Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/fb26b1b7-2475-3382-8f32-0ab781ca6023.roa
File:                     fb26b1b7-2475-3382-8f32-0ab781ca6023.roa (raw, json)
Hash identifier:          NWl/7Q94d0pL3tcbh6YpKJm2r/pvDmLSMun0QYy11Bk=
Subject key identifier:   E3:34:B8:02:C8:09:F1:D0:1E:A3:92:E2:85:69:D8:F0:27:D6:99:0D
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F4328584ABD4B76AC3F0F2799CBAF8FC0
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/fb26b1b7-2475-3382-8f32-0ab781ca6023.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     18875
IP address blocks:        162.211.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:76:ac:3f:0f:27:99:cb:af:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=e1856d6c-2db1-470c-8118-a406ce3ad477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:89:b9:f2:a3:bf:d6:ff:e4:0e:f7:59:38:f4:
                    16:97:2d:be:e0:d8:bf:80:9a:5e:23:77:f7:76:56:
                    12:02:51:ac:bd:3b:1c:75:2d:45:fe:92:e7:ca:b8:
                    bb:8d:89:17:f8:e2:82:5e:45:7b:77:09:34:e0:ea:
                    2f:70:39:55:7b:87:d8:8f:85:0b:ab:2f:86:10:35:
                    6b:8f:18:d7:f6:5a:55:97:f1:c2:c3:ef:b4:23:a8:
                    c2:85:47:6b:95:5a:52:5c:d3:71:c1:2c:98:3f:74:
                    b6:65:12:c7:12:4f:2f:89:6f:df:73:fb:3b:04:29:
                    ab:35:42:43:7f:df:20:59:ce:ad:94:5b:11:02:9f:
                    2b:24:77:41:02:b7:ce:7b:a0:48:d1:68:7a:71:20:
                    59:c1:94:73:e5:70:35:d8:bf:95:b4:2d:45:53:79:
                    1c:82:ab:26:4d:94:f8:5b:00:0a:52:64:18:62:08:
                    6b:d6:90:f4:cf:bb:aa:7c:42:31:b9:cd:07:e6:f0:
                    06:61:74:af:58:79:6f:d0:04:fd:07:94:2d:47:ac:
                    76:92:dc:30:04:38:ff:26:16:58:ba:48:a7:7a:d7:
                    5f:89:1f:ae:0d:a4:50:b3:f1:27:91:28:8a:a7:88:
                    26:ef:62:eb:32:45:ce:29:83:e8:d8:60:84:3d:6f:
                    91:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:34:B8:02:C8:09:F1:D0:1E:A3:92:E2:85:69:D8:F0:27:D6:99:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/fb26b1b7-2475-3382-8f32-0ab781ca6023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e1:98:8b:84:45:a1:7e:10:f4:2f:25:8c:ee:cd:2b:f7:39:
         1e:34:68:c0:31:36:b8:b6:e7:75:03:da:01:a1:9c:36:d1:fd:
         a1:b6:dc:a0:8e:0a:69:02:6e:91:5a:13:a0:9e:cd:a7:29:fb:
         f3:af:b9:a2:09:59:04:e8:93:32:12:ad:f8:5b:03:cb:fe:43:
         b4:e9:80:77:30:93:a1:75:78:43:b5:a3:bb:e2:eb:21:3a:95:
         a9:75:c0:7e:89:83:03:cf:65:97:58:8d:be:da:75:f2:5c:97:
         5f:65:02:a7:99:fa:15:db:c2:c2:bd:a1:6d:b2:ba:e8:91:25:
         1f:0f:88:72:75:ca:e0:82:40:86:9b:e2:c8:4d:91:43:a2:aa:
         39:d7:35:cb:b3:a6:57:bf:af:c8:39:99:b1:a9:4e:16:1e:9d:
         0d:bf:e6:9e:9a:e0:a4:c2:86:46:a4:5d:3c:07:a8:f5:e9:d3:
         30:ab:21:95:e3:cf:f7:0a:09:86:ac:20:e4:09:fb:6f:aa:7c:
         c9:15:da:35:7d:99:83:7c:d5:9c:f8:2a:b1:7c:bf:da:18:b6:
         b5:fb:ea:5d:37:5c:d5:06:28:dc:c2:de:1c:0e:60:40:b6:54:
         ba:2e:a1:2d:84:91:84:61:ef:7f:24:b1:39:e2:68:85:04:51:
         6b:ca:5c:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S3asPw8nmcuvj8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBhOTM2YzctNGExOS00NGE5LWI3NWQtY2MyMmMyNzRk
YjI2MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZTE4NTZkNmMtMmRiMS00NzBjLTgxMTgtYTQwNmNlM2FkNDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ym58qO/1v/kDvdZOPQWly2+4Ni/gJpeI3f3
dlYSAlGsvTscdS1F/pLnyri7jYkX+OKCXkV7dwk04OovcDlVe4fYj4ULqy+GEDVr
jxjX9lpVl/HCw++0I6jChUdrlVpSXNNxwSyYP3S2ZRLHEk8viW/fc/s7BCmrNUJD
f98gWc6tlFsRAp8rJHdBArfOe6BI0Wh6cSBZwZRz5XA12L+VtC1FU3kcgqsmTZT4
WwAKUmQYYghr1pD0z7uqfEIxuc0H5vAGYXSvWHlv0AT9B5QtR6x2ktwwBDj/JhZY
ukinetdfiR+uDaRQs/EnkSiKp4gm72LrMkXOKYPo2GCEPW+RwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOM0uALICfHQHqOS4oVp2PAn1pkNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5
MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIyYzI3NGRiMjYvZmIyNmIxYjctMjQ3NS0z
MzgyLThmMzItMGFiNzgxY2E2MDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjBhOTM2YzctNGExOS00NGE5LWI3
NWQtY2MyMmMyNzRkYjI2LzYwYTkzNmM3LTRhMTktNDRhOS1iNzVkLWNjMjJjMjc0
ZGIyNi5jcmwwHwYDVR0jBBgwFoAUXsGx+knOv7rYWgzeKmEsO+5yM+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIy
YzI3NGRiMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotN0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErhmIuERaF+EPQvJYzuzSv3OR40aMAxNri253UD2gGhnDbR/aG23KCO
CmkCbpFaE6Cezacp+/OvuaIJWQTokzISrfhbA8v+Q7TpgHcwk6F1eEO1o7vi6yE6
lal1wH6JgwPPZZdYjb7adfJcl19lAqeZ+hXbwsK9oW2yuuiRJR8PiHJ1yuCCQIab
4shNkUOiqjnXNcuzple/r8g5mbGpThYenQ2/5p6a4KTChkakXTwHqPXp0zCrIZXj
z/cKCYasIOQJ+2+qfMkV2jV9mYN81Zz4KrF8v9oYtrX76l03XNUGKNzC3hwOYEC2
VLouoS2EkYRh738ksTniaIUEUWvKXN8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:02 2025 by rpki-client