Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1b834dc1-8f5e-316d-99af-abd7d78afeed.roa
File:                     1b834dc1-8f5e-316d-99af-abd7d78afeed.roa (raw, json)
Hash identifier:          t6ztR1TexBc9Q8UWOxlKpCS5iD/MrsjyLSwkBuy6vlM=
Subject key identifier:   1A:81:CB:1E:31:8E:2C:72:74:39:DB:E4:66:14:57:B7:69:0D:92:9A
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584AD3A0EEE7A0273460395FA640
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1b834dc1-8f5e-316d-99af-abd7d78afeed.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     55195
IP address blocks:        162.219.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:ee:e7:a0:27:34:60:39:5f:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=e6971fa6-d501-4eeb-aba7-5d8d1c4eda12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:3e:cb:5f:d8:c4:90:b2:63:cb:f0:e3:07:
                    cc:87:84:21:f1:5b:34:cd:c3:7e:5c:29:44:b5:cc:
                    4c:07:9a:89:b0:28:2f:de:e3:90:32:9b:84:42:16:
                    db:c4:7d:45:00:96:26:2f:98:ff:d8:1f:76:c4:e1:
                    89:d2:16:49:d0:8f:f6:06:66:e4:9c:0b:2c:e6:6f:
                    d9:10:cf:e1:56:2c:17:fa:ba:a1:e9:4a:b7:80:61:
                    41:e3:95:84:da:76:11:4e:ec:d4:34:6c:30:19:aa:
                    4f:80:21:5a:ac:5a:f4:16:a1:dc:71:95:4a:dd:87:
                    68:7c:52:a2:ea:b3:86:6a:ea:3a:73:c0:09:8d:0d:
                    61:8a:eb:0a:9f:b0:1d:63:f1:be:71:fe:c5:b2:f6:
                    c1:7f:a1:0f:8c:05:13:3d:4d:d8:fd:c2:d1:5a:cd:
                    34:ff:f7:7a:1f:f7:f6:d0:48:3a:7b:3a:f8:81:7d:
                    0d:77:a1:47:31:e8:ce:0b:4f:f8:51:19:f3:de:f1:
                    a2:6d:34:9c:84:32:20:a2:ad:ab:0e:37:66:e8:5a:
                    a1:ea:81:c6:f8:c8:93:fe:e2:ca:44:34:8d:2b:0c:
                    d2:9a:10:9b:8f:5d:3e:af:56:80:de:c2:2c:fb:23:
                    68:6c:45:47:3e:a9:e9:6a:1a:a0:b0:03:40:36:a9:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:CB:1E:31:8E:2C:72:74:39:DB:E4:66:14:57:B7:69:0D:92:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1b834dc1-8f5e-316d-99af-abd7d78afeed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fd:a3:7f:f4:48:64:c7:5a:95:42:11:bb:e6:53:23:31:51:
         c2:58:c9:2e:95:10:8d:e5:19:67:da:18:50:4d:2f:94:dd:34:
         0c:38:db:50:ad:75:16:7e:d1:21:fa:94:31:17:4f:15:cd:45:
         5c:d9:28:08:58:81:a9:e8:62:01:88:12:20:e3:bc:83:a9:0c:
         4c:11:2b:af:83:a1:82:8a:d0:ca:52:d6:30:e5:61:56:9a:96:
         4f:b7:6b:b1:34:14:eb:eb:43:a2:fc:54:fa:35:a9:9b:c7:3f:
         f4:84:74:e5:4f:95:b2:7d:37:25:dd:57:aa:95:ee:81:ca:d4:
         17:a1:f4:4b:f1:23:82:9b:74:c6:5a:0a:c6:c0:b9:60:27:e7:
         9b:0e:07:49:c1:67:d6:94:4e:78:5d:bb:7c:1c:d8:e5:2f:1f:
         7c:44:0e:d4:60:89:5b:f0:3a:8d:bb:bb:43:d0:5b:91:48:31:
         d0:3d:17:a8:b8:b6:20:d8:47:d3:72:02:0a:35:73:9d:24:43:
         c7:90:16:0f:d3:89:e1:d8:47:2c:8b:74:ce:cf:42:aa:df:06:
         92:ee:b4:4a:ba:ef:47:e0:5a:9d:01:af:b4:f9:e2:ab:b6:67:
         9b:ac:39:cf:36:56:ec:3b:5f:82:75:b5:64:07:10:aa:0a:b4:
         05:ef:af:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToO7noCc0YDlfpkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx
OGU4MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
ZTY5NzFmYTYtZDUwMS00ZWViLWFiYTctNWQ4ZDFjNGVkYTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWM+y1/YxJCyY8vw4wfMh4Qh8Vs0zcN+XClE
tcxMB5qJsCgv3uOQMpuEQhbbxH1FAJYmL5j/2B92xOGJ0hZJ0I/2BmbknAss5m/Z
EM/hViwX+rqh6Uq3gGFB45WE2nYRTuzUNGwwGapPgCFarFr0FqHccZVK3YdofFKi
6rOGauo6c8AJjQ1hiusKn7AdY/G+cf7FsvbBf6EPjAUTPU3Y/cLRWs00//d6H/f2
0Eg6ezr4gX0Nd6FHMejOC0/4URnz3vGibTSchDIgoq2rDjdm6Fqh6oHG+MiT/uLK
RDSNKwzSmhCbj10+r1aA3sIs+yNobEVHPqnpahqgsANANqlk4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBqByx4xjixydDnb5GYUV7dpDZKaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2
MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvMWI4MzRkYzEtOGY1ZS0z
MTZkLTk5YWYtYWJkN2Q3OGFmZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2
MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi
MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5
NzZhYjE4ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotswMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADj9o3/0SGTHWpVCEbvmUyMxUcJYyS6VEI3lGWfaGFBNL5TdNAw421Ct
dRZ+0SH6lDEXTxXNRVzZKAhYganoYgGIEiDjvIOpDEwRK6+DoYKK0MpS1jDlYVaa
lk+3a7E0FOvrQ6L8VPo1qZvHP/SEdOVPlbJ9NyXdV6qV7oHK1Beh9EvxI4KbdMZa
CsbAuWAn55sOB0nBZ9aUTnhdu3wc2OUvH3xEDtRgiVvwOo27u0PQW5FIMdA9F6i4
tiDYR9NyAgo1c50kQ8eQFg/TieHYRyyLdM7PQqrfBpLutEq670fgWp0Br7T54qu2
Z5usOc82Vuw7X4J1tWQHEKoKtAXvr0k=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:55:59 2025 by rpki-client