Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/62bba412-5d5e-3718-8369-77efd12e1895.roa
File:                     62bba412-5d5e-3718-8369-77efd12e1895.roa (raw, json)
Hash identifier:          p0dwkuaG/3WASYbjM8gHEr7pJG/Umpa7EDUmObQJ5vI=
Subject key identifier:   8C:43:E9:53:7F:DD:44:A8:5D:18:BB:14:9D:3C:84:D7:6F:71:E5:A7
Certificate issuer:       /CN=97cfe007-0ab6-43e1-9c67-fb4446b0abf3
Certificate serial:       010D0C9F4328584F13024B84F08885710FEDEB40
Authority key identifier: 03:6C:35:28:AA:4A:1E:91:4E:B7:98:BE:E3:C0:48:55:29:67:FF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/62bba412-5d5e-3718-8369-77efd12e1895.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     63023
IP address blocks:        162.246.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:4b:84:f0:88:85:71:0f:ed:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cfe007-0ab6-43e1-9c67-fb4446b0abf3
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=fdd2ecf1-cb38-4bed-b8ce-a8619361feb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:59:25:87:8c:31:b1:60:f0:bb:3b:f4:e9:
                    97:9b:92:ae:e5:fd:a2:49:3f:09:75:c8:5f:17:65:
                    8b:ae:f4:56:f8:d7:73:23:d9:f8:67:b5:88:91:08:
                    d7:b3:fd:71:e4:e2:a8:d3:11:ab:88:b2:0d:6f:53:
                    3e:e7:fa:21:81:40:f1:82:91:06:fe:7c:29:21:cf:
                    42:87:0a:d3:9c:2a:29:91:74:fd:3b:69:78:03:cb:
                    48:4a:88:6e:86:91:d2:67:a8:8e:8f:42:c4:b6:c6:
                    66:28:1d:1f:73:8d:9c:89:1f:1e:66:ee:7c:ae:02:
                    de:d7:d8:19:dd:13:20:4d:5e:22:57:3f:2f:b2:0f:
                    6d:4b:aa:fb:74:5c:94:dd:0b:24:42:d8:81:70:3b:
                    ae:d6:6c:12:05:18:6e:d7:76:aa:67:12:f6:f1:3a:
                    d5:5f:cb:ab:32:b8:cc:a0:ea:3a:a7:f7:f4:ab:25:
                    18:bc:38:0c:cf:d9:5f:4a:bf:d5:c6:97:24:51:e6:
                    ec:bb:26:e3:30:c8:73:6e:65:7a:21:5f:0a:42:c4:
                    2c:20:97:a3:3a:e1:24:a8:ab:bd:37:c2:a3:cc:60:
                    6c:93:ca:0b:f6:7e:44:50:6f:5b:ef:70:6c:b3:71:
                    7a:52:15:8e:b8:8e:a8:e4:e5:1b:2a:f8:4b:f8:7d:
                    06:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:43:E9:53:7F:DD:44:A8:5D:18:BB:14:9D:3C:84:D7:6F:71:E5:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/62bba412-5d5e-3718-8369-77efd12e1895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.crl

            X509v3 Authority Key Identifier:
                keyid:03:6C:35:28:AA:4A:1E:91:4E:B7:98:BE:E3:C0:48:55:29:67:FF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/97cfe007-0ab6-43e1-9c67-fb4446b0abf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a7:68:68:63:47:78:f6:db:d8:1e:3b:50:87:a9:60:a8:64:
