Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/983c89cd-1b72-3ac8-a5db-9b17a53b41f8.roa
File:                     983c89cd-1b72-3ac8-a5db-9b17a53b41f8.roa (raw, json)
Hash identifier:          fGWQW7KhmmdOvJXjiQVWm7Eq6S9duI7R5MJHUjZQrVk=
Subject key identifier:   6C:4B:E0:4F:22:C5:0E:E4:78:6B:FA:1B:5E:E0:91:C3:B6:DA:EF:10
Certificate issuer:       /CN=2cbcd744-1d0b-4daf-bb75-fbe69ef2c359
Certificate serial:       010D0C9F4328584B8917634461078205F82C0780
Authority key identifier: 09:B8:6C:4B:EF:A0:22:88:CF:47:66:E7:89:22:03:32:50:66:F3:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/983c89cd-1b72-3ac8-a5db-9b17a53b41f8.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        45.62.90.0/24 maxlen: 24
                          45.62.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:63:44:61:07:82:05:f8:2c:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cbcd744-1d0b-4daf-bb75-fbe69ef2c359
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=f95f6f43-d57c-407c-b8ae-316a5515c09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:50:8d:42:97:40:39:8a:b2:d1:67:e2:c1:06:
                    77:8f:23:b0:42:de:7e:15:b0:f9:47:81:d5:84:46:
                    1c:ec:46:4b:dd:1e:6d:66:4a:b0:a0:37:e1:44:79:
                    27:6c:4d:2b:d8:cb:27:fc:2b:67:4a:a9:a0:be:33:
                    97:89:53:46:64:c9:f5:c4:39:18:27:72:ca:27:1e:
                    6c:bb:c8:d9:a3:36:d6:63:3e:7a:66:8d:d2:fe:3b:
                    9c:a3:4b:03:09:98:62:53:12:81:7c:38:ed:7d:34:
                    0a:e0:01:c0:a6:27:9e:c5:00:84:57:51:a4:88:e7:
                    1f:85:47:4a:65:20:4f:05:21:7b:ee:61:79:61:40:
                    bf:ed:3d:45:a1:12:78:e7:6f:03:76:72:e9:6a:3c:
                    75:89:4e:e8:e8:14:d8:e9:af:da:00:8c:3a:b3:5f:
                    25:2b:f6:fe:34:f7:1d:22:c8:35:97:a4:28:b7:55:
                    b9:14:f0:a8:0d:8f:13:b6:45:76:08:1b:08:39:bf:
                    38:24:aa:a2:c0:83:b4:bc:15:44:ad:08:1a:42:d4:
                    b4:ba:eb:7b:60:c0:03:b5:26:82:0b:95:7c:fe:0c:
                    64:86:4e:93:8a:3f:11:03:e8:64:e1:51:55:68:c0:
                    57:ba:d9:e1:89:f3:4c:a2:b4:82:3e:34:b2:28:2d:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4B:E0:4F:22:C5:0E:E4:78:6B:FA:1B:5E:E0:91:C3:B6:DA:EF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/983c89cd-1b72-3ac8-a5db-9b17a53b41f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.crl

            X509v3 Authority Key Identifier:
                keyid:09:B8:6C:4B:EF:A0:22:88:CF:47:66:E7:89:22:03:32:50:66:F3:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cbcd744-1d0b-4daf-bb75-fbe69ef2c359.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:10:cf:2e:cf:a4:57:2b:d3:be:1e:98:a9:9d:b0:86:19:93:
