Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/692b11be-840e-37ce-a9b0-cceec6364e9d.roa
File:                     692b11be-840e-37ce-a9b0-cceec6364e9d.roa (raw, json)
Hash identifier:          SObQRojL/+m0MeLVCd3+hPdT1pO46nr7w8ktasxejzY=
Subject key identifier:   BA:B9:21:EF:77:D8:2D:03:49:4F:33:90:B0:3A:38:EF:42:29:E2:B2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA10488854C23A314FC4E5C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/692b11be-840e-37ce-a9b0-cceec6364e9d.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     19092
IP address blocks:        66.62.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:48:88:54:c2:3a:31:4f:c4:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=3ba247f7-1ddc-49b2-9ea1-a9f869dd1e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:d4:24:9a:5c:d6:33:b0:23:2c:90:50:71:
                    b1:b0:0d:93:ac:e8:0d:63:d7:6f:2a:f9:11:a1:e2:
                    8d:73:45:02:30:b0:2c:16:74:61:9e:1d:8a:40:8f:
                    f7:66:6e:81:e3:12:21:7e:e6:e2:1b:6d:f2:14:67:
                    90:59:4b:39:72:03:d5:62:c8:37:cc:bf:6e:8e:b4:
                    96:7c:d8:37:43:68:47:e9:41:83:85:92:0a:2f:83:
                    a4:95:a6:10:e3:25:ff:dc:68:8a:b6:f5:08:0b:36:
                    25:95:f6:c0:4b:5f:6b:fb:f3:df:e0:fa:95:81:bc:
                    44:0f:ba:5b:00:3f:38:49:aa:3e:a1:d3:26:ac:f8:
                    22:bc:33:a2:43:e5:84:0a:db:d8:55:13:af:fe:d0:
                    0c:d9:9a:0d:f2:0b:5a:c3:f6:73:28:db:96:9c:01:
                    ca:39:60:14:a0:ec:9e:3a:a8:49:14:f8:50:46:df:
                    f7:81:9d:83:aa:b4:a4:cd:ec:f8:96:cd:95:0f:67:
                    52:ff:56:57:e5:fb:e6:26:32:aa:78:01:35:10:27:
                    63:b0:b0:f5:83:20:cc:bc:b4:21:db:4e:1b:6e:dd:
                    f9:e3:25:12:db:f0:2e:ac:4a:85:d8:89:a7:f4:d4:
                    b5:fc:00:63:07:a5:ad:8e:00:2f:ff:f9:44:f3:34:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B9:21:EF:77:D8:2D:03:49:4F:33:90:B0:3A:38:EF:42:29:E2:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/692b11be-840e-37ce-a9b0-cceec6364e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b4:86:ff:2a:2f:b8:1b:ed:6a:c3:03:27:c3:46:88:a1:b3:
         63:aa:2d:60:da:b2:b1:b0:6c:93:0b:55:7c:8f:1d:9a:b1:b7:
         25:67:2d:da:07:14:15:0d:ee:cb:c1:b0:57:a9:e3:96:6a:c6:
         ea:14:99:9c:84:76:6a:2d:53:60:00:b1:3b:54:0b:0f:18:17:
         14:2e:ec:01:d7:60:8c:69:35:1f:a1:a3:2d:54:0c:81:1e:8f:
         37:4b:98:1c:80:26:de:0b:15:29:47:74:26:c4:62:de:56:fb:
         8c:fe:cb:74:79:06:85:1a:1c:23:34:a5:b6:b0:a0:4f:fd:b8:
         db:24:29:c0:78:89:e1:a3:d7:5f:c6:da:a1:b2:17:9f:97:d7:
         02:40:e8:96:d3:c0:34:f5:2b:61:31:6f:d9:df:74:2c:23:32:
         f8:12:19:67:59:fd:a3:4a:64:61:64:25:12:20:8e:dd:17:4d:
         0a:3e:37:ab:ff:7b:46:74:5e:ca:84:8b:20:d2:f9:5c:4e:b2:
         34:ff:97:cd:d4:74:c5:96:95:1d:49:eb:bf:3c:29:7b:71:f3:
         fb:f3:fe:5c:46:27:b9:a5:a1:72:fd:60:ef:a3:94:db:44:e9:
         45:61:72:91:b7:8c:7c:74:b8:90:32:ac:93:53:ae:da:d3:cc:
         2c:4d:f9:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEiIVMI6MU/E5cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk
M2JhMjQ3ZjctMWRkYy00OWIyLTllYTEtYTlmODY5ZGQxZTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldLUJJpc1jOwIyyQUHGxsA2TrOgNY9dvKvkR
oeKNc0UCMLAsFnRhnh2KQI/3Zm6B4xIhfubiG23yFGeQWUs5cgPVYsg3zL9ujrSW
fNg3Q2hH6UGDhZIKL4OklaYQ4yX/3GiKtvUICzYllfbAS19r+/Pf4PqVgbxED7pb
AD84Sao+odMmrPgivDOiQ+WECtvYVROv/tAM2ZoN8gtaw/ZzKNuWnAHKOWAUoOye
OqhJFPhQRt/3gZ2DqrSkzez4ls2VD2dS/1ZX5fvmJjKqeAE1ECdjsLD1gyDMvLQh
204bbt354yUS2/AurEqF2Imn9NS1/ABjB6WtjgAv//lE8zQSbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLq5Ie932C0DSU8zkLA6OO9CKeKyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNjkyYjExYmUtODQwZS0z
N2NlLWE5YjAtY2NlZWM2MzY0ZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQj7IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+0hv8qL7gb7WrDAyfDRoihs2OqLWDasrGwbJMLVXyPHZqxtyVnLdoH
FBUN7svBsFep45ZqxuoUmZyEdmotU2AAsTtUCw8YFxQu7AHXYIxpNR+hoy1UDIEe
jzdLmByAJt4LFSlHdCbEYt5W+4z+y3R5BoUaHCM0pbawoE/9uNskKcB4ieGj11/G
2qGyF5+X1wJA6JbTwDT1K2Exb9nfdCwjMvgSGWdZ/aNKZGFkJRIgjt0XTQo+N6v/
e0Z0XsqEiyDS+VxOsjT/l83UdMWWlR1J6788KXtx8/vz/lxGJ7mloXL9YO+jlNtE
6UVhcpG3jHx0uJAyrJNTrtrTzCxN+b8=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:03:02 2025 by rpki-client