Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/e9b565f5-dc52-3f33-b5c7-7d4ac2e87fa1.roa
File:                     e9b565f5-dc52-3f33-b5c7-7d4ac2e87fa1.roa (raw, json)
Hash identifier:          Nip832RLfa/YAaZNNwdh8tkD+iLUIsR1KC3MkmaEZdY=
Subject key identifier:   FA:05:7B:1E:4E:8E:FB:D4:FC:08:86:B3:62:36:68:93:C0:9B:A0:E2
Certificate issuer:       /CN=766eb068-340f-4e16-9d08-04181e100ca2
Certificate serial:       010D0C9F4328584B80B7580976626E9CA8802130
Authority key identifier: 09:5F:AA:AA:CA:2F:82:BD:AF:19:2B:3A:7B:DC:B5:FC:44:69:C7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/e9b565f5-dc52-3f33-b5c7-7d4ac2e87fa1.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     63278
IP address blocks:        192.64.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:58:09:76:62:6e:9c:a8:80:21:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766eb068-340f-4e16-9d08-04181e100ca2
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=b284224c-b6f7-4495-bfac-63d8fb689d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ab:eb:65:d3:51:25:1f:93:52:56:9f:b0:bc:
                    33:9f:d3:28:5d:40:2e:8b:7b:82:e6:77:d0:14:0d:
                    86:51:a3:f0:3c:7c:0d:16:21:fe:a6:ad:e4:4f:98:
                    39:5b:6f:ea:cc:cf:18:32:d0:88:28:c6:a1:54:a6:
                    5b:bf:87:49:34:6c:29:a4:e6:f0:7f:5d:aa:65:3a:
                    7c:d8:11:73:bc:b0:06:8c:42:cc:de:9d:90:1b:4d:
                    f9:e3:7f:6c:94:b4:48:b3:92:d0:70:2f:38:0f:e7:
                    f8:70:56:de:f7:03:2b:70:2e:b5:54:de:87:37:ee:
                    64:c8:06:ee:33:81:b5:ab:c8:47:49:8f:07:5a:e6:
                    b1:fc:76:c9:76:f9:93:c1:f6:d5:6d:f4:d2:06:14:
                    ac:df:43:4a:2e:cf:df:af:f7:ae:13:bf:7a:01:9e:
                    70:33:b0:0f:f3:f6:3e:32:57:86:40:a3:61:57:84:
                    64:9b:0f:9b:b8:13:e1:d3:1c:2c:bf:c7:1a:72:97:
                    3b:94:2a:66:be:ea:87:76:0c:0b:45:ee:06:44:4a:
                    62:b8:df:18:07:55:9d:e1:d9:0c:3c:0a:b6:b3:51:
                    86:aa:b4:64:c8:cf:7a:46:79:4b:3d:11:45:aa:b0:
                    74:16:aa:8c:6e:58:db:7e:af:2d:ec:8a:ec:25:3e:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:05:7B:1E:4E:8E:FB:D4:FC:08:86:B3:62:36:68:93:C0:9B:A0:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/e9b565f5-dc52-3f33-b5c7-7d4ac2e87fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.crl

            X509v3 Authority Key Identifier:
                keyid:09:5F:AA:AA:CA:2F:82:BD:AF:19:2B:3A:7B:DC:B5:FC:44:69:C7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:88:25:99:18:92:c6:54:9c:4e:81:b5:7e:a5:4e:96:ca:0e:
