Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436d5917-f698-304c-8338-7083f826a771.roa
File:                     436d5917-f698-304c-8338-7083f826a771.roa (raw, json)
Hash identifier:          3K7dNK4SEThToedw03Ds8Ie68OEOHxSohg0oy3om5oU=
Subject key identifier:   E6:91:16:FF:41:07:8D:DD:78:75:4A:0F:2D:BD:42:58:25:19:81:0C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B2FC1A25EB29E7A1DBC99D660
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436d5917-f698-304c-8338-7083f826a771.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     397223
IP address blocks:        198.133.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:a2:5e:b2:9e:7a:1d:bc:99:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=92b59e16-8631-4718-8d87-c7d54fb0619d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:3f:57:36:70:fc:a9:bc:c4:37:b2:ce:e0:
                    24:af:09:7f:8a:60:ad:28:1e:6b:e8:a3:bc:a0:68:
                    88:60:bb:68:48:15:7d:50:6e:15:bc:68:f9:bf:c0:
                    1d:4b:62:b9:b1:4f:bd:cd:05:5b:e6:af:61:76:32:
                    65:d9:5b:fc:6a:0d:b5:f1:04:d1:e1:6a:6f:b7:e8:
                    5f:49:a0:1a:50:ad:8d:10:64:a9:86:47:a1:b2:ad:
                    5d:ec:b5:63:95:b8:09:3b:bf:fb:54:6e:43:9a:08:
                    76:51:ff:b5:e8:15:18:e9:9d:9a:a6:46:d0:c2:e5:
                    fb:18:e6:08:ca:b0:d6:c9:f5:ba:fc:11:61:70:ac:
                    f6:93:cc:7f:94:02:ca:0d:49:85:6b:4c:29:ff:7e:
                    48:73:ee:65:ae:3f:36:f4:0c:5c:0a:63:82:ab:78:
                    69:ff:ee:90:02:a7:ee:e4:6b:67:ad:e6:a5:f8:a0:
                    e8:56:dc:b5:f6:af:62:d2:84:24:eb:4c:cc:74:65:
                    5c:8f:a1:58:4f:55:11:91:ad:18:3c:98:0a:58:e6:
                    2f:9e:d0:4a:4a:31:50:ea:66:da:89:f0:3c:d9:39:
                    26:33:36:4f:e4:ed:87:66:15:b8:d8:ca:4a:44:28:
                    7d:5c:a2:b8:1b:fd:e1:0f:7a:80:0a:7e:7e:8f:58:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:91:16:FF:41:07:8D:DD:78:75:4A:0F:2D:BD:42:58:25:19:81:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/436d5917-f698-304c-8338-7083f826a771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b1:46:b4:01:23:2b:10:8c:41:b2:88:ed:7d:c0:79:50:be:
         81:6d:ac:67:80:eb:e5:ae:91:6e:87:57:7d:51:d8:fc:52:cc:
         f3:2c:87:27:a4:69:91:af:78:47:71:a7:3f:74:0c:98:88:db:
         fe:c0:3b:84:bc:10:ea:f0:07:a7:47:80:13:45:b8:73:08:f8:
         4a:98:cf:a7:cc:db:3e:f2:24:75:a3:05:c6:e9:39:a5:d3:ef:
         84:94:64:9a:8d:1f:22:67:33:46:a5:b3:4b:44:d7:dd:2a:54:
         a3:83:55:dd:a4:92:9b:c5:4a:87:b1:19:09:21:5f:cf:ca:76:
         53:3e:04:4b:5e:5f:2f:d6:9b:bf:4c:23:25:c8:fb:cd:a4:1e:
         bc:7c:d3:3c:50:6d:a4:1a:45:36:16:1a:bf:74:69:f6:da:cf:
         86:32:02:d6:fb:13:1b:d0:46:28:1d:dd:46:a9:89:25:36:f3:
         16:7b:5d:0e:29:c5:7c:d9:3a:31:f7:2f:b8:85:bf:72:13:40:
         76:f7:8d:42:f7:d9:04:54:45:50:8b:0b:2a:a6:6c:8b:57:4e:
         78:1f:ea:f8:9e:d7:78:b9:0e:bf:b9:41:31:81:81:95:dd:be:
         a7:8b:4c:b8:88:fb:5b:9f:0c:7c:10:a1:b4:e7:0a:b0:09:81:
         0f:2d:81:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwaJesp56HbyZ1mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk
OTJiNTllMTYtODYzMS00NzE4LThkODctYzdkNTRmYjA2MTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsg/VzZw/Km8xDeyzuAkrwl/imCtKB5r6KO8
oGiIYLtoSBV9UG4VvGj5v8AdS2K5sU+9zQVb5q9hdjJl2Vv8ag218QTR4Wpvt+hf
SaAaUK2NEGSphkehsq1d7LVjlbgJO7/7VG5Dmgh2Uf+16BUY6Z2apkbQwuX7GOYI
yrDWyfW6/BFhcKz2k8x/lALKDUmFa0wp/35Ic+5lrj829AxcCmOCq3hp/+6QAqfu
5Gtnreal+KDoVty19q9i0oQk60zMdGVcj6FYT1URka0YPJgKWOYvntBKSjFQ6mba
ifA82TkmMzZP5O2HZhW42MpKRCh9XKK4G/3hD3qACn5+j1hC6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOaRFv9BB43deHVKDy29QlglGYEMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDM2ZDU5MTctZjY5OC0z
MDRjLTgzMzgtNzA4M2Y4MjZhNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGxRrQBIysQjEGyiO19wHlQvoFtrGeA6+WukW6HV31R2PxSzPMshyek
aZGveEdxpz90DJiI2/7AO4S8EOrwB6dHgBNFuHMI+EqYz6fM2z7yJHWjBcbpOaXT
74SUZJqNHyJnM0als0tE190qVKODVd2kkpvFSoexGQkhX8/KdlM+BEteXy/Wm79M
IyXI+82kHrx80zxQbaQaRTYWGr90afbaz4YyAtb7ExvQRigd3UapiSU28xZ7XQ4p
xXzZOjH3L7iFv3ITQHb3jUL32QRURVCLCyqmbItXTngf6vie13i5Dr+5QTGBgZXd
vqeLTLiI+1ufDHwQobTnCrAJgQ8tgWc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:20 2025 by rpki-client