Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa
File:                     9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa (raw, json)
Hash identifier:          9UAVlNCVACEfaHOyuK26Jl8dWwmSwSz8pXWgmT/fgDc=
Subject key identifier:   0F:09:55:9E:46:B7:E6:91:00:B4:63:0F:17:58:57:5D:86:C1:1F:9A
Certificate issuer:       /CN=4638d5d1-44fb-4ecc-9e21-685a28c0b0b4
Certificate serial:       010D0C9F4328584AD3A0F8A0F5A4693B820A2B80
Authority key identifier: AE:00:06:1A:E2:3C:4C:D1:26:F3:52:C7:6C:7A:1F:C7:BA:D2:44:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     19743
IP address blocks:        216.39.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:f8:a0:f5:a4:69:3b:82:0a:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4638d5d1-44fb-4ecc-9e21-685a28c0b0b4
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=14144160-ee36-4c2d-8b91-40005c1054c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c5:6a:c5:12:d3:3f:2d:21:29:e1:d1:ad:b4:
                    3f:9f:ab:fd:78:e8:29:3a:7d:97:0d:83:da:c1:9b:
                    a0:44:6b:8f:22:f7:81:ea:ea:16:4b:95:d1:ce:64:
                    9e:46:ab:d7:c5:5d:f5:5e:57:a6:da:78:f7:1a:2f:
                    63:c3:f3:64:bd:f8:e2:dd:57:67:dd:d7:9a:98:10:
                    aa:0e:07:4c:fc:80:a3:1e:5a:9a:68:58:21:2d:a1:
                    90:ee:79:cd:2b:84:8f:86:b1:07:35:1a:74:73:71:
                    40:d9:36:7b:0c:f2:e7:b1:96:51:2d:17:1d:cf:cc:
                    1b:59:fa:11:fc:62:32:bf:a1:51:cd:02:fd:ac:0b:
                    84:82:8f:65:27:81:08:80:f1:af:f4:1c:2a:b9:26:
                    e2:b5:30:db:4a:eb:8f:aa:97:54:41:51:92:e1:39:
                    9f:72:cd:cb:1d:af:ec:f3:66:51:4e:43:1f:43:7e:
                    06:9f:ec:f3:f6:2b:f2:cd:f5:57:9c:00:65:4d:80:
                    e6:4f:ba:a3:df:b5:c7:38:6f:67:8b:c1:47:77:44:
                    9f:35:16:69:3d:d6:1c:d5:d5:ba:a1:9e:ca:26:62:
                    d3:02:67:98:da:ec:61:9f:37:89:e8:29:24:39:05:
                    6c:24:37:4f:f7:5a:f8:0b:f3:74:52:73:3a:47:b8:
                    2b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:09:55:9E:46:B7:E6:91:00:B4:63:0F:17:58:57:5D:86:C1:1F:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/9682e024-c8ab-3a40-ad3c-ef8365c22b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.crl

            X509v3 Authority Key Identifier:
                keyid:AE:00:06:1A:E2:3C:4C:D1:26:F3:52:C7:6C:7A:1F:C7:BA:D2:44:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4638d5d1-44fb-4ecc-9e21-685a28c0b0b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:10:1a:da:bb:ac:79:24:f6:80:d5:5d:f1:ca:54:98:bc:9d:
         bf:cf:8e:61:18:67:cc:ed:5f:d6:5c:a1:d5:98:db:9f:6e:6e:
         68:dc:6a:13:e7:1b:fb:1b:67:bb:8c:5c:46:5a:da:c0:42:c1:
         25:da:67:c7:c9:ea:53:5c:f6:61:16:8e:50:82:ab:46:17:1b:
         a9:20:98:d6:2e:8f:9e:d5:21:8f:a1:72:2b:f8:79:2c:f8:77:
         b3:42:3a:c4:a7:93:25:91:2e:fe:c5:65:49:3a:3f:15:70:8f:
         6a:da:93:a2:21:f5:3e:08:78:ec:96:14:d3:96:24:25:ab:e8:
         bf:8d:a8:c6:d1:c9:e8:c0:f5:2f:e2:73:8c:d8:60:4a:80:0e:
         0e:0d:5c:7c:1d:db:68:27:b7:76:0d:bf:2c:1d:3f:61:93:fc:
         a9:08:5e:ee:3d:37:5e:d2:e2:08:46:38:f0:ba:9b:66:58:c3:
         46:44:c0:bf:f1:8a:3a:97:c8:b1:d4:4d:b1:47:e0:9d:73:73:
         52:a9:b9:e9:8e:2c:74:7d:16:98:66:d2:96:3f:64:f9:8f:90:
         17:f1:16:1f:7b:c9:ac:a1:ba:9b:b6:ea:11:7a:8d:61:0e:15:
         eb:c2:cc:17:74:e5:4a:d4:64:a1:25:88:a6:b1:c7:9e:e4:5a:
         45:e5:38:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPig9aRpO4IKK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDYzOGQ1ZDEtNDRmYi00ZWNjLTllMjEtNjg1YTI4YzBi
MGI0MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
MTQxNDQxNjAtZWUzNi00YzJkLThiOTEtNDAwMDVjMTA1NGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8VqxRLTPy0hKeHRrbQ/n6v9eOgpOn2XDYPa
wZugRGuPIveB6uoWS5XRzmSeRqvXxV31Xlem2nj3Gi9jw/Nkvfji3Vdn3deamBCq
DgdM/ICjHlqaaFghLaGQ7nnNK4SPhrEHNRp0c3FA2TZ7DPLnsZZRLRcdz8wbWfoR
/GIyv6FRzQL9rAuEgo9lJ4EIgPGv9BwquSbitTDbSuuPqpdUQVGS4Tmfcs3LHa/s
82ZRTkMfQ34Gn+zz9ivyzfVXnABlTYDmT7qj37XHOG9ni8FHd0SfNRZpPdYc1dW6
oZ7KJmLTAmeY2uxhnzeJ6CkkOQVsJDdP91r4C/N0UnM6R7grjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8JVZ5Gt+aRALRjDxdYV12GwR+aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NjM4
ZDVkMS00NGZiLTRlY2MtOWUyMS02ODVhMjhjMGIwYjQvOTY4MmUwMjQtYzhhYi0z
YTQwLWFkM2MtZWY4MzY1YzIyYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDYzOGQ1ZDEtNDRmYi00ZWNjLTll
MjEtNjg1YTI4YzBiMGI0LzQ2MzhkNWQxLTQ0ZmItNGVjYy05ZTIxLTY4NWEyOGMw
YjBiNC5jcmwwHwYDVR0jBBgwFoAUrgAGGuI8TNEm81LHbHofx7rSRFswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NjM4ZDVkMS00NGZiLTRlY2MtOWUyMS02ODVh
MjhjMGIwYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2CfkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0QGtq7rHkk9oDVXfHKVJi8nb/PjmEYZ8ztX9ZcodWY259ubmjcahPn
G/sbZ7uMXEZa2sBCwSXaZ8fJ6lNc9mEWjlCCq0YXG6kgmNYuj57VIY+hciv4eSz4
d7NCOsSnkyWRLv7FZUk6PxVwj2rak6Ih9T4IeOyWFNOWJCWr6L+NqMbRyejA9S/i
c4zYYEqADg4NXHwd22gnt3YNvywdP2GT/KkIXu49N17S4ghGOPC6m2ZYw0ZEwL/x
ijqXyLHUTbFH4J1zc1KpuemOLHR9Fphm0pY/ZPmPkBfxFh97yayhupu26hF6jWEO
FevCzBd05UrUZKEliKaxx57kWkXlOBA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:57:02 2025 by rpki-client