         d9:7e:bc:3e:ab:fa:02:f6:0d:63:a7:cc:a6:38:7f:e9:e6:c6:
         75:10:14:5a:a4:0c:92:c3:cb:f9:ac:b5:b5:a7:05:78:15:cf:
         d7:88:b9:32:99:7d:48:e5:d6:46:ce:e2:7c:ba:c9:9b:e5:8a:
         32:1c:e7:77:4c:28:58:e7:05:b6:89:40:93:0f:f8:c6:bd:a7:
         05:a0:b1:75:de:10:89:18:1c:09:54:4e:24:2a:c6:80:15:30:
         b0:e6:ec:13:81:bb:5a:b7:fb:9d:a5:fc:49:d5:72:5a:7d:e3:
         48:d5:80:3e:a6:b3:29:d5:a3:99:55:bf:3a:94:56:4c:5e:ee:
         f6:ab:1d:1f:4b:49:67:87:35:45:d6:61:2e:4e:cb:ab:5b:2d:
         b1:1d:ea:55:89:66:d4:fd:76:4f:86:5f:a7:6d:a1:51:1b:87:
         af:de:bb:80:6c:c3:3c:20:6b:4f:3e:d6:59:82:07:ba:fd:ef:
         91:2c:33:07:e6:ff:74:f1:25:88:fc:25:a6:9f:61:41:79:a9:
         ba:4c:cd:be:73:e3:45:a8:bc:35:eb:2e:98:51:97:d0:60:c5:
         42:1e:f8:3c:59:19:d0:71:9f:c1:95:04:0b:7c:99:af:62:2a:
         d4:7c:1e:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1gJdmJunKiAITAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY2ZWIwNjgtMzQwZi00ZTE2LTlkMDgtMDQxODFlMTAw
Y2EyMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
YjI4NDIyNGMtYjZmNy00NDk1LWJmYWMtNjNkOGZiNjg5ZDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKvrZdNRJR+TUlafsLwzn9MoXUAui3uC5nfQ
FA2GUaPwPHwNFiH+pq3kT5g5W2/qzM8YMtCIKMahVKZbv4dJNGwppObwf12qZTp8
2BFzvLAGjELM3p2QG035439slLRIs5LQcC84D+f4cFbe9wMrcC61VN6HN+5kyAbu
M4G1q8hHSY8HWuax/HbJdvmTwfbVbfTSBhSs30NKLs/fr/euE796AZ5wM7AP8/Y+
MleGQKNhV4Rkmw+buBPh0xwsv8cacpc7lCpmvuqHdgwLRe4GREpiuN8YB1Wd4dkM
PAq2s1GGqrRkyM96RnlLPRFFqrB0FqqMbljbfq8t7IrsJT7yQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPoFex5OjvvU/AiGs2I2aJPAm6DiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NjZl
YjA2OC0zNDBmLTRlMTYtOWQwOC0wNDE4MWUxMDBjYTIvZTliNTY1ZjUtZGM1Mi0z
ZjMzLWI1YzctN2Q0YWMyZTg3ZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzY2ZWIwNjgtMzQwZi00ZTE2LTlk
MDgtMDQxODFlMTAwY2EyLzc2NmViMDY4LTM0MGYtNGUxNi05ZDA4LTA0MTgxZTEw
MGNhMi5jcmwwHwYDVR0jBBgwFoAUCV+qqsovgr2vGSs6e9y1/ERpxywwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NjZlYjA2OC0zNDBmLTRlMTYtOWQwOC0wNDE4
MWUxMDBjYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEAfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyIJZkYksZUnE6BtX6lTpbKDtl+vD6r+gL2DWOnzKY4f+nmxnUQFFqk
DJLDy/mstbWnBXgVz9eIuTKZfUjl1kbO4ny6yZvlijIc53dMKFjnBbaJQJMP+Ma9
pwWgsXXeEIkYHAlUTiQqxoAVMLDm7BOBu1q3+52l/EnVclp940jVgD6msynVo5lV
vzqUVkxe7varHR9LSWeHNUXWYS5Oy6tbLbEd6lWJZtT9dk+GX6dtoVEbh6/eu4Bs
wzwga08+1lmCB7r975EsMwfm/3TxJYj8JaafYUF5qbpMzb5z40WovDXrLphRl9Bg
xUIe+DxZGdBxn8GVBAt8ma9iKtR8HkM=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:14:32 2025 by rpki-client