Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa
File:                     e986cb99-90f6-3599-9f1f-a52d8d946895.roa (raw, json)
Hash identifier:          Vu8fuFAR53o09Yrb8fs5MXpaB/LI77fuf9wixSzcpiM=
Subject key identifier:   81:0E:12:2E:FC:F6:8C:02:30:97:47:C8:DD:80:77:1C:5A:B1:03:27
Certificate issuer:       /CN=022d0269-7d56-45cc-8167-b1e7ab13f1f4
Certificate serial:       010D0C9F4328584ABA80C5C8199A6FFE4818A5EC
Authority key identifier: 4E:42:8C:95:8C:2E:77:BF:29:92:4C:43:07:CA:4C:7A:AF:CC:AC:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa
Signing time:             Sun 03 Aug 2025 01:00:32 +0000
ROA not before:           Sun 03 Aug 2025 01:00:32 +0000
ROA not after:            Sat 01 Nov 2025 01:00:32 +0000
asID:                     13150
IP address blocks:        45.62.176.0/20 maxlen: 24
                          149.20.192.0/20 maxlen: 24
                          150.195.192.0/20 maxlen: 24
                          199.27.32.0/19 maxlen: 24
                          216.194.96.0/20 maxlen: 24
                          216.205.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/022d0269-7d56-45cc-8167-b1e7ab13f1f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/022d0269-7d56-45cc-8167-b1e7ab13f1f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:80:c5:c8:19:9a:6f:fe:48:18:a5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022d0269-7d56-45cc-8167-b1e7ab13f1f4
        Validity
            Not Before: Aug  3 01:00:32 2025 GMT
            Not After : Nov  1 01:00:32 2025 GMT
        Subject: CN=a8a81c0d-743b-4a88-ad33-e12ad6cd304f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:db:83:f4:42:69:69:29:14:a9:15:12:86:39:
                    97:37:0a:ca:9b:44:4e:21:d3:a9:5e:70:52:4e:c3:
                    f7:dd:21:21:9d:91:dc:65:4c:9b:30:8d:23:36:c2:
                    d3:41:a5:57:61:a9:c6:c8:3a:e8:f9:12:3d:e4:73:
                    60:3f:73:c5:d2:cd:4d:9f:1e:93:9c:d0:d2:02:09:
                    9b:c1:e2:3e:7e:2b:01:8c:96:af:14:59:74:23:6e:
                    29:38:95:82:c3:11:8c:e2:21:14:43:a2:58:e4:3e:
                    6a:34:7f:a7:80:d5:bf:c6:89:a5:cd:35:5f:84:fd:
                    26:6a:ec:38:a4:d9:5d:5f:0a:3c:1f:2d:b0:a7:42:
                    e7:33:a6:6d:7c:19:4f:9c:85:04:6b:c1:09:fe:8f:
                    dc:89:13:8f:0c:fa:96:88:41:b4:d4:90:53:d6:91:
                    e3:60:67:7c:51:8f:e3:5f:83:4a:d1:d0:d5:4e:d5:
                    74:e9:80:4c:69:2d:c0:17:81:31:c0:3e:e5:c0:86:
                    90:21:39:89:89:ce:be:c0:10:8f:1f:45:a6:8c:9e:
                    a4:01:e0:21:cc:68:51:da:4b:4e:b3:89:21:c3:d1:
                    28:b8:4d:e6:0e:57:20:8b:1f:85:b6:4f:4d:ae:27:
                    48:70:a7:cd:2d:1b:f7:25:50:19:3c:71:c8:a2:2b:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0E:12:2E:FC:F6:8C:02:30:97:47:C8:DD:80:77:1C:5A:B1:03:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/022d0269-7d56-45cc-8167-b1e7ab13f1f4.crl

            X509v3 Authority Key Identifier:
