Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/069bdeab-d83c-3bea-802c-72b0ea9c4fbf.roa
File:                     069bdeab-d83c-3bea-802c-72b0ea9c4fbf.roa (raw, json)
Hash identifier:          QAJHXxo8BNmn1ayvYhNCyxcdy7Q4wR4Ewdl5OKjp+LU=
Subject key identifier:   0A:98:80:18:E5:C0:44:77:9E:7F:75:2A:D8:99:9D:E2:21:54:E7:36
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584AA160CBB8436BD0CA9BBB3AC0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/069bdeab-d83c-3bea-802c-72b0ea9c4fbf.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        162.215.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:cb:b8:43:6b:d0:ca:9b:bb:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=b41e462f-0016-4498-ae62-4fb9bd3653a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:f0:9a:53:07:5a:05:2d:f0:25:5a:8b:df:
                    70:13:30:cc:ac:41:b2:6d:b9:37:88:15:8f:80:80:
                    ce:8a:13:36:52:8d:57:b9:a7:48:9d:72:7e:b9:33:
                    e8:4a:dd:9d:c0:6b:ed:98:10:58:63:3f:55:ec:45:
                    95:5b:c3:af:49:fd:55:d5:a8:20:3e:22:9f:72:f3:
                    44:93:89:a0:7a:c0:02:79:10:44:77:3d:b4:cc:4f:
                    6d:66:a3:e7:b7:62:0e:a8:c2:45:f7:8e:b7:70:8a:
                    82:2d:4c:0c:8e:b5:86:af:d1:f2:1e:97:8f:83:32:
                    d6:c9:62:18:c9:05:c4:5e:9c:64:20:77:b0:fe:74:
                    ad:45:71:ec:54:c0:b9:cf:e7:cc:a5:40:8c:44:af:
                    2a:d1:68:a5:e3:fa:75:cf:fe:75:24:45:25:80:e7:
                    0b:6f:3a:2c:65:66:65:31:f4:ee:39:55:64:1e:f7:
                    ba:1f:e5:49:24:c2:fd:e9:41:15:41:3a:ef:d9:df:
                    89:23:54:22:1a:6a:70:73:b5:7b:c1:54:f6:30:76:
                    ee:bf:4b:ad:4b:e5:16:a2:e4:fe:ef:17:87:d7:73:
                    d9:93:15:a7:6a:41:8c:4a:14:cc:06:41:95:ca:57:
                    3b:7a:e4:e0:53:f3:62:dd:3f:7c:c2:c5:ab:51:83:
                    cb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:98:80:18:E5:C0:44:77:9E:7F:75:2A:D8:99:9D:E2:21:54:E7:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/069bdeab-d83c-3bea-802c-72b0ea9c4fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.215.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3f:0d:c4:c2:c2:3a:17:ca:0f:ae:e9:85:67:f9:95:02:96:
         54:34:d0:51:5c:fd:a5:d0:1f:3c:f9:34:c4:89:2f:e7:18:47:
         d9:c0:3d:54:58:23:91:25:de:29:34:11:ff:55:1c:f0:b8:7a:
         d8:ce:09:a1:ae:8e:07:0c:45:7f:2a:a5:db:ab:b6:6b:8d:d9:
         d0:06:b4:c1:b7:a7:9f:e6:ce:f4:4a:c9:f9:4b:32:11:c3:0a:
         ac:15:ba:5d:99:ea:af:55:a9:49:11:1c:86:aa:4d:4d:08:26:
         e7:b8:2e:52:4c:3f:8f:c1:d9:34:88:a2:63:10:36:3e:19:88:
         2d:fe:38:3c:22:c6:2e:35:2d:62:3b:cb:8a:19:a0:62:01:8d:
         4e:bf:55:fa:26:a1:41:d4:4f:af:81:4e:1c:57:3b:9f:d0:af:
         25:1e:e3:43:a5:1f:d9:95:96:da:0e:67:be:8c:21:fe:97:2d:
         10:83:39:f9:84:99:c9:1f:67:fc:30:5e:cc:14:c6:2d:60:b7:
         34:9c:d6:cd:71:08:aa:a7:e3:c6:81:1c:43:fd:1a:b4:4c:4e:
         fe:b6:fc:2e:e9:0e:f3:65:d7:00:d8:5f:cd:a8:2b:f2:56:c2:
         c4:4d:b2:04:bf:ed:8d:56:fa:b7:10:6d:e1:eb:44:de:38:56:
         56:6f:ee:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYMu4Q2vQypu7OsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi
OTFiMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
YjQxZTQ2MmYtMDAxNi00NDk4LWFlNjItNGZiOWJkMzY1M2E0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHvwmlMHWgUt8CVai99wEzDMrEGybbk3iBWP
gIDOihM2Uo1XuadInXJ+uTPoSt2dwGvtmBBYYz9V7EWVW8OvSf1V1aggPiKfcvNE
k4mgesACeRBEdz20zE9tZqPnt2IOqMJF9463cIqCLUwMjrWGr9HyHpePgzLWyWIY
yQXEXpxkIHew/nStRXHsVMC5z+fMpUCMRK8q0Wil4/p1z/51JEUlgOcLbzosZWZl
MfTuOVVkHve6H+VJJML96UEVQTrv2d+JI1QiGmpwc7V7wVT2MHbuv0utS+UWouT+
7xeH13PZkxWnakGMShTMBkGVylc7euTgU/Ni3T98wsWrUYPLOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAqYgBjlwER3nn91KtiZneIhVOc2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl
N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvMDY5YmRlYWItZDgzYy0z
YmVhLTgwMmMtNzJiMGVhOWM0ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0
MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh
YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl
ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHw/DcTCwjoXyg+u6YVn+ZUCllQ00FFc/aXQHzz5NMSJL+cYR9nAPVRY
I5El3ik0Ef9VHPC4etjOCaGujgcMRX8qpdurtmuN2dAGtMG3p5/mzvRKyflLMhHD
CqwVul2Z6q9VqUkRHIaqTU0IJue4LlJMP4/B2TSIomMQNj4ZiC3+ODwixi41LWI7
y4oZoGIBjU6/VfomoUHUT6+BThxXO5/QryUe40OlH9mVltoOZ76MIf6XLRCDOfmE
mckfZ/wwXswUxi1gtzSc1s1xCKqn48aBHEP9GrRMTv62/C7pDvNl1wDYX82oK/JW
wsRNsgS/7Y1W+rcQbeHrRN44VlZv7rI=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:11:46 2025 by rpki-client