Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/c1f13edf-86b4-349f-a187-4fa75a5bdb8c.roa
File:                     c1f13edf-86b4-349f-a187-4fa75a5bdb8c.roa (raw, json)
Hash identifier:          kw2IsxfnxoWWGN2D5O/6+17JzcVf8Jz3HJl/VW249lE=
Subject key identifier:   63:D8:7C:54:66:31:5F:6B:76:F7:9A:D2:59:32:4E:0B:83:E6:21:77
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584B7601B37A546C59BA975B8510
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/c1f13edf-86b4-349f-a187-4fa75a5bdb8c.roa
Signing time:             Thu 09 Oct 2025 04:56:31 +0000
ROA not before:           Thu 09 Oct 2025 04:56:31 +0000
ROA not after:            Wed 07 Jan 2026 05:56:31 +0000
asID:                     22079
IP address blocks:        64.186.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:01:b3:7a:54:6c:59:ba:97:5b:85:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Oct  9 04:56:31 2025 GMT
            Not After : Jan  7 05:56:31 2026 GMT
        Subject: CN=71d099e3-7130-4360-97c1-8c3fd8d0e7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:0c:15:6c:c4:1b:ec:00:1f:c9:5d:cf:23:
                    fb:cc:87:c9:25:d5:fe:36:16:8b:88:e7:fb:28:88:
                    bf:2c:d7:59:33:75:4f:73:d5:45:82:8c:ba:45:48:
                    74:1b:71:8d:6e:16:b2:e2:ac:a1:df:9f:22:75:a5:
                    82:0a:f5:f0:cd:46:35:98:1a:64:69:87:05:ff:2a:
                    13:49:6a:7d:72:14:31:1f:e5:15:7b:f9:5f:7c:81:
                    51:85:69:98:df:6f:c5:32:3d:df:37:70:74:6e:40:
                    fa:2f:62:a2:d9:ee:b4:8d:16:74:88:0f:36:7e:65:
                    a7:3c:06:38:77:3a:14:c0:5d:98:dc:ca:c8:5c:0b:
                    75:d0:ca:af:53:e0:31:4a:34:a8:e4:8b:fb:fd:2e:
                    36:95:ab:ed:51:1a:b4:1a:7e:cb:a9:c2:36:a5:0d:
                    02:13:c3:9e:24:8c:a8:f6:3b:a2:e9:25:03:b4:42:
                    6b:c8:b1:0c:7c:84:6d:4c:94:38:34:f2:2e:1e:b9:
                    53:49:8e:e7:c5:86:47:3c:c1:78:c3:a9:e4:d7:0d:
                    d9:d5:38:38:76:72:34:57:3e:eb:d1:70:11:69:ac:
                    b1:31:93:95:b3:7c:b1:8d:bc:1c:f6:df:68:a5:a7:
                    39:c3:2f:a0:8a:44:9d:04:56:7f:11:c7:f2:f2:b9:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D8:7C:54:66:31:5F:6B:76:F7:9A:D2:59:32:4E:0B:83:E6:21:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/c1f13edf-86b4-349f-a187-4fa75a5bdb8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:9f:b0:3a:7d:65:7a:5a:ec:7c:ee:b6:a1:df:1b:03:5b:
         24:26:96:d4:54:34:65:22:88:21:80:c4:05:5f:38:22:eb:e1:
         ff:a9:bb:a3:bd:0d:4c:72:88:e0:a5:8a:5b:45:41:a4:e8:52:
         ee:78:21:25:f9:21:7a:75:6d:cd:72:4b:02:be:58:fa:c4:9d:
         fb:dc:53:7c:e8:8e:66:43:c4:d7:d7:ba:a8:84:99:47:fd:9c:
         05:b4:a5:f5:12:ec:c7:f8:04:4f:41:cf:56:ec:63:3f:dd:a9:
         c1:f0:35:d7:73:ed:e0:f0:63:76:68:2c:06:9e:96:3c:e7:1e:
         13:cb:b1:cb:e3:bf:2a:c5:76:39:b3:3f:59:bb:0e:f1:ef:73:
         d3:28:62:f6:1a:e4:3c:ef:2f:91:f4:30:cf:c7:29:c5:a3:31:
         c2:e2:40:5c:34:e3:0f:e6:0e:5a:b1:37:00:3c:79:1b:f4:f2:
         28:f2:07:a1:1d:b1:d2:9a:84:fc:50:85:b8:d1:dc:05:6e:1a:
         55:cc:14:d9:c6:02:e1:b2:14:7b:41:3d:cf:77:bb:7a:2a:38:
         0a:60:a9:64:6b:39:bc:bd:22:a3:8b:b6:be:28:7f:dd:d5:1c:
         61:ea:84:b8:71:87:63:93:a0:2e:5c:15:7b:05:ed:1d:68:8a:
         31:a1:fe:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt2AbN6VGxZupdbhRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz
MmFmMB4XDTI1MTAwOTA0NTYzMVoXDTI2MDEwNzA1NTYzMVowLzEtMCsGA1UEAxMk
NzFkMDk5ZTMtNzEzMC00MzYwLTk3YzEtOGMzZmQ4ZDBlN2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO4MFWzEG+wAH8ldzyP7zIfJJdX+NhaLiOf7
KIi/LNdZM3VPc9VFgoy6RUh0G3GNbhay4qyh358idaWCCvXwzUY1mBpkaYcF/yoT
SWp9chQxH+UVe/lffIFRhWmY32/FMj3fN3B0bkD6L2Ki2e60jRZ0iA82fmWnPAY4
dzoUwF2Y3MrIXAt10MqvU+AxSjSo5Iv7/S42lavtURq0Gn7LqcI2pQ0CE8OeJIyo
9jui6SUDtEJryLEMfIRtTJQ4NPIuHrlTSY7nxYZHPMF4w6nk1w3Z1Tg4dnI0Vz7r
0XARaayxMZOVs3yxjbwc9t9opac5wy+gikSdBFZ/Ecfy8rnIzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPYfFRmMV9rdvea0lkyTguD5iF3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5
N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvYzFmMTNlZGYtODZiNC0z
NDlmLWExODctNGZhNzVhNWJkYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy
NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk
MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2
NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLpwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIe1n7A6fWV6Wux87rah3xsDWyQmltRUNGUiiCGAxAVfOCLr4f+pu6O9
DUxyiOCliltFQaToUu54ISX5IXp1bc1ySwK+WPrEnfvcU3zojmZDxNfXuqiEmUf9
nAW0pfUS7Mf4BE9Bz1bsYz/dqcHwNddz7eDwY3ZoLAaeljznHhPLscvjvyrFdjmz
P1m7DvHvc9MoYvYa5DzvL5H0MM/HKcWjMcLiQFw04w/mDlqxNwA8eRv08ijyB6Ed
sdKahPxQhbjR3AVuGlXMFNnGAuGyFHtBPc93u3oqOApgqWRrOby9IqOLtr4of93V
HGHqhLhxh2OToC5cFXsF7R1oijGh/kc=
-----END CERTIFICATE-----
Generated at Tue Oct 21 12:37:43 2025 by rpki-client