Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa
File:                     25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa (raw, json)
Hash identifier:          7FIBsLIgvBjdhAijZmYqet9aaOODZofgc9Ql6GsCUXQ=
Subject key identifier:   77:BA:10:B1:0C:99:53:DD:3A:DE:6C:8C:36:57:A7:DB:5A:99:88:E8
Certificate issuer:       /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial:       010D0C9F4328584B1F01737E71BB39673CFE4B80
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        162.249.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:73:7e:71:bb:39:67:3c:fe:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=cbfd1e6b-6f1b-4b75-ac3d-711cfbcedf72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:c1:bd:bf:8f:da:a0:b1:fe:6a:f5:fa:ab:
                    eb:99:99:48:e6:7e:7a:29:11:8b:51:65:d6:d6:49:
                    24:d2:13:74:ca:67:ae:9e:d3:fe:87:fa:7a:a4:13:
                    a7:a8:c7:16:3d:d1:eb:d7:36:56:16:da:b2:e4:f4:
                    da:1c:23:ab:d8:20:c6:0b:cd:7e:ff:bc:56:e0:38:
                    88:85:66:66:0e:13:10:46:19:cf:74:bb:b0:c2:0c:
                    a5:4a:2b:c0:72:92:38:87:2e:21:55:fe:74:36:49:
                    15:61:40:29:89:17:12:16:90:69:1a:0b:00:a1:8b:
                    41:7b:f1:ab:28:4b:16:91:4e:3f:da:a1:91:de:70:
                    65:89:64:b3:59:fd:03:62:76:4e:79:9f:74:ae:c8:
                    9f:ab:a3:88:65:a5:ce:e3:d2:7c:a0:ec:7e:0e:01:
                    9e:a0:0f:21:04:a4:f0:28:86:9d:d6:1d:ae:ee:3f:
                    04:48:7b:ae:24:88:5e:d4:a5:39:70:17:16:78:86:
                    56:ed:a9:4d:15:49:29:47:ef:4a:cd:af:63:02:64:
                    e2:5b:d7:bd:6a:15:26:5c:3a:c6:f5:cb:75:7b:45:
                    f8:52:08:0d:69:c4:bf:6f:c4:78:d8:ed:1f:57:33:
                    05:cf:19:0a:67:cc:85:61:03:89:77:fd:a9:47:95:
                    63:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BA:10:B1:0C:99:53:DD:3A:DE:6C:8C:36:57:A7:DB:5A:99:88:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/25ede160-20d7-3484-9dfe-61c3ae3ce8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:24:cc:f7:8a:68:63:de:49:a1:91:5d:bb:e2:23:90:12:5f:
         85:23:19:f0:38:5d:c3:68:b5:bc:ca:ae:d7:1c:ef:63:60:b6:
         2d:f6:73:b4:28:3e:36:6a:ff:6c:9c:f0:80:7f:e5:25:b8:c7:
         68:91:32:41:85:67:f4:df:ed:a1:89:59:8e:a0:f8:cb:a8:7e:
         ac:7d:4b:25:84:44:4b:8b:ea:64:fa:df:2a:8d:c3:dc:70:65:
         12:18:01:39:8e:60:f8:ab:13:71:f0:e6:0f:f2:d2:c0:81:8d:
         02:8e:81:00:e6:5d:f1:db:70:04:ef:39:71:3b:b9:a4:84:bb:
         25:17:e6:39:b7:f6:1b:83:0f:e9:cb:e0:68:1d:8c:20:cf:cd:
         90:e7:cf:1b:07:be:18:ea:3d:1a:06:51:ea:6d:a5:26:a5:02:
         5f:54:f4:67:2f:53:ab:f0:ff:59:63:54:1e:f4:7c:0c:3a:8a:
         23:d2:79:23:a8:c9:24:33:20:02:63:c1:48:27:1b:66:42:71:
         5e:2d:d7:dc:86:2e:16:02:20:18:8c:fb:6a:56:4b:6d:d6:05:
         1a:b3:95:0d:42:85:8f:fb:cb:db:3e:ad:d5:a5:6c:82:d3:c3:
         97:63:05:f7:24:77:54:55:ce:41:50:18:4a:e6:72:c5:04:03:
         32:75:2f:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXN+cbs5Zzz+S4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc4MjMyNjUtOTk0OS00MDMwLWJlMDktNWFlYmRmNzdh
ZTVjMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
Y2JmZDFlNmItNmYxYi00Yjc1LWFjM2QtNzExY2ZiY2VkZjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5XBvb+P2qCx/mr1+qvrmZlI5n56KRGLUWXW
1kkk0hN0ymeuntP+h/p6pBOnqMcWPdHr1zZWFtqy5PTaHCOr2CDGC81+/7xW4DiI
hWZmDhMQRhnPdLuwwgylSivAcpI4hy4hVf50NkkVYUApiRcSFpBpGgsAoYtBe/Gr
KEsWkU4/2qGR3nBliWSzWf0DYnZOeZ90rsifq6OIZaXO49J8oOx+DgGeoA8hBKTw
KIad1h2u7j8ESHuuJIhe1KU5cBcWeIZW7alNFUkpR+9Kza9jAmTiW9e9ahUmXDrG
9ct1e0X4UggNacS/b8R42O0fVzMFzxkKZ8yFYQOJd/2pR5VjuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHe6ELEMmVPdOt5sjDZXp9tamYjoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81Nzgy
MzI2NS05OTQ5LTQwMzAtYmUwOS01YWViZGY3N2FlNWMvMjVlZGUxNjAtMjBkNy0z
NDg0LTlkZmUtNjFjM2FlM2NlOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTc4MjMyNjUtOTk0OS00MDMwLWJl
MDktNWFlYmRmNzdhZTVjLzU3ODIzMjY1LTk5NDktNDAzMC1iZTA5LTVhZWJkZjc3
YWU1Yy5jcmwwHwYDVR0jBBgwFoAUHG1H2rSN5+TXiWF7twW92xQQZPUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzgyMzI2NS05OTQ5LTQwMzAtYmUwOS01YWVi
ZGY3N2FlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovl1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMkzPeKaGPeSaGRXbviI5ASX4UjGfA4XcNotbzKrtcc72Ngti32c7Qo
PjZq/2yc8IB/5SW4x2iRMkGFZ/Tf7aGJWY6g+Muofqx9SyWEREuL6mT63yqNw9xw
ZRIYATmOYPirE3Hw5g/y0sCBjQKOgQDmXfHbcATvOXE7uaSEuyUX5jm39huDD+nL
4GgdjCDPzZDnzxsHvhjqPRoGUeptpSalAl9U9GcvU6vw/1ljVB70fAw6iiPSeSOo
ySQzIAJjwUgnG2ZCcV4t19yGLhYCIBiM+2pWS23WBRqzlQ1ChY/7y9s+rdWlbILT
w5djBfckd1RVzkFQGErmcsUEAzJ1L/I=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:45:23 2025 by rpki-client