Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/52dc28e1-8ccb-3f8a-ba9e-68d4adab6512.roa
File:                     52dc28e1-8ccb-3f8a-ba9e-68d4adab6512.roa (raw, json)
Hash identifier:          aZyGGLr8KwvfsiZETxtWzRYWrYWzXOOzPHK760fPSV8=
Subject key identifier:   A2:FC:74:9A:11:F8:54:7D:89:41:91:16:74:76:81:17:A8:74:45:7C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA104906A86C516D25788380
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/52dc28e1-8ccb-3f8a-ba9e-68d4adab6512.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     6461
IP address blocks:        66.62.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:49:06:a8:6c:51:6d:25:78:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=287bb7df-d715-4e32-9c0a-e6c246498a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:2c:5f:72:ab:63:ed:8c:0c:3a:cc:ea:fc:
                    89:8d:11:b4:c6:72:63:8f:f0:42:77:0b:d5:a8:f0:
                    8f:76:23:03:76:c2:d1:dc:a5:cb:44:b8:e2:bd:d5:
                    9e:11:c7:a2:9a:e0:18:58:39:35:c8:13:6c:2c:09:
                    7b:6c:8f:d2:b6:c7:7b:4a:87:f8:3f:1d:88:d3:d3:
                    0f:c9:67:22:b1:e4:9d:86:ee:52:a0:04:66:77:71:
                    8a:0a:f0:d8:31:f4:5f:3b:af:45:e4:24:a2:13:c7:
                    7c:2a:52:c1:1c:5a:b5:ca:8a:69:92:64:29:f2:37:
                    b6:24:be:2e:10:c2:2f:44:92:13:93:c4:65:6b:0e:
                    40:d3:c8:a4:1f:b8:a6:95:6a:72:bf:92:17:e9:a8:
                    3f:4f:40:d9:ef:62:a8:dd:4b:c2:2a:cc:93:32:02:
                    e0:12:e6:96:70:f2:6b:63:fd:7a:f7:85:c5:34:5d:
                    38:ec:c6:13:c2:d5:4e:ac:a4:8c:8c:8a:18:ef:cf:
                    90:3b:df:cf:da:9a:1d:a2:ca:53:96:eb:77:72:6b:
                    44:99:44:52:42:e7:ce:83:25:7d:bd:e4:67:14:1a:
                    d4:9c:3e:93:a6:cb:1e:30:41:0a:b9:1f:eb:45:59:
                    9e:97:2a:65:a8:81:71:89:29:39:75:44:0a:57:de:
                    e8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FC:74:9A:11:F8:54:7D:89:41:91:16:74:76:81:17:A8:74:45:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/52dc28e1-8ccb-3f8a-ba9e-68d4adab6512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:f9:4a:2c:7a:35:6e:a7:29:f8:64:2c:79:88:75:4f:d2:a5:
         6c:12:a3:ef:b2:0a:02:d9:13:8c:18:5a:67:47:11:f1:d1:bb:
         9a:fa:a9:8e:a9:a8:06:43:9c:84:0d:43:d7:4d:19:91:59:88:
         81:55:1e:7c:f9:7b:80:7c:dd:0c:73:0e:fd:6b:02:81:ef:b0:
         07:ef:61:7d:4a:9a:8d:19:79:36:55:a9:f0:8a:8a:e1:b5:5b:
         45:ce:89:0f:67:d1:9d:38:54:d3:de:a7:38:f0:0d:45:cc:f6:
         c6:38:71:27:ac:8e:fd:21:bc:88:8e:65:2e:9b:43:b6:4b:b3:
         27:65:14:9e:6a:aa:1f:0a:fa:f1:3c:ab:4c:9a:1b:53:3e:ed:
         13:f6:df:ee:ba:74:fd:88:d0:c8:5f:a6:4a:42:73:13:42:31:
         f7:ed:86:2a:c2:1a:d7:de:22:18:4c:a0:6d:1b:f2:cd:b4:14:
         47:6a:56:60:86:7a:bc:9c:68:46:d9:6a:3d:dc:a6:27:c8:8c:
         42:20:bb:7a:da:a4:82:7b:81:3b:ff:4e:cb:7c:d5:24:ae:d2:
         34:db:0b:e2:49:83:c7:a6:06:2e:ba:0b:10:92:f6:d2:75:6a:
         c2:91:e4:c2:44:38:8e:7a:20:55:11:da:8d:2f:5d:7c:fb:01:
         ef:90:4e:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEkGqGxRbSV4g4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk
Mjg3YmI3ZGYtZDcxNS00ZTMyLTljMGEtZTZjMjQ2NDk4YTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVAsX3KrY+2MDDrM6vyJjRG0xnJjj/BCdwvV
qPCPdiMDdsLR3KXLRLjivdWeEceimuAYWDk1yBNsLAl7bI/Stsd7Sof4Px2I09MP
yWciseSdhu5SoARmd3GKCvDYMfRfO69F5CSiE8d8KlLBHFq1yoppkmQp8je2JL4u
EMIvRJITk8Rlaw5A08ikH7imlWpyv5IX6ag/T0DZ72Ko3UvCKsyTMgLgEuaWcPJr
Y/1694XFNF047MYTwtVOrKSMjIoY78+QO9/P2podospTlut3cmtEmURSQufOgyV9
veRnFBrUnD6TpsseMEEKuR/rRVmelyplqIFxiSk5dUQKV97oUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKL8dJoR+FR9iUGRFnR2gReodEV8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNTJkYzI4ZTEtOGNjYi0z
ZjhhLWJhOWUtNjhkNGFkYWI2NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQj70MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKv5Six6NW6nKfhkLHmIdU/SpWwSo++yCgLZE4wYWmdHEfHRu5r6qY6p
qAZDnIQNQ9dNGZFZiIFVHnz5e4B83QxzDv1rAoHvsAfvYX1Kmo0ZeTZVqfCKiuG1
W0XOiQ9n0Z04VNPepzjwDUXM9sY4cSesjv0hvIiOZS6bQ7ZLsydlFJ5qqh8K+vE8
q0yaG1M+7RP23+66dP2I0MhfpkpCcxNCMffthirCGtfeIhhMoG0b8s20FEdqVmCG
erycaEbZaj3cpifIjEIgu3rapIJ7gTv/Tst81SSu0jTbC+JJg8emBi66CxCS9tJ1
asKR5MJEOI56IFUR2o0vXXz7Ae+QThM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:34:50 2025 by rpki-client