Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/4ae6d800-7f21-372c-a4bd-d9d393ae3f74.roa
File:                     4ae6d800-7f21-372c-a4bd-d9d393ae3f74.roa (raw, json)
Hash identifier:          NelMPNj8pSkQfeNJAXUhVqCJH890NGRhtRoDKRTye0w=
Subject key identifier:   1C:87:FD:54:5C:A2:16:E7:A7:26:81:DE:10:50:3A:3C:51:05:B7:0D
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F4328584BB88D1A55F789D09648B830A0
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/4ae6d800-7f21-372c-a4bd-d9d393ae3f74.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     33164
IP address blocks:        199.47.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:1a:55:f7:89:d0:96:48:b8:30:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=e789508a-a42a-4234-ab44-a31647a64cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:3e:8f:7f:95:42:8f:af:80:84:cb:37:68:
                    13:e0:0f:8d:bf:03:50:f8:59:88:96:54:dc:63:ca:
                    a1:09:24:8b:8a:ec:bd:04:ab:79:f0:a6:5f:86:4c:
                    91:9f:f5:6b:9f:55:26:d1:01:f4:b4:5a:c5:29:8c:
                    87:9b:01:41:63:2e:1d:f1:2e:52:a7:4a:f3:2f:d5:
                    99:78:7b:33:1f:f9:3d:45:de:69:b0:69:73:42:d8:
                    9a:c8:00:9c:be:67:97:60:54:fa:01:1c:9b:9f:dc:
                    7a:7a:ba:ac:3d:97:37:bf:2c:25:c3:ad:53:49:23:
                    9c:ad:9b:4c:5c:6e:48:02:6e:b8:25:f5:78:54:2a:
                    60:77:ee:2a:dd:b8:d3:49:47:9a:10:76:4e:a2:31:
                    4b:6b:d5:a3:c3:9e:3d:02:47:8d:46:5f:cc:5c:1b:
                    26:81:bf:7c:e8:b9:0c:c5:8b:6e:32:00:0b:e2:96:
                    9f:e1:8c:14:9a:0f:d2:65:92:58:54:24:b8:11:b4:
                    b1:ae:c4:26:fe:16:34:85:46:65:51:ff:fd:01:d6:
                    e9:f3:21:a5:ff:4b:c1:05:11:ae:6e:f4:2a:1c:07:
                    fb:97:83:b2:36:c4:92:35:ca:65:e4:8c:30:c1:11:
                    93:a3:52:e6:c5:2f:bc:f4:0c:51:6d:20:57:0d:62:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:87:FD:54:5C:A2:16:E7:A7:26:81:DE:10:50:3A:3C:51:05:B7:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/4ae6d800-7f21-372c-a4bd-d9d393ae3f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:36:22:30:e9:a2:ec:9c:be:ef:a8:76:5f:17:f8:1a:3f:f5:
         91:81:06:ea:da:d4:f5:a5:20:d3:5b:9d:73:36:70:19:45:f6:
         ea:14:0e:8b:87:15:2a:ae:a7:ec:ba:c2:81:c5:94:5c:41:c7:
         3c:0d:07:b2:cc:a1:18:e6:2d:a3:ae:aa:54:ef:03:8e:ee:04:
         da:98:7e:f7:ab:9f:f1:4f:90:1d:23:fe:b4:02:9c:46:07:5c:
         72:c8:f6:65:33:93:41:02:c8:d5:c1:20:b4:ce:64:4a:d2:a1:
         e9:5d:c6:36:43:c3:1f:c5:90:f7:a7:17:06:e7:e2:db:f3:ac:
         4b:b4:fc:4d:73:60:e5:3e:6f:c8:e0:37:f0:ea:2a:a1:99:9a:
         7d:c8:74:4c:8b:0e:18:c0:e7:8d:50:1d:c9:9f:dd:55:d5:14:
         96:7c:9e:a0:fe:01:b6:11:af:d7:07:29:20:a4:38:98:4c:cb:
         4a:6c:a5:4d:22:4d:88:fe:eb:98:eb:80:cf:ad:e4:a4:2d:cd:
         7e:38:76:dd:0b:d0:b2:21:55:bf:0e:eb:9b:4b:ed:3b:ed:12:
         0e:9e:05:cb:a0:69:50:1c:ea:57:c2:e2:74:ba:96:3d:6f:4a:
         f1:eb:36:04:59:4d:d4:18:f8:f0:b4:56:dd:d9:1d:25:88:2b:
         ad:67:78:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRpV94nQlki4MKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0
ZDUwMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZTc4OTUwOGEtYTQyYS00MjM0LWFiNDQtYTMxNjQ3YTY0Y2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO4+j3+VQo+vgITLN2gT4A+NvwNQ+FmIllTc
Y8qhCSSLiuy9BKt58KZfhkyRn/Vrn1Um0QH0tFrFKYyHmwFBYy4d8S5Sp0rzL9WZ
eHszH/k9Rd5psGlzQtiayACcvmeXYFT6ARybn9x6erqsPZc3vywlw61TSSOcrZtM
XG5IAm64JfV4VCpgd+4q3bjTSUeaEHZOojFLa9Wjw549AkeNRl/MXBsmgb986LkM
xYtuMgAL4paf4YwUmg/SZZJYVCS4EbSxrsQm/hY0hUZlUf/9Adbp8yGl/0vBBRGu
bvQqHAf7l4OyNsSSNcpl5IwwwRGTo1LmxS+89AxRbSBXDWJjfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFByH/VRcohbnpyaB3hBQOjxRBbcNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl
Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvNGFlNmQ4MDAtN2YyMS0z
NzJjLWE0YmQtZDlkMzkzYWUzZjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1
MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh
NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi
OWQyYTRkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy98MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFk2IjDpouycvu+odl8X+Bo/9ZGBBura1PWlINNbnXM2cBlF9uoUDouH
FSqup+y6woHFlFxBxzwNB7LMoRjmLaOuqlTvA47uBNqYfvern/FPkB0j/rQCnEYH
XHLI9mUzk0ECyNXBILTOZErSoeldxjZDwx/FkPenFwbn4tvzrEu0/E1zYOU+b8jg
N/DqKqGZmn3IdEyLDhjA541QHcmf3VXVFJZ8nqD+AbYRr9cHKSCkOJhMy0pspU0i
TYj+65jrgM+t5KQtzX44dt0L0LIhVb8O65tL7TvtEg6eBcugaVAc6lfC4nS6lj1v
SvHrNgRZTdQY+PC0Vt3ZHSWIK61neCY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:09:06 2025 by rpki-client