         3a:53:ce:cd:ce:c1:0c:76:dc:55:d1:56:b4:44:90:33:57:91:
         80:fc:ba:65:65:20:85:d6:b4:31:14:40:41:2d:c7:6f:9a:ef:
         23:28:33:64:67:8a:a5:28:f0:2d:56:bb:1e:b4:c1:15:d1:a5:
         ef:d0:1a:77:ad:ed:00:cb:ea:18:28:5d:d0:f9:63:76:d6:91:
         c3:af:a5:7d:98:f5:ff:1f:14:55:c2:99:dd:ef:5f:30:34:07:
         04:78:f6:a0:3e:a5:eb:8a:22:e4:2a:75:aa:1d:c5:db:79:47:
         9a:d1:69:af:4d:3f:0c:b6:8b:e2:a5:30:b7:34:1f:1e:f8:64:
         45:6a:f2:31:33:65:f3:b9:6f:3f:0a:b1:78:25:82:3c:34:09:
         a8:95:71:7f:d1:f9:e9:55:c6:f5:08:ef:85:74:73:0e:ab:b4:
         a7:eb:45:e3:af:03:4b:b4:66:cc:64:b7:57:50:9e:73:84:a8:
         6d:30:7c:68:12:d2:d8:39:e7:9a:de:64:36:4d:1c:e4:51:b3:
         74:f6:b0:17:60:04:b3:8b:3c:25:4f:b1:56:e8:a8:90:fe:88:
         a9:89:e5:65:54:e9:56:37:8b:fb:b5:c8:13:64:79:2a:56:df:
         39:be:07:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2NEYQeCBfgsB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmNiY2Q3NDQtMWQwYi00ZGFmLWJiNzUtZmJlNjllZjJj
MzU5MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
Zjk1ZjZmNDMtZDU3Yy00MDdjLWI4YWUtMzE2YTU1MTVjMDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1CNQpdAOYqy0WfiwQZ3jyOwQt5+FbD5R4HV
hEYc7EZL3R5tZkqwoDfhRHknbE0r2Msn/CtnSqmgvjOXiVNGZMn1xDkYJ3LKJx5s
u8jZozbWYz56Zo3S/juco0sDCZhiUxKBfDjtfTQK4AHApieexQCEV1GkiOcfhUdK
ZSBPBSF77mF5YUC/7T1FoRJ4528DdnLpajx1iU7o6BTY6a/aAIw6s18lK/b+NPcd
Isg1l6Qot1W5FPCoDY8TtkV2CBsIOb84JKqiwIO0vBVErQgaQtS0uut7YMADtSaC
C5V8/gxkhk6Tij8RA+hk4VFVaMBXutnhifNMorSCPjSyKC1UiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxL4E8ixQ7keGv6G17gkcO22u8QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yY2Jj
ZDc0NC0xZDBiLTRkYWYtYmI3NS1mYmU2OWVmMmMzNTkvOTgzYzg5Y2QtMWI3Mi0z
YWM4LWE1ZGItOWIxN2E1M2I0MWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmNiY2Q3NDQtMWQwYi00ZGFmLWJi
NzUtZmJlNjllZjJjMzU5LzJjYmNkNzQ0LTFkMGItNGRhZi1iYjc1LWZiZTY5ZWYy
YzM1OS5jcmwwHwYDVR0jBBgwFoAUCbhsS++gIojPR2bniSIDMlBm8/0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yY2JjZDc0NC0xZDBiLTRkYWYtYmI3NS1mYmU2
OWVmMmMzNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLT5aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALYQzy7PpFcr074emKmdsIYZkzpTzs3OwQx23FXRVrREkDNXkYD8umVl
IIXWtDEUQEEtx2+a7yMoM2RniqUo8C1Wux60wRXRpe/QGnet7QDL6hgoXdD5Y3bW
kcOvpX2Y9f8fFFXCmd3vXzA0BwR49qA+peuKIuQqdaodxdt5R5rRaa9NPwy2i+Kl
MLc0Hx74ZEVq8jEzZfO5bz8KsXglgjw0CaiVcX/R+elVxvUI74V0cw6rtKfrReOv
A0u0Zsxkt1dQnnOEqG0wfGgS0tg555reZDZNHORRs3T2sBdgBLOLPCVPsVboqJD+
iKmJ5WVU6VY3i/u1yBNkeSpW3zm+BwQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:38:31 2025 by rpki-client