Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/db82fade-e180-347d-aeb2-7436f9e1f299.roa
File:                     db82fade-e180-347d-aeb2-7436f9e1f299.roa (raw, json)
Hash identifier:          +xjcKD2kOPzLOzJLiNFUOhN6lCyj0m+apogL8ePJKrI=
Subject key identifier:   2E:E0:4E:88:44:0A:43:5E:C5:54:B0:F0:26:A4:36:27:84:3A:23:2E
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584B3821B1DC5900B6F26E00B480
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/db82fade-e180-347d-aeb2-7436f9e1f299.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     12129
IP address blocks:        207.91.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:b1:dc:59:00:b6:f2:6e:00:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=21490190-802f-4d08-b7ae-853e0df281b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:4e:35:97:9e:8f:3f:e1:d1:0c:c3:53:33:
                    6f:1b:4b:83:7e:e3:75:7d:a8:62:20:ea:f7:0d:f9:
                    b9:77:a2:49:ac:a1:59:64:c1:71:bd:dd:f6:a5:49:
                    61:6a:01:2d:66:3c:81:f8:b6:81:41:a5:8b:ca:ac:
                    c5:0e:e1:ad:0d:be:7f:35:14:6b:ba:e8:ea:99:25:
                    00:46:8e:fe:dd:88:91:c0:1a:40:c7:37:73:50:ba:
                    8b:cd:37:a2:63:7d:e8:e4:bc:2d:3e:42:44:a0:4e:
                    93:7c:fd:14:1d:7b:08:92:9a:e5:4b:c0:d5:5e:a6:
                    6d:10:2c:ee:a7:e2:ba:74:82:f8:bf:c1:02:2d:c2:
                    fc:a0:dc:39:ce:ba:90:2e:9f:fd:c0:06:b4:94:93:
                    3a:43:fb:4f:57:f5:e7:a2:5a:2c:82:70:5a:ed:0e:
                    50:2c:5e:08:6a:b3:54:14:f2:d0:24:8e:33:62:d6:
                    4e:b7:87:c0:43:10:4f:a8:d7:bd:28:62:02:84:2e:
                    a9:5f:a2:d3:5a:27:f9:8d:44:4c:fe:b1:7c:66:81:
                    10:1f:34:fe:81:c0:77:9e:ed:cc:ab:10:cf:a9:b6:
                    1b:a7:56:9e:27:c1:a9:a2:f5:55:48:93:fb:e4:07:
                    3f:bf:08:12:b1:c1:0a:32:97:4e:07:62:c6:cc:aa:
                    ed:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E0:4E:88:44:0A:43:5E:C5:54:B0:F0:26:A4:36:27:84:3A:23:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/db82fade-e180-347d-aeb2-7436f9e1f299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.91.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:cb:10:3f:d9:51:d6:99:f4:50:b8:0e:6f:a6:c5:d7:ab:85:
         75:99:8f:0e:98:f1:67:1e:71:88:57:ef:c3:4a:9d:0d:c3:4a:
         b2:eb:97:f7:dd:05:85:a0:60:91:15:c3:20:b9:ce:d8:96:a2:
         30:5c:1f:a6:15:b6:b2:e3:63:c7:ef:fe:27:14:d8:7c:c1:c2:
         4e:0c:67:a8:47:17:75:16:18:60:10:d3:57:39:db:88:be:38:
         a5:b2:dd:79:f9:2a:1a:7a:b6:74:8c:43:ea:2b:3d:2d:1f:95:
         f5:2d:8a:70:26:96:63:a2:76:df:72:ec:4b:df:ae:5c:e5:48:
         99:f7:9b:03:f6:60:ab:0f:4f:ad:e5:20:76:13:31:c2:72:b9:
         a6:11:eb:8b:d4:d5:ff:53:63:77:2d:14:12:0a:e4:eb:6b:e7:
         08:a8:1f:ea:f2:30:6c:c2:d5:bc:1a:fc:34:81:7c:9c:5b:7d:
         c8:c4:ae:d8:59:d9:d0:39:b6:31:21:01:31:19:57:6f:3f:d7:
         df:b8:8c:2d:93:b5:26:b1:df:9b:fb:8e:0f:9a:9d:7d:d8:2a:
         12:70:10:59:74:4a:fa:2e:b5:50:6d:e4:0e:2b:92:7e:05:ed:
         9e:d7:93:18:0b:95:70:4c:85:5f:38:65:de:1e:f8:16:f4:4b:
         10:14:51:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IbHcWQC28m4AtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
MjE0OTAxOTAtODAyZi00ZDA4LWI3YWUtODUzZTBkZjI4MWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsJONZeejz/h0QzDUzNvG0uDfuN1fahiIOr3
Dfm5d6JJrKFZZMFxvd32pUlhagEtZjyB+LaBQaWLyqzFDuGtDb5/NRRruujqmSUA
Ro7+3YiRwBpAxzdzULqLzTeiY33o5LwtPkJEoE6TfP0UHXsIkprlS8DVXqZtECzu
p+K6dIL4v8ECLcL8oNw5zrqQLp/9wAa0lJM6Q/tPV/XnolosgnBa7Q5QLF4IarNU
FPLQJI4zYtZOt4fAQxBPqNe9KGIChC6pX6LTWif5jURM/rF8ZoEQHzT+gcB3nu3M
qxDPqbYbp1aeJ8GpovVVSJP75Ac/vwgSscEKMpdOB2LGzKrtGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7gTohECkNexVSw8CakNieEOiMuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvZGI4MmZhZGUtZTE4MC0z
NDdkLWFlYjItNzQzNmY5ZTFmMjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz1vIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKvLED/ZUdaZ9FC4Dm+mxderhXWZjw6Y8WcecYhX78NKnQ3DSrLrl/fd
BYWgYJEVwyC5ztiWojBcH6YVtrLjY8fv/icU2HzBwk4MZ6hHF3UWGGAQ01c524i+
OKWy3Xn5Khp6tnSMQ+orPS0flfUtinAmlmOidt9y7EvfrlzlSJn3mwP2YKsPT63l
IHYTMcJyuaYR64vU1f9TY3ctFBIK5Otr5wioH+ryMGzC1bwa/DSBfJxbfcjErthZ
2dA5tjEhATEZV28/19+4jC2TtSax35v7jg+anX3YKhJwEFl0SvoutVBt5A4rkn4F
7Z7XkxgLlXBMhV84Zd4e+Bb0SxAUUXw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:26:59 2025 by rpki-client