Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/dc7b5b02-8838-3997-9844-d4c25163345d.roa
File:                     dc7b5b02-8838-3997-9844-d4c25163345d.roa (raw, json)
Hash identifier:          F7ML5Qg9IguJaAxiWSgMfUAf9wO+yRwjVKDajXaOUR4=
Subject key identifier:   60:C3:B6:A7:41:A1:37:0C:05:BB:1D:24:00:29:7C:23:1D:F9:AB:A8
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B43C6F6CC813CC23EEC9A1220
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/dc7b5b02-8838-3997-9844-d4c25163345d.roa
Signing time:             Sun 21 Sep 2025 05:07:45 +0000
ROA not before:           Sun 21 Sep 2025 05:07:45 +0000
ROA not after:            Sat 20 Dec 2025 06:07:45 +0000
asID:                     10794
IP address blocks:        171.162.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:c6:f6:cc:81:3c:c2:3e:ec:9a:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 21 05:07:45 2025 GMT
            Not After : Dec 20 06:07:45 2025 GMT
        Subject: CN=a801256b-0879-47e5-a74c-d026d76515dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:73:f7:8a:42:04:56:f7:cf:4a:a2:01:e0:72:
                    2b:7d:81:e3:24:00:dd:9a:36:50:53:9e:de:90:6e:
                    c3:58:09:50:d2:d9:40:1f:c0:b7:2d:c3:31:e7:a5:
                    24:2c:9a:2c:4c:b7:80:0b:64:26:2d:47:6e:03:13:
                    a1:98:bb:fb:7c:3f:f3:c4:fc:28:f7:bd:74:97:b1:
                    eb:80:5c:2d:3d:90:53:91:0d:f5:cd:f7:33:0d:95:
                    88:2f:32:55:fa:12:a4:27:f9:61:fd:7c:af:19:e4:
                    74:81:e4:9f:2e:da:16:d0:9e:f1:53:0f:43:3c:b6:
                    84:10:4d:91:2e:2d:4d:8d:54:f6:2e:22:3e:8d:93:
                    73:4d:9f:7c:51:a9:09:03:06:46:7f:0e:5b:82:1b:
                    49:fe:78:9e:d1:f9:9a:fb:87:15:8e:a8:c3:62:a7:
                    c5:7b:f9:86:a9:5e:b1:03:a2:10:58:c9:72:2f:3f:
                    c0:9f:5d:50:81:17:1e:e9:4f:de:f6:1f:ca:c3:26:
                    1a:62:5b:97:23:ad:25:58:78:5a:23:4d:07:36:00:
                    5d:c8:44:76:cb:b4:c0:6d:63:04:6d:81:af:9f:e4:
                    ee:f6:e5:b7:18:79:40:0e:99:71:07:df:a1:66:ec:
                    a9:a2:57:75:0c:78:14:99:44:cf:08:5d:37:ac:20:
                    f9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C3:B6:A7:41:A1:37:0C:05:BB:1D:24:00:29:7C:23:1D:F9:AB:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/dc7b5b02-8838-3997-9844-d4c25163345d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4a:60:c1:ec:dc:97:dc:38:31:84:5e:91:17:01:c4:6e:a7:
         e9:4f:dd:3e:8b:9f:f9:85:2a:21:b3:1b:82:44:32:d2:7b:89:
         d2:20:4d:b5:cd:6d:15:da:2f:bf:f7:0f:80:6a:f1:43:11:65:
         e3:75:21:63:98:b5:40:17:f4:b2:58:de:23:e0:4a:be:67:46:
         5e:04:a6:9d:4b:87:6e:64:e6:00:dc:7b:4e:a8:04:c8:12:88:
         7e:19:d0:8d:eb:77:f8:ea:e7:89:21:b8:9b:ca:fa:23:31:cb:
         1b:a3:65:91:a8:01:da:af:6a:d4:fc:f2:e9:11:f4:9c:f7:80:
         f7:2f:4c:97:6f:54:2a:c6:6e:3d:15:5d:1c:ac:e2:68:97:6a:
         49:d4:a1:22:e9:3c:f7:e9:84:8a:c9:d8:86:a8:8a:4e:22:0d:
         35:85:c3:ad:61:dd:81:6f:c5:38:b3:43:71:8a:e7:f9:8a:7c:
         83:2c:a7:28:d0:9c:9a:cb:bb:9e:83:ae:db:0b:f0:65:c8:ff:
         b8:f8:d1:8a:81:be:6e:f4:c5:ea:50:6e:3f:1f:29:b0:36:2a:
         58:03:da:8f:22:25:12:20:cc:5a:b2:8b:07:61:ba:d3:24:fe:
         24:26:81:ee:9c:33:5c:a1:0a:36:2c:1a:d6:59:1e:14:2f:f0:
         06:71:02:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDxvbMgTzCPuyaEiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI1MDkyMTA1MDc0NVoXDTI1MTIyMDA2MDc0NVowLzEtMCsGA1UEAxMk
YTgwMTI1NmItMDg3OS00N2U1LWE3NGMtZDAyNmQ3NjUxNWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnP3ikIEVvfPSqIB4HIrfYHjJADdmjZQU57e
kG7DWAlQ0tlAH8C3LcMx56UkLJosTLeAC2QmLUduAxOhmLv7fD/zxPwo9710l7Hr
gFwtPZBTkQ31zfczDZWILzJV+hKkJ/lh/XyvGeR0geSfLtoW0J7xUw9DPLaEEE2R
Li1NjVT2LiI+jZNzTZ98UakJAwZGfw5bghtJ/nie0fma+4cVjqjDYqfFe/mGqV6x
A6IQWMlyLz/An11QgRce6U/e9h/KwyYaYluXI60lWHhaI00HNgBdyER2y7TAbWME
bYGvn+Tu9uW3GHlADplxB9+hZuypold1DHgUmUTPCF03rCD5kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDDtqdBoTcMBbsdJAApfCMd+auoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZGM3YjViMDItODgzOC0z
OTk3LTk4NDQtZDRjMjUxNjMzNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNKYMHs3JfcODGEXpEXAcRup+lP3T6Ln/mFKiGzG4JEMtJ7idIgTbXN
bRXaL7/3D4Bq8UMRZeN1IWOYtUAX9LJY3iPgSr5nRl4Epp1Lh25k5gDce06oBMgS
iH4Z0I3rd/jq54khuJvK+iMxyxujZZGoAdqvatT88ukR9Jz3gPcvTJdvVCrGbj0V
XRys4miXaknUoSLpPPfphIrJ2Iaoik4iDTWFw61h3YFvxTizQ3GK5/mKfIMspyjQ
nJrLu56DrtsL8GXI/7j40YqBvm70xepQbj8fKbA2KlgD2o8iJRIgzFqyiwdhutMk
/iQmge6cM1yhCjYsGtZZHhQv8AZxAjw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:11:36 2025 by rpki-client