Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/44aae7f0-92ad-330a-90d5-da0ccd2e782d.roa
File:                     44aae7f0-92ad-330a-90d5-da0ccd2e782d.roa (raw, json)
Hash identifier:          amqkKpuWukm1g5kM+Uc8bDrMTBe7At6RTSJaowiX+Xc=
Subject key identifier:   AE:6A:A1:63:2C:EC:EE:43:CB:79:D0:F5:4B:84:1D:4A:05:11:E8:74
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B437A317CBCCCCA0499364920
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/44aae7f0-92ad-330a-90d5-da0ccd2e782d.roa
Signing time:             Sun 21 Sep 2025 02:33:04 +0000
ROA not before:           Sun 21 Sep 2025 02:33:04 +0000
ROA not after:            Sat 20 Dec 2025 03:33:04 +0000
asID:                     10794
IP address blocks:        171.159.46.0/23 maxlen: 23
                          171.159.46.0/24 maxlen: 24
                          171.159.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:7a:31:7c:bc:cc:ca:04:99:36:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 21 02:33:04 2025 GMT
            Not After : Dec 20 03:33:04 2025 GMT
        Subject: CN=6fba59e1-c4e8-4948-9c05-4f0ada588b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:4d:eb:ae:26:4c:be:99:d8:7e:17:47:c5:
                    41:e0:34:5a:4c:05:39:88:65:11:ae:bf:f1:b5:9e:
                    fc:d8:55:80:0d:18:a7:ef:42:0a:49:d7:b8:c2:61:
                    9c:ad:a2:73:39:d2:72:37:a9:96:bf:af:de:ca:e6:
                    44:1a:4f:13:56:33:9f:c1:7c:d3:82:b5:6d:52:c5:
                    f0:3b:64:10:d5:91:1c:a3:a7:42:78:81:8d:f1:75:
                    b2:b6:d2:76:3d:51:26:36:74:1c:9e:e1:1b:99:80:
                    66:cb:b9:ee:57:35:eb:b9:8f:d7:27:c4:f3:40:0b:
                    e4:66:e1:76:19:a9:67:41:ef:d1:c3:8a:46:19:bd:
                    e1:80:40:5d:df:2f:f9:da:12:7c:79:ea:fd:71:81:
                    cd:04:43:fc:63:f8:ad:e3:c2:87:95:34:25:33:1e:
                    d2:51:3d:49:9f:4f:32:8b:89:30:9c:18:30:df:d3:
                    de:ea:a7:05:2f:7a:76:a5:53:34:85:4e:5c:ab:a3:
                    47:97:aa:4d:4e:58:7d:6f:2a:48:11:c2:c4:ec:cd:
                    8c:10:8f:04:ff:fd:1c:ce:d5:96:f5:6d:01:5e:2d:
                    c6:d7:fd:45:04:b6:3b:a6:22:2f:c5:da:5b:26:10:
                    13:b0:33:22:3b:74:0a:bc:b4:cb:40:be:ca:26:ec:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6A:A1:63:2C:EC:EE:43:CB:79:D0:F5:4B:84:1D:4A:05:11:E8:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/44aae7f0-92ad-330a-90d5-da0ccd2e782d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.159.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c2:d2:7f:f3:22:4f:31:d2:6b:d6:d6:a6:26:5d:11:4b:d6:
         10:8d:40:e6:f3:58:65:cc:25:b7:79:6d:dc:77:b9:dc:05:1f:
         70:16:1d:e8:17:d2:45:74:df:b0:23:32:e9:20:07:17:27:22:
         09:ef:41:ca:2e:61:62:dc:0e:83:7a:a9:7f:36:2d:da:d2:83:
         09:aa:11:f9:d0:56:88:0e:34:0c:e1:bf:f1:7b:26:a5:55:3d:
         c9:bc:f9:35:1b:70:ca:42:e1:3e:6d:0c:dc:81:e5:23:38:68:
         03:ca:58:c9:67:b7:34:e4:e4:79:7f:a8:5e:8c:48:8b:22:61:
         28:71:99:d7:79:a5:bf:fe:b2:a7:ca:a2:50:9b:db:5b:e9:ae:
         9c:7b:57:70:4f:2e:13:32:5e:10:64:7b:d1:23:95:91:b2:03:
         0d:f8:25:56:a2:49:f8:a6:72:b9:40:1d:e9:d6:4f:17:1a:68:
         3c:7b:ca:2a:45:07:e8:0b:74:c1:55:dd:11:94:68:a0:cb:21:
         80:08:93:d5:0c:02:03:6e:2e:a1:fc:d4:70:b8:99:f8:05:44:
         8c:b9:41:aa:35:2c:72:f8:05:4b:88:a0:96:06:46:5b:c7:34:
         18:27:d1:4d:e0:15:a0:cd:6a:6a:ba:d9:cb:fa:73:67:12:a1:
         d4:8b:39:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDejF8vMzKBJk2SSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI1MDkyMTAyMzMwNFoXDTI1MTIyMDAzMzMwNFowLzEtMCsGA1UEAxMk
NmZiYTU5ZTEtYzRlOC00OTQ4LTljMDUtNGYwYWRhNTg4YjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqORN664mTL6Z2H4XR8VB4DRaTAU5iGURrr/x
tZ782FWADRin70IKSde4wmGcraJzOdJyN6mWv6/eyuZEGk8TVjOfwXzTgrVtUsXw
O2QQ1ZEco6dCeIGN8XWyttJ2PVEmNnQcnuEbmYBmy7nuVzXruY/XJ8TzQAvkZuF2
GalnQe/Rw4pGGb3hgEBd3y/52hJ8eer9cYHNBEP8Y/it48KHlTQlMx7SUT1Jn08y
i4kwnBgw39Pe6qcFL3p2pVM0hU5cq6NHl6pNTlh9bypIEcLE7M2MEI8E//0cztWW
9W0BXi3G1/1FBLY7piIvxdpbJhATsDMiO3QKvLTLQL7KJuyV/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5qoWMs7O5Dy3nQ9UuEHUoFEeh0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNDRhYWU3ZjAtOTJhZC0z
MzBhLTkwZDUtZGEwY2NkMmU3ODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq58uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbC0n/zIk8x0mvW1qYmXRFL1hCNQObzWGXMJbd5bdx3udwFH3AWHegX
0kV037AjMukgBxcnIgnvQcouYWLcDoN6qX82LdrSgwmqEfnQVogONAzhv/F7JqVV
Pcm8+TUbcMpC4T5tDNyB5SM4aAPKWMlntzTk5Hl/qF6MSIsiYShxmdd5pb/+sqfK
olCb21vprpx7V3BPLhMyXhBke9EjlZGyAw34JVaiSfimcrlAHenWTxcaaDx7yipF
B+gLdMFV3RGUaKDLIYAIk9UMAgNuLqH81HC4mfgFRIy5Qao1LHL4BUuIoJYGRlvH
NBgn0U3gFaDNamq62cv6c2cSodSLOZ4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:19:54 2025 by rpki-client