Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa
File:                     b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa (raw, json)
Hash identifier:          6MiV6V1VUcTwNilwgzi4ZtwnmryR3O04UtoaR72noAQ=
Subject key identifier:   03:0B:83:36:DF:C2:BA:3B:CB:A5:A8:F0:FC:5B:00:30:45:3B:FE:65
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584B8EACCBBEC8DF64C70691F280
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     5662
IP address blocks:        157.166.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:cb:be:c8:df:64:c7:06:91:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=ec0392db-c87d-4fa0-922a-03c4163452af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:7a:75:9a:53:20:43:65:6a:95:b9:1b:d1:
                    21:a3:43:3a:c4:d8:38:39:3a:49:b6:67:f3:a7:20:
                    28:4a:51:d9:c8:e7:c4:39:6b:95:bf:a5:2d:ea:1f:
                    37:5e:d3:f9:ce:72:37:96:13:a3:85:ea:2d:55:f1:
                    7e:e0:71:30:c3:d8:cc:ab:49:36:8d:3d:a0:97:8b:
                    84:05:f6:2c:24:41:d1:2a:39:4c:18:a1:1b:43:aa:
                    70:e5:cd:6b:27:fd:63:de:8e:cb:3b:4a:06:75:ba:
                    b3:39:71:5e:28:e3:2a:83:f6:82:f8:3c:43:59:b3:
                    a1:3c:73:7b:5c:50:99:08:8f:89:41:f9:58:fd:f2:
                    6d:91:4b:ff:36:1f:24:c3:a0:77:6e:7e:80:58:75:
                    47:01:77:88:1c:c1:30:0f:df:8e:c8:58:65:8f:e9:
                    17:ce:5f:ec:c9:6c:48:5d:ff:9e:fc:1b:eb:75:aa:
                    32:e0:94:ac:f2:e7:bc:5c:21:c4:f9:e9:b8:85:c9:
                    48:dd:df:a1:fb:c7:f8:d1:35:60:03:6b:37:09:93:
                    c6:85:5e:e0:08:5f:2f:89:b7:cd:40:9f:8b:b4:ae:
                    39:52:9c:5c:5d:46:79:d2:4e:24:cd:46:d6:ff:a8:
                    92:ad:78:df:6e:0d:dc:06:0b:69:9b:b7:48:ad:e2:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0B:83:36:DF:C2:BA:3B:CB:A5:A8:F0:FC:5B:00:30:45:3B:FE:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/b09cf86a-49e9-3afc-8ecd-2e2d5d0d345d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:69:ed:30:5e:53:dd:52:4f:82:4d:a4:71:c3:54:69:51:71:
         72:e8:b8:16:9e:54:fd:9d:94:34:25:69:1c:5a:39:74:11:5a:
         53:bd:3b:fc:fb:16:4d:8d:56:86:57:92:95:34:0d:b5:1e:63:
         f6:c3:ea:1f:77:be:de:44:57:1d:ce:c5:a3:38:44:e1:34:24:
         d3:e5:57:0c:fb:97:9b:95:4c:23:e9:cb:16:fd:a1:5a:d3:fc:
         37:82:0b:ad:38:8f:43:42:ce:e9:7b:f3:8f:84:dc:e8:3e:8f:
         30:9b:2f:3d:ed:e5:b4:c3:4e:5a:59:8d:fd:77:af:83:fe:d2:
         39:01:75:a9:c8:83:9a:b7:71:d3:8b:d4:09:3e:81:b0:4a:46:
         0e:17:f4:0f:f7:d0:33:f7:a7:2b:b5:55:eb:5c:69:6a:ae:62:
         ff:b4:6a:2f:32:cd:be:54:06:7d:79:9f:dd:34:f0:ee:a8:17:
         62:68:b7:a5:f5:28:57:fd:83:7a:ef:1d:9c:fa:5f:8d:63:71:
         e2:6f:1a:c5:20:40:d6:14:8d:46:61:4d:fd:48:44:f2:2a:a7:
         2d:6a:cc:b9:7b:b9:14:33:82:02:6a:89:14:fa:98:e6:ad:25:
         d4:3c:bd:70:d9:09:01:82:08:9d:87:b8:75:cc:52:b0:6d:b4:
         0e:5d:b5:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMu+yN9kxwaR8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi
OTU1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
ZWMwMzkyZGItYzg3ZC00ZmEwLTkyMmEtMDNjNDE2MzQ1MmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd16dZpTIENlapW5G9Eho0M6xNg4OTpJtmfz
pyAoSlHZyOfEOWuVv6Ut6h83XtP5znI3lhOjheotVfF+4HEww9jMq0k2jT2gl4uE
BfYsJEHRKjlMGKEbQ6pw5c1rJ/1j3o7LO0oGdbqzOXFeKOMqg/aC+DxDWbOhPHN7
XFCZCI+JQflY/fJtkUv/Nh8kw6B3bn6AWHVHAXeIHMEwD9+OyFhlj+kXzl/syWxI
Xf+e/Bvrdaoy4JSs8ue8XCHE+em4hclI3d+h+8f40TVgA2s3CZPGhV7gCF8vibfN
QJ+LtK45UpxcXUZ50k4kzUbW/6iSrXjfbg3cBgtpm7dIreLB3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMLgzbfwro7y6Wo8PxbADBFO/5lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz
NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvYjA5Y2Y4NmEtNDllOS0z
YWZjLThlY2QtMmUyZDVkMGQzNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm
M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm
Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1
Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtp7TBeU91ST4JNpHHDVGlRcXLouBaeVP2dlDQlaRxaOXQRWlO9O/z7
Fk2NVoZXkpU0DbUeY/bD6h93vt5EVx3OxaM4ROE0JNPlVwz7l5uVTCPpyxb9oVrT
/DeCC604j0NCzul784+E3Og+jzCbLz3t5bTDTlpZjf13r4P+0jkBdanIg5q3cdOL
1Ak+gbBKRg4X9A/30DP3pyu1VetcaWquYv+0ai8yzb5UBn15n9008O6oF2Jot6X1
KFf9g3rvHZz6X41jceJvGsUgQNYUjUZhTf1IRPIqpy1qzLl7uRQzggJqiRT6mOat
JdQ8vXDZCQGCCJ2HuHXMUrBttA5dtco=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:38 2025 by rpki-client