Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/798b0f20-4d35-3ad6-bc80-285e18112189.roa
File:                     798b0f20-4d35-3ad6-bc80-285e18112189.roa (raw, json)
Hash identifier:          tKjS5rlpOOxIzfrVOklFrXF8rGt6bvRiyDPh7OzXUyU=
Subject key identifier:   E4:F5:30:80:55:23:66:67:59:80:08:CF:FC:7D:CB:F7:FA:DF:4D:7D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F30A2F777E45073B2980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/798b0f20-4d35-3ad6-bc80-285e18112189.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        151.101.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f3:0a:2f:77:7e:45:07:3b:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=7bc9bd35-2311-472e-ac3a-e208c2b04c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:fb:21:76:7a:43:a8:c9:1d:1f:e0:69:f6:
                    6b:39:42:76:a9:f0:a9:c9:70:a9:fd:d3:2a:ab:b4:
                    36:68:79:fc:90:8d:78:e2:f4:0b:7f:9d:00:3e:ed:
                    24:bc:cf:99:fe:ca:cd:06:da:91:80:72:99:6a:fe:
                    55:6c:19:7f:7d:57:ad:06:db:a0:95:96:b1:3e:6d:
                    5e:1c:e4:34:72:b8:80:f0:5a:14:c9:86:3e:88:c3:
                    9e:a6:71:65:63:00:dc:65:d9:f8:12:f8:9c:70:b5:
                    29:d3:53:ba:79:72:46:bb:d7:43:ee:06:fd:2e:5d:
                    c7:86:43:11:bd:08:99:95:40:32:02:49:d8:b0:05:
                    fc:54:95:07:80:47:a9:ee:66:7c:60:8d:db:02:ad:
                    5e:29:e9:8c:57:e9:53:f7:db:83:dd:4d:db:bb:4d:
                    33:74:a3:37:10:8a:0f:d0:bb:85:b8:59:50:50:34:
                    55:ff:95:5b:7a:22:f5:5f:10:43:ca:a5:7b:18:97:
                    23:d9:11:e4:7f:48:cd:ff:ac:0a:a2:12:22:7f:76:
                    73:db:b2:41:3f:02:e1:03:da:a8:f6:55:9f:bb:ae:
                    9d:ce:c4:a5:3b:2e:e3:89:19:71:df:ef:d9:b4:ca:
                    53:1e:39:d0:f2:2a:70:ff:5b:5b:0b:60:85:cb:8e:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F5:30:80:55:23:66:67:59:80:08:CF:FC:7D:CB:F7:FA:DF:4D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/798b0f20-4d35-3ad6-bc80-285e18112189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:a8:be:c6:ac:97:35:8b:7a:d4:b5:bb:d0:07:d7:ba:91:
         39:4a:ff:c0:92:72:69:55:91:16:49:92:43:33:2b:a8:06:06:
         23:bd:ce:44:b6:f6:e0:42:d2:48:1f:32:74:63:fb:94:5e:7d:
         75:4f:1f:f7:39:7a:bb:eb:6e:e8:3f:a1:1a:c6:5b:2d:e3:96:
         08:36:fc:e2:91:d4:61:79:77:34:d7:b5:59:14:0e:3f:97:b1:
         43:27:f8:6f:45:0c:88:a9:0b:00:b0:a4:d0:14:14:0e:1b:9e:
         e1:1f:ec:e0:1a:55:04:28:63:d5:30:0e:fb:38:7c:b4:00:6b:
         e2:b9:7c:19:62:98:ea:f8:58:2c:e6:98:0e:67:54:98:fa:d2:
         33:fd:ad:09:11:76:8e:e2:15:9c:29:f5:ce:0b:e9:2f:b9:c9:
         44:5b:bf:02:7c:f7:32:16:d0:71:5f:8b:bd:98:3b:85:43:6e:
         87:40:c8:73:c3:c9:98:36:8c:21:10:cf:f5:f4:2d:55:2c:00:
         fc:41:b4:55:c9:7b:af:33:4e:5e:28:78:8e:70:46:fb:81:5a:
         73:11:4f:24:04:f7:23:55:a0:78:0b:9b:15:53:3c:3e:d4:e9:
         5d:aa:30:1b:72:f8:08:bd:d1:2e:53:52:97:e2:6a:87:a0:eb:
         a9:e7:06:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vMKL3d+RQc7KYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
N2JjOWJkMzUtMjMxMS00NzJlLWFjM2EtZTIwOGMyYjA0YzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0637IXZ6Q6jJHR/gafZrOUJ2qfCpyXCp/dMq
q7Q2aHn8kI144vQLf50APu0kvM+Z/srNBtqRgHKZav5VbBl/fVetBtuglZaxPm1e
HOQ0criA8FoUyYY+iMOepnFlYwDcZdn4EviccLUp01O6eXJGu9dD7gb9Ll3HhkMR
vQiZlUAyAknYsAX8VJUHgEep7mZ8YI3bAq1eKemMV+lT99uD3U3bu00zdKM3EIoP
0LuFuFlQUDRV/5VbeiL1XxBDyqV7GJcj2RHkf0jN/6wKohIif3Zz27JBPwLhA9qo
9lWfu66dzsSlOy7jiRlx3+/ZtMpTHjnQ8ipw/1tbC2CFy46HDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOT1MIBVI2ZnWYAIz/x9y/f63019MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNzk4YjBmMjAtNGQzNS0z
YWQ2LWJjODAtMjg1ZTE4MTEyMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2UQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuLqL7GrJc1i3rUtbvQB9e6kTlK/8CScmlVkRZJkkMzK6gGBiO9zkS2
9uBC0kgfMnRj+5RefXVPH/c5ervrbug/oRrGWy3jlgg2/OKR1GF5dzTXtVkUDj+X
sUMn+G9FDIipCwCwpNAUFA4bnuEf7OAaVQQoY9UwDvs4fLQAa+K5fBlimOr4WCzm
mA5nVJj60jP9rQkRdo7iFZwp9c4L6S+5yURbvwJ89zIW0HFfi72YO4VDbodAyHPD
yZg2jCEQz/X0LVUsAPxBtFXJe68zTl4oeI5wRvuBWnMRTyQE9yNVoHgLmxVTPD7U
6V2qMBty+Ai90S5TUpfiaoeg66nnBr8=
-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:26 2025 by rpki-client