Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8b239c89-4c84-3291-ae22-3e63274d32c7.roa
File:                     8b239c89-4c84-3291-ae22-3e63274d32c7.roa (raw, json)
Hash identifier:          U1QaMFRIUHyV5qvTUtuDSvMkZJX9GP1pBSWvupiq+yY=
Subject key identifier:   3E:1E:97:53:9E:78:B3:DE:84:D6:C7:08:95:D1:B8:95:4D:C9:A5:8D
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584B6A61E863C22678F6A0BB4098
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8b239c89-4c84-3291-ae22-3e63274d32c7.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     55293
IP address blocks:        69.48.162.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:e8:63:c2:26:78:f6:a0:bb:40:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=d61451d0-570a-46be-bc0a-a203b81961a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:3d:20:d0:17:40:6e:f6:5a:4a:06:33:92:
                    1f:fd:32:de:6e:5d:d5:f4:70:35:03:6a:2a:22:0e:
                    a6:9f:9f:41:97:f8:bd:c3:a1:14:2f:fe:50:86:34:
                    a6:b1:a4:3d:a7:88:02:6c:57:05:b6:2e:61:4b:31:
                    3d:35:24:74:bb:90:5c:a5:27:54:f1:4b:6f:c1:0b:
                    8f:76:1d:d4:d4:00:69:e2:fe:27:fd:5c:d6:b5:4c:
                    80:d0:a4:50:ff:49:bc:59:2e:17:97:37:4b:8f:d4:
                    8d:2c:8a:c9:84:17:c0:3a:d7:c6:4a:d8:92:91:00:
                    04:fe:bb:e9:de:07:8c:dd:b5:ab:29:35:19:28:f9:
                    a6:61:a8:5b:96:62:7a:4a:b8:61:f3:b8:28:9a:fc:
                    45:8a:b9:52:73:22:21:87:23:58:88:a0:d5:9d:c2:
                    22:4d:3c:7b:1c:cf:68:3a:b8:38:a7:cb:32:80:f6:
                    83:0a:7a:c3:90:c8:8a:51:2a:51:43:19:21:ff:79:
                    cd:13:f2:99:7c:39:32:6b:3b:bd:b2:08:2e:b5:14:
                    a2:e4:5e:d7:b5:06:65:13:2b:9c:9f:48:de:40:03:
                    3b:04:5e:51:03:bd:6d:6b:c3:16:d4:a2:de:fc:35:
                    9d:22:01:72:af:5f:ee:b3:56:5f:68:6c:b3:48:4e:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1E:97:53:9E:78:B3:DE:84:D6:C7:08:95:D1:B8:95:4D:C9:A5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8b239c89-4c84-3291-ae22-3e63274d32c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c2:9e:87:5e:ac:f5:57:17:6c:0c:a3:81:70:f6:15:9d:44:
         9c:70:a4:ce:d8:5d:29:0f:36:97:a7:ca:11:dc:27:66:24:4a:
         d5:78:14:0c:b3:28:d9:c5:0d:e0:63:cf:ff:92:4e:f1:de:d5:
         48:55:9f:04:7d:4a:5e:ca:9c:16:80:0a:41:e6:4d:a0:60:10:
         7c:ec:e4:f6:dd:67:a1:7b:16:a0:a1:b7:56:ec:dd:ab:6e:61:
         cd:17:8d:c3:e1:50:81:0a:c4:9a:a0:2c:28:e9:a9:4c:12:e0:
         92:6f:ab:09:97:27:35:17:bf:1d:cf:77:72:f0:6f:96:22:f5:
         c3:af:af:eb:3d:a8:b0:38:ca:15:b2:bc:ce:b6:e9:ee:76:54:
         3f:1a:78:64:30:bb:79:0a:8c:6b:27:0d:d3:fc:b8:55:d2:a1:
         30:ac:73:76:79:2d:5f:71:a5:2a:dc:cd:5f:77:a4:51:66:17:
         52:82:da:7d:2a:44:15:41:74:8d:ef:53:8f:75:2e:bf:81:9d:
         08:93:e8:57:0c:5c:08:3d:7b:8a:22:b4:77:30:ee:f3:6e:a0:
         75:22:af:a6:04:f8:17:2f:84:a9:65:e6:af:f1:5e:0e:fc:8e:
         b1:69:1d:8f:78:9f:a5:fc:bb:bf:12:2a:7e:5c:8f:4b:43:e9:
         cd:58:7f:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYehjwiZ49qC7QJgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZDYxNDUxZDAtNTcwYS00NmJlLWJjMGEtYTIwM2I4MTk2MWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGA9INAXQG72WkoGM5If/TLebl3V9HA1A2oq
Ig6mn59Bl/i9w6EUL/5QhjSmsaQ9p4gCbFcFti5hSzE9NSR0u5BcpSdU8UtvwQuP
dh3U1ABp4v4n/VzWtUyA0KRQ/0m8WS4XlzdLj9SNLIrJhBfAOtfGStiSkQAE/rvp
3geM3bWrKTUZKPmmYahblmJ6Srhh87gomvxFirlScyIhhyNYiKDVncIiTTx7HM9o
Org4p8sygPaDCnrDkMiKUSpRQxkh/3nNE/KZfDkyazu9sggutRSi5F7XtQZlEyuc
n0jeQAM7BF5RA71ta8MW1KLe/DWdIgFyr1/us1ZfaGyzSE7frwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD4el1OeeLPehNbHCJXRuJVNyaWNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvOGIyMzljODktNGM4NC0z
MjkxLWFlMjItM2U2MzI3NGQzMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRTCiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3CnoderPVXF2wMo4Fw9hWdRJxwpM7YXSkPNpenyhHcJ2YkStV4FAyz
KNnFDeBjz/+STvHe1UhVnwR9Sl7KnBaACkHmTaBgEHzs5PbdZ6F7FqCht1bs3atu
Yc0XjcPhUIEKxJqgLCjpqUwS4JJvqwmXJzUXvx3Pd3Lwb5Yi9cOvr+s9qLA4yhWy
vM626e52VD8aeGQwu3kKjGsnDdP8uFXSoTCsc3Z5LV9xpSrczV93pFFmF1KC2n0q
RBVBdI3vU491Lr+BnQiT6FcMXAg9e4oitHcw7vNuoHUir6YE+BcvhKll5q/xXg78
jrFpHY94n6X8u78SKn5cj0tD6c1Yf8k=
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:51 2025 by rpki-client