Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa
File:                     f47e22f4-6e3a-3537-a1be-97f2fa802042.roa (raw, json)
Hash identifier:          zaTdvjNpmJhJH//Aw5jWYIw++uf7J0sTQO0XN2Wt2AI=
Subject key identifier:   8D:5A:7E:15:5A:A0:B5:E2:D5:3C:66:A2:35:24:F3:71:87:72:77:DC
Certificate issuer:       /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Certificate serial:       010D0C9F4328584B2496CC6865264AF2F5C99740
Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        172.86.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:cc:68:65:26:4a:f2:f5:c9:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=0413628e-d05a-4bec-95c0-c664932ec06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:ac:73:e3:7e:1b:9c:47:ff:e6:d9:64:b4:
                    aa:b8:df:d2:e1:4a:f7:b2:57:25:82:03:23:b1:5d:
                    92:29:82:87:c0:06:26:97:33:c2:d5:ad:79:db:1d:
                    5d:cb:59:62:eb:0f:be:7a:4d:27:68:15:15:23:78:
                    74:23:45:dd:5c:a6:2d:91:3d:ab:0f:f8:14:19:8e:
                    66:1d:05:f8:8b:79:a5:aa:79:41:93:33:b3:5d:6f:
                    09:4a:07:3f:0a:11:0a:ff:6f:52:5a:c3:96:34:a8:
                    5b:87:b0:d6:f8:ad:92:20:51:6d:79:0f:57:43:02:
                    13:27:be:c8:e8:61:40:27:61:b2:ef:e3:d2:5f:ff:
                    02:86:e9:d8:e1:7c:94:9f:b3:4b:49:f9:66:96:f4:
                    b8:ed:dd:30:e5:46:5b:7f:0a:4e:84:02:32:78:c1:
                    ba:5e:bb:5e:87:a6:7b:5a:0b:be:c8:54:7a:ea:09:
                    00:e4:68:af:38:ec:14:65:0a:4e:65:ca:02:41:60:
                    25:f4:e5:ad:68:ac:5e:f5:d5:11:63:f0:ed:d8:c3:
                    8a:56:c9:5b:63:dd:57:a6:55:d5:35:cc:c9:64:52:
                    d2:18:4b:b9:15:b0:0a:da:d5:e8:9d:27:32:3b:b3:
                    d5:e9:dd:5c:e9:0c:14:8c:df:b1:23:c4:82:13:1c:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5A:7E:15:5A:A0:B5:E2:D5:3C:66:A2:35:24:F3:71:87:72:77:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl

            X509v3 Authority Key Identifier:
                keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:4d:28:ab:a0:bb:71:72:34:b2:61:db:7c:8d:4b:7f:23:3b:
         31:7e:a6:31:f8:e0:a7:d3:97:0a:c7:f5:d7:8d:fc:96:09:4c:
         c1:ce:f1:fc:a2:09:97:8f:b4:78:2c:18:65:ae:64:da:35:71:
         94:7f:68:0a:d8:00:04:b8:e1:a6:59:30:a9:70:55:b3:d4:69:
         10:06:3b:21:ec:a9:5c:ac:46:9a:38:ce:2e:67:9f:fb:ec:4f:
         d7:62:84:0c:6b:50:ad:75:36:89:be:87:3b:b5:25:01:00:ac:
         52:4b:34:cf:d0:c4:5d:ee:ee:93:a5:f7:0d:e5:34:a0:b0:46:
         04:b9:d9:28:6c:1b:af:be:16:37:25:4d:20:0d:d1:f5:dc:69:
         53:8f:ea:1b:4f:3b:e3:e6:c2:1b:28:f0:98:24:9e:3f:0d:37:
         7e:ce:d4:82:4f:af:7d:ef:49:6c:75:9b:15:2e:47:88:bd:76:
         e1:09:de:63:ab:bd:e2:df:58:e1:1c:22:e8:4c:06:ec:2d:62:
         73:7a:5c:44:e4:bf:73:4e:92:07:cf:c2:41:00:fd:6a:0b:2b:
         a2:1f:5a:31:03:55:ed:2e:30:28:2a:f4:0e:dc:01:f6:3c:cb:
         c4:b0:16:49:8e:e6:f8:64:7a:12:cf:eb:05:f4:52:d3:8a:a1:
         ce:fc:58:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsxoZSZK8vXJl0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz
MDc0MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
MDQxMzYyOGUtZDA1YS00YmVjLTk1YzAtYzY2NDkzMmVjMDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudKsc+N+G5xH/+bZZLSquN/S4Ur3slclggMj
sV2SKYKHwAYmlzPC1a152x1dy1li6w++ek0naBUVI3h0I0XdXKYtkT2rD/gUGY5m
HQX4i3mlqnlBkzOzXW8JSgc/ChEK/29SWsOWNKhbh7DW+K2SIFFteQ9XQwITJ77I
6GFAJ2Gy7+PSX/8ChunY4XyUn7NLSflmlvS47d0w5UZbfwpOhAIyeMG6Xrteh6Z7
Wgu+yFR66gkA5GivOOwUZQpOZcoCQWAl9OWtaKxe9dURY/Dt2MOKVslbY91XplXV
NczJZFLSGEu5FbAK2tXonScyO7PV6d1c6QwUjN+xI8SCExwK7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1afhVaoLXi1TxmojUk83GHcnfcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz
MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvZjQ3ZTIyZjQtNmUzYS0z
NTM3LWExYmUtOTdmMmZhODAyMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl
MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2
MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl
OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJNKKugu3FyNLJh23yNS38jOzF+pjH44KfTlwrH9deN/JYJTMHO8fyi
CZePtHgsGGWuZNo1cZR/aArYAAS44aZZMKlwVbPUaRAGOyHsqVysRpo4zi5nn/vs
T9dihAxrUK11Nom+hzu1JQEArFJLNM/QxF3u7pOl9w3lNKCwRgS52ShsG6++Fjcl
TSAN0fXcaVOP6htPO+Pmwhso8Jgknj8NN37O1IJPr33vSWx1mxUuR4i9duEJ3mOr
veLfWOEcIuhMBuwtYnN6XETkv3NOkgfPwkEA/WoLK6IfWjEDVe0uMCgq9A7cAfY8
y8SwFkmO5vhkehLP6wX0UtOKoc78WFU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:44 2025 by rpki-client