Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa
File:                     7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa (raw, json)
Hash identifier:          I//4A/FxbhT/nXmN8GtkLRsx+6ND3ki4F5uOeMByYgk=
Subject key identifier:   D7:D1:4C:5F:2A:7B:C5:4A:46:33:89:9B:40:73:ED:23:C7:7B:E7:1C
Certificate issuer:       /CN=fd6daa08-5cef-4e98-8808-5ffaa04a497c
Certificate serial:       010D0C9F4328584BB5C250DFD9751ED368CA6400
Authority key identifier: 8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa
Signing time:             Sat 01 Nov 2025 01:00:30 +0000
ROA not before:           Sat 01 Nov 2025 01:00:30 +0000
ROA not after:            Fri 30 Jan 2026 02:00:30 +0000
asID:                     40670
IP address blocks:        162.219.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b5:c2:50:df:d9:75:1e:d3:68:ca:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd6daa08-5cef-4e98-8808-5ffaa04a497c
        Validity
            Not Before: Nov  1 01:00:30 2025 GMT
            Not After : Jan 30 02:00:30 2026 GMT
        Subject: CN=04854fc2-7f9b-4d1a-9a78-0f7c0b6f28d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:cf:48:f1:ed:7c:a9:6c:15:bd:57:5d:66:
                    70:17:24:63:49:9a:a7:de:75:51:f9:de:57:ff:66:
                    5c:ac:70:85:fa:e1:e4:83:b9:69:3d:7d:87:22:1f:
                    77:6e:98:0d:97:43:39:12:23:26:0d:58:a6:2b:d2:
                    44:4f:69:88:97:d4:a7:cf:5b:9a:ae:59:75:84:0d:
                    45:24:2a:c8:60:98:cc:09:22:71:a8:7b:69:3e:5a:
                    f2:b4:f5:8d:bb:17:86:c4:08:65:f2:fd:99:98:ad:
                    a6:90:24:2d:39:15:49:ff:1e:f0:5b:a7:4a:c8:c9:
                    53:57:0b:32:16:d6:02:d8:5a:05:4f:3e:56:9d:35:
                    7f:4a:69:68:e1:67:78:22:cd:8b:ff:f4:44:54:f1:
                    0a:e8:66:76:7c:04:2a:a1:93:96:ba:1f:03:43:eb:
                    aa:a6:de:fa:a8:cd:c8:d8:50:f6:70:d1:d3:77:1a:
                    05:4b:3e:19:4a:df:49:2a:5d:84:37:62:9a:76:69:
                    c8:da:a3:2b:38:40:9f:30:01:70:b7:97:97:5b:f4:
                    f3:78:30:f6:2c:48:41:0c:e4:4d:e9:33:b3:d9:c2:
                    d1:59:32:3e:05:8d:58:f9:98:eb:db:dd:0a:18:9a:
                    7f:10:66:70:a0:1e:37:66:a3:da:94:05:d2:cd:90:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D1:4C:5F:2A:7B:C5:4A:46:33:89:9B:40:73:ED:23:C7:7B:E7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/7d5b7357-cf30-320b-9083-c67c3bbcfed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c/fd6daa08-5cef-4e98-8808-5ffaa04a497c.crl

            X509v3 Authority Key Identifier:
