Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/cf03d614-cf19-3b6e-b2f4-8a7c2f3ce709.roa
File:                     cf03d614-cf19-3b6e-b2f4-8a7c2f3ce709.roa (raw, json)
Hash identifier:          4IVYdGZ2u1yu/ykov5R2ZsuOh11g3fVQtgr0KfvscNA=
Subject key identifier:   74:59:35:11:D1:85:2A:64:B2:72:02:C4:C5:44:F6:52:56:F3:88:25
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584AB3862459C9891D71FF10FE60
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/cf03d614-cf19-3b6e-b2f4-8a7c2f3ce709.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     215703
IP address blocks:        185.167.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:24:59:c9:89:1d:71:ff:10:fe:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=115f6478-0a58-4d46-85f1-1e03368223f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:df:20:b2:cf:5a:31:78:66:ec:24:08:92:
                    13:e7:b4:1d:59:a0:6e:b1:20:26:d0:34:89:55:13:
                    c1:a1:ba:3b:b6:c4:cc:2e:de:45:55:36:c6:57:dd:
                    e2:8f:85:8c:ec:f6:00:a3:d5:98:e1:22:e2:2c:c6:
                    6b:3d:4c:6c:e0:93:df:12:f9:e3:36:a6:8b:3e:9a:
                    d7:6e:ad:ea:b7:3f:f4:c7:07:56:3f:af:41:bd:a8:
                    ef:d7:65:b5:18:80:9f:81:a9:df:89:cb:16:1e:91:
                    77:75:3a:80:90:9f:90:45:42:41:b8:5f:cf:3f:d1:
                    b0:4d:62:10:10:df:f2:6e:5b:36:77:88:c0:fb:42:
                    83:64:8c:c1:6a:53:ad:b3:0b:45:b6:44:74:7b:f7:
                    48:91:87:bf:a1:3f:e6:ef:d3:20:b2:84:18:cd:2d:
                    a1:d3:d4:30:79:9f:ca:61:d7:63:13:a5:08:aa:be:
                    0c:2a:de:45:b3:29:89:46:59:2f:38:8e:67:5c:2e:
                    94:9f:cc:ce:95:4c:62:fc:5d:e5:3d:54:a1:ed:22:
                    35:03:d0:38:29:08:f2:08:f2:7c:36:2b:2c:94:ca:
                    2c:66:0b:5a:4a:92:23:ae:bc:c5:45:79:ac:77:7a:
                    6b:ea:bb:3d:e6:b4:7e:b4:f4:f5:e6:d6:55:17:8a:
                    08:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:59:35:11:D1:85:2A:64:B2:72:02:C4:C5:44:F6:52:56:F3:88:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/cf03d614-cf19-3b6e-b2f4-8a7c2f3ce709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:48:b1:fb:3d:7a:9d:79:08:fe:02:5b:bb:fe:e7:7f:4b:3f:
         61:0c:95:2c:b9:6a:e9:54:01:c8:bc:64:9d:2e:84:dd:29:5b:
         99:06:9c:8c:a7:32:c6:0b:5e:2d:da:05:2f:7f:b2:86:07:6c:
         f4:4f:2e:ea:80:b6:c8:07:70:1a:9c:6b:de:03:cf:88:2a:97:
         1a:2a:12:16:4e:89:8f:c2:76:66:1e:79:6c:3e:25:d9:8c:b0:
         52:15:3a:f9:25:22:66:5d:73:54:50:89:17:ab:fa:a4:d2:f1:
         5b:23:60:39:8f:b0:8f:68:5c:43:50:73:cc:1e:09:d6:aa:f5:
         5b:3b:5f:e9:ce:aa:12:46:2a:ab:63:b7:21:68:c8:af:bf:e6:
         a9:49:b7:82:d2:ec:3f:92:bb:ff:d5:eb:a5:80:5e:03:cf:83:
         c5:36:a2:85:3c:11:90:3d:68:87:de:17:35:63:f5:80:ab:cc:
         00:be:04:4a:7d:93:eb:57:56:00:c7:24:a6:06:1e:a8:01:23:
         75:16:f3:7a:35:bb:db:7a:21:9b:e5:e4:a6:2a:34:47:4f:c1:
         a2:96:9a:4f:89:95:48:c2:f0:5a:a9:47:a0:ff:7c:d8:e2:6a:
         fc:f4:a5:15:05:a2:cf:39:2d:00:d7:0c:f2:90:94:6d:a2:6a:
         4d:fe:e3:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiRZyYkdcf8Q/mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx
ZWViMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk
MTE1ZjY0NzgtMGE1OC00ZDQ2LTg1ZjEtMWUwMzM2ODIyM2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlDfILLPWjF4ZuwkCJIT57QdWaBusSAm0DSJ
VRPBobo7tsTMLt5FVTbGV93ij4WM7PYAo9WY4SLiLMZrPUxs4JPfEvnjNqaLPprX
bq3qtz/0xwdWP69Bvajv12W1GICfganficsWHpF3dTqAkJ+QRUJBuF/PP9GwTWIQ
EN/ybls2d4jA+0KDZIzBalOtswtFtkR0e/dIkYe/oT/m79MgsoQYzS2h09QweZ/K
YddjE6UIqr4MKt5FsymJRlkvOI5nXC6Un8zOlUxi/F3lPVSh7SI1A9A4KQjyCPJ8
NisslMosZgtaSpIjrrzFRXmsd3pr6rs95rR+tPT15tZVF4oIpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRZNRHRhSpksnICxMVE9lJW84glMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj
MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvY2YwM2Q2MTQtY2YxOS0z
YjZlLWIyZjQtOGE3YzJmM2NlNzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5
YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx
MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl
NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuac+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKxIsfs9ep15CP4CW7v+539LP2EMlSy5aulUAci8ZJ0uhN0pW5kGnIyn
MsYLXi3aBS9/soYHbPRPLuqAtsgHcBqca94Dz4gqlxoqEhZOiY/CdmYeeWw+JdmM
sFIVOvklImZdc1RQiRer+qTS8VsjYDmPsI9oXENQc8weCdaq9Vs7X+nOqhJGKqtj
tyFoyK+/5qlJt4LS7D+Su//V66WAXgPPg8U2ooU8EZA9aIfeFzVj9YCrzAC+BEp9
k+tXVgDHJKYGHqgBI3UW83o1u9t6IZvl5KYqNEdPwaKWmk+JlUjC8FqpR6D/fNji
avz0pRUFos85LQDXDPKQlG2iak3+4+Q=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:41:34 2025 by rpki-client