Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa
File:                     89bdd6d3-2f08-3833-852b-2137080307ad.roa (raw, json)
Hash identifier:          to2XvO5VEShyBFU6ZN8yAzIx7bdfSQOjJb7uxhpV9Ak=
Subject key identifier:   E1:79:33:89:EA:E7:DD:14:0F:FB:17:CF:E0:99:27:7A:04:C5:27:74
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584B8BE230AE9C5967E45F860CE0
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        209.169.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:30:ae:9c:59:67:e4:5f:86:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=d06ff4e5-3087-4d34-944b-9afd3b1e3178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:6c:bd:1a:b7:a0:3a:31:31:20:3b:b6:2d:
                    60:86:13:ef:6b:8d:e7:7d:a1:cc:9a:67:ce:77:8a:
                    f0:66:53:33:f3:0c:e8:2b:92:70:7d:8a:0e:bb:e9:
                    21:b9:86:34:fd:82:ee:9f:7c:79:35:16:99:a5:f7:
                    56:23:4a:af:69:d2:fc:40:4d:eb:8c:39:9f:2e:43:
                    5e:22:ac:50:0d:bf:34:59:98:ef:86:03:2f:d3:ff:
                    17:25:9e:f7:b0:54:63:8d:28:a4:e2:43:c1:b9:35:
                    aa:e0:b2:85:99:3d:96:8b:54:70:f6:4c:40:40:ad:
                    c0:d7:31:6a:03:58:61:14:3b:46:8b:27:95:ba:d8:
                    da:07:63:be:63:e0:d1:20:50:51:96:06:4c:84:4e:
                    5b:cd:e7:92:2a:86:7e:6a:0f:be:7d:de:ef:9d:53:
                    de:f4:be:e4:43:68:11:e4:3d:02:bf:ee:51:7c:06:
                    30:bd:73:cb:cf:c5:99:f3:fa:19:c6:31:60:a2:8f:
                    f4:55:59:46:05:b4:f2:c2:1c:d0:22:3b:46:e8:5e:
                    07:c2:e5:d0:c6:40:e6:3f:82:97:d3:54:b7:f4:35:
                    a1:87:a5:35:83:9b:01:8d:94:96:65:17:98:72:e2:
                    3b:33:e8:8d:b6:24:79:02:a4:db:9a:03:82:ce:e9:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:79:33:89:EA:E7:DD:14:0F:FB:17:CF:E0:99:27:7A:04:C5:27:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:35:56:2e:f9:cf:6d:8d:a9:9a:4a:4c:4c:c5:4e:9f:ea:2d:
         d7:da:d3:0f:8e:0d:a1:77:65:a0:c8:ed:d8:a8:c5:86:11:45:
         8f:40:2b:56:76:98:30:6c:a9:91:7d:b7:3d:8e:dd:c3:8f:bc:
         15:94:45:8b:d9:dd:b3:dc:7f:9c:ab:44:72:24:6c:54:60:9b:
         71:a9:b1:cb:17:5f:64:06:99:ba:c1:0e:d3:16:fa:7c:03:72:
         ab:77:f0:04:39:1b:4b:19:b7:76:83:10:98:e7:e3:c6:c7:8d:
         12:f9:f0:6e:1e:71:1b:0f:a1:ce:e1:a7:db:41:6f:fc:39:da:
         d8:17:df:85:2f:7d:e9:ef:ec:a1:78:f2:ee:de:ac:87:c5:ed:
         66:96:27:4c:2b:87:a4:94:3d:f4:34:9f:eb:b9:05:64:c4:e1:
         f6:3d:63:88:34:3e:3c:be:99:44:6c:dd:b8:82:79:76:bf:c4:
         11:55:b7:98:47:ac:16:c2:43:2d:11:26:83:f0:75:a6:51:f0:
         ad:17:25:aa:22:cd:af:6f:bb:b9:62:30:92:12:6c:85:d9:fe:
         9a:9f:46:d8:d7:6e:d1:0c:ce:57:71:0d:45:bc:9c:34:6c:fe:
         10:db:ca:18:a1:f5:b6:39:58:0a:ad:bd:28:fe:5e:01:fc:0e:
         bf:02:67:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jCunFln5F+GDOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw
MjhiMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
ZDA2ZmY0ZTUtMzA4Ny00ZDM0LTk0NGItOWFmZDNiMWUzMTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQtsvRq3oDoxMSA7ti1ghhPva43nfaHMmmfO
d4rwZlMz8wzoK5JwfYoOu+khuYY0/YLun3x5NRaZpfdWI0qvadL8QE3rjDmfLkNe
IqxQDb80WZjvhgMv0/8XJZ73sFRjjSik4kPBuTWq4LKFmT2Wi1Rw9kxAQK3A1zFq
A1hhFDtGiyeVutjaB2O+Y+DRIFBRlgZMhE5bzeeSKoZ+ag++fd7vnVPe9L7kQ2gR
5D0Cv+5RfAYwvXPLz8WZ8/oZxjFgoo/0VVlGBbTywhzQIjtG6F4HwuXQxkDmP4KX
01S39DWhh6U1g5sBjZSWZReYcuI7M+iNtiR5AqTbmgOCzukK7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOF5M4nq590UD/sXz+CZJ3oExSd0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk
ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvODliZGQ2ZDMtMmYwOC0z
ODMzLTg1MmItMjEzNzA4MDMwN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk
Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3
MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0
NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEE1Vi75z22NqZpKTEzFTp/qLdfa0w+ODaF3ZaDI7dioxYYRRY9AK1Z2
mDBsqZF9tz2O3cOPvBWURYvZ3bPcf5yrRHIkbFRgm3GpscsXX2QGmbrBDtMW+nwD
cqt38AQ5G0sZt3aDEJjn48bHjRL58G4ecRsPoc7hp9tBb/w52tgX34Uvfenv7KF4
8u7erIfF7WaWJ0wrh6SUPfQ0n+u5BWTE4fY9Y4g0Pjy+mURs3biCeXa/xBFVt5hH
rBbCQy0RJoPwdaZR8K0XJaoiza9vu7liMJISbIXZ/pqfRtjXbtEMzldxDUW8nDRs
/hDbyhih9bY5WAqtvSj+XgH8Dr8CZ20=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:27:35 2025 by rpki-client