Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/9f5bbe14-2596-39dd-b988-e987d6c3b3c3.roa
File:                     9f5bbe14-2596-39dd-b988-e987d6c3b3c3.roa (raw, json)
Hash identifier:          e5dPYzdLr3OVKGv09FI+di2fR8u4Q37cLmtJ9FMUc/I=
Subject key identifier:   3D:CB:51:BB:83:CD:C2:7E:7A:5D:1C:27:56:2E:ED:CB:24:0B:93:F9
Certificate issuer:       /CN=692aac29-6d3b-4bdf-9238-da449246d5ab
Certificate serial:       010D0C9F4328584BABFCF8E93D6EBA705D594280
Authority key identifier: EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/9f5bbe14-2596-39dd-b988-e987d6c3b3c3.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     6079
IP address blocks:        64.40.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fc:f8:e9:3d:6e:ba:70:5d:59:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=692aac29-6d3b-4bdf-9238-da449246d5ab
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=d870ceca-339c-464d-9aec-e584ed6665cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:6c:2b:eb:1f:75:f6:d7:82:d1:64:de:14:
                    84:3e:d5:49:ec:16:dc:92:49:4c:3a:35:fa:b5:e7:
                    fc:fd:a9:a5:0a:f5:da:c3:da:11:17:bd:5c:00:70:
                    22:e5:7b:98:22:93:21:a7:0a:bf:30:2e:cc:07:0d:
                    d8:20:91:13:dc:54:13:6a:be:0a:46:1b:45:bf:00:
                    c9:ab:9b:f6:84:55:20:59:42:1c:df:42:b7:28:74:
                    09:22:c7:b1:f5:27:c3:b0:ab:11:f5:e4:33:7f:81:
                    1d:54:3d:ef:0c:66:b5:9c:d3:e1:2e:cb:a7:f8:ec:
                    32:b7:b8:94:b8:64:c7:0c:aa:67:e2:05:13:77:7c:
                    d6:0d:c4:cd:14:59:19:a4:f2:f2:34:6d:be:32:6d:
                    55:b6:c7:ec:1c:44:82:6c:89:00:5e:bf:8c:b4:d0:
                    2c:fd:95:b3:e1:f0:26:26:2d:16:bb:98:57:b0:5b:
                    ea:25:fc:ff:e2:27:09:72:2e:39:aa:b5:40:e6:bc:
                    02:33:89:52:db:80:eb:e1:ca:8e:cc:17:b1:fc:dd:
                    a0:5b:6d:55:01:6b:8d:e8:f3:77:f0:9f:51:57:a8:
                    60:a8:43:2f:91:25:b9:f9:1a:b9:02:1f:c8:91:5d:
                    35:00:71:38:16:49:1e:c7:50:fa:61:34:01:17:b9:
                    e1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CB:51:BB:83:CD:C2:7E:7A:5D:1C:27:56:2E:ED:CB:24:0B:93:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/9f5bbe14-2596-39dd-b988-e987d6c3b3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.crl

            X509v3 Authority Key Identifier:
                keyid:EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f2:4e:90:f1:ce:12:ba:5c:ef:ec:1d:1c:2b:16:22:f1:0a:
         e2:24:96:e3:c8:c9:62:ef:7e:17:66:1d:95:bd:bb:3c:89:91:
         d7:4f:9e:98:d7:d8:05:e4:9f:47:cc:28:43:e0:9d:2f:ec:af:
         58:0d:21:fd:02:dc:41:ba:07:18:7c:5b:ac:fc:37:07:df:2d:
         38:ea:f0:4d:90:78:e0:88:5a:82:6d:bb:9e:18:a6:9e:f5:8b:
         97:d5:4f:0b:fd:1f:37:ee:17:52:76:73:8d:b7:bb:dd:cf:1d:
         9c:81:85:66:09:7c:ec:49:e4:04:ec:96:85:4f:03:94:c7:84:
         48:e9:39:6c:47:59:dd:e4:d6:44:e0:61:1e:59:fe:68:d2:04:
         05:1d:6f:37:77:3d:25:25:1b:ba:4a:aa:77:31:01:3b:0c:bc:
         bd:b6:16:2f:53:5e:8f:39:bd:6c:55:58:e3:bb:cf:d6:4b:b9:
         88:a8:74:68:6a:cb:04:48:e9:4c:19:3d:c9:06:c3:8a:e3:4e:
         d9:0a:cd:82:61:9e:09:88:78:e0:80:93:ed:a2:10:18:b4:8f:
         28:17:5d:ae:5d:12:11:9d:c9:3e:2b:c7:49:51:e9:58:44:cf:
         8a:5e:51:66:3f:8b:9f:b4:81:a1:8d:4f:cc:28:02:0f:bb:a2:
         b9:e7:6d:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/PjpPW66cF1ZQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjkyYWFjMjktNmQzYi00YmRmLTkyMzgtZGE0NDkyNDZk
NWFiMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk
ZDg3MGNlY2EtMzM5Yy00NjRkLTlhZWMtZTU4NGVkNjY2NWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCVsK+sfdfbXgtFk3hSEPtVJ7BbckklMOjX6
tef8/amlCvXaw9oRF71cAHAi5XuYIpMhpwq/MC7MBw3YIJET3FQTar4KRhtFvwDJ
q5v2hFUgWUIc30K3KHQJIsex9SfDsKsR9eQzf4EdVD3vDGa1nNPhLsun+Owyt7iU
uGTHDKpn4gUTd3zWDcTNFFkZpPLyNG2+Mm1VtsfsHESCbIkAXr+MtNAs/ZWz4fAm
Ji0Wu5hXsFvqJfz/4icJci45qrVA5rwCM4lS24Dr4cqOzBex/N2gW21VAWuN6PN3
8J9RV6hgqEMvkSW5+Rq5Ah/IkV01AHE4Fkkex1D6YTQBF7nhVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3LUbuDzcJ+el0cJ1Yu7cskC5P5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTJh
YWMyOS02ZDNiLTRiZGYtOTIzOC1kYTQ0OTI0NmQ1YWIvOWY1YmJlMTQtMjU5Ni0z
OWRkLWI5ODgtZTk4N2Q2YzNiM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjkyYWFjMjktNmQzYi00YmRmLTky
MzgtZGE0NDkyNDZkNWFiLzY5MmFhYzI5LTZkM2ItNGJkZi05MjM4LWRhNDQ5MjQ2
ZDVhYi5jcmwwHwYDVR0jBBgwFoAU6lYQMl9nDWvUE9hOYlkmtb9JiOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OTJhYWMyOS02ZDNiLTRiZGYtOTIzOC1kYTQ0
OTI0NmQ1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCjMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLyTpDxzhK6XO/sHRwrFiLxCuIkluPIyWLvfhdmHZW9uzyJkddPnpjX
2AXkn0fMKEPgnS/sr1gNIf0C3EG6Bxh8W6z8NwffLTjq8E2QeOCIWoJtu54Ypp71
i5fVTwv9HzfuF1J2c423u93PHZyBhWYJfOxJ5ATsloVPA5THhEjpOWxHWd3k1kTg
YR5Z/mjSBAUdbzd3PSUlG7pKqncxATsMvL22Fi9TXo85vWxVWOO7z9ZLuYiodGhq
ywRI6UwZPckGw4rjTtkKzYJhngmIeOCAk+2iEBi0jygXXa5dEhGdyT4rx0lR6VhE
z4peUWY/i5+0gaGNT8woAg+7ornnbcU=
-----END CERTIFICATE-----
Generated at Tue Nov 4 16:36:09 2025 by rpki-client