K
oj0sdHCQBSDFUi3/Lx+F5zjhSt+QhF167ZMcI8LK53jDqSc9RS5+X12EUR/94n5T
9kARNJmXDi3N6/RDIcZhf4hi2kiiZgUfLxuzY90S+0tcdgCuwFXSvss9Pi0nJCl+
Ins/xiqSRDlW89mTSMIa/UMGfqp34JiiI2MRfMD8UAk0ftEFEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCei3xLf8flQ+iTx4CGIcu0nuZosMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NDFi
NmE5ZC00YTMxLTQwNjItODc4NC00ZjFhNDM2YWIxMjEvNzkxNmU1MGMtNjY0Zi0z
NTEyLTkyY2ItMzQ5MzFhZWZlNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzQxYjZhOWQtNGEzMS00MDYyLTg3
ODQtNGYxYTQzNmFiMTIxLzc0MWI2YTlkLTRhMzEtNDA2Mi04Nzg0LTRmMWE0MzZh
YjEyMS5jcmwwHwYDVR0jBBgwFoAUs/x/DMrc+eQOtWJs62UDFIwCz08wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83NDFiNmE5ZC00YTMxLTQwNjItODc4NC00ZjFh
NDM2YWIxMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfPtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGs1I8mH1Lnscu2eb+PPuHDPhqEyynt9+2nMQ+N53wXi6DKX5qZyr1jT
GXjev2YgBX6a7VVQ2n//22bLMw96Mo+3yn6tktU6nwOIYJrnapmIg67NqF2qdEdK
C7X/3g/xTnBd7xTBn3UaDkVKGUL+W5vSsblZNF40/wxTaNWYh+XOWEfRucWWarFv
3s0FI83iE8HXRDVI+3oa+HLbSOfajKVBK4QUSWplOxIzuCipAHXMmY4/XhZSlx49
+qWvz/zJLyMm1la61tUlUjb/UwN3tbelyM7whrqqxemlZH1DafQk6ImgEGNYZVPb
2wrvx5JhOIL7uu+63YGEelB7X2VBs7I=
-----END CERTIFICATE-----
Generated at Wed Oct 22 03:10:37 2025 by rpki-client