Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa
File:                     7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa (raw, json)
Hash identifier:          rbffDrnwKoqDASURu61DSCnSY0v1FyauIY/wAcvbJqg=
Subject key identifier:   7C:0D:F1:24:30:A4:18:E7:5B:E5:88:27:9C:F2:10:65:2A:02:E3:99
Certificate issuer:       /CN=fd6daa08-5cef-4e98-8808-5ffaa04a497c
Certificate serial:       010D0C9F4328584AD5065B79D6059F24457C9080
Authority key identifier: 8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     40670
IP address blocks:        162.219.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:5b:79:d6:05:9f:24:45:7c:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd6daa08-5cef-4e98-8808-5ffaa04a497c
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=eed43cc3-722c-4010-a97a-e166b2c26d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:c7:c1:16:99:c7:55:a2:75:ec:d1:bc:c0:
                    63:bf:67:b9:01:e7:82:69:88:09:38:50:7c:e7:4a:
                    e2:16:bf:d9:6c:38:3f:5a:27:ba:69:37:53:16:e6:
                    ea:fa:fd:5c:d9:a5:85:fd:e2:6d:63:32:75:10:e8:
                    4b:fe:3b:d3:b2:b9:b1:bd:bb:84:cb:de:1e:c3:25:
                    d6:2a:ea:b5:1e:ce:76:ff:12:91:94:d4:42:51:a0:
                    4b:83:6c:3d:30:bd:a8:46:e1:11:2c:1e:0c:23:8c:
                    a6:7b:17:e7:60:29:66:19:4e:de:da:d2:b2:7a:65:
                    a5:db:dd:c8:ba:9a:37:24:39:e6:dc:78:07:7d:1f:
                    45:bf:10:58:8a:f7:b0:1e:ab:93:99:67:4d:a5:86:
                    81:76:4a:ac:ea:59:94:52:18:2b:25:a5:56:90:6f:
                    38:3b:27:0c:ab:37:eb:c1:70:f6:ea:61:bc:16:c3:
                    f9:3b:80:a9:de:25:f3:4b:4e:85:66:d2:fb:27:e3:
                    b3:6e:5a:ef:ed:5a:8b:68:b4:8c:a5:ba:f2:a7:f8:
                    d1:e6:5d:ad:ba:6c:07:4a:9e:fe:76:e3:79:3c:52:
                    ed:9b:97:37:5c:1d:8b:7b:ff:65:e6:d0:ce:5a:28:
                    43:d9:25:d8:96:61:97:ae:26:2b:f9:28:0d:e5:1b:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0D:F1:24:30:A4:18:E7:5B:E5:88:27:9C:F2:10:65:2A:02:E3:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.crl

            X509v3 Authority Key Identifier:
                keyid:8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:0b:80:46:c7:b1:6b:56:27:b8:31:2b:c8:c7:92:44:68:
         82:75:27:ca:34:76:5d:d2:31:92:a2:38:b9:f0:d6:1f:18:84:
         d9:6c:c0:b2:a3:95:90:3b:90:38:02:8d:18:a2:da:a4:bb:ce:
         30:17:06:f4:cc:65:c3:c1:a0:97:63:ee:f1:50:93:92:a3:8c:
         ab:96:d6:6e:62:63:98:da:12:c1:fc:0e:f4:8f:28:11:b0:f5:
         c8:df:5d:31:2b:0b:0c:52:16:7f:15:a3:2c:cd:0b:be:4a:43:
         81:55:48:d8:de:fe:c9:eb:1b:c0:7a:ff:06:c3:a4:a3:50:2d:
         0c:03:14:e3:a1:42:99:b2:4c:53:22:6e:39:89:40:6d:80:01:
         f5:58:9c:6f:d9:57:64:aa:b0:b4:c9:02:cb:e2:d0:67:bf:aa:
         14:10:af:bb:a3:8d:5d:22:35:ef:46:ed:b9:c9:6a:36:21:cf:
         7b:5d:0b:e3:de:b4:b8:2f:f6:2c:c7:5d:b5:e1:f0:99:9b:d8:
         52:c0:c8:3f:1c:ab:86:e2:ce:d6:3b:60:ab:5b:9b:91:31:07:
         c7:63:b7:af:1b:05:a3:9d:7f:51:2d:84:b6:60:76:83:58:cb:
         9a:ca:ea:f5:bd:00:22:c2:2e:e2:8b:ee:02:db:c3:70:04:2a:
         7b:3c:ba:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBlt51gWfJEV8kIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ2ZGFhMDgtNWNlZi00ZTk4LTg4MDgtNWZmYWEwNGE0
OTdjMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk
ZWVkNDNjYzMtNzIyYy00MDEwLWE5N2EtZTE2NmIyYzI2ZDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS3HwRaZx1WidezRvMBjv2e5AeeCaYgJOFB8
50riFr/ZbDg/Wie6aTdTFubq+v1c2aWF/eJtYzJ1EOhL/jvTsrmxvbuEy94ewyXW
Kuq1Hs52/xKRlNRCUaBLg2w9ML2oRuERLB4MI4ymexfnYClmGU7e2tKyemWl293I
upo3JDnm3HgHfR9FvxBYivewHquTmWdNpYaBdkqs6lmUUhgrJaVWkG84OycMqzfr
wXD26mG8FsP5O4Cp3iXzS06FZtL7J+Ozblrv7VqLaLSMpbryp/jR5l2tumwHSp7+
duN5PFLtm5c3XB2Le/9l5tDOWihD2SXYlmGXriYr+SgN5RtngwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHwN8SQwpBjnW+WIJ5zyEGUqAuOZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDZk
YWEwOC01Y2VmLTRlOTgtODgwOC01ZmZhYTA0YTQ5N2MvN2Q1YjczNTctY2YzMC0z
MjBiLTkwODMtYzY3YzNiYmNmZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQ2ZGFhMDgtNWNlZi00ZTk4LTg4
MDgtNWZmYWEwNGE0OTdjL2ZkNmRhYTA4LTVjZWYtNGU5OC04ODA4LTVmZmFhMDRh
NDk3Yy5jcmwwHwYDVR0jBBgwFoAUjBS9M6R2/D9yf+enbIfP7cRd7bAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDZkYWEwOC01Y2VmLTRlOTgtODgwOC01ZmZh
YTA0YTQ5N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBottqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfuC4BGx7FrVie4MSvIx5JEaIJ1J8o0dl3SMZKiOLnw1h8YhNlswLKj
lZA7kDgCjRii2qS7zjAXBvTMZcPBoJdj7vFQk5KjjKuW1m5iY5jaEsH8DvSPKBGw
9cjfXTErCwxSFn8VoyzNC75KQ4FVSNje/snrG8B6/wbDpKNQLQwDFOOhQpmyTFMi
bjmJQG2AAfVYnG/ZV2SqsLTJAsvi0Ge/qhQQr7ujjV0iNe9G7bnJajYhz3tdC+Pe
tLgv9izHXbXh8Jmb2FLAyD8cq4biztY7YKtbm5ExB8djt68bBaOdf1EthLZgdoNY
y5rK6vW9ACLCLuKL7gLbw3AEKns8uqM=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:51:57 2025 by rpki-client