Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/f54edeac-4bda-3704-bd9d-498ce46d662b.roa
File:                     f54edeac-4bda-3704-bd9d-498ce46d662b.roa (raw, json)
Hash identifier:          /u47YZzgn36B9Jf8IvLvP7LmSam8R31w/l0ytDcYNrk=
Subject key identifier:   C2:84:36:88:A4:83:72:D9:26:29:D6:B2:69:F2:12:40:59:BE:3D:68
Certificate issuer:       /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
Certificate serial:       010D0C9F4328584B5C6C7917B386366D18E53100
Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/f54edeac-4bda-3704-bd9d-498ce46d662b.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     152705
IP address blocks:        172.98.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:79:17:b3:86:36:6d:18:e5:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=c74ed37e-1658-4dd8-a2bb-f7a04aed906b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4b:ec:de:85:cb:a7:1a:44:92:0e:e7:84:0f:
                    66:8b:be:1d:df:ad:49:e3:1a:c1:da:91:4b:fc:cd:
                    ed:8d:04:33:9e:a9:4d:92:89:8e:87:fc:29:eb:2c:
                    64:e0:b3:2d:c0:07:86:8e:70:60:6a:cf:6c:28:9e:
                    c2:48:0b:e3:8c:0e:e6:21:0d:a1:74:1c:97:b5:b9:
                    02:90:d8:81:a0:ed:96:e6:6a:75:8f:6a:84:e3:36:
                    37:23:dd:64:b4:9b:99:66:a0:af:a2:e8:41:77:55:
                    d8:f8:d5:28:dd:2c:3c:6c:33:65:bb:8e:90:3e:1e:
                    7e:d2:ea:de:84:52:d9:2b:99:4d:bf:b3:ed:1b:f1:
                    d5:8c:3c:c0:d2:93:d7:d2:bc:62:3e:0f:ae:d8:a6:
                    59:11:c5:f9:70:a0:c9:19:88:5b:21:fc:4c:b9:3c:
                    c3:b7:47:cf:de:96:48:15:86:c7:97:dd:0b:3a:53:
                    17:d5:81:ab:b4:29:ce:a9:51:d5:cc:83:a4:ff:04:
                    c6:47:2a:36:07:31:66:b8:bc:94:b1:11:14:ae:6d:
                    d8:03:83:1b:98:7b:9d:b5:c6:b7:e2:79:e1:b2:16:
                    2c:13:45:26:51:7a:97:a7:eb:c7:df:5d:6c:8e:66:
                    c5:61:92:80:87:f5:d2:c4:cc:cc:02:3d:45:9b:d6:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:84:36:88:A4:83:72:D9:26:29:D6:B2:69:F2:12:40:59:BE:3D:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/f54edeac-4bda-3704-bd9d-498ce46d662b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl

            X509v3 Authority Key Identifier:
                keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:f3:f0:02:16:97:ad:c2:a4:9e:b9:81:ad:15:06:53:06:
         ba:9d:77:f9:56:fa:a4:01:58:5e:88:a2:31:cc:5d:ef:29:c5:
         86:9b:75:d4:ed:23:9c:09:21:55:79:63:e0:cd:29:1f:df:42:
         93:d8:7a:fd:0d:c5:f3:d0:5a:90:4a:f4:5c:a6:20:78:bf:64:
         3d:25:49:94:67:8f:24:6b:5a:d8:fd:de:1c:aa:de:84:55:65:
         34:04:ee:23:03:64:db:4f:32:0b:09:17:b1:20:32:f8:9b:ed:
         7b:ff:84:3c:75:e3:67:c7:bf:ba:d5:35:01:41:fb:d7:37:87:
         4a:75:1e:a2:cd:62:60:5e:74:3a:cb:e7:30:55:c7:1a:67:4e:
         f5:a5:7e:42:c7:6c:00:df:ce:17:96:f8:1a:23:de:d3:30:67:
         5a:81:aa:18:20:9c:29:1c:67:8f:80:b6:1b:57:72:b7:b6:42:
         21:fd:10:be:bf:b5:39:56:4c:2e:d1:83:32:6f:57:97:01:e6:
         38:f3:50:07:68:8d:77:15:7c:38:36:40:05:e8:22:df:25:c2:
         af:57:51:ba:ae:43:71:c1:dd:6e:80:66:b6:fc:43:c0:e3:98:
         c7:28:60:e0:07:9b:d8:ae:d2:f7:4f:a3:23:76:2d:d4:53:ae:
         22:32:4c:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHkXs4Y2bRjlMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx
OGU1MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
Yzc0ZWQzN2UtMTY1OC00ZGQ4LWEyYmItZjdhMDRhZWQ5MDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0vs3oXLpxpEkg7nhA9mi74d361J4xrB2pFL
/M3tjQQznqlNkomOh/wp6yxk4LMtwAeGjnBgas9sKJ7CSAvjjA7mIQ2hdByXtbkC
kNiBoO2W5mp1j2qE4zY3I91ktJuZZqCvouhBd1XY+NUo3Sw8bDNlu46QPh5+0ure
hFLZK5lNv7PtG/HVjDzA0pPX0rxiPg+u2KZZEcX5cKDJGYhbIfxMuTzDt0fP3pZI
FYbHl90LOlMX1YGrtCnOqVHVzIOk/wTGRyo2BzFmuLyUsREUrm3YA4MbmHudtca3
4nnhshYsE0UmUXqXp+vH311sjmbFYZKAh/XSxMzMAj1Fm9bK9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKENoikg3LZJinWsmnyEkBZvj1oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx
ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvZjU0ZWRlYWMtNGJkYS0z
NzA0LWJkOWQtNDk4Y2U0NmQ2NjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll
YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx
MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2
OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtX8/ACFpetwqSeuYGtFQZTBrqdd/lW+qQBWF6IojHMXe8pxYabddTt
I5wJIVV5Y+DNKR/fQpPYev0NxfPQWpBK9FymIHi/ZD0lSZRnjyRrWtj93hyq3oRV
ZTQE7iMDZNtPMgsJF7EgMvib7Xv/hDx142fHv7rVNQFB+9c3h0p1HqLNYmBedDrL
5zBVxxpnTvWlfkLHbADfzheW+Boj3tMwZ1qBqhggnCkcZ4+AthtXcre2QiH9EL6/
tTlWTC7RgzJvV5cB5jjzUAdojXcVfDg2QAXoIt8lwq9XUbquQ3HB3W6AZrb8Q8Dj
mMcoYOAHm9iu0vdPoyN2LdRTriIyTFw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:58 2025 by rpki-client