Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/60316776-c861-3030-bcc5-5a653fcff1b8.roa
File:                     60316776-c861-3030-bcc5-5a653fcff1b8.roa (raw, json)
Hash identifier:          N+EzM/3D39hL2Xm+n5f0b9LVVynVZD1g8r5EtpAY2eM=
Subject key identifier:   64:00:AC:C7:95:6B:1C:C8:F0:9D:38:1D:63:11:06:A2:CD:2F:7A:A1
Certificate issuer:       /CN=42e7c483-059a-47b9-840d-d56605959cf4
Certificate serial:       010D0C9F4328584B3AEC41805DCD1ED66E3D3838
Authority key identifier: 92:75:35:DA:EA:B7:48:13:97:A9:D2:20:9E:EB:DF:12:DE:CD:C9:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/60316776-c861-3030-bcc5-5a653fcff1b8.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     398114
IP address blocks:        204.62.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:41:80:5d:cd:1e:d6:6e:3d:38:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42e7c483-059a-47b9-840d-d56605959cf4
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=d5d53577-34f1-497c-8417-882c49af3102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:c6:5e:34:ff:4c:1a:e6:47:9d:6f:6e:16:
                    85:03:6d:84:70:58:57:c8:0d:d0:11:de:91:51:9c:
                    6d:8b:9e:a7:a9:82:2d:0a:29:ea:8c:5e:52:2f:58:
                    3e:6e:13:30:84:9d:f6:3e:39:ba:a5:14:a5:98:c9:
                    b7:84:5b:d4:f6:b5:7c:80:91:4f:ee:6c:a2:89:46:
                    64:82:f8:92:52:95:b0:45:bd:41:3a:b2:81:b9:71:
                    5b:e9:f2:32:c6:0d:94:84:ba:f7:81:c6:8c:0e:8a:
                    61:96:ec:56:09:47:d7:86:24:db:a3:3e:b9:5b:ad:
                    a2:77:c8:8b:80:46:0c:aa:d6:da:c0:c2:05:f1:7a:
                    7d:a2:97:e8:7e:70:11:22:20:2e:1a:cc:02:6e:3b:
                    b5:8c:a2:b3:34:ce:04:8c:bb:11:38:65:e3:f6:06:
                    a9:4b:3e:91:39:5d:f4:5f:9b:de:ba:7c:23:71:3d:
                    c1:5e:e3:44:af:b9:d6:5d:bb:77:04:9c:65:3c:f0:
                    18:8b:9e:36:31:20:d8:00:dd:c7:31:b1:a1:0f:01:
                    c7:99:ab:53:0b:f7:3e:96:b5:3c:46:3c:f4:82:f4:
                    11:90:d7:6e:7b:43:9d:e8:e8:fe:74:7f:3d:bd:18:
                    1c:95:5c:a9:9f:fd:e1:bc:20:45:9a:7d:36:73:b9:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:00:AC:C7:95:6B:1C:C8:F0:9D:38:1D:63:11:06:A2:CD:2F:7A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/60316776-c861-3030-bcc5-5a653fcff1b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.crl

            X509v3 Authority Key Identifier:
                keyid:92:75:35:DA:EA:B7:48:13:97:A9:D2:20:9E:EB:DF:12:DE:CD:C9:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:20:8c:5d:63:7a:67:59:9d:55:75:04:0c:c1:a0:73:21:61:
