Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a22c5c03-8773-31da-a086-314c391b6fbe.roa
File:                     a22c5c03-8773-31da-a086-314c391b6fbe.roa (raw, json)
Hash identifier:          kaU0DTs0ErADJsiY70f/sU0YXXf3n0GlAiP/gw75nM0=
Subject key identifier:   E1:98:29:7D:67:DC:1B:3D:8D:D0:55:58:20:14:4E:F5:E2:6F:53:8F
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C62966EABEFF254DE5480
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a22c5c03-8773-31da-a086-314c391b6fbe.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     18563
IP address blocks:        159.18.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:62:96:6e:ab:ef:f2:54:de:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=49badcea-c496-472d-8079-272592dde9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:05:0d:37:18:87:66:18:15:d9:d5:0d:85:
                    d8:da:d6:0e:e8:db:9f:0d:29:b7:36:d9:c4:35:dc:
                    ab:6d:28:ac:80:df:43:a6:39:b4:97:15:1a:70:93:
                    58:22:d3:21:3a:6a:b9:2f:38:04:ec:f4:93:90:f0:
                    78:a4:52:0d:2f:69:7c:d3:38:ee:b6:6f:81:b7:66:
                    c3:cb:35:5f:f7:a8:54:86:bb:6b:68:0e:07:40:9a:
                    15:fc:56:0d:47:9b:4f:03:27:91:ce:a3:c2:50:f9:
                    8a:b4:74:42:83:62:43:43:9c:db:a7:d1:c6:78:af:
                    9b:aa:76:80:f8:5d:d0:4a:23:04:21:85:c7:41:15:
                    c9:11:d4:52:cf:33:3f:fe:c4:11:c6:90:78:fb:f9:
                    b2:05:32:ac:ab:eb:12:bd:db:5d:a2:06:9c:16:de:
                    85:24:cf:f6:ae:89:f0:c6:88:1b:fe:a1:a7:40:7b:
                    a9:25:5a:a8:8e:d7:84:d1:ac:76:c1:8b:d7:15:19:
                    6e:4f:27:db:58:0e:08:2d:88:c1:3b:cc:84:77:97:
                    43:60:ae:52:6f:59:62:2e:e1:63:9f:d5:9b:32:94:
                    3a:e3:c0:30:d0:bc:66:0d:02:85:ca:d2:3c:d7:0e:
                    53:66:1a:82:c6:c8:e5:10:34:8f:6c:0a:41:5d:22:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:98:29:7D:67:DC:1B:3D:8D:D0:55:58:20:14:4E:F5:E2:6F:53:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a22c5c03-8773-31da-a086-314c391b6fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7f:f2:41:21:00:2c:c1:83:79:43:4b:ae:9c:a4:f6:8c:e9:
         56:25:7b:52:84:88:21:90:1d:3b:81:20:b4:94:96:fb:c4:8d:
         63:09:26:12:53:f6:2a:2a:80:5d:06:9a:dc:ec:da:da:a5:11:
         4c:71:f5:4b:8f:4f:93:d7:13:48:14:05:59:99:31:4c:d2:3e:
         e2:40:43:22:ee:d1:79:cf:92:9d:a3:21:3f:0f:63:d9:3c:37:
         7e:9e:94:59:ef:cd:0f:b3:e0:fa:2e:3c:fa:de:b0:dd:5b:ca:
         7a:01:84:5e:b7:bd:ed:92:7a:64:10:89:ce:a4:8b:9c:88:33:
         ba:77:30:d4:07:21:ab:c9:ae:07:3b:8b:af:f0:67:06:75:60:
         9d:c8:16:65:cd:36:89:4d:b2:1f:30:c6:e6:da:ee:5f:0e:9b:
         e6:97:58:f9:b1:5a:87:b1:7e:77:51:d6:1a:d1:0f:f5:50:b2:
         3b:a0:46:90:29:38:c5:13:f3:9f:54:e6:85:51:a3:d2:7e:58:
         40:bd:2a:e3:5b:12:29:10:3a:3b:91:0b:81:63:28:cf:bf:75:
         d5:34:01:76:41:6b:88:07:e2:ac:84:05:05:a0:f4:d6:d4:24:
         b1:db:2c:36:43:b6:98:46:4f:f2:5c:fb:1e:0d:c0:74:2f:45:
         c0:fd:41:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLGKWbqvv8lTeVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
NDliYWRjZWEtYzQ5Ni00NzJkLTgwNzktMjcyNTkyZGRlOWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhsFDTcYh2YYFdnVDYXY2tYO6NufDSm3NtnE
NdyrbSisgN9Dpjm0lxUacJNYItMhOmq5LzgE7PSTkPB4pFINL2l80zjutm+Bt2bD
yzVf96hUhrtraA4HQJoV/FYNR5tPAyeRzqPCUPmKtHRCg2JDQ5zbp9HGeK+bqnaA
+F3QSiMEIYXHQRXJEdRSzzM//sQRxpB4+/myBTKsq+sSvdtdogacFt6FJM/2ronw
xogb/qGnQHupJVqojteE0ax2wYvXFRluTyfbWA4ILYjBO8yEd5dDYK5Sb1liLuFj
n9WbMpQ648Aw0LxmDQKFytI81w5TZhqCxsjlEDSPbApBXSJ1QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOGYKX1n3Bs9jdBVWCAUTvXib1OPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYTIyYzVjMDMtODc3My0z
MWRhLWEwODYtMzE0YzM5MWI2ZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnxLcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAd/8kEhACzBg3lDS66cpPaM6VYle1KEiCGQHTuBILSUlvvEjWMJJhJT
9ioqgF0Gmtzs2tqlEUxx9UuPT5PXE0gUBVmZMUzSPuJAQyLu0XnPkp2jIT8PY9k8
N36elFnvzQ+z4PouPPresN1bynoBhF63ve2SemQQic6ki5yIM7p3MNQHIavJrgc7
i6/wZwZ1YJ3IFmXNNolNsh8wxuba7l8Om+aXWPmxWoexfndR1hrRD/VQsjugRpAp
OMUT859U5oVRo9J+WEC9KuNbEikQOjuRC4FjKM+/ddU0AXZBa4gH4qyEBQWg9NbU
JLHbLDZDtphGT/Jc+x4NwHQvRcD9QRw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:36:32 2025 by rpki-client