Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/42b493e0-dab0-3c9b-9e49-3ca3bb30be31.roa
File:                     42b493e0-dab0-3c9b-9e49-3ca3bb30be31.roa (raw, json)
Hash identifier:          t6vTuWnH3KUwxY+SLlSFHSh4y3SSJhYaCmHCV1QZgoQ=
Subject key identifier:   F2:E0:EA:AB:59:FF:F1:50:B2:C7:C4:F5:C9:1A:53:D8:02:68:62:1B
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584B864CAF5CD995884CF673B300
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/42b493e0-dab0-3c9b-9e49-3ca3bb30be31.roa
Signing time:             Wed 15 Oct 2025 01:00:30 +0000
ROA not before:           Wed 15 Oct 2025 01:00:30 +0000
ROA not after:            Tue 13 Jan 2026 02:00:30 +0000
asID:                     7018
IP address blocks:        45.62.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:4c:af:5c:d9:95:88:4c:f6:73:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Oct 15 01:00:30 2025 GMT
            Not After : Jan 13 02:00:30 2026 GMT
        Subject: CN=f0cd1d11-9512-4912-8ec3-a347ec319244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6b:db:d0:72:e1:be:f3:a5:d9:7a:09:8a:4b:
                    3d:77:83:f0:6a:0e:de:51:84:8a:8a:97:23:38:6d:
                    bc:20:1e:d3:f6:cb:28:23:68:4c:cb:e0:94:d8:b6:
                    e5:d5:dd:a6:65:eb:6a:e5:ee:ed:2f:75:71:e1:5a:
                    bc:d3:80:b9:df:07:32:c5:f9:69:26:8f:ef:f7:dd:
                    42:d4:d9:d4:3d:58:03:94:42:8b:16:6a:2c:10:33:
                    17:8c:2d:a4:7e:34:a9:9e:c4:11:b4:0c:ce:cf:a9:
                    fd:4c:40:5d:ee:11:51:73:bc:ea:ad:3c:fc:29:70:
                    1f:1c:15:be:3b:14:8e:5d:69:a3:50:8d:ef:7c:fd:
                    93:91:f1:49:a0:18:b7:9c:a0:25:98:ff:c1:f1:4a:
                    d1:1d:8e:96:ae:86:e8:4f:57:6e:2b:f5:b4:31:51:
                    c3:86:40:d6:66:7b:f8:c8:5c:a9:01:3b:7b:67:37:
                    13:64:d4:57:44:38:9c:ae:22:d5:0b:a7:e9:e8:06:
                    a0:98:4e:31:f8:b3:6d:7b:f0:a8:af:33:c5:0c:7b:
                    47:1a:35:1b:e3:ca:07:d1:51:fc:a6:4e:25:57:ce:
                    35:60:f6:a4:53:39:b0:59:77:db:51:d7:b6:70:f0:
                    a8:c2:a1:44:33:0f:b4:c8:bb:70:91:2c:d3:32:aa:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E0:EA:AB:59:FF:F1:50:B2:C7:C4:F5:C9:1A:53:D8:02:68:62:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/42b493e0-dab0-3c9b-9e49-3ca3bb30be31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:88:c3:70:09:76:ff:c9:e3:a0:4c:3b:b3:ff:bf:9b:de:dc:
         b5:33:9c:5e:b7:71:e0:73:0f:3e:95:61:87:56:6a:67:4b:4e:
         ab:af:2a:be:65:0f:7f:95:2b:c8:13:54:f9:2a:bb:5d:9c:f6:
         1c:1b:b1:cd:64:57:f8:99:f8:93:2e:94:0e:46:64:f2:89:81:
         14:32:34:4d:5b:e7:41:f8:73:62:d2:31:33:49:8b:76:1e:de:
         62:ab:3e:76:69:47:66:23:54:89:9b:16:7f:b9:1c:5e:8c:b4:
         3e:38:02:5d:74:b3:8c:c5:e9:38:31:a5:02:d2:5e:8f:0f:61:
         79:cf:88:ad:a1:da:6c:b5:6f:37:89:77:08:18:ac:e8:ac:2b:
         9a:1e:81:d1:e1:99:fa:54:14:7a:d7:5d:37:df:45:9c:3f:0c:
         83:2b:35:08:d2:62:f3:98:c0:22:eb:30:4b:6b:f5:3f:73:7e:
         32:44:59:56:be:9d:de:74:f9:4a:51:37:38:37:70:de:62:a3:
         3d:76:51:6b:52:34:46:ac:fb:41:d5:52:80:0a:57:d9:48:e7:
         ff:42:4d:59:03:d4:62:6a:bc:15:ed:0e:d6:a9:55:49:7b:f1:
         f9:e4:d3:3c:13:8f:8a:ab:0a:6a:25:ba:94:64:f5:de:ae:d0:
         b7:0a:b6:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTK9c2ZWITPZzswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw
YzRkMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk
ZjBjZDFkMTEtOTUxMi00OTEyLThlYzMtYTM0N2VjMzE5MjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62vb0HLhvvOl2XoJiks9d4Pwag7eUYSKipcj
OG28IB7T9ssoI2hMy+CU2Lbl1d2mZetq5e7tL3Vx4Vq804C53wcyxflpJo/v991C
1NnUPVgDlEKLFmosEDMXjC2kfjSpnsQRtAzOz6n9TEBd7hFRc7zqrTz8KXAfHBW+
OxSOXWmjUI3vfP2TkfFJoBi3nKAlmP/B8UrRHY6WroboT1duK/W0MVHDhkDWZnv4
yFypATt7ZzcTZNRXRDicriLVC6fp6AagmE4x+LNte/CorzPFDHtHGjUb48oH0VH8
pk4lV841YPakUzmwWXfbUde2cPCowqFEMw+0yLtwkSzTMqqYZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLg6qtZ//FQssfE9ckaU9gCaGIbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz
YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvNDJiNDkzZTAtZGFiMC0z
YzliLTllNDktM2NhM2JiMzBiZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0
ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3
MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl
YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACiIw3AJdv/J46BMO7P/v5ve3LUznF63ceBzDz6VYYdWamdLTquvKr5l
D3+VK8gTVPkqu12c9hwbsc1kV/iZ+JMulA5GZPKJgRQyNE1b50H4c2LSMTNJi3Ye
3mKrPnZpR2YjVImbFn+5HF6MtD44Al10s4zF6TgxpQLSXo8PYXnPiK2h2my1bzeJ
dwgYrOisK5oegdHhmfpUFHrXXTffRZw/DIMrNQjSYvOYwCLrMEtr9T9zfjJEWVa+
nd50+UpRNzg3cN5ioz12UWtSNEas+0HVUoAKV9lI5/9CTVkD1GJqvBXtDtapVUl7
8fnk0zwTj4qrCmolupRk9d6u0LcKttM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:51:42 2025 by rpki-client