Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/092335fe-39cd-35e6-b1af-a753145e4901.roa
File:                     092335fe-39cd-35e6-b1af-a753145e4901.roa (raw, json)
Hash identifier:          5P2Yn1GsvETVFAsSI+wJKtnsF3VRDT0Uu0KVRUEVTmI=
Subject key identifier:   04:1B:A7:07:46:07:93:70:30:09:28:0F:E7:A4:FD:61:ED:08:4F:2C
Certificate issuer:       /CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
Certificate serial:       010D0C9F4328584B7C8762EF9DD4091C295AF600
Authority key identifier: 25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/092335fe-39cd-35e6-b1af-a753145e4901.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     62802
IP address blocks:        170.4.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:62:ef:9d:d4:09:1c:29:5a:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=27382ccf-11d4-4517-9052-722bc81d31de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:dc:24:02:a2:43:0f:1a:4b:32:ad:36:03:
                    14:74:6e:2d:8f:e8:fb:f5:4e:0c:97:e6:ee:29:73:
                    1e:6a:41:7c:58:e3:8c:3b:36:cb:d9:2f:fd:21:28:
                    cb:98:b2:a6:a7:e7:fc:0c:62:e7:59:97:7c:99:85:
                    65:ad:ce:69:e9:0a:26:d4:a0:dc:4c:e2:a3:9a:48:
                    ff:28:db:71:65:36:2b:a4:16:91:3d:da:56:df:61:
                    6f:e9:3f:a2:6c:ee:08:fc:81:f5:7f:e9:82:18:e4:
                    12:79:9d:7d:69:ef:98:93:eb:22:1f:e9:99:b7:1d:
                    3e:df:8b:9e:d8:ba:09:02:02:f9:bd:cd:1f:2a:25:
                    72:5e:7a:50:5a:81:9f:00:43:e6:f1:83:f5:e0:33:
                    17:27:32:c4:60:61:d5:59:4b:21:cb:f1:82:75:f0:
                    a6:e1:f9:e1:d0:50:74:58:de:e6:a1:72:94:36:31:
                    0a:a3:96:11:90:58:62:dc:73:57:b9:54:d2:59:58:
                    d7:71:f9:1b:5b:52:9c:21:38:9c:f8:86:39:e3:af:
                    08:5d:0f:c3:d9:c2:a6:a8:34:a3:9e:e9:cd:ba:2a:
                    ab:66:31:22:a6:f1:97:1b:7f:29:05:df:d4:5a:f5:
                    6d:9d:7f:c3:47:95:2f:66:a4:ff:bd:e8:77:bf:7d:
                    cc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1B:A7:07:46:07:93:70:30:09:28:0F:E7:A4:FD:61:ED:08:4F:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/092335fe-39cd-35e6-b1af-a753145e4901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.crl

            X509v3 Authority Key Identifier:
                keyid:25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.4.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:06:95:c7:62:98:85:24:12:62:84:d9:18:3b:df:35:00:01:
         4a:dd:84:89:61:27:6d:a2:a3:77:fa:1a:e6:f8:ae:29:66:af:
         f9:19:00:83:09:65:6d:48:75:1f:c7:1e:34:aa:90:24:93:2a:
         13:e4:5b:4b:5d:6c:43:0f:13:8e:2c:0d:10:6d:8c:53:2f:a0:
         18:d3:45:32:b9:6b:74:eb:24:ef:33:e8:c9:fb:4d:19:7a:ae:
         78:7b:aa:3a:f7:12:24:1a:cc:f7:33:c2:3d:b5:62:5f:89:ab:
         3c:ba:17:ee:92:63:96:09:43:a1:d0:bb:0e:d7:54:84:48:d3:
         e6:91:43:92:42:f9:cf:80:e3:3a:ee:07:3a:99:e2:81:49:22:
         e2:79:15:ae:49:66:74:4d:2a:f8:2b:ab:1d:30:c7:f2:63:87:
         e4:df:45:65:4f:77:63:8f:60:ad:3b:a6:8b:3b:a3:79:aa:b5:
         60:5f:4a:bd:4b:81:67:f9:c5:12:e5:e6:81:1b:14:8d:6c:c9:
         9a:ad:eb:7c:8a:71:fc:3b:69:9c:48:a5:5d:31:31:69:70:7f:
         f5:74:56:98:ac:d0:54:ff:1b:7a:40:cb:31:21:32:10:17:d9:
         84:ae:99:10:f1:a5:62:7b:35:d4:9f:9f:f5:5a:80:fd:df:86:
         ac:5f:85:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2LvndQJHCla9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTdjYWMwYjctYWJiNy00M2IyLTg0MzUtMmRiOGVkYjJh
MDE1MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk
MjczODJjY2YtMTFkNC00NTE3LTkwNTItNzIyYmM4MWQzMWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqivcJAKiQw8aSzKtNgMUdG4tj+j79U4Ml+bu
KXMeakF8WOOMOzbL2S/9ISjLmLKmp+f8DGLnWZd8mYVlrc5p6Qom1KDcTOKjmkj/
KNtxZTYrpBaRPdpW32Fv6T+ibO4I/IH1f+mCGOQSeZ19ae+Yk+siH+mZtx0+34ue
2LoJAgL5vc0fKiVyXnpQWoGfAEPm8YP14DMXJzLEYGHVWUshy/GCdfCm4fnh0FB0
WN7moXKUNjEKo5YRkFhi3HNXuVTSWVjXcfkbW1KcITic+IY5468IXQ/D2cKmqDSj
nunNuiqrZjEipvGXG38pBd/UWvVtnX/DR5UvZqT/veh3v33MMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQbpwdGB5NwMAkoD+ek/WHtCE8sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85N2Nh
YzBiNy1hYmI3LTQzYjItODQzNS0yZGI4ZWRiMmEwMTUvMDkyMzM1ZmUtMzljZC0z
NWU2LWIxYWYtYTc1MzE0NWU0OTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTdjYWMwYjctYWJiNy00M2IyLTg0
MzUtMmRiOGVkYjJhMDE1Lzk3Y2FjMGI3LWFiYjctNDNiMi04NDM1LTJkYjhlZGIy
YTAxNS5jcmwwHwYDVR0jBBgwFoAUJUy8tEr1tRoG1M3jo5+1B+97YukwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85N2NhYzBiNy1hYmI3LTQzYjItODQzNS0yZGI4
ZWRiMmEwMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgTCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMGlcdimIUkEmKE2Rg73zUAAUrdhIlhJ22io3f6Gub4rilmr/kZAIMJ
ZW1IdR/HHjSqkCSTKhPkW0tdbEMPE44sDRBtjFMvoBjTRTK5a3TrJO8z6Mn7TRl6
rnh7qjr3EiQazPczwj21Yl+Jqzy6F+6SY5YJQ6HQuw7XVIRI0+aRQ5JC+c+A4zru
BzqZ4oFJIuJ5Fa5JZnRNKvgrqx0wx/Jjh+TfRWVPd2OPYK07pos7o3mqtWBfSr1L
gWf5xRLl5oEbFI1syZqt63yKcfw7aZxIpV0xMWlwf/V0Vpis0FT/G3pAyzEhMhAX
2YSumRDxpWJ7NdSfn/VagP3fhqxfhVE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:21:19 2025 by rpki-client