                keyid:8C:14:BD:33:A4:76:FC:3F:72:7F:E7:A7:6C:87:CF:ED:C4:5D:ED:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd6daa08-5cef-4e98-8808-5ffaa04a497c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:6a:6b:83:6d:41:13:ce:fe:5d:74:63:b8:12:9c:75:f7:ae:
         28:b8:71:7b:2c:e8:5b:ac:ee:ac:35:2a:a9:c7:c9:42:d5:68:
         9f:af:b8:eb:46:70:84:e2:1a:27:b3:47:41:84:8e:3c:bc:28:
         cb:c5:e0:d3:1c:d7:a9:11:43:b9:4b:bb:a3:2b:a1:91:97:61:
         c8:ae:31:a9:75:23:88:20:78:75:ff:c1:df:51:98:1c:a9:ff:
         df:12:21:92:5c:f6:77:c7:ae:e9:6b:d6:d6:83:45:31:ce:3f:
         9d:b5:d0:b9:2b:9b:65:71:2a:53:be:fd:d4:d5:e2:15:3d:e2:
         2b:7d:fb:f6:50:e1:cf:96:7b:5d:b5:fc:9e:0f:9f:b3:be:22:
         3d:5c:b9:d9:53:58:d8:fe:5b:5f:10:e0:20:61:47:17:f6:6c:
         49:68:ee:3e:50:f2:f0:04:12:4a:c5:75:00:45:79:c0:1d:f0:
         6c:8d:5c:86:1a:8b:a1:8d:ae:f5:0e:cc:82:2c:9c:1f:b4:41:
         73:33:e8:f7:da:a4:bf:7b:ef:bc:9f:27:51:9d:9c:5d:54:01:
         99:03:a4:f2:8e:9d:df:c1:57:c3:db:9c:b7:39:53:03:c8:fd:
         85:54:c3:8b:2b:89:a9:e4:50:c2:b7:e2:38:3e:65:d9:01:98:
         21:f5:d3:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wlDf2XUe02jKZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ2ZGFhMDgtNWNlZi00ZTk4LTg4MDgtNWZmYWEwNGE0
OTdjMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk
MDQ4NTRmYzItN2Y5Yi00ZDFhLTlhNzgtMGY3YzBiNmYyOGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nLPSPHtfKlsFb1XXWZwFyRjSZqn3nVR+d5X
/2ZcrHCF+uHkg7lpPX2HIh93bpgNl0M5EiMmDVimK9JET2mIl9Snz1uarll1hA1F
JCrIYJjMCSJxqHtpPlrytPWNuxeGxAhl8v2ZmK2mkCQtORVJ/x7wW6dKyMlTVwsy
FtYC2FoFTz5WnTV/Smlo4Wd4Is2L//REVPEK6GZ2fAQqoZOWuh8DQ+uqpt76qM3I
2FD2cNHTdxoFSz4ZSt9JKl2EN2KadmnI2qMrOECfMAFwt5eXW/TzeDD2LEhBDORN
6TOz2cLRWTI+BY1Y+Zjr290KGJp/EGZwoB43ZqPalAXSzZDaCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNfRTF8qe8VKRjOJm0Bz7SPHe+ccMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDZk
YWEwOC01Y2VmLTRlOTgtODgwOC01ZmZhYTA0YTQ5N2MvN2Q1YjczNTctY2YzMC0z
MjBiLTkwODMtYzY3YzNiYmNmZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQ2ZGFhMDgtNWNlZi00ZTk4LTg4
MDgtNWZmYWEwNGE0OTdjL2ZkNmRhYTA4LTVjZWYtNGU5OC04ODA4LTVmZmFhMDRh
NDk3Yy5jcmwwHwYDVR0jBBgwFoAUjBS9M6R2/D9yf+enbIfP7cRd7bAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDZkYWEwOC01Y2VmLTRlOTgtODgwOC01ZmZh
YTA0YTQ5N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBottqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI9qa4NtQRPO/l10Y7gSnHX3rii4cXss6Fus7qw1KqnHyULVaJ+vuOtG
cITiGiezR0GEjjy8KMvF4NMc16kRQ7lLu6MroZGXYciuMal1I4ggeHX/wd9RmByp
/98SIZJc9nfHrulr1taDRTHOP5210Lkrm2VxKlO+/dTV4hU94it9+/ZQ4c+We121
/J4Pn7O+Ij1cudlTWNj+W18Q4CBhRxf2bElo7j5Q8vAEEkrFdQBFecAd8GyNXIYa
i6GNrvUOzIIsnB+0QXMz6PfapL9777yfJ1GdnF1UAZkDpPKOnd/BV8PbnLc5UwPI
/YVUw4sriankUMK34jg+ZdkBmCH108U=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:23:55 2025 by rpki-client