Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa
File:                     b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa (raw, json)
Hash identifier:          P26DxpxDyUWB9ZXNlIreAcK8suR+WfQc4rqBZ1XYbvs=
Subject key identifier:   82:97:68:2B:C9:61:D8:0E:C0:7E:27:19:43:B5:F9:A2:EB:FF:49:45
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584B004BEF83E59A7E8A01FBC800
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     6250
IP address blocks:        216.163.120.0/23 maxlen: 24
                          216.163.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:ef:83:e5:9a:7e:8a:01:fb:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=10e32cf0-a658-44f1-b4de-a7f21a60c076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:0c:13:ac:9b:bd:11:83:fb:10:18:b9:5c:
                    aa:4c:dd:0e:4c:86:35:3f:00:7d:75:bc:b9:3c:0a:
                    11:ec:32:7f:69:c4:d9:f5:04:f8:43:f2:fa:91:30:
                    4c:8d:80:2d:d5:ae:e2:62:89:43:b2:56:57:bd:9f:
                    3b:9a:42:7b:a7:4f:56:fd:23:72:bb:d2:29:68:f1:
                    dd:f3:56:d5:d3:09:61:11:09:16:df:b6:59:f0:82:
                    f4:be:e5:ae:27:5f:a0:62:9f:4b:f8:06:ee:69:83:
                    1b:e8:fe:24:06:50:22:e6:b9:6f:29:35:01:5e:e1:
                    13:cc:d5:96:04:43:15:18:d3:47:6a:b1:02:42:4d:
                    21:6c:32:f6:14:4e:9b:5c:ee:5b:83:cf:db:94:53:
                    67:4d:b2:36:a1:ea:3c:48:70:d8:e5:71:7d:ae:75:
                    4a:00:96:71:69:c5:7f:f9:b8:4f:94:90:ad:69:05:
                    ea:4b:67:db:e3:09:59:ba:d6:57:31:7f:53:e5:85:
                    2f:24:c4:19:6a:9b:6c:0e:a1:37:bc:8d:9c:f8:71:
                    ed:b9:c6:93:47:c0:6e:c9:41:cb:1a:c2:48:94:36:
                    7f:35:d6:3f:61:ad:25:2c:98:5c:8f:41:89:7c:5d:
                    f4:21:31:ec:48:70:30:1c:ba:fd:81:0c:f0:29:3d:
                    77:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:97:68:2B:C9:61:D8:0E:C0:7E:27:19:43:B5:F9:A2:EB:FF:49:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:21:76:38:7c:b1:a5:e5:f8:34:a3:32:18:89:75:64:92:3c:
         a2:70:59:d2:dc:e1:a0:bc:99:3a:b5:e5:73:61:ce:18:44:d1:
         18:bd:10:54:bb:57:ad:dd:b4:94:3d:72:22:93:8c:ea:77:42:
         5d:ed:fd:96:ce:d4:53:85:cc:93:fb:ae:b7:72:0d:dc:e5:09:
         73:a7:1f:9f:d5:3a:6b:86:8e:2f:e2:1a:18:b7:63:fc:df:46:
         7e:89:cc:81:f9:a0:51:08:3b:06:b2:93:fc:4d:25:a1:99:72:
         24:1d:ca:2e:24:17:a7:e0:4e:48:44:b5:12:60:f1:6b:00:2a:
         00:9f:f7:84:20:57:b9:45:a0:07:b4:f9:d6:8b:2f:89:03:d4:
         fc:45:de:8b:fd:a1:e1:09:d9:1f:9f:fe:83:27:38:1e:12:da:
         3a:43:1e:43:22:08:41:65:30:37:51:fe:34:35:6a:23:6e:cc:
         01:53:b6:23:ee:01:73:fe:26:9e:0d:c9:de:3a:94:c9:b0:54:
         8d:60:c6:f4:65:a8:51:f5:9f:83:54:6d:46:b1:ea:a5:d6:c9:
         43:89:47:f6:a1:d2:2a:b4:e6:7f:31:2a:e0:9c:58:41:24:62:
         8d:fa:d9:41:f0:b8:d5:7d:38:f9:cf:26:20:25:c6:7e:5b:c2:
         e5:9d:7a:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS++D5Zp+igH7yAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm
YTExMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
MTBlMzJjZjAtYTY1OC00NGYxLWI0ZGUtYTdmMjFhNjBjMDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5oME6ybvRGD+xAYuVyqTN0OTIY1PwB9dby5
PAoR7DJ/acTZ9QT4Q/L6kTBMjYAt1a7iYolDslZXvZ87mkJ7p09W/SNyu9IpaPHd
81bV0wlhEQkW37ZZ8IL0vuWuJ1+gYp9L+AbuaYMb6P4kBlAi5rlvKTUBXuETzNWW
BEMVGNNHarECQk0hbDL2FE6bXO5bg8/blFNnTbI2oeo8SHDY5XF9rnVKAJZxacV/
+bhPlJCtaQXqS2fb4wlZutZXMX9T5YUvJMQZaptsDqE3vI2c+HHtucaTR8BuyUHL
GsJIlDZ/NdY/Ya0lLJhcj0GJfF30ITHsSHAwHLr9gQzwKT13aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKXaCvJYdgOwH4nGUO1+aLr/0lFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw
ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvYjQ1MzNmMjctOTViNC0z
MjgxLWJjYTktYjYzNGE0YjBjZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1
YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk
ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5
NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAhdjh8saXl+DSjMhiJdWSSPKJwWdLc4aC8mTq15XNhzhhE0Ri9EFS7
V63dtJQ9ciKTjOp3Ql3t/ZbO1FOFzJP7rrdyDdzlCXOnH5/VOmuGji/iGhi3Y/zf
Rn6JzIH5oFEIOwayk/xNJaGZciQdyi4kF6fgTkhEtRJg8WsAKgCf94QgV7lFoAe0
+daLL4kD1PxF3ov9oeEJ2R+f/oMnOB4S2jpDHkMiCEFlMDdR/jQ1aiNuzAFTtiPu
AXP+Jp4Nyd46lMmwVI1gxvRlqFH1n4NUbUax6qXWyUOJR/ah0iq05n8xKuCcWEEk
Yo362UHwuNV9OPnPJiAlxn5bwuWdeos=
-----END CERTIFICATE-----
Generated at Sat Oct 11 16:48:44 2025 by rpki-client