Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa
File:                     3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa (raw, json)
Hash identifier:          FCInX+aa/ukqTtDxk5dHXnjhswt/l+fpvUCeH4yoC1M=
Subject key identifier:   53:5D:A6:B0:32:19:E0:F6:0C:B8:AA:4A:00:B7:79:0E:8C:4D:3C:F4
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F4328584A84123804A8899D0E445C0880
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     38195
IP address blocks:        162.213.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:38:04:a8:89:9d:0e:44:5c:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=02219661-3d86-451c-a394-5433cd37d052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bf:9e:30:82:d7:aa:77:a1:0d:56:d7:08:da:
                    de:a5:62:c7:65:79:5f:eb:e2:7c:48:f2:a3:ad:a8:
                    73:c9:e4:52:f1:9a:75:8e:29:ed:47:a6:ec:bd:bb:
                    b9:f5:a4:5d:02:b9:e1:37:71:85:34:25:46:ae:ae:
                    c4:27:4e:1a:1d:ef:b4:04:87:63:22:3f:24:64:ad:
                    56:9a:f1:13:70:96:b2:7e:18:9c:b4:7d:55:f0:3e:
                    19:c6:15:1a:1b:d4:25:8b:cb:61:52:a5:c3:02:3d:
                    72:af:86:d8:a9:78:2a:b2:c4:01:39:00:6b:ca:06:
                    39:c1:7a:db:d1:fc:f2:4e:f2:83:d4:06:47:7a:70:
                    06:ac:9b:90:59:77:53:ac:9c:ef:bf:ec:84:c7:6f:
                    94:0b:86:f0:68:65:07:48:0e:3a:fc:a2:ae:b9:5f:
                    a1:56:55:fa:a2:6b:6d:00:77:3f:60:f4:39:3f:bd:
                    46:6e:42:84:eb:8e:bd:8d:d1:45:b8:52:10:c7:b2:
                    37:03:4d:89:b9:c2:35:02:0b:18:c6:af:e9:d3:74:
                    f1:d7:dc:70:0f:26:69:66:80:9d:8b:4a:d7:21:35:
                    a6:29:0b:54:5f:8f:eb:6b:71:4e:81:46:2e:87:b2:
                    d5:be:d4:b8:b4:8b:09:12:b8:e3:d6:e7:24:8a:81:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5D:A6:B0:32:19:E0:F6:0C:B8:AA:4A:00:B7:79:0E:8C:4D:3C:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:63:2e:06:6f:ba:39:8c:c9:58:24:6c:a4:5c:29:02:13:1b:
         66:0d:07:1a:66:ac:c8:b5:16:72:95:80:ed:b1:19:50:ba:fa:
         af:74:7c:e9:ac:e2:e9:24:c9:d7:ee:29:e6:4a:06:d2:c4:8a:
         14:58:40:df:d1:e6:af:10:c6:87:33:e7:3f:e2:0c:0b:43:5d:
         bf:f3:00:99:42:40:b1:f8:87:25:99:df:fe:a9:30:0c:04:65:
         c0:ca:0e:b1:25:77:90:e8:3a:de:62:58:35:87:b3:bd:32:af:
         b3:22:8e:b3:d3:fd:97:7c:2d:b6:3f:41:3a:3d:9b:e4:a6:9a:
         01:32:8a:5f:f5:00:9c:96:b5:7d:4d:0d:cd:75:77:a9:95:e3:
         c4:de:be:bf:db:a7:fb:d2:e1:e2:76:26:c4:98:6e:79:37:ee:
         2b:3e:53:ad:26:cb:e9:f0:2c:ec:27:97:eb:a3:8c:2d:19:44:
         fd:61:ba:75:8a:2e:06:32:16:50:0d:56:c9:80:dc:15:33:46:
         1c:57:21:af:2f:6e:45:86:97:68:16:77:2a:bf:b3:e0:78:2c:
         50:7b:06:83:69:af:1f:34:dd:da:50:0d:5a:26:44:95:78:70:
         9e:be:d7:7c:54:90:20:56:44:5e:a3:ba:33:37:d1:d2:a8:b7:
         04:e3:6e:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjgEqImdDkRcCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTg1YjA0ZmYtNDBkOS00YmY3LThkMzgtNGRlMGM1NGJi
Nzg1MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MDIyMTk2NjEtM2Q4Ni00NTFjLWEzOTQtNTQzM2NkMzdkMDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L+eMILXqnehDVbXCNrepWLHZXlf6+J8SPKj
rahzyeRS8Zp1jintR6bsvbu59aRdArnhN3GFNCVGrq7EJ04aHe+0BIdjIj8kZK1W
mvETcJayfhictH1V8D4ZxhUaG9Qli8thUqXDAj1yr4bYqXgqssQBOQBrygY5wXrb
0fzyTvKD1AZHenAGrJuQWXdTrJzvv+yEx2+UC4bwaGUHSA46/KKuuV+hVlX6omtt
AHc/YPQ5P71GbkKE6469jdFFuFIQx7I3A02JucI1AgsYxq/p03Tx19xwDyZpZoCd
i0rXITWmKQtUX4/ra3FOgUYuh7LVvtS4tIsJErjj1uckioHEkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNdprAyGeD2DLiqSgC3eQ6MTTz0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lODVi
MDRmZi00MGQ5LTRiZjctOGQzOC00ZGUwYzU0YmI3ODUvM2U1MTYxYzctMmE1YS0z
MWViLWJmMzctZTYxMjZlNTJjZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTg1YjA0ZmYtNDBkOS00YmY3LThk
MzgtNGRlMGM1NGJiNzg1L2U4NWIwNGZmLTQwZDktNGJmNy04ZDM4LTRkZTBjNTRi
Yjc4NS5jcmwwHwYDVR0jBBgwFoAU1r/j/S2QSWGv4ekJP7iPLOTjBlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lODViMDRmZi00MGQ5LTRiZjctOGQzOC00ZGUw
YzU0YmI3ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotVlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK5jLgZvujmMyVgkbKRcKQITG2YNBxpmrMi1FnKVgO2xGVC6+q90fOms
4ukkydfuKeZKBtLEihRYQN/R5q8Qxocz5z/iDAtDXb/zAJlCQLH4hyWZ3/6pMAwE
ZcDKDrEld5DoOt5iWDWHs70yr7MijrPT/Zd8LbY/QTo9m+SmmgEyil/1AJyWtX1N
Dc11d6mV48Tevr/bp/vS4eJ2JsSYbnk37is+U60my+nwLOwnl+ujjC0ZRP1hunWK
LgYyFlANVsmA3BUzRhxXIa8vbkWGl2gWdyq/s+B4LFB7BoNprx803dpQDVomRJV4
cJ6+13xUkCBWRF6jujM30dKotwTjbl4=
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:06:45 2025 by rpki-client