Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa
File:                     9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa (raw, json)
Hash identifier:          x5JHm89spNsGN/VilenbbtJbgxsQlzMd78fEdC5SD20=
Subject key identifier:   CC:25:F7:62:A9:01:49:F8:75:71:18:32:44:64:2B:A3:F9:BF:C0:58
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CD6BEB16AB31D53A4406E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        209.85.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:6b:eb:16:ab:31:d5:3a:44:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c03d1565-8c8d-46a4-afbb-a6ec1c45665f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:45:d9:bd:b7:fd:f5:70:a6:d8:da:95:69:fa:
                    ec:91:00:fd:a8:09:2f:bd:f9:ad:83:ae:27:63:76:
                    e0:56:9e:42:45:2d:72:33:9f:d5:69:01:87:48:24:
                    0b:d2:55:22:8c:ae:fc:31:26:a1:26:f4:36:39:66:
                    c3:79:c0:f7:6f:fe:8c:85:8c:a8:89:be:9d:70:68:
                    a5:1e:bf:10:93:ac:d1:31:78:71:0f:5f:df:44:50:
                    eb:0e:3a:1e:a0:f2:a4:47:0a:ef:7c:32:b3:1c:dc:
                    18:82:d0:78:22:0a:19:56:66:16:0b:04:4f:db:c3:
                    1f:c7:50:8e:6c:f2:16:04:01:0f:fa:4b:af:66:c1:
                    d2:93:dd:b2:50:de:5b:d8:4b:aa:8e:a9:1a:31:55:
                    d9:e1:e8:63:33:ad:58:71:94:a9:d9:50:cc:35:23:
                    cd:dd:35:b5:87:1c:59:50:27:f7:7a:be:04:51:73:
                    94:84:f6:69:f3:87:9c:ca:6a:52:ae:0a:b5:09:63:
                    12:16:2a:78:a2:35:75:d3:c8:4f:72:ad:a9:7c:0d:
                    fd:8f:42:58:31:7c:27:7b:b8:be:52:a0:31:64:ed:
                    d4:f5:68:9a:2c:d5:31:44:ac:f3:ee:ae:23:01:bb:
                    64:d1:12:5e:77:82:42:2a:6e:05:77:42:0e:e8:7d:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:25:F7:62:A9:01:49:F8:75:71:18:32:44:64:2B:A3:F9:BF:C0:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f218bfe-ab51-3c64-ab6b-ba643fbac069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.85.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:99:f0:7b:f9:11:86:11:fc:6e:6f:22:f9:1a:2a:8a:55:e1:
         f3:92:18:50:07:62:2d:3d:2d:a0:c7:7b:ea:59:8e:a1:0c:21:
         e1:74:cc:22:87:29:81:ca:30:a9:1f:0a:9a:09:5e:dd:b6:bf:
         e1:97:0e:cb:90:3e:d0:4e:0d:61:22:9c:78:0b:64:d1:41:fd:
         9b:aa:a2:d2:5f:ee:af:73:ca:7d:e3:61:3b:fb:8a:4b:35:47:
         3f:2d:77:ea:2d:bc:19:87:1e:13:cc:12:59:ef:c2:06:d8:f0:
         f3:54:e1:03:c0:ff:8e:db:29:0b:4f:42:b8:c9:60:e8:fd:a6:
         37:21:77:d9:58:80:9e:15:cb:87:d8:71:ad:6f:58:a8:c7:d6:
         36:f5:47:fb:77:83:98:93:8b:c3:b2:11:a7:48:38:10:18:4d:
         69:21:56:f1:b9:bb:7d:9a:57:3e:1e:9e:70:aa:87:26:ff:be:
         76:1c:c3:54:10:51:f8:31:cd:78:5b:e2:8b:9d:f6:31:88:2b:
         ec:e9:c3:a8:c0:5e:cb:2b:57:02:92:9d:42:b0:d5:89:99:e4:
         e5:e9:12:d4:29:57:5b:e0:a5:c9:64:db:d7:6b:ef:40:9a:b3:
         47:ec:c8:7e:d2:bb:30:cb:f0:58:3a:9a:0f:11:c3:cb:1e:92:
         67:53:69:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWvrFqsx1TpEBuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
YzAzZDE1NjUtOGM4ZC00NmE0LWFmYmItYTZlYzFjNDU2NjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUXZvbf99XCm2NqVafrskQD9qAkvvfmtg64n
Y3bgVp5CRS1yM5/VaQGHSCQL0lUijK78MSahJvQ2OWbDecD3b/6MhYyoib6dcGil
Hr8Qk6zRMXhxD1/fRFDrDjoeoPKkRwrvfDKzHNwYgtB4IgoZVmYWCwRP28Mfx1CO
bPIWBAEP+kuvZsHSk92yUN5b2EuqjqkaMVXZ4ehjM61YcZSp2VDMNSPN3TW1hxxZ
UCf3er4EUXOUhPZp84ecympSrgq1CWMSFip4ojV108hPcq2pfA39j0JYMXwne7i+
UqAxZO3U9WiaLNUxRKzz7q4jAbtk0RJed4JCKm4Fd0IO6H0eDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwl92KpAUn4dXEYMkRkK6P5v8BYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWYyMThiZmUtYWI1MS0z
YzY0LWFiNmItYmE2NDNmYmFjMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAOZ8Hv5EYYR/G5vIvkaKopV4fOSGFAHYi09LaDHe+pZjqEMIeF0zCKH
KYHKMKkfCpoJXt22v+GXDsuQPtBODWEinHgLZNFB/ZuqotJf7q9zyn3jYTv7iks1
Rz8td+otvBmHHhPMElnvwgbY8PNU4QPA/47bKQtPQrjJYOj9pjchd9lYgJ4Vy4fY
ca1vWKjH1jb1R/t3g5iTi8OyEadIOBAYTWkhVvG5u32aVz4ennCqhyb/vnYcw1QQ
UfgxzXhb4oud9jGIK+zpw6jAXssrVwKSnUKw1YmZ5OXpEtQpV1vgpclk29dr70Ca
s0fsyH7SuzDL8Fg6mg8Rw8sekmdTaWg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:07 2025 by rpki-client