Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/9ca2189a-2339-3b56-9df2-519f6e198c16.roa
File:                     9ca2189a-2339-3b56-9df2-519f6e198c16.roa (raw, json)
Hash identifier:          AU64xkm0p9ixPpGXGhW9cewvubW6GwXmq81iULX6c24=
Subject key identifier:   D4:AC:F1:9D:F9:7D:86:79:17:01:BA:42:DC:EB:37:D7:E4:D6:D9:E3
Certificate issuer:       /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial:       010D0C9F4328584ACE0B9F2A0E7EC30BAD4AC040
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/9ca2189a-2339-3b56-9df2-519f6e198c16.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     22485
IP address blocks:        199.187.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:9f:2a:0e:7e:c3:0b:ad:4a:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=fe7bddc0-0ba7-4a5b-86e2-9aa0dc4e8323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:14:81:bd:2c:02:af:13:34:e1:89:f3:cf:
                    7d:4a:74:93:da:ee:e8:66:8b:4b:e6:4c:97:a3:62:
                    a6:47:82:33:a0:69:50:a7:7c:b9:8a:ad:6e:2b:a2:
                    9f:8c:7a:b7:f6:10:03:62:fd:b9:27:e0:80:9c:45:
                    7f:86:7c:f3:c4:ff:df:79:1e:bc:cf:dd:1c:2b:95:
                    7a:fa:cc:94:77:24:30:3a:c2:ed:42:fc:fe:3c:1d:
                    03:1d:a2:46:21:32:f0:b2:75:4b:b6:3f:ae:74:1c:
                    5b:bf:76:c8:09:9b:d7:9b:dd:c2:ca:07:0f:a1:5c:
                    03:9e:66:0c:23:85:67:dd:8d:12:26:99:ed:73:cb:
                    59:a3:ce:af:6c:1b:44:60:d0:03:34:ee:95:42:ff:
                    2b:b7:a9:8c:5a:21:8e:c5:ab:7a:a9:9e:80:a8:f0:
                    12:3c:c4:7b:66:83:3f:55:25:4c:f4:94:9b:7b:fe:
                    33:af:95:b8:6a:3b:6b:02:51:36:2c:7c:73:a0:4c:
                    af:fc:e0:37:9b:4a:29:59:70:d7:63:8f:00:a5:ce:
                    3e:df:87:72:05:36:d8:bd:f7:35:c9:33:5b:42:13:
                    f2:b6:d8:c5:9a:ff:64:b2:67:a3:88:7c:2c:2d:4d:
                    0a:a6:78:82:e5:8f:76:db:f9:4d:d6:dd:49:1a:b4:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AC:F1:9D:F9:7D:86:79:17:01:BA:42:DC:EB:37:D7:E4:D6:D9:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/9ca2189a-2339-3b56-9df2-519f6e198c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl

            X509v3 Authority Key Identifier:
                keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:29:b7:ab:53:b1:94:dd:f4:21:f9:9c:39:13:b3:31:e5:fa:
         25:fd:69:57:c9:44:44:a0:54:cb:06:9a:3d:e8:ca:75:6d:63:
         33:eb:bf:4e:3d:5a:8f:25:ad:49:ca:26:8d:f4:de:bc:15:94:
         4e:d4:d0:74:4f:b1:69:df:65:29:9f:8b:1b:2e:ba:9b:8e:41:
         da:3d:b4:74:03:21:6a:66:c7:f9:06:5e:56:c7:6a:95:66:6f:
         8b:78:f4:c9:da:4b:af:45:8c:f8:4d:67:a1:d5:1a:e1:61:09:
         7c:c2:53:5c:e2:8d:71:d9:62:b9:3b:f5:f8:07:d4:c6:e2:4e:
         9e:76:6d:df:6c:67:be:3d:8b:f9:d7:e6:04:22:c4:ef:30:3d:
         dc:49:4d:5f:58:9a:8b:b5:95:f4:7e:c0:14:70:de:d5:6e:69:
         7a:97:86:3b:52:1d:58:47:21:9b:df:e1:69:7b:8c:94:c3:e5:
         96:e5:dc:9e:3c:c6:89:9f:f0:ec:b5:bc:39:61:6e:5a:b8:d2:
         79:d0:b4:1f:a8:a7:4a:c0:11:52:5b:c6:3b:ab:e0:9f:19:a9:
         e0:f9:02:a8:4a:5f:e4:be:da:83:9c:c2:65:ac:35:d9:3c:0e:
         d7:9f:d2:00:96:2a:25:de:59:bc:2d:a5:98:73:d6:71:4d:e1:
         02:3e:db:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC58qDn7DC61KwEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjE2YjFlZDItNDkxZi00ZWQ3LWJlOTktNTliMjAzMTBj
NDc1MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
ZmU3YmRkYzAtMGJhNy00YTViLTg2ZTItOWFhMGRjNGU4MzIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD8Ugb0sAq8TNOGJ8899SnST2u7oZotL5kyX
o2KmR4IzoGlQp3y5iq1uK6KfjHq39hADYv25J+CAnEV/hnzzxP/feR68z90cK5V6
+syUdyQwOsLtQvz+PB0DHaJGITLwsnVLtj+udBxbv3bICZvXm93CygcPoVwDnmYM
I4Vn3Y0SJpntc8tZo86vbBtEYNADNO6VQv8rt6mMWiGOxat6qZ6AqPASPMR7ZoM/
VSVM9JSbe/4zr5W4ajtrAlE2LHxzoEyv/OA3m0opWXDXY48Apc4+34dyBTbYvfc1
yTNbQhPyttjFmv9ksmejiHwsLU0KpniC5Y922/lN1t1JGrRoUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSs8Z35fYZ5FwG6QtzrN9fk1tnjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMTZi
MWVkMi00OTFmLTRlZDctYmU5OS01OWIyMDMxMGM0NzUvOWNhMjE4OWEtMjMzOS0z
YjU2LTlkZjItNTE5ZjZlMTk4YzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjE2YjFlZDItNDkxZi00ZWQ3LWJl
OTktNTliMjAzMTBjNDc1L2YxNmIxZWQyLTQ5MWYtNGVkNy1iZTk5LTU5YjIwMzEw
YzQ3NS5jcmwwHwYDVR0jBBgwFoAUEGObLEoCatgzyXEiJFJcgL5sq9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mMTZiMWVkMi00OTFmLTRlZDctYmU5OS01OWIy
MDMxMGM0NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7scMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkpt6tTsZTd9CH5nDkTszHl+iX9aVfJRESgVMsGmj3oynVtYzPrv049
Wo8lrUnKJo303rwVlE7U0HRPsWnfZSmfixsuupuOQdo9tHQDIWpmx/kGXlbHapVm
b4t49MnaS69FjPhNZ6HVGuFhCXzCU1zijXHZYrk79fgH1MbiTp52bd9sZ749i/nX
5gQixO8wPdxJTV9Ymou1lfR+wBRw3tVuaXqXhjtSHVhHIZvf4Wl7jJTD5Zbl3J48
xomf8Oy1vDlhblq40nnQtB+op0rAEVJbxjur4J8ZqeD5AqhKX+S+2oOcwmWsNdk8
Dtef0gCWKiXeWbwtpZhz1nFN4QI+2zs=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:13:46 2025 by rpki-client