Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa
File:                     85518f83-6d82-3dbd-ad23-fd6459007b47.roa (raw, json)
Hash identifier:          mdfYUHNVtIJ5kscanBEV879ttZih9MwpUIe6lgY6QAI=
Subject key identifier:   FF:80:17:0F:92:ED:83:2A:0C:EC:AF:D5:16:56:87:E2:A9:AF:A1:FC
Certificate issuer:       /CN=c42cfaea-6b46-494e-95ea-944662b8624b
Certificate serial:       010D0C9F4328584B276177AF6860E8158701B080
Authority key identifier: 3F:AF:58:9A:D1:8F:65:47:CD:5A:B7:57:C6:B6:EA:CD:2D:AB:6A:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        198.232.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/c42cfaea-6b46-494e-95ea-944662b8624b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/c42cfaea-6b46-494e-95ea-944662b8624b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:77:af:68:60:e8:15:87:01:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42cfaea-6b46-494e-95ea-944662b8624b
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=15ebce1c-bbdc-4434-b72e-8bcdf162064e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:e9:9d:fd:ce:0d:45:4f:6d:45:a9:65:87:
                    c2:d6:d1:61:d6:21:b2:58:82:82:b4:f8:bd:c3:a9:
                    fa:ad:f3:df:c8:b2:eb:ae:36:bb:a0:4a:c6:a9:eb:
                    f7:e2:89:4a:0a:7e:ce:23:f3:14:9a:d2:bf:15:e8:
                    67:da:bb:89:b5:87:d2:49:33:7e:da:35:53:b9:a8:
                    d3:ee:2f:48:22:70:ae:15:26:e1:5a:39:b0:46:6b:
                    b5:3a:7d:c4:4b:87:8f:11:10:d6:b8:6d:8d:ed:8f:
                    88:d5:a7:8b:b4:4a:bd:fb:1b:33:a2:a1:e3:b5:51:
                    6c:59:05:6a:64:f6:2f:e6:14:36:d8:56:58:98:5f:
                    66:f7:dc:58:de:80:7f:f5:5b:c0:e7:ea:b5:eb:03:
                    78:1b:6c:63:54:70:b7:9b:d5:7b:71:76:55:87:d9:
                    82:c4:fb:10:c0:fc:02:c4:89:a9:9f:2c:75:23:a0:
                    30:30:70:29:ab:2c:09:bf:24:2a:9e:57:ac:c7:de:
                    01:73:cf:7c:fd:7c:17:f9:ce:14:b8:d8:11:32:05:
                    31:89:a6:9b:5c:be:d6:98:58:d4:7b:91:ae:fd:6e:
                    8c:a2:2b:ac:26:e4:73:53:2f:13:73:ab:b3:04:2e:
                    84:f9:ed:7e:5c:97:b2:69:e7:9c:e7:1a:a2:a9:7e:
                    80:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:80:17:0F:92:ED:83:2A:0C:EC:AF:D5:16:56:87:E2:A9:AF:A1:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/85518f83-6d82-3dbd-ad23-fd6459007b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/c42cfaea-6b46-494e-95ea-944662b8624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AF:58:9A:D1:8F:65:47:CD:5A:B7:57:C6:B6:EA:CD:2D:AB:6A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.232.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:f6:8d:76:21:88:b3:83:13:04:86:2d:03:73:f7:70:4e:2e:
