Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa
File:                     0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa (raw, json)
Hash identifier:          Mxy7HQMiXaowogFJBQijmsCFgy0U9d8T876F30IDDoI=
Subject key identifier:   CB:A0:C9:14:DE:C8:66:AA:9B:0C:C1:74:E8:C2:2D:38:38:1E:F8:0C
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584B21CC2CE2998E2912CC973F00
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     8987
IP address blocks:        198.22.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:2c:e2:99:8e:29:12:cc:97:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=42ae3adb-2ab8-40ea-973b-716a34af534d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:6e:a2:47:a8:de:df:2a:a2:4e:ee:73:3c:
                    87:23:ad:99:48:82:16:93:fc:6f:b6:6f:1b:f4:91:
                    61:d6:a0:24:4d:85:ce:a1:d7:3c:5e:3a:e4:a2:4b:
                    81:bb:9a:e2:db:07:26:56:a0:2d:8e:7e:5f:70:12:
                    13:aa:3e:43:a3:c7:68:20:97:06:2a:d1:10:df:1d:
                    ef:e1:79:47:b0:a7:2b:9b:86:45:34:df:d3:0f:65:
                    15:71:04:66:ae:aa:87:db:1c:40:3f:e9:59:ca:5f:
                    98:5e:fc:99:16:4e:8f:a1:7c:95:f2:2e:1a:46:81:
                    ef:67:46:b4:36:2e:9d:7f:49:8b:03:b7:29:47:49:
                    70:8e:66:e8:2d:1a:e1:33:52:75:f4:a7:fa:cc:71:
                    b8:d8:2f:33:f2:56:8c:70:1f:ca:ca:08:f0:74:e1:
                    1d:4b:d3:13:f4:14:45:e1:9a:95:f9:1f:00:2d:27:
                    e7:20:8a:61:8a:31:b0:4b:81:07:cc:6c:5d:34:a7:
                    e8:4b:63:ac:fb:9e:7c:04:7e:db:e5:d2:aa:45:14:
                    e0:66:93:64:41:7d:3b:44:f9:3c:1d:2d:58:f2:54:
                    15:41:0b:db:7a:2e:01:51:c4:80:42:fd:55:72:30:
                    50:2d:3f:af:0e:fe:78:8f:98:d7:69:8a:9a:81:08:
                    d7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A0:C9:14:DE:C8:66:AA:9B:0C:C1:74:E8:C2:2D:38:38:1E:F8:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/0dda7810-7541-39c1-95ad-9cf92e6e58ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.22.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d5:1e:3e:c4:c3:d7:cd:37:23:5a:bc:5b:a6:83:35:0a:e0:
         12:e0:f3:0e:9b:0c:1b:21:21:d1:43:82:27:ec:3a:fc:a5:58:
         3a:ed:96:04:c8:64:7c:09:18:f4:7f:46:17:e4:e2:69:a0:d1:
         0a:6d:2d:bc:f1:64:48:90:82:52:40:90:b9:af:42:93:7e:52:
         8e:67:2e:34:62:b4:f5:80:b5:24:74:45:e3:d5:45:fd:ca:1b:
         03:ec:e7:68:83:49:61:52:93:d3:05:fa:f0:e3:cf:20:54:e1:
         6c:8d:7c:15:7d:00:4a:4c:f6:52:00:c3:b8:38:51:cc:49:10:
         02:c0:ac:b9:c9:73:5b:8f:f6:f3:6b:93:50:a9:1c:43:2a:17:
         e9:1e:aa:1d:9c:25:a6:0d:6a:7e:b3:9f:29:90:83:e4:c0:cb:
         96:cd:d9:59:60:73:6e:1a:23:35:3f:61:c9:7b:88:53:8f:ca:
         d7:4f:3d:62:4b:aa:bb:a7:9c:a3:29:25:07:cb:b1:b7:a0:f5:
         20:b2:1a:a0:9a:31:37:8e:5a:35:c9:f0:90:a4:80:87:83:0f:
         fd:11:c7:45:cb:df:5f:e6:ba:dd:85:42:73:56:44:05:5b:9b:
         74:ac:20:43:a1:e9:35:e3:97:9c:13:36:89:7e:e2:b6:e8:ed:
         f6:b1:34:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCzimY4pEsyXPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2Rh
YTA5MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
NDJhZTNhZGItMmFiOC00MGVhLTk3M2ItNzE2YTM0YWY1MzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+Buokeo3t8qok7uczyHI62ZSIIWk/xvtm8b
9JFh1qAkTYXOodc8XjrkokuBu5ri2wcmVqAtjn5fcBITqj5Do8doIJcGKtEQ3x3v
4XlHsKcrm4ZFNN/TD2UVcQRmrqqH2xxAP+lZyl+YXvyZFk6PoXyV8i4aRoHvZ0a0
Ni6df0mLA7cpR0lwjmboLRrhM1J19Kf6zHG42C8z8laMcB/KygjwdOEdS9MT9BRF
4ZqV+R8ALSfnIIphijGwS4EHzGxdNKfoS2Os+558BH7b5dKqRRTgZpNkQX07RPk8
HS1Y8lQVQQvbei4BUcSAQv1VcjBQLT+vDv54j5jXaYqagQjXBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMugyRTeyGaqmwzBdOjCLTg4HvgMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2
NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvMGRkYTc4MTAtNzU0MS0z
OWMxLTk1YWQtOWNmOTJlNmU1OGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODE1NjVkYTktYWFiOS00NWNhLWI5
OWMtMDY4NDA1M2RhYTA5LzgxNTY1ZGE5LWFhYjktNDVjYS1iOTljLTA2ODQwNTNk
YWEwOS5jcmwwHwYDVR0jBBgwFoAU11yQoPbNF8ZEaKnEFmHVfmQjLcgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0
MDUzZGFhMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhYMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFXVHj7Ew9fNNyNavFumgzUK4BLg8w6bDBshIdFDgifsOvylWDrtlgTI
ZHwJGPR/Rhfk4mmg0QptLbzxZEiQglJAkLmvQpN+Uo5nLjRitPWAtSR0RePVRf3K
GwPs52iDSWFSk9MF+vDjzyBU4WyNfBV9AEpM9lIAw7g4UcxJEALArLnJc1uP9vNr
k1CpHEMqF+keqh2cJaYNan6znymQg+TAy5bN2Vlgc24aIzU/Ycl7iFOPytdPPWJL
qrunnKMpJQfLsbeg9SCyGqCaMTeOWjXJ8JCkgIeDD/0Rx0XL31/mut2FQnNWRAVb
m3SsIEOh6TXjl5wTNol+4rbo7faxNDY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:59 2025 by rpki-client