                keyid:4E:42:8C:95:8C:2E:77:BF:29:92:4C:43:07:CA:4C:7A:AF:CC:AC:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.176.0/20
                  149.20.192.0/20
                  150.195.192.0/20
                  199.27.32.0/19
                  216.194.96.0/20
                  216.205.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:2c:54:7d:76:0e:97:1a:16:57:c2:ff:19:a4:32:a8:ce:65:
         fb:78:d1:c0:eb:cf:1b:20:99:f0:9c:5b:9d:a5:c9:3d:92:38:
         b5:a9:4d:65:2a:54:13:c1:c5:74:81:1d:0d:ee:f1:50:83:52:
         2d:ca:8d:34:9e:b1:b3:79:9e:ff:c5:c5:6d:17:5b:0f:55:7b:
         97:c4:27:e7:7e:d5:c2:97:b1:21:3a:b0:0c:d4:66:5e:1c:ce:
         d4:39:21:69:28:65:35:96:54:91:d6:f2:63:60:64:4c:db:8e:
         c9:20:32:80:25:02:2c:8b:24:8b:47:ed:0a:46:d9:5e:2c:19:
         c6:18:c1:39:8d:7f:82:d1:26:f3:3e:fd:24:7d:e4:db:70:8b:
         9f:3f:0f:c0:8a:f7:a4:f2:4f:12:07:46:68:0a:7e:46:af:0a:
         35:49:86:16:2c:73:76:a3:60:05:23:fd:a5:78:8b:9e:4e:e3:
         80:70:d3:1e:cf:65:11:36:16:7f:64:a4:d0:a5:16:db:e6:1d:
         22:33:55:81:b5:b5:aa:c9:2e:5b:03:6c:33:aa:d3:fd:f8:36:
         8c:66:71:0b:84:65:d5:f8:86:08:ff:4e:29:c6:d0:d2:62:d3:
         4e:0d:a6:53:58:a0:c2:96:4f:73:76:7c:14:1b:88:f3:c4:60:
         2b:4c:db:5a
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEq6gMXIGZpv/kgYpewwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDIyZDAyNjktN2Q1Ni00NWNjLTgxNjctYjFlN2FiMTNm
MWY0MB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk
YThhODFjMGQtNzQzYi00YTg4LWFkMzMtZTEyYWQ2Y2QzMDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhduD9EJpaSkUqRUShjmXNwrKm0ROIdOpXnBS
TsP33SEhnZHcZUybMI0jNsLTQaVXYanGyDro+RI95HNgP3PF0s1Nnx6TnNDSAgmb
weI+fisBjJavFFl0I24pOJWCwxGM4iEUQ6JY5D5qNH+ngNW/xomlzTVfhP0mauw4
pNldXwo8Hy2wp0LnM6ZtfBlPnIUEa8EJ/o/ciROPDPqWiEG01JBT1pHjYGd8UY/j
X4NK0dDVTtV06YBMaS3AF4ExwD7lwIaQITmJic6+wBCPH0WmjJ6kAeAhzGhR2ktO
s4khw9EouE3mDlcgix+Ftk9NridIcKfNLRv3JVAZPHHIoisyHQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFIEOEi789owCMJdHyN2AdxxasQMnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMjJk
MDI2OS03ZDU2LTQ1Y2MtODE2Ny1iMWU3YWIxM2YxZjQvZTk4NmNiOTktOTBmNi0z
NTk5LTlmMWYtYTUyZDhkOTQ2ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDIyZDAyNjktN2Q1Ni00NWNjLTgx
NjctYjFlN2FiMTNmMWY0LzAyMmQwMjY5LTdkNTYtNDVjYy04MTY3LWIxZTdhYjEz
ZjFmNC5jcmwwHwYDVR0jBBgwFoAUTkKMlYwud78pkkxDB8pMeq/MrI8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wMjJkMDI2OS03ZDU2LTQ1Y2MtODE2Ny1iMWU3
YWIxM2YxZjQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQELT6wAwQE
lRTAAwQElsPAAwQFxxsgAwQE2MJgAwQE2M1wMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKgsVH12DpcaFlfC
/xmkMqjOZft40cDrzxsgmfCcW52lyT2SOLWpTWUqVBPBxXSBHQ3u8VCDUi3KjTSe
sbN5nv/FxW0XWw9Ve5fEJ+d+1cKXsSE6sAzUZl4cztQ5IWkoZTWWVJHW8mNgZEzb
jskgMoAlAiyLJItH7QpG2V4sGcYYwTmNf4LRJvM+/SR95Ntwi58/D8CK96TyTxIH
RmgKfkavCjVJhhYsc3ajYAUj/aV4i55O44Bw0x7PZRE2Fn9kpNClFtvmHSIzVYG1
tarJLlsDbDOq0/34NoxmcQuEZdX4hgj/TinG0NJi004NplNYoMKWT3N2fBQbiPPE
YCtM21o=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:19:02 2025 by rpki-client