Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/4abcc67d-3a6d-371d-95fe-5b4e7e7e316b.roa
File:                     4abcc67d-3a6d-371d-95fe-5b4e7e7e316b.roa (raw, json)
Hash identifier:          4fswGWwVn93JSZBsMVjbtaN20gKWA4lx4rPBAyqNDXc=
Subject key identifier:   5F:84:3E:3C:2A:D3:3B:65:43:3F:22:04:26:39:C8:B1:7C:77:23:E8
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584B63674D200FB0FD0AF66EF400
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/4abcc67d-3a6d-371d-95fe-5b4e7e7e316b.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     393262
IP address blocks:        216.122.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:4d:20:0f:b0:fd:0a:f6:6e:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=0595e82d-89a3-4eb8-89a2-652b6bcf02fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c6:9d:19:2e:82:b9:b2:aa:ce:83:b8:37:a4:
                    7e:d4:5a:51:3f:7c:2f:c7:c7:92:85:20:e1:ec:3c:
                    db:94:d5:fb:38:8e:eb:0d:6e:5e:28:c6:35:61:d4:
                    6d:1f:ff:c5:b4:a5:af:39:59:99:49:b4:9e:e7:f6:
                    dc:d1:09:d4:5f:60:3d:5d:6d:b6:32:b4:ce:36:84:
                    ad:6a:75:2b:cc:b3:a5:c0:2e:d3:ca:64:e3:26:86:
                    ee:d1:66:43:60:a5:d7:0e:3a:a0:9b:b3:28:a7:e7:
                    28:46:fe:f0:f0:b9:45:67:4d:c8:04:e6:5a:48:e3:
                    4e:03:9e:d5:e6:c5:27:42:65:55:a8:a7:29:a2:89:
                    18:e4:71:e9:9d:ba:ea:c7:a2:83:46:49:12:4b:8a:
                    1a:e3:8b:f1:17:66:72:9b:a2:73:ea:79:3b:e3:63:
                    54:8b:2c:b9:a0:82:20:a2:2b:be:2c:78:22:c6:d2:
                    1d:c7:a6:56:0f:90:14:9f:8a:91:6f:4c:f1:28:80:
                    06:86:6c:45:5a:a4:a8:ff:cd:45:83:66:4d:14:e9:
                    05:26:06:85:94:56:3c:51:3f:55:58:d0:1e:9a:2d:
                    b6:96:05:10:7b:57:f9:4f:bf:f5:1c:3f:b5:88:2b:
                    b9:a9:22:e1:27:24:fa:e5:83:e8:fa:82:30:13:55:
                    b1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:84:3E:3C:2A:D3:3B:65:43:3F:22:04:26:39:C8:B1:7C:77:23:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/4abcc67d-3a6d-371d-95fe-5b4e7e7e316b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:3e:70:74:cc:a9:4d:67:6e:e5:ee:1f:b7:f5:8e:de:9f:50:
         26:8e:f8:21:a1:22:91:d0:81:de:b3:16:19:e6:27:4b:89:b8:
         f9:89:de:61:96:c5:e8:41:82:62:07:7e:b4:79:a7:e7:32:3c:
         8f:03:e2:17:a4:e1:e8:43:59:08:45:e4:ae:c5:27:17:8d:03:
         2c:e4:3f:31:3a:2e:5f:fa:e0:3a:c6:83:3a:bd:66:36:b7:13:
         ce:b6:84:dc:4a:0a:71:0c:e9:46:32:d9:7c:38:ed:1f:86:02:
         67:8b:08:2a:44:91:28:36:41:9d:62:0b:11:7e:c1:ef:ab:64:
         1a:11:d4:6a:12:ce:d1:20:26:d5:47:66:a9:ca:61:bf:46:79:
         c3:a4:65:4a:f6:e3:44:d8:31:f9:2f:9e:55:65:cf:43:78:74:
         de:37:80:68:30:d1:a7:e5:bd:f9:14:e2:5a:e5:1b:36:13:9a:
         3a:cf:15:5a:dd:fd:58:f3:93:71:8f:3e:7d:10:e7:70:ed:c9:
         1a:30:27:2b:3f:e7:5c:a9:b4:17:17:d1:60:8a:4e:fa:88:34:
         8a:ff:a9:7a:22:eb:a5:1b:74:ce:24:1e:72:6e:d4:0b:66:e2:
         8a:2d:ae:92:60:00:61:9a:6c:5e:d5:f0:82:85:66:0e:67:91:
         82:ae:8b:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ00gD7D9CvZu9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2VjZTA0MDQtODBhOC00NmYyLTkyZWItOGYwYjU1OGM3
ZGJlMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk
MDU5NWU4MmQtODlhMy00ZWI4LTg5YTItNjUyYjZiY2YwMmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMadGS6CubKqzoO4N6R+1FpRP3wvx8eShSDh
7DzblNX7OI7rDW5eKMY1YdRtH//FtKWvOVmZSbSe5/bc0QnUX2A9XW22MrTONoSt
anUrzLOlwC7TymTjJobu0WZDYKXXDjqgm7Mop+coRv7w8LlFZ03IBOZaSONOA57V
5sUnQmVVqKcpookY5HHpnbrqx6KDRkkSS4oa44vxF2Zym6Jz6nk742NUiyy5oIIg
oiu+LHgixtIdx6ZWD5AUn4qRb0zxKIAGhmxFWqSo/81Fg2ZNFOkFJgaFlFY8UT9V
WNAemi22lgUQe1f5T7/1HD+1iCu5qSLhJyT65YPo+oIwE1Wx8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF+EPjwq0ztlQz8iBCY5yLF8dyPoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZWNl
MDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBiNTU4YzdkYmUvNGFiY2M2N2QtM2E2ZC0z
NzFkLTk1ZmUtNWI0ZTdlN2UzMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2VjZTA0MDQtODBhOC00NmYyLTky
ZWItOGYwYjU1OGM3ZGJlLzdlY2UwNDA0LTgwYTgtNDZmMi05MmViLThmMGI1NThj
N2RiZS5jcmwwHwYDVR0jBBgwFoAUGNN/t1DuQwFGJh0iV9F4XA6RX9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZWNlMDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBi
NTU4YzdkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HodMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGA+cHTMqU1nbuXuH7f1jt6fUCaO+CGhIpHQgd6zFhnmJ0uJuPmJ3mGW
xehBgmIHfrR5p+cyPI8D4hek4ehDWQhF5K7FJxeNAyzkPzE6Ll/64DrGgzq9Zja3
E862hNxKCnEM6UYy2Xw47R+GAmeLCCpEkSg2QZ1iCxF+we+rZBoR1GoSztEgJtVH
ZqnKYb9GecOkZUr240TYMfkvnlVlz0N4dN43gGgw0aflvfkU4lrlGzYTmjrPFVrd
/Vjzk3GPPn0Q53DtyRowJys/51yptBcX0WCKTvqINIr/qXoi66UbdM4kHnJu1Atm
4ootrpJgAGGabF7V8IKFZg5nkYKui48=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:18:41 2025 by rpki-client