Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/5911f14e-4bce-3ad6-991b-4f8cfdb06a79.roa
File:                     5911f14e-4bce-3ad6-991b-4f8cfdb06a79.roa (raw, json)
Hash identifier:          czfNxHqKj3Aw9XAr9SchtOCxkaz3BSQ4rUWU5bNul1M=
Subject key identifier:   59:14:D1:F0:C0:5A:B1:52:31:EC:A0:0D:37:9D:2F:4B:E7:E0:BC:AD
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584BABFD07F2210D34A01ED74090
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/5911f14e-4bce-3ad6-991b-4f8cfdb06a79.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     7018
IP address blocks:        45.62.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:07:f2:21:0d:34:a0:1e:d7:40:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=2aebd055-03cf-4520-8524-5485f2ad3daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:8a:56:39:f7:2a:2a:72:3d:16:81:c8:e2:
                    28:0d:7e:d4:c3:06:f9:07:b9:0a:5b:01:4f:39:7d:
                    22:ae:4a:9d:3c:07:ec:2e:f1:d7:a6:ec:ee:21:76:
                    72:b9:11:b2:8b:f1:ae:cf:f6:a6:f7:5a:c7:1c:f8:
                    b6:30:84:51:14:b4:c2:63:4f:88:a2:93:b1:30:36:
                    29:9e:df:ea:eb:92:64:90:de:ea:8d:69:58:1a:03:
                    e1:93:d4:a0:6c:03:cf:45:cf:aa:d0:7c:6c:57:77:
                    20:68:10:76:cb:6b:d3:09:f4:80:81:35:8d:04:55:
                    9e:a9:bb:80:0d:23:87:f6:31:c4:0c:24:91:2e:69:
                    32:bc:1c:90:5e:f9:6e:be:b2:bc:a7:d3:72:68:83:
                    92:fa:24:b7:ed:b0:56:0f:75:f1:5e:65:4c:41:d8:
                    5f:78:25:94:04:76:36:7c:5c:4a:53:11:8e:b6:36:
                    78:3e:a6:0a:f2:d8:81:18:b9:44:c0:3a:34:7d:72:
                    d4:cc:3d:57:6c:c7:8f:e0:e3:60:10:e8:3e:4f:50:
                    3d:96:ca:38:24:dc:d0:ed:de:e7:2a:44:6c:75:5b:
                    7c:72:8e:6a:e6:27:41:c9:e3:24:75:e1:13:26:d8:
                    50:16:8b:02:8d:17:b8:e2:ea:a7:c3:d4:48:21:d2:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:14:D1:F0:C0:5A:B1:52:31:EC:A0:0D:37:9D:2F:4B:E7:E0:BC:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/5911f14e-4bce-3ad6-991b-4f8cfdb06a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d7:d9:d4:03:f8:4a:dc:bb:d8:34:29:44:63:b9:58:77:c9:
         93:fb:34:2a:72:06:2f:3a:c1:85:26:fd:cc:b5:80:0c:2c:34:
         7e:da:60:d6:70:5f:f8:15:b3:0e:65:33:b0:09:bb:35:4c:3d:
         b8:71:d8:77:6c:e0:0b:56:86:80:6b:02:c4:b5:f6:d3:1a:9f:
         85:8f:cd:55:70:70:64:17:a7:de:9e:ac:d8:6c:01:40:89:db:
         a3:f4:fd:f1:c3:17:ac:a6:68:9c:66:3b:5c:fa:2b:e5:b2:50:
         97:37:0e:b4:86:be:f8:aa:b3:50:34:91:f8:90:ab:d8:4f:60:
         89:fb:c8:04:0c:8b:e0:ac:4d:f6:96:d5:b5:6e:16:d2:70:9a:
         6e:dd:84:6c:21:a5:b1:e9:40:af:82:88:ae:f4:94:d6:48:aa:
         ca:9d:ab:0b:ba:ef:ad:0d:f2:bb:e0:9e:6f:d2:c1:7e:7d:e4:
         c6:9f:50:03:d8:4d:ff:f7:b3:e6:87:06:62:c7:fc:8e:ca:75:
         38:50:ac:bb:f8:18:0c:b0:2f:51:43:0e:8e:af:11:57:eb:87:
         d5:0a:58:f2:25:58:7c:71:77:60:ec:f1:c5:6f:97:ef:2c:60:
         4c:45:05:2a:09:f7:55:ce:b5:9e:bc:8a:18:de:0e:3f:67:39:
         a8:f5:05:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QfyIQ00oB7XQJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw
YzRkMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk
MmFlYmQwNTUtMDNjZi00NTIwLTg1MjQtNTQ4NWYyYWQzZGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWKKVjn3KipyPRaByOIoDX7Uwwb5B7kKWwFP
OX0irkqdPAfsLvHXpuzuIXZyuRGyi/Guz/am91rHHPi2MIRRFLTCY0+IopOxMDYp
nt/q65JkkN7qjWlYGgPhk9SgbAPPRc+q0HxsV3cgaBB2y2vTCfSAgTWNBFWeqbuA
DSOH9jHEDCSRLmkyvByQXvluvrK8p9NyaIOS+iS37bBWD3XxXmVMQdhfeCWUBHY2
fFxKUxGOtjZ4PqYK8tiBGLlEwDo0fXLUzD1XbMeP4ONgEOg+T1A9lso4JNzQ7d7n
KkRsdVt8co5q5idByeMkdeETJthQFosCjRe44uqnw9RIIdIDrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFkU0fDAWrFSMeygDTedL0vn4LytMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz
YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvNTkxMWYxNGUtNGJjZS0z
YWQ2LTk5MWItNGY4Y2ZkYjA2YTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0
ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3
MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl
YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjX2dQD+Ercu9g0KURjuVh3yZP7NCpyBi86wYUm/cy1gAwsNH7aYNZw
X/gVsw5lM7AJuzVMPbhx2Hds4AtWhoBrAsS19tMan4WPzVVwcGQXp96erNhsAUCJ
26P0/fHDF6ymaJxmO1z6K+WyUJc3DrSGvviqs1A0kfiQq9hPYIn7yAQMi+CsTfaW
1bVuFtJwmm7dhGwhpbHpQK+CiK70lNZIqsqdqwu6760N8rvgnm/SwX595MafUAPY
Tf/3s+aHBmLH/I7KdThQrLv4GAywL1FDDo6vEVfrh9UKWPIlWHxxd2Ds8cVvl+8s
YExFBSoJ91XOtZ68ihjeDj9nOaj1BVk=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:19:53 2025 by rpki-client