Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/cc6695f1-531c-3820-951e-59c87469c04d.roa
File:                     cc6695f1-531c-3820-951e-59c87469c04d.roa (raw, json)
Hash identifier:          DbT6FctzzLpxYMYAip9VtuNNF2Sm9hCNbTtIdbkY9J4=
Subject key identifier:   85:6E:18:7E:5F:5C:B5:27:A3:37:7D:98:53:8F:26:B7:EF:79:95:A8
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F4328584A7D15FD8450423A19C7C22E80
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/cc6695f1-531c-3820-951e-59c87469c04d.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     395261
IP address blocks:        163.182.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:fd:84:50:42:3a:19:c7:c2:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=40c3f0b8-f2e9-4afe-be26-4bc10d60cb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:cd:e7:f8:2c:44:64:b3:07:22:3e:39:c6:
                    d1:5f:f0:2b:08:ec:f3:87:b9:96:3e:7e:0b:aa:cd:
                    09:02:4d:60:92:79:e7:0a:93:01:fb:b3:09:57:dd:
                    2f:cb:f8:a3:22:43:7d:4c:1b:8f:18:fa:70:a5:2e:
                    4d:22:7b:58:5a:20:28:b7:c8:b7:2f:81:81:b0:cd:
                    e1:f6:af:b9:27:3d:ea:b9:6d:4b:1d:33:b0:1a:b9:
                    8b:f8:ec:6c:13:6f:c0:39:bc:d4:9c:2b:cf:f8:52:
                    93:60:d0:64:b4:22:27:c3:57:0a:bf:18:0e:ad:bd:
                    70:9c:c0:97:78:a2:28:80:cf:54:b8:ab:49:aa:ec:
                    14:4e:d3:45:90:aa:73:e7:e1:28:c0:01:5b:10:5e:
                    a6:90:ab:99:21:ed:30:e6:f8:72:77:94:6b:63:86:
                    ac:0e:e6:11:b8:1e:bb:5e:b9:04:39:19:83:16:0a:
                    2a:43:a9:7b:86:6a:90:53:34:c1:45:a6:2e:ae:09:
                    51:0e:de:03:bc:e3:91:dd:6f:c3:96:78:33:a0:6f:
                    59:4c:89:db:d9:ad:17:69:ef:1c:a9:0d:72:51:f1:
                    9f:1d:19:36:ae:56:68:d5:a4:dc:11:ab:76:c6:48:
                    7f:94:3a:90:05:6b:76:77:06:ef:6b:65:bb:0c:8b:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6E:18:7E:5F:5C:B5:27:A3:37:7D:98:53:8F:26:B7:EF:79:95:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/cc6695f1-531c-3820-951e-59c87469c04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:9d:b9:21:87:96:85:ab:2f:02:6d:ad:c0:2f:f5:d2:46:02:
         b0:db:d5:ba:66:58:e3:61:2b:00:50:3a:ea:3b:35:7e:cf:df:
         a6:53:2a:4f:88:9d:b7:5b:bf:85:9b:34:7d:6e:31:53:ba:b5:
         f0:2e:70:69:2e:7d:ad:a2:f6:ab:85:8f:de:0e:b2:b7:b3:ba:
         89:ac:1e:80:47:e8:a5:99:22:28:63:66:b6:d9:81:82:29:1c:
         d9:ed:be:06:42:4a:40:4e:f4:3b:cd:ff:13:47:6f:6e:f5:fb:
         a4:c2:b1:36:41:40:f2:da:21:71:f5:90:67:85:c6:63:86:83:
         c3:e4:7e:df:b9:e5:68:8b:f0:c9:69:be:ee:ab:e8:59:89:98:
         af:06:8e:d8:ec:b2:52:4d:ae:86:40:0f:71:7a:73:53:47:c9:
         c7:9d:50:aa:75:90:0d:0b:f0:53:5d:dc:b8:3f:7e:7a:e9:25:
         e7:ad:cf:70:cd:95:cd:5f:b8:0c:9f:d8:4b:d6:dd:d6:c0:0e:
         65:6f:81:38:50:35:32:2a:43:05:77:29:a0:b2:0c:d7:a8:5b:
         41:b3:6e:d0:90:6a:03:1d:84:d9:ec:e6:8f:44:75:95:69:82:
         91:0b:16:90:0f:e4:de:5c:d1:72:35:53:62:44:2f:07:88:c6:
         fc:3b:e4:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9Ff2EUEI6GcfCLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFkMmIzYzQtYTY0Yy00YWZkLWIwZGYtMTAzMzYxMzM5
NTUwMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
NDBjM2YwYjgtZjJlOS00YWZlLWJlMjYtNGJjMTBkNjBjYjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1vN5/gsRGSzByI+OcbRX/ArCOzzh7mWPn4L
qs0JAk1gknnnCpMB+7MJV90vy/ijIkN9TBuPGPpwpS5NIntYWiAot8i3L4GBsM3h
9q+5Jz3quW1LHTOwGrmL+OxsE2/AObzUnCvP+FKTYNBktCInw1cKvxgOrb1wnMCX
eKIogM9UuKtJquwUTtNFkKpz5+EowAFbEF6mkKuZIe0w5vhyd5RrY4asDuYRuB67
XrkEORmDFgoqQ6l7hmqQUzTBRaYurglRDt4DvOOR3W/DlngzoG9ZTInb2a0Xae8c
qQ1yUfGfHRk2rlZo1aTcEat2xkh/lDqQBWt2dwbva2W7DIuWFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVuGH5fXLUnozd9mFOPJrfveZWoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYWQy
YjNjNC1hNjRjLTRhZmQtYjBkZi0xMDMzNjEzMzk1NTAvY2M2Njk1ZjEtNTMxYy0z
ODIwLTk1MWUtNTljODc0NjljMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGFkMmIzYzQtYTY0Yy00YWZkLWIw
ZGYtMTAzMzYxMzM5NTUwLzBhZDJiM2M0LWE2NGMtNGFmZC1iMGRmLTEwMzM2MTMz
OTU1MC5jcmwwHwYDVR0jBBgwFoAUuN7Bw2RS8EIH2z6EpDX5BcG/O24wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYWQyYjNjNC1hNjRjLTRhZmQtYjBkZi0xMDMz
NjEzMzk1NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo7bwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqduSGHloWrLwJtrcAv9dJGArDb1bpmWONhKwBQOuo7NX7P36ZTKk+I
nbdbv4WbNH1uMVO6tfAucGkufa2i9quFj94OsrezuomsHoBH6KWZIihjZrbZgYIp
HNntvgZCSkBO9DvN/xNHb271+6TCsTZBQPLaIXH1kGeFxmOGg8Pkft+55WiL8Mlp
vu6r6FmJmK8GjtjsslJNroZAD3F6c1NHycedUKp1kA0L8FNd3Lg/fnrpJeetz3DN
lc1fuAyf2EvW3dbADmVvgThQNTIqQwV3KaCyDNeoW0GzbtCQagMdhNns5o9EdZVp
gpELFpAP5N5c0XI1U2JELweIxvw75Ig=
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:24:04 2025 by rpki-client