Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6c0b98c2-f185-3e81-b639-5c516264db02.roa
File:                     6c0b98c2-f185-3e81-b639-5c516264db02.roa (raw, json)
Hash identifier:          iUe4UNXf9gd4c4e6mLYU8cb0lPxF3Fh8JvSvDqGUqiQ=
Subject key identifier:   C1:80:31:2C:17:26:E6:D8:73:2F:44:57:5B:D0:49:8C:B5:EC:92:75
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584B23F10BA581A29AAA56540F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6c0b98c2-f185-3e81-b639-5c516264db02.roa
Signing time:             Tue 09 Sep 2025 19:26:40 +0000
ROA not before:           Tue 09 Sep 2025 19:26:40 +0000
ROA not after:            Mon 08 Dec 2025 20:26:40 +0000
asID:                     577
IP address blocks:        142.177.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:f1:0b:a5:81:a2:9a:aa:56:54:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 19:26:40 2025 GMT
            Not After : Dec  8 20:26:40 2025 GMT
        Subject: CN=23ee97bc-19bd-492f-bb19-7f4d35b48472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:d9:4e:67:5d:d4:fd:7d:0e:74:48:73:e3:
                    4f:2b:11:1c:02:3b:3d:56:c1:15:c3:a6:99:c5:ff:
                    4c:a0:f3:74:4f:11:59:49:2e:96:63:2c:f3:dd:60:
                    7a:cb:1a:4d:5e:14:48:55:66:11:9e:3d:1e:1c:c7:
                    2a:36:b5:95:be:5e:64:01:bd:c0:3d:6c:c4:87:16:
                    8a:f6:fd:45:e7:21:94:04:81:dc:d2:18:69:12:64:
                    71:df:bf:df:f9:1b:5a:22:d4:17:b8:be:10:ea:ef:
                    5f:99:e3:a3:a7:7e:80:43:69:43:20:c3:cc:38:a7:
                    e6:13:59:07:a8:d6:1a:45:cb:c5:48:8e:77:88:bc:
                    2a:7c:e4:97:18:30:d3:c2:17:fc:fd:05:3c:e1:67:
                    f2:c2:24:25:a9:8a:0c:2e:56:02:a6:91:4e:8c:ef:
                    d8:c4:22:6b:b6:0e:64:dc:9f:72:98:a6:a9:9b:c6:
                    e3:61:78:bb:e5:71:99:ae:cb:8c:dd:2f:12:69:bc:
                    27:b1:bd:0c:96:2e:e9:1d:52:72:41:99:1c:16:5c:
                    81:ff:94:e0:a7:3e:7c:a2:a3:6e:65:2d:87:da:88:
                    d2:64:73:e4:43:cf:6d:ce:e2:17:9d:d9:70:e2:0d:
                    d6:49:4b:b5:9a:2d:72:6a:fc:90:a8:f2:19:73:9e:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:80:31:2C:17:26:E6:D8:73:2F:44:57:5B:D0:49:8C:B5:EC:92:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6c0b98c2-f185-3e81-b639-5c516264db02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b4:26:e3:b0:9f:df:7c:6c:11:bd:cf:71:f3:3b:3d:7e:9c:
         f7:94:e3:07:fa:79:36:f2:fa:ea:f7:ad:a6:4f:c2:a5:86:0a:
         9b:82:32:af:2a:9c:fd:8f:08:f2:e3:38:3a:d7:fd:35:0e:7d:
         13:be:8d:50:ac:5a:dc:31:94:90:e3:46:35:72:90:8e:9b:bb:
         9d:9f:c2:79:1b:76:16:db:18:e5:e4:75:ec:1e:b1:19:5f:41:
         2c:83:52:88:ca:7e:8d:16:68:1e:d9:44:82:ec:4c:57:3a:d6:
         67:15:04:8f:82:5a:8d:f2:14:c8:fb:8e:4d:6a:37:96:ad:3a:
         45:d5:fc:d7:46:c7:bc:3a:53:f0:de:c5:bb:05:4e:40:fb:64:
         ff:a9:8e:29:ca:62:d4:f6:03:0a:16:97:09:fe:51:52:59:f3:
         c4:c3:2c:5b:08:58:ff:d7:ce:e6:1c:f0:10:30:18:10:17:f0:
         ff:00:fc:20:aa:05:8b:7d:93:8a:1a:d8:73:8d:ab:f6:a4:19:
         8c:4f:90:9f:b8:b6:41:3b:f7:ab:62:78:02:69:71:34:35:1a:
         19:a0:f3:9d:59:62:dd:a1:84:1d:ed:df:de:f1:71:d3:9b:3d:
         2a:2c:df:31:b4:f2:3f:c4:fc:8d:e7:9a:eb:f2:ba:64:0a:74:
         fa:0f:65:f7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsj8QulgaKaqlZUD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDkwOTE5MjY0MFoXDTI1MTIwODIwMjY0MFowLzEtMCsGA1UEAxMk
MjNlZTk3YmMtMTliZC00OTJmLWJiMTktN2Y0ZDM1YjQ4NDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6/ZTmdd1P19DnRIc+NPKxEcAjs9VsEVw6aZ
xf9MoPN0TxFZSS6WYyzz3WB6yxpNXhRIVWYRnj0eHMcqNrWVvl5kAb3APWzEhxaK
9v1F5yGUBIHc0hhpEmRx37/f+RtaItQXuL4Q6u9fmeOjp36AQ2lDIMPMOKfmE1kH
qNYaRcvFSI53iLwqfOSXGDDTwhf8/QU84WfywiQlqYoMLlYCppFOjO/YxCJrtg5k
3J9ymKapm8bjYXi75XGZrsuM3S8Sabwnsb0Mli7pHVJyQZkcFlyB/5Tgpz58oqNu
ZS2H2ojSZHPkQ89tzuIXndlw4g3WSUu1mi1yavyQqPIZc54WGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMGAMSwXJubYcy9EV1vQSYy17JJ1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNmMwYjk4YzItZjE4NS0z
ZTgxLWI2MzktNWM1MTYyNjRkYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjrEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAibQm47Cf33xsEb3PcfM7PX6c95TjB/p5NvL66vetpk/CpYYKm4Iyryqc
/Y8I8uM4Otf9NQ59E76NUKxa3DGUkONGNXKQjpu7nZ/CeRt2FtsY5eR17B6xGV9B
LINSiMp+jRZoHtlEguxMVzrWZxUEj4JajfIUyPuOTWo3lq06RdX810bHvDpT8N7F
uwVOQPtk/6mOKcpi1PYDChaXCf5RUlnzxMMsWwhY/9fO5hzwEDAYEBfw/wD8IKoF
i32TihrYc42r9qQZjE+Qn7i2QTv3q2J4AmlxNDUaGaDznVli3aGEHe3f3vFx05s9
KizfMbTyP8T8jeea6/K6ZAp0+g9l9w==
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:36 2025 by rpki-client