Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa
File:                     e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa (raw, json)
Hash identifier:          vwvRFkNVaBbqVEnRk0xGbzkHmChh6Y9sRZdf/uOBalM=
Subject key identifier:   58:AF:E6:E9:DE:15:F6:40:26:28:7C:BA:84:7E:98:28:FD:28:87:EB
Certificate issuer:       /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Certificate serial:       010D0C9F4328584B89176F23EEBD27757624DFB0
Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     40028
IP address blocks:        162.252.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:6f:23:ee:bd:27:75:76:24:df:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=17493d7f-2354-47b4-9b4d-fcf4681d8881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d6:85:3c:9d:0a:82:c1:dd:e7:69:7e:08:af:
                    eb:0b:99:d2:1d:50:a9:e4:aa:42:31:5d:98:58:60:
                    72:6a:a2:d6:9c:a2:44:2d:c4:ce:a4:c0:00:6e:41:
                    c2:56:64:7d:8a:c0:f0:00:46:9a:63:b6:e7:d1:8c:
                    f0:33:bf:ae:e0:78:b7:1a:04:b0:32:0a:84:0c:14:
                    1a:51:60:ba:81:d3:26:c8:f6:20:9c:76:02:cf:05:
                    e0:4b:8c:cf:da:be:c0:98:01:0b:30:8f:1a:48:40:
                    25:af:0c:52:a3:3f:c5:0f:39:bf:c7:7c:0d:bc:53:
                    dc:b0:d2:a3:68:76:d4:bc:5e:ab:91:70:12:70:38:
                    7b:ff:47:66:cd:03:ff:f4:43:a5:76:50:e6:9a:67:
                    92:33:46:f4:63:84:7c:36:33:ce:c4:2d:09:de:91:
                    27:45:de:9a:f3:0c:63:e4:0a:09:30:93:54:38:e8:
                    37:27:fc:17:d2:bf:69:cd:67:79:e4:f9:a2:5a:a3:
                    1c:ba:76:d7:97:ac:f6:eb:63:b2:a5:09:77:d5:19:
                    11:44:b6:c5:c6:59:45:e8:d9:ed:bc:5c:fd:18:d3:
                    d9:a1:29:d4:48:57:40:2a:6b:47:c2:5f:3d:fb:98:
                    c7:73:5e:3d:09:db:56:7d:14:d3:1e:83:89:88:a4:
                    df:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AF:E6:E9:DE:15:F6:40:26:28:7C:BA:84:7E:98:28:FD:28:87:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/e9caf269-6cab-35c6-83f5-91aac4e9f48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl

            X509v3 Authority Key Identifier:
                keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:22:8d:96:2c:c2:8b:6d:19:cf:53:86:be:4c:26:3e:84:48:
         0b:21:71:85:1a:e4:b3:41:cc:f0:c8:b1:ad:70:b2:f3:42:0c:
         6f:73:7d:11:f5:05:93:05:22:1c:fe:5b:79:e7:0b:9e:92:82:
         7a:09:e1:e8:14:75:9a:ff:6f:ff:1c:39:b4:ec:7d:bd:19:53:
         d7:1a:e8:31:a1:b6:ce:2f:ac:42:56:d9:8d:7e:53:72:13:80:
         2c:bc:13:24:9f:97:13:9d:93:23:65:ac:69:5b:78:9b:f3:77:
         a9:cf:ac:9e:71:b1:63:e5:ac:07:12:c2:06:87:0a:ea:49:7e:
         aa:50:4c:7f:c8:e1:0d:c0:ff:cc:74:c0:f4:26:11:b6:51:a2:
         a6:41:08:83:bb:db:34:d7:d5:77:74:38:c7:93:bc:12:1f:85:
         45:09:79:7b:1d:a0:d8:91:a5:2b:bf:08:d4:1b:f4:a6:5f:c6:
         e4:98:19:f1:9b:fd:5d:0f:e3:1c:fb:c2:47:3d:6a:2b:bc:e7:
         2c:f9:7e:0a:72:56:c3:1a:8f:63:e9:2a:86:0d:b3:0a:4b:d7:
         14:9d:2c:3c:49:6c:0a:d9:b5:9d:bb:15:08:84:ab:9e:f0:22:
         c9:eb:81:06:6f:3f:8b:7f:05:d0:28:1e:d9:44:48:bb:4d:ad:
         73:a4:fa:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF28j7r0ndXYk37AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQxOGNhNmYtMjBjOC00ZjFiLWI0ZjUtZTRmODA1ODYy
MzYzMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
MTc0OTNkN2YtMjM1NC00N2I0LTliNGQtZmNmNDY4MWQ4ODgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNaFPJ0KgsHd52l+CK/rC5nSHVCp5KpCMV2Y
WGByaqLWnKJELcTOpMAAbkHCVmR9isDwAEaaY7bn0YzwM7+u4Hi3GgSwMgqEDBQa
UWC6gdMmyPYgnHYCzwXgS4zP2r7AmAELMI8aSEAlrwxSoz/FDzm/x3wNvFPcsNKj
aHbUvF6rkXAScDh7/0dmzQP/9EOldlDmmmeSM0b0Y4R8NjPOxC0J3pEnRd6a8wxj
5AoJMJNUOOg3J/wX0r9pzWd55PmiWqMcunbXl6z262OypQl31RkRRLbFxllF6Nnt
vFz9GNPZoSnUSFdAKmtHwl89+5jHc149CdtWfRTTHoOJiKTfyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFiv5uneFfZAJih8uoR+mCj9KIfrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNDE4
Y2E2Zi0yMGM4LTRmMWItYjRmNS1lNGY4MDU4NjIzNjMvZTljYWYyNjktNmNhYi0z
NWM2LTgzZjUtOTFhYWM0ZTlmNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzQxOGNhNmYtMjBjOC00ZjFiLWI0
ZjUtZTRmODA1ODYyMzYzL2M0MThjYTZmLTIwYzgtNGYxYi1iNGY1LWU0ZjgwNTg2
MjM2My5jcmwwHwYDVR0jBBgwFoAUNfqIdPmA7c2mQtILHtC4i+/r13swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNDE4Y2E2Zi0yMGM4LTRmMWItYjRmNS1lNGY4
MDU4NjIzNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovypMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUijZYswottGc9Thr5MJj6ESAshcYUa5LNBzPDIsa1wsvNCDG9zfRH1
BZMFIhz+W3nnC56SgnoJ4egUdZr/b/8cObTsfb0ZU9ca6DGhts4vrEJW2Y1+U3IT
gCy8EySflxOdkyNlrGlbeJvzd6nPrJ5xsWPlrAcSwgaHCupJfqpQTH/I4Q3A/8x0
wPQmEbZRoqZBCIO72zTX1Xd0OMeTvBIfhUUJeXsdoNiRpSu/CNQb9KZfxuSYGfGb
/V0P4xz7wkc9aiu85yz5fgpyVsMaj2PpKoYNswpL1xSdLDxJbArZtZ27FQiEq57w
IsnrgQZvP4t/BdAoHtlESLtNrXOk+tE=
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:06:05 2025 by rpki-client