Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa
File:                     a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa (raw, json)
Hash identifier:          vWLdHHn+BH/YLGeV5LabbAbRi+INcNh6yEHv7IkZkIk=
Subject key identifier:   76:38:A2:5B:1E:58:25:39:03:78:F5:A2:87:07:8E:78:9C:83:8F:AB
Certificate issuer:       /CN=5b6e9f9a-7abd-436e-8e96-c348829ba4e4
Certificate serial:       010D0C9F4328584B84E767B96EBB2A6273E54440
Authority key identifier: DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     8796
IP address blocks:        23.138.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:67:b9:6e:bb:2a:62:73:e5:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6e9f9a-7abd-436e-8e96-c348829ba4e4
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=f44e8ef3-1da7-431d-9cf7-a0c3d69b96f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:d7:82:26:d1:77:3c:f2:79:a2:ca:08:c4:
                    86:4e:4a:73:2c:e4:a0:45:cb:7b:cb:9b:8f:51:cc:
                    4a:f8:92:57:8f:4b:d7:be:a5:69:92:6b:b4:e6:b8:
                    d5:26:0e:68:66:43:23:da:60:03:18:e7:da:f2:cf:
                    a4:5f:ca:95:bc:cc:51:a4:f4:ba:24:f0:d7:1e:71:
                    4b:62:26:32:56:e0:6b:36:58:0e:5a:ed:6e:6a:a7:
                    b8:77:f9:fa:05:3f:16:8e:02:bc:8f:6a:52:71:c8:
                    56:6a:72:eb:dd:ca:83:16:1f:67:a9:31:ac:3f:fb:
                    b8:51:49:c6:0b:cd:29:13:5c:21:af:05:22:d3:6e:
                    36:c0:b0:99:c2:77:71:71:26:93:df:7d:b7:2f:9e:
                    51:d9:29:1a:90:b8:59:c5:37:ea:bb:f9:19:c6:b4:
                    47:c3:dd:ce:50:57:3d:31:61:c8:24:6f:f3:7b:41:
                    86:52:18:8b:c6:bf:1a:ae:ad:e3:60:3c:cd:23:05:
                    d3:56:44:a3:bb:d7:cb:0a:b8:5d:64:7c:de:ae:bb:
                    41:90:5a:a3:77:3c:bf:82:7c:29:1b:99:d9:97:40:
                    c6:13:d4:ac:b9:92:46:49:29:12:d4:ea:8c:94:50:
                    26:1e:24:16:03:6a:0c:33:c1:6e:61:0f:89:c8:8a:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:38:A2:5B:1E:58:25:39:03:78:F5:A2:87:07:8E:78:9C:83:8F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/a07fcfe2-387a-38d4-9215-6b0ae0692a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.crl

            X509v3 Authority Key Identifier:
                keyid:DF:BA:90:11:68:7D:78:42:10:D0:CC:12:3D:2F:23:FF:FF:B2:99:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b6e9f9a-7abd-436e-8e96-c348829ba4e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ab:54:b3:99:7d:09:0d:43:66:17:46:67:1e:ef:e3:1b:14:
         7d:12:ce:f7:05:62:c3:95:4e:62:c7:06:a5:1e:ec:4a:c0:df:
         a7:98:b3:3f:53:87:65:fd:c6:4f:c9:9a:c2:ba:58:e1:51:7d:
         3b:bc:8b:4e:92:85:00:b9:05:d8:80:21:68:7f:a1:93:45:c7:
         2d:2a:56:ee:ca:87:69:0b:6b:33:1a:c8:91:e6:1a:22:e4:51:
         1d:9e:1c:de:a4:6d:c6:4d:d5:7a:14:e5:25:34:7a:8f:f9:93:
         7c:95:4d:c7:9c:6b:c3:e9:81:c5:34:48:8b:d6:08:99:11:33:
         79:49:c5:c5:bf:a7:1c:94:d3:31:02:36:d8:35:ae:12:99:75:
         6c:8e:ff:31:fd:97:ce:76:be:1b:ca:6d:e3:67:28:54:cd:a3:
         ce:fe:fb:4a:be:ff:12:bb:7b:29:5d:a3:4f:74:59:af:10:e5:
         e3:f2:c3:5b:68:52:26:a7:9c:1b:cd:44:2c:69:9b:1b:04:7b:
         21:65:82:f1:2d:3a:e1:44:d4:ed:ba:dc:d5:11:dc:01:26:e2:
         a8:52:e9:cc:07:78:74:bb:71:2c:5d:ed:72:96:a6:f7:18:83:
         df:b6:11:6e:4e:59:13:0c:27:6a:e5:1c:4c:12:82:ee:2c:1d:
         84:f3:60:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52e5brsqYnPlREAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI2ZTlmOWEtN2FiZC00MzZlLThlOTYtYzM0ODgyOWJh
NGU0MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
ZjQ0ZThlZjMtMWRhNy00MzFkLTljZjctYTBjM2Q2OWI5NmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkXXgibRdzzyeaLKCMSGTkpzLOSgRct7y5uP
UcxK+JJXj0vXvqVpkmu05rjVJg5oZkMj2mADGOfa8s+kX8qVvMxRpPS6JPDXHnFL
YiYyVuBrNlgOWu1uaqe4d/n6BT8WjgK8j2pScchWanLr3cqDFh9nqTGsP/u4UUnG
C80pE1whrwUi0242wLCZwndxcSaT3323L55R2SkakLhZxTfqu/kZxrRHw93OUFc9
MWHIJG/ze0GGUhiLxr8arq3jYDzNIwXTVkSju9fLCrhdZHzerrtBkFqjdzy/gnwp
G5nZl0DGE9SsuZJGSSkS1OqMlFAmHiQWA2oMM8FuYQ+JyIqwPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHY4olseWCU5A3j1oocHjnicg4+rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81YjZl
OWY5YS03YWJkLTQzNmUtOGU5Ni1jMzQ4ODI5YmE0ZTQvYTA3ZmNmZTItMzg3YS0z
OGQ0LTkyMTUtNmIwYWUwNjkyYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWI2ZTlmOWEtN2FiZC00MzZlLThl
OTYtYzM0ODgyOWJhNGU0LzViNmU5ZjlhLTdhYmQtNDM2ZS04ZTk2LWMzNDg4Mjli
YTRlNC5jcmwwHwYDVR0jBBgwFoAU37qQEWh9eEIQ0MwSPS8j//+ymVYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy81YjZlOWY5YS03YWJkLTQzNmUtOGU5Ni1jMzQ4
ODI5YmE0ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4oMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJmrVLOZfQkNQ2YXRmce7+MbFH0SzvcFYsOVTmLHBqUe7ErA36eYsz9T
h2X9xk/JmsK6WOFRfTu8i06ShQC5BdiAIWh/oZNFxy0qVu7Kh2kLazMayJHmGiLk
UR2eHN6kbcZN1XoU5SU0eo/5k3yVTceca8PpgcU0SIvWCJkRM3lJxcW/pxyU0zEC
Ntg1rhKZdWyO/zH9l852vhvKbeNnKFTNo87++0q+/xK7eyldo090Wa8Q5ePyw1to
UiannBvNRCxpmxsEeyFlgvEtOuFE1O263NUR3AEm4qhS6cwHeHS7cSxd7XKWpvcY
g9+2EW5OWRMMJ2rlHEwSgu4sHYTzYA4=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:28 2025 by rpki-client