Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa
File:                     01949cb6-dbef-38e7-b253-ca7fee6dea68.roa (raw, json)
Hash identifier:          rfSgVfvdcw6kB1cItbx2LxjZYw+vXsxaPHIX9dOIWEI=
Subject key identifier:   9D:B5:05:08:ED:D1:0C:3C:7E:65:F4:CE:22:49:AB:0F:7E:E8:A9:10
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B44B1BB0496293124B3436E40
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     11233
IP address blocks:        162.255.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:bb:04:96:29:31:24:b3:43:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=3e03f806-8102-4805-91ab-bf33cfc4b37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:20:92:d1:d5:94:bc:d9:ee:25:56:11:fc:15:
                    78:97:67:77:8c:81:72:f3:88:b9:00:8f:4e:b1:0d:
                    36:94:74:48:26:9c:a4:fb:07:0b:2b:f5:95:b8:41:
                    fc:49:64:cc:bb:fd:4a:89:a0:83:c8:97:2d:e3:37:
                    7d:70:4b:07:5e:dd:06:66:3d:4d:53:a5:77:76:b3:
                    c1:9c:f5:7d:d4:8e:32:12:eb:20:69:e7:01:8d:90:
                    f9:80:2d:b2:1d:53:2f:a3:d7:5b:eb:46:0f:99:dd:
                    74:2c:2d:e0:2c:66:ab:f8:90:82:6f:8e:1f:cc:86:
                    95:b2:dd:26:01:df:98:28:f4:75:16:70:36:8a:62:
                    2e:67:0c:ca:37:09:0b:33:26:18:57:23:a1:29:d5:
                    21:02:d1:47:be:07:2f:fd:29:0e:64:c7:06:b7:f3:
                    9d:a9:df:4a:15:22:3f:b6:7a:9d:58:75:60:72:fe:
                    69:a1:df:8b:6b:e3:ee:e3:4c:25:f7:f6:43:e5:53:
                    2d:1e:e1:61:a0:0d:34:99:7d:50:34:a7:11:f3:d9:
                    56:b1:e8:96:cf:e5:7f:dc:ec:3b:0a:e6:de:68:6e:
                    a7:57:88:2d:fe:ce:37:ed:4d:d3:c3:10:2b:19:e2:
                    3a:3a:16:30:04:2c:85:9f:c2:d8:8b:ff:47:d2:8b:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B5:05:08:ED:D1:0C:3C:7E:65:F4:CE:22:49:AB:0F:7E:E8:A9:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e1:37:92:d2:33:21:44:d9:03:7f:6e:5e:1f:92:2c:ff:08:
         d5:3e:cd:c8:bb:5f:64:be:d8:c9:71:0c:25:89:39:a5:67:c6:
         f1:7f:38:41:32:e2:5b:c9:21:10:80:02:ed:e2:3c:19:62:3e:
         37:c7:2d:ab:ff:99:32:ba:8c:c7:a9:7f:1f:7b:c1:ab:01:33:
         bd:13:37:0b:da:ab:4b:1d:41:59:44:09:6b:83:74:52:d9:fd:
         06:e3:56:b1:2d:53:bc:7e:4b:f9:e4:06:1c:b5:ec:a1:54:3f:
         65:69:f9:89:85:83:1c:53:7d:9d:08:98:27:80:12:a1:02:73:
         39:56:da:5b:1f:3b:e0:cf:bd:f7:23:41:6d:93:7f:ab:a1:b5:
         f2:c1:37:d2:d4:63:21:a4:58:75:e0:44:97:6f:4f:40:91:53:
         23:9e:11:df:4e:26:3a:f7:5f:e3:29:e1:2e:73:90:4d:5b:b0:
         1d:b9:16:6c:f3:f5:62:0c:17:17:e7:1a:95:a5:27:26:dd:c2:
         ce:ba:02:fa:23:2b:33:0b:3c:2d:6c:b0:d7:dc:d7:bc:b0:e2:
         06:19:19:bd:76:98:be:fc:8d:ab:83:d0:ba:15:2d:5e:4b:cc:
         6b:bb:3a:a6:21:2f:a7:3d:89:b1:d0:1b:2d:ec:49:57:82:04:
         fb:6d:8c:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbsElikxJLNDbkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk
M2UwM2Y4MDYtODEwMi00ODA1LTkxYWItYmYzM2NmYzRiMzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSCS0dWUvNnuJVYR/BV4l2d3jIFy84i5AI9O
sQ02lHRIJpyk+wcLK/WVuEH8SWTMu/1KiaCDyJct4zd9cEsHXt0GZj1NU6V3drPB
nPV91I4yEusgaecBjZD5gC2yHVMvo9db60YPmd10LC3gLGar+JCCb44fzIaVst0m
Ad+YKPR1FnA2imIuZwzKNwkLMyYYVyOhKdUhAtFHvgcv/SkOZMcGt/Odqd9KFSI/
tnqdWHVgcv5pod+La+Pu40wl9/ZD5VMtHuFhoA00mX1QNKcR89lWseiWz+V/3Ow7
CubeaG6nV4gt/s437U3TwxArGeI6OhYwBCyFn8LYi/9H0ot8CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ21BQjt0Qw8fmX0ziJJqw9+6KkQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMDE5NDljYjYtZGJlZi0z
OGU3LWIyNTMtY2E3ZmVlNmRlYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBov8oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjhN5LSMyFE2QN/bl4fkiz/CNU+zci7X2S+2MlxDCWJOaVnxvF/OEEy
4lvJIRCAAu3iPBliPjfHLav/mTK6jMepfx97wasBM70TNwvaq0sdQVlECWuDdFLZ
/QbjVrEtU7x+S/nkBhy17KFUP2Vp+YmFgxxTfZ0ImCeAEqECczlW2lsfO+DPvfcj
QW2Tf6uhtfLBN9LUYyGkWHXgRJdvT0CRUyOeEd9OJjr3X+Mp4S5zkE1bsB25Fmzz
9WIMFxfnGpWlJybdws66AvojKzMLPC1ssNfc17yw4gYZGb12mL78jauD0LoVLV5L
zGu7OqYhL6c9ibHQGy3sSVeCBPttjCw=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:21:45 2025 by rpki-client