Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/10923bc1-e9d0-304b-8109-da566ddc429f.roa
File:                     10923bc1-e9d0-304b-8109-da566ddc429f.roa (raw, json)
Hash identifier:          8jxsQWT/3k5AxYsBn/Zam2EShDjo3VPNWXvFi98UtPQ=
Subject key identifier:   8F:01:17:94:36:69:FC:B4:0E:E4:6C:A4:F6:14:A0:70:09:83:C6:A8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B7DECCC34A27B7504D023893C
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/10923bc1-e9d0-304b-8109-da566ddc429f.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        170.62.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:cc:34:a2:7b:75:04:d0:23:89:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=91205121-2a45-4913-afd2-7599ccb7fd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:ba:6e:8d:f0:c7:0c:30:50:c1:d0:fa:8d:
                    df:3a:80:b4:83:69:62:5d:3c:f2:69:60:f8:10:84:
                    7e:3f:62:bc:3b:ba:5a:93:33:cf:0d:48:79:35:8d:
                    29:23:df:12:cb:56:1e:60:1f:c6:83:4d:62:da:9f:
                    a1:9c:10:52:4f:d7:f8:2e:96:8b:96:62:5c:97:6f:
                    13:9a:55:a8:ca:80:2e:08:82:22:ee:4a:12:87:f6:
                    d9:e6:03:5f:cb:f1:32:94:e5:ac:4b:28:84:59:31:
                    a5:e4:24:2d:07:c6:be:41:5c:4d:c2:bb:d5:3d:44:
                    a1:f2:98:53:80:00:54:65:5c:ae:56:c0:ab:16:2c:
                    7f:76:1e:47:7a:fc:0a:e1:da:2a:80:3b:bf:e9:fd:
                    d4:bd:ad:5b:5f:f4:cb:de:d0:35:6f:7a:2e:b2:e4:
                    02:4f:7e:98:a9:9a:b5:65:d1:a7:7a:79:86:7b:ef:
                    c6:cb:82:57:91:d4:7e:a1:fa:ce:5a:1e:a8:e8:8d:
                    60:6a:d2:8a:16:da:4e:44:8d:3c:d3:bc:5c:d1:58:
                    54:74:97:fe:bb:2a:25:ef:68:7e:a5:78:41:b9:eb:
                    ff:a5:8e:83:0c:78:e3:ba:a0:58:a5:a6:39:29:1e:
                    62:0e:ce:6f:27:93:66:1a:72:4a:b7:39:90:2a:f0:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:01:17:94:36:69:FC:B4:0E:E4:6C:A4:F6:14:A0:70:09:83:C6:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/10923bc1-e9d0-304b-8109-da566ddc429f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:55:91:a4:31:dd:cf:34:45:3e:77:81:8b:54:ba:fc:bc:a1:
         39:33:b0:a1:e9:e7:18:f3:d7:4d:75:0b:a2:39:97:d1:56:f8:
         64:12:de:2a:c5:8f:62:83:8f:00:8b:d7:47:c9:6d:e2:3b:8c:
         bf:b4:57:f5:0a:86:8d:ed:52:dd:22:f3:b7:28:84:93:be:6c:
         97:e7:e2:b1:12:74:b9:b2:70:f7:3f:e9:59:42:77:64:40:6d:
         63:14:66:fe:3f:c4:3f:a6:e6:01:ee:7a:80:94:a6:c4:5c:cc:
         80:20:76:97:2e:6f:0d:9c:4e:cf:0b:3f:09:10:0b:82:a8:1a:
         23:ef:a9:48:cf:80:78:7b:ed:06:61:7a:83:15:7b:6e:6d:c9:
         6d:bf:ba:22:ac:cd:4d:c8:4c:25:8d:78:84:ed:63:f9:8a:60:
         d3:cb:04:42:f6:16:1f:86:26:ab:3b:45:e6:6f:74:e8:be:98:
         cd:9e:cc:b6:cd:55:e7:f5:c0:6d:2f:2c:23:fd:ad:63:19:bb:
         30:f3:ae:b1:ba:14:1d:f2:f4:bb:34:66:23:c8:af:73:3e:9b:
         83:dc:3d:7f:f1:64:cc:c4:21:77:ef:9c:40:51:0b:bb:f0:c1:
         98:31:4f:1a:f2:39:36:fc:ca:f6:bd:fd:8b:7a:4f:ae:25:06:
         aa:63:2e:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97Mw0ont1BNAjiTwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
OTEyMDUxMjEtMmE0NS00OTEzLWFmZDItNzU5OWNjYjdmZDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAS6bo3wxwwwUMHQ+o3fOoC0g2liXTzyaWD4
EIR+P2K8O7pakzPPDUh5NY0pI98Sy1YeYB/Gg01i2p+hnBBST9f4LpaLlmJcl28T
mlWoyoAuCIIi7koSh/bZ5gNfy/EylOWsSyiEWTGl5CQtB8a+QVxNwrvVPUSh8phT
gABUZVyuVsCrFix/dh5HevwK4doqgDu/6f3Uva1bX/TL3tA1b3ousuQCT36YqZq1
ZdGnenmGe+/Gy4JXkdR+ofrOWh6o6I1gatKKFtpORI0807xc0VhUdJf+uyol72h+
pXhBuev/pY6DDHjjuqBYpaY5KR5iDs5vJ5NmGnJKtzmQKvB2UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8BF5Q2afy0DuRspPYUoHAJg8aoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTA5MjNiYzEtZTlkMC0z
MDRiLTgxMDktZGE1NjZkZGM0MjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqj6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJVkaQx3c80RT53gYtUuvy8oTkzsKHp5xjz1011C6I5l9FW+GQS3irF
j2KDjwCL10fJbeI7jL+0V/UKho3tUt0i87cohJO+bJfn4rESdLmycPc/6VlCd2RA
bWMUZv4/xD+m5gHueoCUpsRczIAgdpcubw2cTs8LPwkQC4KoGiPvqUjPgHh77QZh
eoMVe25tyW2/uiKszU3ITCWNeITtY/mKYNPLBEL2Fh+GJqs7ReZvdOi+mM2ezLbN
Vef1wG0vLCP9rWMZuzDzrrG6FB3y9Ls0ZiPIr3M+m4PcPX/xZMzEIXfvnEBRC7vw
wZgxTxryOTb8yva9/Yt6T64lBqpjLpQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:01 2025 by rpki-client