Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/56cee90b-3280-361f-b850-b49f5eb4b8e5.roa
File:                     56cee90b-3280-361f-b850-b49f5eb4b8e5.roa (raw, json)
Hash identifier:          K/569X6PYkFnS3MKj4IPwCUyk22NPjLYYyuSq1yIR90=
Subject key identifier:   31:F6:27:35:B2:44:E2:D1:8C:36:F4:09:BE:A6:FA:F1:F3:EF:4E:2B
Certificate issuer:       /CN=91518d14-585e-444c-bf2c-92e2195ab178
Certificate serial:       010D0C9F4328584B583C9089BCD0487699473AA0
Authority key identifier: 1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/56cee90b-3280-361f-b850-b49f5eb4b8e5.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     30170
IP address blocks:        204.8.32.0/22 maxlen: 24
                          204.13.164.0/22 maxlen: 24
                          204.15.224.0/21 maxlen: 24
                          208.99.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:90:89:bc:d0:48:76:99:47:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91518d14-585e-444c-bf2c-92e2195ab178
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=cde99a63-2f99-4138-825e-20db642fd007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:60:0a:71:94:4d:b9:0f:21:e4:72:55:71:
                    ee:48:52:f9:05:a7:89:fa:c7:4e:49:a8:4c:44:33:
                    c5:f1:a2:5e:32:e1:7b:42:37:c5:96:de:a2:d4:b7:
                    f6:83:52:2a:67:a1:d9:fc:c2:30:42:75:e8:9a:59:
                    b6:60:e8:0b:bb:0e:ac:e7:28:86:16:37:d4:4e:24:
                    5b:3a:78:a8:f5:d8:92:2d:39:cf:95:80:7e:35:a4:
                    f8:5c:3a:50:da:7c:00:13:70:16:b4:aa:d2:e1:69:
                    cf:f3:8d:6d:95:95:78:77:39:a2:ff:c1:7a:76:de:
                    3b:91:05:4c:15:a5:09:25:e0:9c:eb:4e:09:36:e8:
                    0a:d0:ef:18:ae:d9:9c:e1:f8:5d:b2:a3:5d:75:15:
                    91:fb:a2:40:2b:ed:9a:f8:03:ce:05:3e:d8:bf:89:
                    18:10:4c:34:33:30:f9:0e:4e:cc:bf:24:f0:23:da:
                    6d:41:55:b3:ff:79:ae:85:08:62:41:c5:fe:69:ac:
                    d5:d0:2b:39:09:18:09:21:97:a8:5c:71:08:46:f8:
                    77:c2:9f:36:82:24:17:a1:90:c0:bb:58:32:f6:f1:
                    ab:8b:f4:9f:3b:46:f0:99:92:08:8e:ba:e8:4b:9e:
                    fa:d6:a4:03:b3:d8:17:1f:94:86:6a:af:c4:dc:c1:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F6:27:35:B2:44:E2:D1:8C:36:F4:09:BE:A6:FA:F1:F3:EF:4E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/56cee90b-3280-361f-b850-b49f5eb4b8e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.32.0/22
                  204.13.164.0/22
                  204.15.224.0/21
                  208.99.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:ac:54:0e:44:7c:74:47:63:05:07:3e:88:93:54:e9:65:
         50:dc:53:09:78:30:53:1e:69:63:ee:4e:45:df:02:96:d2:cd:
         12:45:33:b1:68:61:07:16:ea:97:cb:43:d2:8e:5b:e8:36:e8:
         7b:1f:7c:7a:92:dd:6c:37:fa:d7:c2:77:25:1c:93:19:33:83:
         d9:80:a7:fe:b3:be:44:d7:d4:5e:17:69:f1:42:e5:8d:08:89:
         f1:91:c9:9b:72:4d:21:3d:36:7e:dc:9a:e2:cf:29:5d:df:de:
         16:bf:54:de:15:77:60:75:fc:3a:b3:b5:fc:45:f0:9a:15:88:
         de:0c:07:3f:62:80:46:06:4b:6e:11:9a:d1:a8:24:74:65:ca:
         a9:78:28:5f:37:be:b8:3e:eb:20:90:6d:e8:6f:96:b6:28:9a:
         ce:ad:a0:39:9b:43:ec:d5:15:07:9b:d7:d5:e6:a1:95:c4:bc:
         5f:c2:38:b8:0e:5c:e3:ef:fb:dd:ec:27:b9:1c:58:fb:01:5a:
         63:96:b0:77:54:90:39:0f:37:a9:a2:0f:44:84:48:4d:2e:f0:
         47:24:fa:c0:c5:0b:1a:4d:44:72:19:05:2e:97:d8:07:98:d0:
         34:2d:f4:87:73:c4:c8:21:ce:e4:7d:84:65:c0:da:96:8e:91:
         98:0d:f5:c4
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEtYPJCJvNBIdplHOqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1MThkMTQtNTg1ZS00NDRjLWJmMmMtOTJlMjE5NWFi
MTc4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
Y2RlOTlhNjMtMmY5OS00MTM4LTgyNWUtMjBkYjY0MmZkMDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNFgCnGUTbkPIeRyVXHuSFL5BaeJ+sdOSahM
RDPF8aJeMuF7QjfFlt6i1Lf2g1IqZ6HZ/MIwQnXomlm2YOgLuw6s5yiGFjfUTiRb
Onio9diSLTnPlYB+NaT4XDpQ2nwAE3AWtKrS4WnP841tlZV4dzmi/8F6dt47kQVM
FaUJJeCc604JNugK0O8Yrtmc4fhdsqNddRWR+6JAK+2a+APOBT7Yv4kYEEw0MzD5
Dk7MvyTwI9ptQVWz/3muhQhiQcX+aazV0Cs5CRgJIZeoXHEIRvh3wp82giQXoZDA
u1gy9vGri/SfO0bwmZIIjrroS5761qQDs9gXH5SGaq/E3MEiOwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFDH2JzWyROLRjDb0Cb6m+vHz704rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTUx
OGQxNC01ODVlLTQ0NGMtYmYyYy05MmUyMTk1YWIxNzgvNTZjZWU5MGItMzI4MC0z
NjFmLWI4NTAtYjQ5ZjVlYjRiOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1MThkMTQtNTg1ZS00NDRjLWJm
MmMtOTJlMjE5NWFiMTc4LzkxNTE4ZDE0LTU4NWUtNDQ0Yy1iZjJjLTkyZTIxOTVh
YjE3OC5jcmwwHwYDVR0jBBgwFoAUHeZ9seAVyK7ftv6Wm86MJeheEcowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTUxOGQxNC01ODVlLTQ0NGMtYmYyYy05MmUy
MTk1YWIxNzguY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCzAggAwQC
zA2kAwQDzA/gAwQF0GPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIv/rFQORHx0R2MFBz6Ik1TpZVDcUwl4
MFMeaWPuTkXfApbSzRJFM7FoYQcW6pfLQ9KOW+g26HsffHqS3Ww3+tfCdyUckxkz
g9mAp/6zvkTX1F4XafFC5Y0IifGRyZtyTSE9Nn7cmuLPKV3f3ha/VN4Vd2B1/Dqz
tfxF8JoViN4MBz9igEYGS24RmtGoJHRlyql4KF83vrg+6yCQbehvlrYoms6toDmb
Q+zVFQeb19XmoZXEvF/COLgOXOPv+93sJ7kcWPsBWmOWsHdUkDkPN6miD0SESE0u
8Eck+sDFCxpNRHIZBS6X2AeY0DQt9IdzxMghzuR9hGXA2paOkZgN9cQ=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:08:18 2025 by rpki-client