Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac910dec-4f5c-3f9c-8699-af4e2d676c92.roa
File:                     ac910dec-4f5c-3f9c-8699-af4e2d676c92.roa (raw, json)
Hash identifier:          M1RSACpsJ0LprhYvScL7Bt1nxC1q5p4I5EWjeAFYc80=
Subject key identifier:   25:62:EA:07:47:FA:0B:12:C6:F7:66:38:1B:E0:F8:75:99:9A:DF:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD7AABAD3CAB4970BD6200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac910dec-4f5c-3f9c-8699-af4e2d676c92.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        75.66.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:7a:ab:ad:3c:ab:49:70:bd:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=d870027b-ddb7-4878-b84e-b41aca05cf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:f0:8e:af:7d:b5:26:45:2e:5b:5b:cb:de:
                    a4:f8:85:03:8c:bb:2d:1c:f9:ce:c2:d6:d1:74:07:
                    03:59:f4:fb:00:53:ea:43:bb:b2:12:be:ed:2c:88:
                    71:c7:41:9f:45:b9:a6:0c:d5:c3:81:d0:c4:d0:48:
                    6a:4f:d0:2c:d9:6b:53:26:7f:98:db:39:a4:e2:78:
                    a7:b0:70:cc:42:37:77:e6:05:3c:a4:32:87:b8:b1:
                    0b:63:19:9c:e3:57:d8:8d:b2:be:de:42:9f:df:de:
                    30:f3:6c:ca:58:ec:65:ec:65:ed:f7:7e:56:22:97:
                    9a:e4:4c:de:72:37:f8:35:54:80:9a:a3:89:1b:38:
                    3f:a4:6b:bd:5d:93:c2:8f:5e:5c:f8:b0:c3:bf:64:
                    40:1a:18:a1:a1:da:0b:b6:a3:f6:66:65:6e:2f:ba:
                    59:e7:09:be:26:71:56:d4:d8:52:04:52:40:0e:a0:
                    47:48:05:12:01:b5:3d:43:9a:82:ce:bf:99:81:76:
                    14:ab:ce:1b:aa:1f:81:5c:66:2d:c0:40:7d:1d:02:
                    5d:5c:a8:38:83:74:0e:98:8e:bf:cf:d6:95:ed:ce:
                    2e:73:ff:65:ca:d5:56:f6:9c:0b:e3:17:ae:ab:0f:
                    f3:e8:3a:57:d4:a2:53:11:76:4a:4c:bd:04:51:7f:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:62:EA:07:47:FA:0B:12:C6:F7:66:38:1B:E0:F8:75:99:9A:DF:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac910dec-4f5c-3f9c-8699-af4e2d676c92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.66.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:53:02:c0:80:91:10:41:af:da:98:86:6e:86:3d:d9:e9:4c:
         f7:b6:56:b9:fb:75:81:ed:7b:ed:a4:2a:a9:9a:4a:6a:bd:d6:
         1f:a4:cf:b0:ce:cd:00:59:eb:6d:63:2c:69:53:50:3c:a0:12:
         36:81:22:8c:96:55:19:3d:ed:9b:83:96:86:81:d9:98:59:ae:
         78:fb:3a:1c:fd:d0:f4:b1:37:87:08:69:66:b0:f8:93:e2:1a:
         88:98:1c:db:da:ab:39:8e:a4:e8:a9:5a:7f:91:35:35:4a:ca:
         3a:16:32:d0:f1:7c:7f:de:b1:8e:02:27:57:d4:8d:f8:80:68:
         c0:76:b6:e7:7f:86:e1:3d:62:87:9b:35:5e:95:15:88:f8:56:
         f6:17:bc:9a:0b:95:53:9c:29:6a:36:7d:97:89:d8:dd:d2:d0:
         74:da:7f:b4:fd:a3:5b:57:63:59:d9:f2:89:75:3b:d8:76:54:
         95:cc:2d:c9:f8:9a:9d:84:b7:88:d3:d2:db:fe:2d:03:67:0e:
         8c:fc:03:a4:57:c2:7f:2f:21:2e:55:01:06:c9:20:fb:c1:ac:
         80:ca:6f:1d:5a:49:01:64:63:27:84:62:cd:9b:bf:3d:51:ff:
         23:ef:85:14:62:fe:38:53:a7:43:49:46:7f:21:d1:02:61:a4:
         e7:6f:44:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3XqrrTyrSXC9YgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
ZDg3MDAyN2ItZGRiNy00ODc4LWI4NGUtYjQxYWNhMDVjZjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgXwjq99tSZFLltby96k+IUDjLstHPnOwtbR
dAcDWfT7AFPqQ7uyEr7tLIhxx0GfRbmmDNXDgdDE0EhqT9As2WtTJn+Y2zmk4nin
sHDMQjd35gU8pDKHuLELYxmc41fYjbK+3kKf394w82zKWOxl7GXt935WIpea5Eze
cjf4NVSAmqOJGzg/pGu9XZPCj15c+LDDv2RAGhihodoLtqP2ZmVuL7pZ5wm+JnFW
1NhSBFJADqBHSAUSAbU9Q5qCzr+ZgXYUq84bqh+BXGYtwEB9HQJdXKg4g3QOmI6/
z9aV7c4uc/9lytVW9pwL4xeuqw/z6DpX1KJTEXZKTL0EUX8u+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCVi6gdH+gsSxvdmOBvg+HWZmt+AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWM5MTBkZWMtNGY1Yy0z
ZjljLTg2OTktYWY0ZTJkNjc2YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS0ImMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFTAsCAkRBBr9qYhm6GPdnpTPe2Vrn7dYHte+2kKqmaSmq91h+kz7DO
zQBZ621jLGlTUDygEjaBIoyWVRk97ZuDloaB2ZhZrnj7Ohz90PSxN4cIaWaw+JPi
GoiYHNvaqzmOpOipWn+RNTVKyjoWMtDxfH/esY4CJ1fUjfiAaMB2tud/huE9Yoeb
NV6VFYj4VvYXvJoLlVOcKWo2fZeJ2N3S0HTaf7T9o1tXY1nZ8ol1O9h2VJXMLcn4
mp2Et4jT0tv+LQNnDoz8A6RXwn8vIS5VAQbJIPvBrIDKbx1aSQFkYyeEYs2bvz1R
/yPvhRRi/jhTp0NJRn8h0QJhpOdvRDo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:27:03 2025 by rpki-client