Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/228d9cdf-9e05-3f9c-a866-95d4f64db4ee.roa
File:                     228d9cdf-9e05-3f9c-a866-95d4f64db4ee.roa (raw, json)
Hash identifier:          iPNaMl36S/Dk5tjKcQhe7u1LOGedWPS1/ISlId+F4f8=
Subject key identifier:   D4:4B:B6:17:28:E9:AD:D0:5F:23:9A:ED:A8:2B:F3:E7:C7:44:FE:35
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C0EFD3EF880914EDF5E80
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/228d9cdf-9e05-3f9c-a866-95d4f64db4ee.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     25629
IP address blocks:        192.161.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:0e:fd:3e:f8:80:91:4e:df:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=4012dace-21c6-48e1-acd4-03f93ab5668c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:c3:f7:61:1d:1a:53:13:71:e5:0e:4e:1c:
                    d8:54:de:6d:7b:fc:0e:4d:c6:74:1a:53:f4:cd:d3:
                    f7:5d:7a:94:11:04:16:2a:80:db:40:50:78:17:12:
                    3e:b5:13:ab:55:1e:09:04:de:4c:fc:ed:05:bd:75:
                    bd:8a:0e:79:54:45:20:0c:da:69:1d:4f:dc:a8:40:
                    db:3e:ab:bb:0a:4f:d4:63:3a:32:b5:4a:e7:ce:47:
                    d6:a0:6e:b2:9f:b0:ed:ba:72:20:fe:98:e8:21:7c:
                    68:a8:42:c7:6d:93:34:a6:a2:6f:b8:ec:8a:4d:b1:
                    55:9b:95:8f:5e:45:b1:93:5a:ad:62:b8:b9:8b:0d:
                    76:37:93:0b:d8:fd:02:3a:71:4c:99:a5:5c:62:dd:
                    95:00:e8:7b:44:61:c2:b2:b0:ac:ac:a9:f2:26:4e:
                    44:1a:36:a4:c9:a9:16:54:6f:1e:7d:59:a3:bb:8c:
                    37:c1:42:aa:26:82:7e:92:a1:14:79:c5:c1:e2:fb:
                    b6:f4:65:8a:d9:75:04:56:d2:91:a7:1f:33:68:d2:
                    0d:4f:dc:8f:28:8c:35:e6:01:b0:fc:3d:27:04:1a:
                    2c:86:9c:71:69:c5:01:06:ca:d3:6b:cd:26:71:34:
                    88:af:c9:1f:58:1f:23:99:cb:da:f6:42:e9:2c:7f:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:B6:17:28:E9:AD:D0:5F:23:9A:ED:A8:2B:F3:E7:C7:44:FE:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/228d9cdf-9e05-3f9c-a866-95d4f64db4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b1:ed:a7:d8:22:25:8a:ce:2a:a3:8f:6c:e4:14:95:49:68:
         8e:8e:ed:e3:54:5c:6d:d0:82:ba:d4:5c:b6:90:86:2e:d6:62:
         88:e9:7e:3e:e4:79:0c:dc:f0:5d:5c:ba:36:1b:21:78:8b:0d:
         21:82:29:a3:7a:ec:94:fc:a4:fa:6c:a0:62:d1:75:1b:bb:b6:
         4c:e4:24:43:1f:01:31:d4:30:0a:46:ee:db:7a:df:c3:9a:7c:
         a8:40:1e:a5:3e:74:37:fb:5e:7c:53:a1:1a:17:74:a2:58:24:
         de:06:45:24:10:51:ec:2d:93:72:84:f2:61:5e:99:5f:91:2d:
         6b:73:fd:08:84:68:28:37:51:59:c6:a7:f5:6c:94:cc:fc:80:
         27:49:fd:c8:99:1e:fc:20:26:d4:9e:72:73:8f:d6:6b:c4:19:
         a2:3b:16:54:80:90:d5:76:35:e1:af:c4:e8:6e:2b:c0:de:9f:
         31:af:ce:e7:6f:70:90:fe:49:1c:50:a4:3e:3a:c0:0d:85:b5:
         a4:67:6d:33:38:c7:68:5d:4c:b7:96:3a:8f:1e:3b:5a:f3:c8:
         9d:90:72:1e:47:bc:da:11:16:57:9e:d7:f5:1c:c8:09:0a:37:
         fe:bd:aa:e0:a8:6e:6b:ac:a9:d2:c9:72:9d:2a:6b:17:b3:d2:
         e5:56:64:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfA79PviAkU7fXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
NDAxMmRhY2UtMjFjNi00OGUxLWFjZDQtMDNmOTNhYjU2NjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaPD92EdGlMTceUOThzYVN5te/wOTcZ0GlP0
zdP3XXqUEQQWKoDbQFB4FxI+tROrVR4JBN5M/O0FvXW9ig55VEUgDNppHU/cqEDb
Pqu7Ck/UYzoytUrnzkfWoG6yn7DtunIg/pjoIXxoqELHbZM0pqJvuOyKTbFVm5WP
XkWxk1qtYri5iw12N5ML2P0COnFMmaVcYt2VAOh7RGHCsrCsrKnyJk5EGjakyakW
VG8efVmju4w3wUKqJoJ+kqEUecXB4vu29GWK2XUEVtKRpx8zaNINT9yPKIw15gGw
/D0nBBoshpxxacUBBsrTa80mcTSIr8kfWB8jmcva9kLpLH9YawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRLthco6a3QXyOa7agr8+fHRP41MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvMjI4ZDljZGYtOWUwNS0z
ZjljLWE4NjYtOTVkNGY2NGRiNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwKFIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFCx7afYIiWKziqjj2zkFJVJaI6O7eNUXG3QgrrUXLaQhi7WYojpfj7k
eQzc8F1cujYbIXiLDSGCKaN67JT8pPpsoGLRdRu7tkzkJEMfATHUMApG7tt638Oa
fKhAHqU+dDf7XnxToRoXdKJYJN4GRSQQUewtk3KE8mFemV+RLWtz/QiEaCg3UVnG
p/VslMz8gCdJ/ciZHvwgJtSecnOP1mvEGaI7FlSAkNV2NeGvxOhuK8DenzGvzudv
cJD+SRxQpD46wA2FtaRnbTM4x2hdTLeWOo8eO1rzyJ2Qch5HvNoRFlee1/UcyAkK
N/69quCobmusqdLJcp0qaxez0uVWZK8=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:25:29 2025 by rpki-client