         a7:c1:bc:3c:81:4d:cb:82:5b:ec:ec:a5:10:65:b1:ef:76:e0:
         70:58:3e:39:8c:b3:a4:d7:2d:47:9d:04:11:1c:1c:5d:08:a1:
         28:76:8b:f0:6b:46:47:fe:cf:c4:69:6b:ee:af:b8:8b:a2:67:
         3b:e8:04:b1:a3:dc:a5:ae:bd:10:eb:a2:49:ff:48:b6:3a:e1:
         ca:53:4e:7c:e6:dd:ed:4a:2f:9f:f6:08:23:08:f2:f6:ff:34:
         f5:8e:25:fe:57:02:ad:d2:16:86:7d:e2:ac:bc:74:47:90:f9:
         9b:c4:31:51:b0:99:bc:20:b5:7f:0c:36:62:de:38:90:7f:7b:
         11:14:4d:4c:dd:8b:75:b2:a8:d1:6e:11:43:f0:02:74:72:23:
         ec:3c:7a:18:da:e9:3c:42:e0:9e:28:e7:81:18:42:85:f2:f3:
         19:4c:fc:88:05:2a:2f:02:80:8f:91:a5:df:69:91:cb:a6:3c:
         8e:10:e3:9d:ee:ea:11:30:72:f5:eb:d4:d0:69:41:1f:58:6b:
         5c:5b:c4:af:5a:2d:5d:2e:c0:b3:4f:b8:a9:00:00:1a:8b:2c:
         10:69:c7:46:80:24:72:ec:d2:3d:6f:1e:cc:ee:5d:a2:33:b5:
         fb:68:2d:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXevaGDoFYcBsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyY2ZhZWEtNmI0Ni00OTRlLTk1ZWEtOTQ0NjYyYjg2
MjRiMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk
MTVlYmNlMWMtYmJkYy00NDM0LWI3MmUtOGJjZGYxNjIwNjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0fpnf3ODUVPbUWpZYfC1tFh1iGyWIKCtPi9
w6n6rfPfyLLrrja7oErGqev34olKCn7OI/MUmtK/Fehn2ruJtYfSSTN+2jVTuajT
7i9IInCuFSbhWjmwRmu1On3ES4ePERDWuG2N7Y+I1aeLtEq9+xszoqHjtVFsWQVq
ZPYv5hQ22FZYmF9m99xY3oB/9VvA5+q16wN4G2xjVHC3m9V7cXZVh9mCxPsQwPwC
xImpnyx1I6AwMHApqywJvyQqnlesx94Bc898/XwX+c4UuNgRMgUxiaabXL7WmFjU
e5Gu/W6MoiusJuRzUy8Tc6uzBC6E+e1+XJeyaeec5xqiqX6AgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+AFw+S7YMqDOyv1RZWh+Kpr6H8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDJj
ZmFlYS02YjQ2LTQ5NGUtOTVlYS05NDQ2NjJiODYyNGIvODU1MThmODMtNmQ4Mi0z
ZGJkLWFkMjMtZmQ2NDU5MDA3YjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyY2ZhZWEtNmI0Ni00OTRlLTk1
ZWEtOTQ0NjYyYjg2MjRiL2M0MmNmYWVhLTZiNDYtNDk0ZS05NWVhLTk0NDY2MmI4
NjI0Yi5jcmwwHwYDVR0jBBgwFoAUP69YmtGPZUfNWrdXxrbqzS2raukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDJjZmFlYS02YjQ2LTQ5NGUtOTVlYS05NDQ2
NjJiODYyNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuiQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAND2jXYhiLODEwSGLQNz93BOLqfBvDyBTcuCW+zspRBlse924HBYPjmM
s6TXLUedBBEcHF0IoSh2i/BrRkf+z8Rpa+6vuIuiZzvoBLGj3KWuvRDrokn/SLY6
4cpTTnzm3e1KL5/2CCMI8vb/NPWOJf5XAq3SFoZ94qy8dEeQ+ZvEMVGwmbwgtX8M
NmLeOJB/exEUTUzdi3WyqNFuEUPwAnRyI+w8ehja6TxC4J4o54EYQoXy8xlM/IgF
Ki8CgI+Rpd9pkcumPI4Q453u6hEwcvXr1NBpQR9Ya1xbxK9aLV0uwLNPuKkAABqL
LBBpx0aAJHLs0j1vHszuXaIztftoLYU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:00 2025 by rpki-client