         66:75:5e:5a:55:62:97:37:04:83:bd:30:46:ad:bb:bd:0b:45:
         5a:85:44:e5:e8:d9:b4:b0:c0:e8:88:4c:54:79:0c:fb:15:88:
         2b:f3:6e:ee:78:4e:84:73:23:44:80:67:b3:22:2e:b9:57:f8:
         a5:7f:b0:bb:8d:4d:81:58:0c:0a:36:f5:78:63:af:8a:86:22:
         f1:06:5b:60:a4:f1:01:bf:fe:d1:95:9c:6f:35:13:c9:7f:36:
         86:5f:2e:bc:62:2e:49:c0:2f:a1:7e:f8:af:ca:58:9e:d7:82:
         c8:ae:71:6d:af:c0:74:37:78:70:d5:f2:40:5b:83:e3:dc:0e:
         07:02:51:1a:c4:c9:4b:ef:7e:82:bd:3f:9e:1b:b9:bd:cc:34:
         b6:2f:2c:66:91:b8:d4:fd:d2:50:d8:d7:17:6b:cf:70:93:47:
         90:14:33:53:50:c1:9b:0f:e1:d4:ea:31:f1:7a:08:6b:e4:77:
         93:54:9c:2c:62:5e:05:2b:8d:b2:5e:e3:a4:f5:68:ca:41:11:
         e9:ec:6f:da:58:dc:24:53:57:ec:0f:dd:3c:a0:55:2b:dd:be:
         47:5f:8b:fd:64:5d:5f:94:53:38:fb:7d:fc:22:35:04:86:0b:
         d2:8f:c9:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67EGAXc0e1m49ODgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDJlN2M0ODMtMDU5YS00N2I5LTg0MGQtZDU2NjA1OTU5
Y2Y0MB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk
ZDVkNTM1NzctMzRmMS00OTdjLTg0MTctODgyYzQ5YWYzMTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLvGXjT/TBrmR51vbhaFA22EcFhXyA3QEd6R
UZxti56nqYItCinqjF5SL1g+bhMwhJ32Pjm6pRSlmMm3hFvU9rV8gJFP7myiiUZk
gviSUpWwRb1BOrKBuXFb6fIyxg2UhLr3gcaMDophluxWCUfXhiTboz65W62id8iL
gEYMqtbawMIF8Xp9opfofnARIiAuGswCbju1jKKzNM4EjLsROGXj9gapSz6ROV30
X5veunwjcT3BXuNEr7nWXbt3BJxlPPAYi542MSDYAN3HMbGhDwHHmatTC/c+lrU8
Rjz0gvQRkNdue0Od6Oj+dH89vRgclVypn/3hvCBFmn02c7l1+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQArMeVaxzI8J04HWMRBqLNL3qhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MmU3
YzQ4My0wNTlhLTQ3YjktODQwZC1kNTY2MDU5NTljZjQvNjAzMTY3NzYtYzg2MS0z
MDMwLWJjYzUtNWE2NTNmY2ZmMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDJlN2M0ODMtMDU5YS00N2I5LTg0
MGQtZDU2NjA1OTU5Y2Y0LzQyZTdjNDgzLTA1OWEtNDdiOS04NDBkLWQ1NjYwNTk1
OWNmNC5jcmwwHwYDVR0jBBgwFoAUknU12uq3SBOXqdIgnuvfEt7NyZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MmU3YzQ4My0wNTlhLTQ3YjktODQwZC1kNTY2
MDU5NTljZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzD7HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEgjF1jemdZnVV1BAzBoHMhYWZ1XlpVYpc3BIO9MEatu70LRVqFROXo
2bSwwOiITFR5DPsViCvzbu54ToRzI0SAZ7MiLrlX+KV/sLuNTYFYDAo29Xhjr4qG
IvEGW2Ck8QG//tGVnG81E8l/NoZfLrxiLknAL6F++K/KWJ7XgsiucW2vwHQ3eHDV
8kBbg+PcDgcCURrEyUvvfoK9P54bub3MNLYvLGaRuNT90lDY1xdrz3CTR5AUM1NQ
wZsP4dTqMfF6CGvkd5NUnCxiXgUrjbJe46T1aMpBEensb9pY3CRTV+wP3TygVSvd
vkdfi/1kXV+UUzj7ffwiNQSGC9KPyf8=
-----END CERTIFICATE-----
Generated at Wed Oct 22 00:33:18 2025 by rpki-client