Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/6c49595c-1616-3a49-a142-78e4d88c3f6c.roa
File:                     6c49595c-1616-3a49-a142-78e4d88c3f6c.roa (raw, json)
Hash identifier:          KPTcIT4gManTvWR42AJW+++MB4OviBFvH2DMOGnHngY=
Subject key identifier:   1B:26:06:79:3E:43:5C:62:43:6D:9D:51:F2:B9:D9:A6:40:49:0F:7B
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F4328584B63674B2760D8C6A54D88CA00
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/6c49595c-1616-3a49-a142-78e4d88c3f6c.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     400967
IP address blocks:        45.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:4b:27:60:d8:c6:a5:4d:88:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=8c82f882-442e-483a-a832-b211d69ba2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:22:7c:3e:1c:7d:28:16:1a:d3:6c:ae:48:5f:
                    70:8d:dc:8f:12:4c:73:e8:1b:77:a5:c2:7f:4a:04:
                    2b:e7:98:24:d2:d8:74:23:ed:e8:69:b4:ee:c9:b5:
                    c2:18:e7:da:19:23:ae:e0:62:32:4a:5b:01:21:eb:
                    d4:c8:01:e4:b6:0d:e1:ee:d9:ab:e9:7d:38:09:78:
                    f3:85:ba:8f:3c:5e:a0:65:d1:5e:d1:81:93:d7:c6:
                    44:dd:2d:c6:80:01:6d:8f:b2:cd:c0:e3:12:f4:6e:
                    cd:0b:32:5f:44:90:d2:94:6c:be:65:a8:ac:43:ce:
                    ab:b5:fb:e9:75:89:23:f5:ec:6c:ea:64:e9:84:8e:
                    1d:3f:f8:f6:4f:ef:e9:6a:05:de:ac:41:c1:7b:ad:
                    44:a1:b5:5e:65:d3:5f:83:55:d3:1c:41:0f:57:fb:
                    e5:13:21:ae:62:23:35:a9:48:03:44:17:da:62:40:
                    b2:6c:5f:7e:71:0e:c3:d3:f1:79:40:a1:d7:72:7e:
                    be:6a:73:70:dc:48:d4:7c:2b:bd:d9:59:3c:0b:4e:
                    22:8b:09:f2:77:d4:4e:ce:9c:c3:da:43:7f:c4:95:
                    a7:d0:18:0d:f2:9d:c6:21:03:e4:94:1b:56:d2:44:
                    49:a4:aa:fe:19:20:fb:e4:b1:78:d7:e9:02:d3:39:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:26:06:79:3E:43:5C:62:43:6D:9D:51:F2:B9:D9:A6:40:49:0F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/6c49595c-1616-3a49-a142-78e4d88c3f6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e6:18:29:99:e4:e3:a3:9f:16:a8:70:29:54:eb:0b:0c:e2:
         31:0b:57:49:f6:e7:57:38:c0:69:9c:a3:18:c3:71:16:ef:f2:
         7c:7e:f1:fe:83:2c:8f:dd:f2:1b:f8:68:e3:0a:3f:87:5a:07:
         37:10:65:72:e9:d9:50:9e:6f:76:6b:f1:2f:f4:df:58:0a:d6:
         2f:04:e3:e3:0f:0b:6f:91:42:01:0b:4e:b2:05:51:76:55:17:
         22:9c:bd:e3:82:0c:5a:5e:14:32:97:e0:d2:29:05:a7:e1:07:
         7c:93:23:04:32:19:84:f0:93:66:8d:76:12:d8:06:84:65:7c:
         01:62:15:9c:fc:d9:73:a1:d0:ed:7f:24:46:ff:ec:a2:a4:67:
         1f:7f:4f:3e:f2:ce:3e:20:86:0f:c4:dd:d8:e3:f7:0d:21:70:
         55:52:2e:e0:7c:79:0a:eb:07:ce:f8:7c:da:8b:80:24:a3:30:
         e4:b8:86:a4:ac:65:5b:b1:09:dd:4f:f1:43:9d:1c:7f:4e:c4:
         df:0d:80:09:d6:c0:42:7e:73:47:cd:6e:3c:20:5a:a9:90:0b:
         46:bc:95:cb:1f:bf:57:42:00:aa:77:5b:34:c1:e7:10:9c:da:
         65:2d:3c:1a:e9:5f:ae:fe:05:37:c4:71:05:3f:70:d1:6b:d6:
         20:eb:27:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0snYNjGpU2IygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWU4ZWQ5NTAtNDQ4OC00OWIxLThkMzktYmI4YzcxYTc2
N2QyMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk
OGM4MmY4ODItNDQyZS00ODNhLWE4MzItYjIxMWQ2OWJhMmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yJ8Phx9KBYa02yuSF9wjdyPEkxz6Bt3pcJ/
SgQr55gk0th0I+3oabTuybXCGOfaGSOu4GIySlsBIevUyAHktg3h7tmr6X04CXjz
hbqPPF6gZdFe0YGT18ZE3S3GgAFtj7LNwOMS9G7NCzJfRJDSlGy+ZaisQ86rtfvp
dYkj9exs6mTphI4dP/j2T+/pagXerEHBe61EobVeZdNfg1XTHEEPV/vlEyGuYiM1
qUgDRBfaYkCybF9+cQ7D0/F5QKHXcn6+anNw3EjUfCu92Vk8C04iiwnyd9ROzpzD
2kN/xJWn0BgN8p3GIQPklBtW0kRJpKr+GSD75LF41+kC0zko+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsmBnk+Q1xiQ22dUfK52aZASQ97MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThl
ZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhjNzFhNzY3ZDIvNmM0OTU5NWMtMTYxNi0z
YTQ5LWExNDItNzhlNGQ4OGMzZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWU4ZWQ5NTAtNDQ4OC00OWIxLThk
MzktYmI4YzcxYTc2N2QyLzllOGVkOTUwLTQ0ODgtNDliMS04ZDM5LWJiOGM3MWE3
NjdkMi5jcmwwHwYDVR0jBBgwFoAUJhbbhZB9FA+mCJFa84xIt9zz1B8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZThlZDk1MC00NDg4LTQ5YjEtOGQzOS1iYjhj
NzFhNzY3ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSquMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfmGCmZ5OOjnxaocClU6wsM4jELV0n251c4wGmcoxjDcRbv8nx+8f6D
LI/d8hv4aOMKP4daBzcQZXLp2VCeb3Zr8S/031gK1i8E4+MPC2+RQgELTrIFUXZV
FyKcveOCDFpeFDKX4NIpBafhB3yTIwQyGYTwk2aNdhLYBoRlfAFiFZz82XOh0O1/
JEb/7KKkZx9/Tz7yzj4ghg/E3djj9w0hcFVSLuB8eQrrB874fNqLgCSjMOS4hqSs
ZVuxCd1P8UOdHH9OxN8NgAnWwEJ+c0fNbjwgWqmQC0a8lcsfv1dCAKp3WzTB5xCc
2mUtPBrpX67+BTfEcQU/cNFr1iDrJ1w=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:34:44 2025 by rpki-client