Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/a46a5019-45f7-33ff-9de9-c648231809f5.roa
File:                     a46a5019-45f7-33ff-9de9-c648231809f5.roa (raw, json)
Hash identifier:          kIFKhYvYOKGlqh315q/eZcS8obbkP0q5ycsRI0Hg4M8=
Subject key identifier:   6B:F9:04:9B:C8:23:A4:C0:EF:44:3A:91:B1:E6:BF:E4:BB:38:9A:AA
Certificate issuer:       /CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
Certificate serial:       010D0C9F4328584F4C3D673B3F000EDFB74C4B40
Authority key identifier: B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/a46a5019-45f7-33ff-9de9-c648231809f5.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     49544
IP address blocks:        203.132.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:67:3b:3f:00:0e:df:b7:4c:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=66b5e183-8260-48f5-99dc-239de3e903a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:80:1c:45:97:a0:18:34:b4:68:4e:94:4c:
                    1c:0c:4d:9b:aa:5e:d3:a1:ef:65:de:ca:6a:ca:49:
                    08:7f:f7:0f:52:7b:cd:37:86:0a:a2:f0:62:b6:cc:
                    57:33:f9:5c:a7:3c:f3:dd:44:08:64:e4:37:91:cb:
                    31:a0:75:e0:50:b3:ac:8d:1c:1f:29:40:e1:65:b1:
                    35:2d:7c:9a:f3:28:7a:b3:f8:ca:ab:34:7f:dc:2a:
                    f1:65:34:b1:74:e1:92:ed:54:48:77:a1:59:9b:ce:
                    d2:d5:ae:27:54:e9:cf:ee:00:93:49:1b:2a:37:8a:
                    ce:f1:b7:f5:8d:7a:75:ab:24:c0:2d:34:4d:1b:71:
                    34:4d:33:2e:d9:e3:8c:b8:1a:d7:b8:26:67:61:80:
                    57:5b:07:7e:96:40:97:32:f3:41:aa:b9:d0:42:1f:
                    1b:18:19:8c:d3:73:fd:e8:90:6e:dd:28:ee:46:d9:
                    b5:8c:dd:16:eb:ca:91:5b:e8:b6:ea:27:92:d6:b2:
                    48:a5:61:84:9b:31:1b:35:58:d7:98:fd:f0:00:c9:
                    97:f7:4d:f7:29:69:36:19:e0:0d:1d:7e:d5:00:d0:
                    61:aa:12:2e:d6:6b:f0:c2:89:65:a8:9c:e6:ee:0c:
                    7c:a4:f1:f5:1f:57:5c:78:fd:47:0e:0c:5e:50:fa:
                    80:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F9:04:9B:C8:23:A4:C0:EF:44:3A:91:B1:E6:BF:E4:BB:38:9A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/a46a5019-45f7-33ff-9de9-c648231809f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.132.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:15:fd:39:65:6d:0e:0e:48:95:d6:e7:0c:a3:59:03:87:1e:
         de:c4:c9:01:00:d8:6d:5d:5a:d9:22:3c:ce:bd:ad:f9:19:ed:
         70:0c:8f:73:e6:96:d6:81:34:13:1e:04:09:d2:84:2a:98:7b:
         59:dc:92:a9:d0:4b:c9:c5:4c:db:ff:eb:a9:86:37:2f:37:d5:
         c0:73:6b:9d:c8:62:11:42:b1:fa:38:09:b1:d4:29:4a:44:46:
         40:f3:f4:d8:c4:85:0b:dc:31:fc:d0:4f:2d:c9:3f:25:d7:58:
         67:a6:b5:9c:9d:f5:36:17:1b:f3:91:b3:4a:b4:dc:8f:ba:54:
         23:42:38:6c:64:1d:c8:0c:dc:f7:42:f5:fc:30:e8:c1:44:17:
         74:a3:d8:54:44:cf:c7:fd:88:35:bd:a3:44:21:d2:95:be:b9:
         88:b8:dd:c9:75:ac:81:2e:15:80:8f:65:d3:bb:db:02:58:8e:
         74:01:66:40:05:9e:83:ef:10:df:c3:a1:7c:52:45:e7:3f:df:
         10:10:4a:e0:a8:da:77:32:36:a0:50:b2:cb:59:02:f7:18:09:
         b8:c5:f7:5b:ef:42:7a:dc:ae:a7:bc:da:c4:7b:6f:f3:f0:2b:
         88:a0:f7:e1:29:e0:aa:46:67:a0:58:c9:e6:d4:bd:d4:de:7e:
         a2:20:fb:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWc7PwAO37dMS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjkwMzBlYTUtMzFhMC00YmFkLWJlYmQtMmZmZmJjZTI3
YWRkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
NjZiNWUxODMtODI2MC00OGY1LTk5ZGMtMjM5ZGUzZTkwM2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmaAHEWXoBg0tGhOlEwcDE2bql7Toe9l3spq
ykkIf/cPUnvNN4YKovBitsxXM/lcpzzz3UQIZOQ3kcsxoHXgULOsjRwfKUDhZbE1
LXya8yh6s/jKqzR/3CrxZTSxdOGS7VRId6FZm87S1a4nVOnP7gCTSRsqN4rO8bf1
jXp1qyTALTRNG3E0TTMu2eOMuBrXuCZnYYBXWwd+lkCXMvNBqrnQQh8bGBmM03P9
6JBu3SjuRtm1jN0W68qRW+i26ieS1rJIpWGEmzEbNVjXmP3wAMmX9033KWk2GeAN
HX7VANBhqhIu1mvwwollqJzm7gx8pPH1H1dceP1HDgxeUPqArQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGv5BJvII6TA70Q6kbHmv+S7OJqqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iOTAz
MGVhNS0zMWEwLTRiYWQtYmViZC0yZmZmYmNlMjdhZGQvYTQ2YTUwMTktNDVmNy0z
M2ZmLTlkZTktYzY0ODIzMTgwOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjkwMzBlYTUtMzFhMC00YmFkLWJl
YmQtMmZmZmJjZTI3YWRkL2I5MDMwZWE1LTMxYTAtNGJhZC1iZWJkLTJmZmZiY2Uy
N2FkZC5jcmwwHwYDVR0jBBgwFoAUt2zyN6N3ryZWce4FS44bbhLjnGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iOTAzMGVhNS0zMWEwLTRiYWQtYmViZC0yZmZm
YmNlMjdhZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4QZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwV/TllbQ4OSJXW5wyjWQOHHt7EyQEA2G1dWtkiPM69rfkZ7XAMj3Pm
ltaBNBMeBAnShCqYe1nckqnQS8nFTNv/66mGNy831cBza53IYhFCsfo4CbHUKUpE
RkDz9NjEhQvcMfzQTy3JPyXXWGemtZyd9TYXG/ORs0q03I+6VCNCOGxkHcgM3PdC
9fww6MFEF3Sj2FREz8f9iDW9o0Qh0pW+uYi43cl1rIEuFYCPZdO72wJYjnQBZkAF
noPvEN/DoXxSRec/3xAQSuCo2ncyNqBQsstZAvcYCbjF91vvQnrcrqe82sR7b/Pw
K4ig9+Ep4KpGZ6BYyebUvdTefqIg+/U=
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:33:03 2026 by rpki-client