         48:04:7e:f5:57:dc:d4:89:57:dc:5b:78:56:e8:50:13:76:93:
         80:87:13:ad:fc:2f:1f:a4:bf:be:5d:75:54:b9:18:21:4d:8e:
         46:58:46:f9:56:b7:5d:e7:18:38:af:ed:0d:99:01:a8:12:03:
         bb:f7:2f:28:6e:1d:82:fe:24:db:72:ee:a0:bc:4d:dc:c5:f3:
         49:39:e1:c8:15:30:0f:60:47:36:85:58:5b:e5:3d:eb:a0:24:
         89:82:3a:39:e3:84:db:5f:ac:05:5b:12:83:ba:5e:b5:92:ff:
         a9:cf:e1:3f:5f:51:06:25:91:b0:09:3b:88:8a:2f:c8:5a:3a:
         5c:c9:c0:c7:5f:56:82:3b:c5:a0:ac:22:b8:3c:b1:53:f1:d0:
         29:04:2d:7b:ee:d5:0e:bf:04:62:fd:1f:6d:54:84:9e:32:e5:
         f2:92:c3:4e:a1:5c:da:02:6e:e4:0b:8d:6a:12:64:15:0a:65:
         d6:41:c7:dc:6a:84:bc:96:dc:b1:c0:4c:03:c5:ac:ba:11:ac:
         62:bb:c0:59:e4:ff:8a:ff:2b:ec:81:10:4a:07:7b:fc:07:93:
         98:98:b9:ef:0a:cc:ff:eb:e6:05:bf:79:18:e1:4e:37:60:49:
         a9:e1:b3:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAkuE8IiFcQ/t60AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTdjZmUwMDctMGFiNi00M2UxLTljNjctZmI0NDQ2YjBh
YmYzMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk
ZmRkMmVjZjEtY2IzOC00YmVkLWI4Y2UtYTg2MTkzNjFmZWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmspZJYeMMbFg8Ls79OmXm5Ku5f2iST8Jdchf
F2WLrvRW+NdzI9n4Z7WIkQjXs/1x5OKo0xGriLINb1M+5/ohgUDxgpEG/nwpIc9C
hwrTnCopkXT9O2l4A8tISohuhpHSZ6iOj0LEtsZmKB0fc42ciR8eZu58rgLe19gZ
3RMgTV4iVz8vsg9tS6r7dFyU3QskQtiBcDuu1mwSBRhu13aqZxL28TrVX8urMrjM
oOo6p/f0qyUYvDgMz9lfSr/VxpckUebsuybjMMhzbmV6IV8KQsQsIJejOuEkqKu9
N8KjzGBsk8oL9n5EUG9b73Bss3F6UhWOuI6o5OUbKvhL+H0G5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIxD6VN/3USoXRi7FJ08hNdvceWnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85N2Nm
ZTAwNy0wYWI2LTQzZTEtOWM2Ny1mYjQ0NDZiMGFiZjMvNjJiYmE0MTItNWQ1ZS0z
NzE4LTgzNjktNzdlZmQxMmUxODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOTdjZmUwMDctMGFiNi00M2UxLTlj
NjctZmI0NDQ2YjBhYmYzLzk3Y2ZlMDA3LTBhYjYtNDNlMS05YzY3LWZiNDQ0NmIw
YWJmMy5jcmwwHwYDVR0jBBgwFoAUA2w1KKpKHpFOt5i+48BIVSln/8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi85N2NmZTAwNy0wYWI2LTQzZTEtOWM2Ny1mYjQ0
NDZiMGFiZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovboMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKnaGhjR3j229geO1CHqWCoZEgEfvVX3NSJV9xbeFboUBN2k4CHE638
Lx+kv75ddVS5GCFNjkZYRvlWt13nGDiv7Q2ZAagSA7v3LyhuHYL+JNty7qC8TdzF
80k54cgVMA9gRzaFWFvlPeugJImCOjnjhNtfrAVbEoO6XrWS/6nP4T9fUQYlkbAJ
O4iKL8haOlzJwMdfVoI7xaCsIrg8sVPx0CkELXvu1Q6/BGL9H21UhJ4y5fKSw06h
XNoCbuQLjWoSZBUKZdZBx9xqhLyW3LHATAPFrLoRrGK7wFnk/4r/K+yBEEoHe/wH
k5iYue8KzP/r5gW/eRjhTjdgSanhs0U=
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:04:40 2026 by rpki-client