Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa
File:                     25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa (raw, json)
Hash identifier:          CQmsHE2wtLmPy3e4J++ik4I+SAojAHkwkvHjvTAProQ=
Subject key identifier:   FC:7E:D7:94:DB:B2:F1:D5:8B:11:FA:CD:07:A6:26:13:18:C4:56:99
Certificate issuer:       /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial:       010D0C9F4328584A3E45A7FF90ED431A30A49E00
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        162.249.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a7:ff:90:ed:43:1a:30:a4:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=f8dcd268-ab3b-4bc1-8beb-07c9cfe79793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:a5:12:0e:28:83:54:76:b4:19:79:2a:31:
                    d6:8d:8b:c5:5a:07:46:52:23:0f:c3:2c:fa:30:d4:
                    52:3b:79:7c:83:5c:e2:d2:4c:23:e4:78:86:9d:43:
                    f3:ec:05:71:53:e1:f6:37:f6:5c:88:07:4e:79:6f:
                    29:11:43:09:80:74:f2:7d:4a:75:31:79:31:d8:11:
                    cc:59:f9:a9:af:a1:d3:52:97:a7:2c:0d:8c:00:93:
                    58:76:67:fa:b4:43:7e:86:31:f9:61:36:b4:62:12:
                    46:9c:42:86:fb:c6:72:c2:12:c9:b5:bb:70:94:66:
                    50:96:9a:dc:b4:88:8a:4d:bb:ef:b0:e2:f2:3b:6b:
                    dc:80:68:92:f9:de:7d:d8:6c:35:8d:3d:38:ff:94:
                    03:86:d8:07:1e:67:35:95:30:55:c3:df:ed:0d:c1:
                    15:18:45:b0:45:8a:17:97:cb:de:0a:8e:b4:60:d4:
                    cb:76:cb:5f:f1:0d:4f:23:cd:31:89:89:d9:89:a1:
                    a2:6e:8d:64:e1:02:c9:6f:af:30:c1:22:6a:c1:6d:
                    40:db:6d:1c:16:93:5c:96:4f:7f:80:13:0f:69:50:
                    87:2f:a0:c4:c0:5d:c8:c0:a6:a3:67:a9:1b:13:6d:
                    47:c4:92:d9:89:7a:18:98:6a:a1:dc:39:ca:37:f1:
                    1a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7E:D7:94:DB:B2:F1:D5:8B:11:FA:CD:07:A6:26:13:18:C4:56:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:47:ef:96:91:29:7a:24:26:e1:b5:84:7d:ef:07:ca:0b:f3:
         a4:e9:18:2a:02:ff:57:eb:eb:5d:ae:bc:57:59:fe:f9:16:4d:
         bc:1a:78:c9:87:fb:f2:83:cb:3e:18:03:a8:c8:e6:a6:1d:06:
         c3:b4:0b:5f:01:f5:7e:d0:83:52:d5:61:f7:94:d7:7e:56:a0:
         df:a5:2d:32:04:b3:8d:21:d3:e1:38:51:db:11:8e:be:f5:86:
         0c:e5:7c:a7:89:02:ac:b1:6b:d3:c9:2e:77:e1:54:2f:44:9a:
         b1:85:1c:e9:61:a4:1b:ca:bc:64:b7:75:f0:5b:a1:24:ea:93:
         72:44:35:fd:d6:23:d5:23:07:32:1e:8e:04:cb:3f:f7:ae:48:
         6b:39:f8:bf:ee:c9:82:b2:17:11:8c:4b:8a:fd:9a:4b:08:78:
         aa:2e:79:a0:e5:a4:62:45:aa:b3:ae:c4:4a:a4:1c:96:9a:a0:
         e4:4d:ed:ea:4e:4c:e0:57:4e:1e:6a:ba:81:6e:d3:3b:85:df:
         1d:b3:36:bf:a8:40:a6:2a:28:c1:ee:9b:c3:1a:5e:6f:f8:df:
         b1:a4:8c:e6:e3:58:5d:83:4d:d2:76:ea:3d:4f:cb:92:bf:51:
         ac:6b:d2:30:a8:f5:c1:16:36:99:77:94:84:a5:df:64:db:ce:
         f1:6e:ad:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+Raf/kO1DGjCkngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc4MjMyNjUtOTk0OS00MDMwLWJlMDktNWFlYmRmNzdh
ZTVjMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk
ZjhkY2QyNjgtYWIzYi00YmMxLThiZWItMDdjOWNmZTc5NzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/WlEg4og1R2tBl5KjHWjYvFWgdGUiMPwyz6
MNRSO3l8g1zi0kwj5HiGnUPz7AVxU+H2N/ZciAdOeW8pEUMJgHTyfUp1MXkx2BHM
Wfmpr6HTUpenLA2MAJNYdmf6tEN+hjH5YTa0YhJGnEKG+8ZywhLJtbtwlGZQlprc
tIiKTbvvsOLyO2vcgGiS+d592Gw1jT04/5QDhtgHHmc1lTBVw9/tDcEVGEWwRYoX
l8veCo60YNTLdstf8Q1PI80xiYnZiaGibo1k4QLJb68wwSJqwW1A220cFpNclk9/
gBMPaVCHL6DEwF3IwKajZ6kbE21HxJLZiXoYmGqh3DnKN/EaIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPx+15TbsvHVixH6zQemJhMYxFaZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81Nzgy
MzI2NS05OTQ5LTQwMzAtYmUwOS01YWViZGY3N2FlNWMvMjVlZGUxNjAtMjBkNy0z
NDg0LTlkZmUtNjFjM2FlM2NlOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTc4MjMyNjUtOTk0OS00MDMwLWJl
MDktNWFlYmRmNzdhZTVjLzU3ODIzMjY1LTk5NDktNDAzMC1iZTA5LTVhZWJkZjc3
YWU1Yy5jcmwwHwYDVR0jBBgwFoAUHG1H2rSN5+TXiWF7twW92xQQZPUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzgyMzI2NS05OTQ5LTQwMzAtYmUwOS01YWVi
ZGY3N2FlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovl1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlH75aRKXokJuG1hH3vB8oL86TpGCoC/1fr612uvFdZ/vkWTbwaeMmH
+/KDyz4YA6jI5qYdBsO0C18B9X7Qg1LVYfeU135WoN+lLTIEs40h0+E4UdsRjr71
hgzlfKeJAqyxa9PJLnfhVC9EmrGFHOlhpBvKvGS3dfBboSTqk3JENf3WI9UjBzIe
jgTLP/euSGs5+L/uyYKyFxGMS4r9mksIeKoueaDlpGJFqrOuxEqkHJaaoORN7epO
TOBXTh5quoFu0zuF3x2zNr+oQKYqKMHum8MaXm/437GkjObjWF2DTdJ26j1Py5K/
Uaxr0jCo9cEWNpl3lISl32TbzvFureA=
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:19:41 2025 by rpki-client