Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ed429099-b678-39b5-8909-68617089d574.roa
File:                     ed429099-b678-39b5-8909-68617089d574.roa (raw, json)
Hash identifier:          ntieH0lbfrKaWbiltZesQaK9cNGpdpNZuJQ4iGpRr/s=
Subject key identifier:   47:8E:DD:CC:1D:99:09:A5:30:D0:71:56:2B:2F:AC:A1:27:4E:30:C1
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584ABD4B93E42CB993DEF5CF4400
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ed429099-b678-39b5-8909-68617089d574.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16696
IP address blocks:        162.223.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:93:e4:2c:b9:93:de:f5:cf:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=5b13407c-ceda-4c84-bbd4-d9d6987f33b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:6c:03:e7:ca:38:f2:0b:fb:4d:27:ed:40:
                    ee:31:b1:c6:93:45:72:2a:fa:3c:d9:39:81:d2:a4:
                    8e:5d:bf:a7:70:57:8e:5f:9c:e0:e8:75:93:04:68:
                    2e:ca:96:0c:9f:73:27:31:f8:fd:5d:6e:b3:24:e6:
                    cf:e3:ab:f5:98:26:27:01:ba:99:27:cb:14:0d:6d:
                    f4:dd:04:b5:77:7f:2e:0e:e4:4d:09:87:d5:91:fe:
                    8f:37:7a:ad:f4:18:ee:cc:00:c3:33:62:3c:e5:79:
                    03:71:36:93:32:f5:4e:d5:d1:e2:39:6f:c5:6f:19:
                    f9:f4:4c:c7:90:45:97:cc:77:8c:a9:30:bc:27:ab:
                    97:be:30:01:d9:98:45:42:14:51:83:47:cb:e7:5e:
                    25:8c:c5:98:a6:25:e3:81:0e:dd:71:54:d0:cc:fa:
                    02:54:67:5c:79:db:21:31:bf:00:14:0b:f9:40:f7:
                    e3:34:44:c6:c7:41:8a:27:fa:ef:c9:f5:1e:1f:3d:
                    dc:ed:80:47:6e:b2:69:a0:f9:08:bf:92:22:8b:f2:
                    0b:ad:83:a5:59:b3:1c:dd:47:03:5c:e7:de:ea:d2:
                    8b:00:a2:aa:2d:96:66:46:e8:2d:e8:8d:39:b5:37:
                    1a:26:db:87:7d:4f:b7:1c:e5:2c:f9:b8:fb:27:9b:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8E:DD:CC:1D:99:09:A5:30:D0:71:56:2B:2F:AC:A1:27:4E:30:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ed429099-b678-39b5-8909-68617089d574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a5:f8:14:3b:51:51:26:6d:ec:58:1a:9f:1a:fa:9c:8d:56:
         91:a9:f2:76:b1:09:90:46:86:4f:ce:ed:dc:31:35:b5:1d:a4:
         d2:71:41:f7:0c:e2:2a:26:a7:cd:5a:37:a1:71:aa:43:db:c6:
         a1:05:c0:15:e8:78:22:aa:99:9b:4e:33:b9:4d:b3:ae:11:b7:
         65:08:8c:8d:84:08:b6:a2:6a:13:13:e1:ce:da:c6:12:9f:e1:
         50:24:d1:f2:c3:13:09:42:58:c0:67:f5:fc:35:35:92:ac:d6:
         4a:b5:3a:c4:31:e9:5b:09:ed:e6:8d:3e:93:aa:45:ee:c6:87:
         1f:ec:81:5c:4f:39:88:5a:2f:4f:44:92:c4:cb:cf:ab:0a:dd:
         92:01:75:44:88:d4:65:a7:f5:9f:20:b2:03:8f:33:80:7b:2e:
         f2:e0:e9:fd:1d:2e:10:ef:f5:34:9d:c6:86:ac:68:c4:69:7a:
         38:10:5a:0f:db:5a:8d:3c:63:3b:34:42:77:03:01:15:18:a1:
         06:d2:f7:9e:d5:55:8c:2d:65:9a:bf:e2:aa:74:fb:12:d8:bc:
         25:62:e3:9f:1d:3f:a6:b5:17:13:61:02:b2:05:fa:35:3a:38:
         8c:9b:ab:81:cb:3a:6f:d4:9c:b8:9e:fc:1e:e3:9e:29:08:79:
         4b:09:34:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5PkLLmT3vXPRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
NWIxMzQwN2MtY2VkYS00Yzg0LWJiZDQtZDlkNjk4N2YzM2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd1sA+fKOPIL+00n7UDuMbHGk0VyKvo82TmB
0qSOXb+ncFeOX5zg6HWTBGguypYMn3MnMfj9XW6zJObP46v1mCYnAbqZJ8sUDW30
3QS1d38uDuRNCYfVkf6PN3qt9BjuzADDM2I85XkDcTaTMvVO1dHiOW/Fbxn59EzH
kEWXzHeMqTC8J6uXvjAB2ZhFQhRRg0fL514ljMWYpiXjgQ7dcVTQzPoCVGdcedsh
Mb8AFAv5QPfjNETGx0GKJ/rvyfUeHz3c7YBHbrJpoPkIv5Iii/ILrYOlWbMc3UcD
XOfe6tKLAKKqLZZmRugt6I05tTcaJtuHfU+3HOUs+bj7J5vsaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeO3cwdmQmlMNBxVisvrKEnTjDBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZWQ0MjkwOTktYjY3OC0z
OWI1LTg5MDktNjg2MTcwODlkNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot9mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWl+BQ7UVEmbexYGp8a+pyNVpGp8naxCZBGhk/O7dwxNbUdpNJxQfcM
4iomp81aN6FxqkPbxqEFwBXoeCKqmZtOM7lNs64Rt2UIjI2ECLaiahMT4c7axhKf
4VAk0fLDEwlCWMBn9fw1NZKs1kq1OsQx6VsJ7eaNPpOqRe7Ghx/sgVxPOYhaL09E
ksTLz6sK3ZIBdUSI1GWn9Z8gsgOPM4B7LvLg6f0dLhDv9TSdxoasaMRpejgQWg/b
Wo08Yzs0QncDARUYoQbS957VVYwtZZq/4qp0+xLYvCVi458dP6a1FxNhArIF+jU6
OIybq4HLOm/UnLie/B7jnikIeUsJNM4=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:54:23 2025 by rpki-client