Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa
File:                     2f160a0e-a123-3a72-99e1-d669496bd1e0.roa (raw, json)
Hash identifier:          6y3tkvPPFuoeUVednPVzbZSDph7S2T6v/dH9s1CAgJA=
Subject key identifier:   33:2C:8A:5A:43:AA:07:02:47:20:43:27:C1:BE:AD:2A:25:8B:62:DD
Certificate issuer:       /CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6
Certificate serial:       010D0C9F4328584B434C69863DE15B3C1DC8F800
Authority key identifier: 32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     25944
IP address blocks:        23.157.168.0/24 maxlen: 24
                          2602:814:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:69:86:3d:e1:5b:3c:1d:c8:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=044e9de5-58f7-4d8c-b8ed-7d739720f153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:88:6e:ef:bb:a5:7f:cf:20:fb:0c:03:91:bc:
                    cd:fa:18:a0:66:dd:76:54:56:cc:7b:e4:5d:83:0a:
                    42:a1:95:6d:a1:8c:c4:49:43:ec:d5:33:9f:28:5b:
                    25:f3:c4:50:2b:d6:03:c8:3b:55:1e:ae:b5:88:6a:
                    57:b2:fa:1f:d1:37:56:72:5e:2d:c7:81:1e:fc:4e:
                    3a:47:c3:60:88:03:2f:4e:19:ef:3e:93:9a:53:9e:
                    30:ef:42:b5:9c:0d:40:5d:f3:95:7b:8b:f1:1d:c4:
                    a3:90:69:5c:31:20:bb:da:53:c8:fd:df:6b:6a:ee:
                    33:b3:44:cf:c4:ca:58:f3:15:10:06:79:f0:f3:ca:
                    df:16:a2:03:76:41:de:4f:8b:de:87:4e:5d:c2:58:
                    a0:a8:6a:4e:09:91:95:53:c2:21:f8:e1:ee:c9:76:
                    db:84:40:51:36:7f:18:ee:ce:f0:7c:c7:86:b9:e9:
                    8e:95:75:df:7c:30:7a:da:fe:6c:e5:c5:fe:79:de:
                    ee:63:8b:16:63:59:34:c3:4f:ab:56:ee:bb:a7:0e:
                    41:dd:d2:24:be:a8:63:68:c8:36:2d:13:9b:7f:a4:
                    4f:45:92:b2:d4:99:dd:66:8c:06:0b:3c:e4:f7:85:
                    4b:f8:70:a2:f6:ce:5d:9e:8a:74:1d:a1:62:d6:c6:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2C:8A:5A:43:AA:07:02:47:20:43:27:C1:BE:AD:2A:25:8B:62:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl

            X509v3 Authority Key Identifier:
                keyid:32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.168.0/24
                IPv6:
                  2602:814:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:5a:de:1e:86:90:9b:49:37:16:19:d0:8c:3d:8e:ad:e1:f6:
         fa:c7:c3:e9:63:5f:64:a4:46:86:44:4d:4a:a0:8c:62:79:59:
         9f:f5:53:a8:72:c8:59:11:74:20:58:a5:77:39:77:8b:48:52:
         ba:1a:cd:66:39:c8:bf:ae:0d:a1:3e:76:5f:a0:52:1c:05:ba:
         3d:ac:d3:94:09:52:d4:39:35:d1:1b:be:63:6f:a6:f4:b2:71:
         16:b1:de:84:a6:e6:29:01:9c:59:de:0d:fc:8b:ad:7b:30:3e:
         7b:ca:6a:c9:31:b3:63:10:2c:0c:09:a2:25:1e:9a:b8:37:fd:
         71:ca:a3:28:c4:03:13:aa:88:ef:11:63:18:74:6e:e7:b2:3c:
         fd:5b:fa:93:18:7b:f4:86:0c:cb:09:af:b4:f2:41:20:8d:10:
         ef:6f:60:ee:45:3d:40:c0:c3:36:67:57:43:0f:f9:ca:dd:65:
         33:51:37:80:29:fa:b6:a3:fe:bd:ca:76:37:01:32:53:b4:67:
         0e:ed:1c:db:3d:df:76:84:e6:5a:a2:36:31:70:40:b6:3b:83:
         5e:e5:2e:10:11:20:0a:53:37:de:95:b8:a5:06:f5:72:e3:bd:
         8d:6c:b9:7d:c7:90:07:9c:af:0c:92:ea:eb:fd:d9:3d:b3:c2:
         7e:5e:94:66
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtDTGmGPeFbPB3I+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDQ4YmYyYzgtN2YyYi00ZTJiLWE2NTMtMWU4OWVkMmNh
OGI2MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
MDQ0ZTlkZTUtNThmNy00ZDhjLWI4ZWQtN2Q3Mzk3MjBmMTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiohu77ulf88g+wwDkbzN+higZt12VFbMe+Rd
gwpCoZVtoYzESUPs1TOfKFsl88RQK9YDyDtVHq61iGpXsvof0TdWcl4tx4Ee/E46
R8NgiAMvThnvPpOaU54w70K1nA1AXfOVe4vxHcSjkGlcMSC72lPI/d9rau4zs0TP
xMpY8xUQBnnw88rfFqIDdkHeT4veh05dwligqGpOCZGVU8Ih+OHuyXbbhEBRNn8Y
7s7wfMeGuemOlXXffDB62v5s5cX+ed7uY4sWY1k0w0+rVu67pw5B3dIkvqhjaMg2
LRObf6RPRZKy1JndZowGCzzk94VL+HCi9s5dnop0HaFi1sapTQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFDMsilpDqgcCRyBDJ8G+rSoli2LdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NDhi
ZjJjOC03ZjJiLTRlMmItYTY1My0xZTg5ZWQyY2E4YjYvMmYxNjBhMGUtYTEyMy0z
YTcyLTk5ZTEtZDY2OTQ5NmJkMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDQ4YmYyYzgtN2YyYi00ZTJiLWE2
NTMtMWU4OWVkMmNhOGI2LzQ0OGJmMmM4LTdmMmItNGUyYi1hNjUzLTFlODllZDJj
YThiNi5jcmwwHwYDVR0jBBgwFoAUMpzTTWQriq2VApMNbBmQeCPWaY0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NDhiZjJjOC03ZjJiLTRlMmItYTY1My0xZTg5
ZWQyY2E4YjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF52oMA8E
AgACMAkDBwQmAggU0AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnVreHoaQm0k3FhnQjD2OreH2+sfD6WNf
ZKRGhkRNSqCMYnlZn/VTqHLIWRF0IFildzl3i0hSuhrNZjnIv64NoT52X6BSHAW6
PazTlAlS1Dk10Ru+Y2+m9LJxFrHehKbmKQGcWd4N/IutezA+e8pqyTGzYxAsDAmi
JR6auDf9ccqjKMQDE6qI7xFjGHRu57I8/Vv6kxh79IYMywmvtPJBII0Q729g7kU9
QMDDNmdXQw/5yt1lM1E3gCn6tqP+vcp2NwEyU7RnDu0c2z3fdoTmWqI2MXBAtjuD
XuUuEBEgClM33pW4pQb1cuO9jWy5fceQB5yvDJLq6/3ZPbPCfl6UZg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:32:33 2025 by rpki-client