Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c8dc0e3f-e6a9-3d91-9951-a9ea77807689.roa
File:                     c8dc0e3f-e6a9-3d91-9951-a9ea77807689.roa (raw, json)
Hash identifier:          3DvC/KOCRLsPzOBS25Myu/HbnA1RpQvcgeXRDG5Cbx4=
Subject key identifier:   6F:45:44:B2:9F:4B:A6:95:C3:03:AA:F3:10:ED:F9:62:B8:AB:33:26
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F718DB006E11E46FEA60
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c8dc0e3f-e6a9-3d91-9951-a9ea77807689.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        167.82.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f7:18:db:00:6e:11:e4:6f:ea:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=60e1d6d1-d785-4727-8a98-1e8cb2a72a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1c:2c:63:8e:c9:b5:f5:bc:a0:81:28:b2:2d:
                    39:24:2e:f4:0e:71:94:6a:9e:c6:19:aa:5f:27:a8:
                    f0:97:34:a8:50:90:da:9c:32:93:d5:0f:c4:d5:60:
                    a1:0f:6a:ba:eb:70:c2:1c:cd:58:4f:2d:b0:24:7f:
                    66:7c:18:58:18:f8:b2:81:f3:c0:01:ea:22:f7:ee:
                    7f:ee:bf:92:f0:c7:5e:a5:9f:e4:43:41:56:7f:8e:
                    7c:8e:7b:7f:8b:d7:c6:7c:2b:c7:6e:75:62:3a:e3:
                    c9:c8:b4:b6:03:d1:ee:64:e6:c1:c4:a0:7f:54:f0:
                    f7:27:25:54:b0:d5:40:4f:e9:3d:a5:c9:7b:02:fa:
                    7d:e2:16:e2:23:9f:0d:81:50:15:3b:d8:4d:e0:06:
                    11:a8:af:7e:08:86:81:b1:23:6b:55:7a:66:68:4a:
                    03:24:39:fb:73:8c:aa:d9:4b:77:3c:97:eb:ea:62:
                    16:a6:64:4a:77:1b:50:aa:73:cc:c1:1d:db:43:63:
                    19:5b:bb:4a:5f:5b:5b:dd:43:a2:57:33:be:76:b3:
                    d4:22:0c:ab:77:2b:b9:b0:84:3a:75:e7:ba:03:e8:
                    13:0a:47:1f:f8:0d:4b:35:37:77:0c:67:96:a1:78:
                    fb:a4:fe:fd:15:d1:ac:0e:64:a0:9f:65:b1:d9:9c:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:45:44:B2:9F:4B:A6:95:C3:03:AA:F3:10:ED:F9:62:B8:AB:33:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c8dc0e3f-e6a9-3d91-9951-a9ea77807689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.82.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:46:e9:ab:27:e4:34:39:8f:91:b8:2b:d5:c5:8f:a1:5b:40:
         2e:ed:ab:9d:4e:68:c2:2b:04:75:e6:8e:cb:c5:2e:2b:1d:e8:
         e1:29:ca:8f:d1:d6:5c:1e:8a:85:22:63:04:98:fe:e1:ca:bd:
         11:9d:bc:3a:07:20:90:7f:68:7e:6a:76:85:d5:ba:3a:f1:9a:
         a9:69:c5:7a:c6:ae:05:78:20:fa:70:8e:43:dd:af:18:8b:b6:
         1d:b7:ed:f3:d5:57:0f:4f:09:62:a8:13:93:12:1d:b4:88:80:
         01:9d:d2:a7:2c:18:5b:7a:80:be:37:cf:7a:d1:99:88:14:4d:
         14:14:6b:db:e1:cb:36:6f:f6:2a:11:2c:d7:91:55:fe:27:93:
         3e:d0:55:18:78:1d:e7:78:77:e2:98:6f:ae:0e:18:ff:29:dd:
         a0:61:72:34:43:40:a1:3d:ab:65:1d:52:88:ee:c6:f0:7d:a8:
         48:d3:36:0a:8f:87:61:d5:89:85:30:3a:f1:d1:df:e0:80:98:
         1a:e9:0f:80:f4:c0:26:22:8b:87:fc:91:fd:86:fb:aa:8b:65:
         3b:a9:57:05:cc:57:88:9e:28:8c:e5:53:e0:c4:51:36:c0:49:
         5b:38:26:12:f1:b5:eb:6a:a8:6e:7f:7f:0f:8b:ec:59:63:62:
         23:c8:3c:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vcY2wBuEeRv6mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
NjBlMWQ2ZDEtZDc4NS00NzI3LThhOTgtMWU4Y2IyYTcyYThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBwsY47JtfW8oIEosi05JC70DnGUap7GGapf
J6jwlzSoUJDanDKT1Q/E1WChD2q663DCHM1YTy2wJH9mfBhYGPiygfPAAeoi9+5/
7r+S8MdepZ/kQ0FWf458jnt/i9fGfCvHbnViOuPJyLS2A9HuZObBxKB/VPD3JyVU
sNVAT+k9pcl7Avp94hbiI58NgVAVO9hN4AYRqK9+CIaBsSNrVXpmaEoDJDn7c4yq
2Ut3PJfr6mIWpmRKdxtQqnPMwR3bQ2MZW7tKX1tb3UOiVzO+drPUIgyrdyu5sIQ6
dee6A+gTCkcf+A1LNTd3DGeWoXj7pP79FdGsDmSgn2Wx2ZwchwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9FRLKfS6aVwwOq8xDt+WK4qzMmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYzhkYzBlM2YtZTZhOS0z
ZDkxLTk5NTEtYTllYTc3ODA3Njg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp1JYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJG6asn5DQ5j5G4K9XFj6FbQC7tq51OaMIrBHXmjsvFLisd6OEpyo/R
1lweioUiYwSY/uHKvRGdvDoHIJB/aH5qdoXVujrxmqlpxXrGrgV4IPpwjkPdrxiL
th237fPVVw9PCWKoE5MSHbSIgAGd0qcsGFt6gL43z3rRmYgUTRQUa9vhyzZv9ioR
LNeRVf4nkz7QVRh4Hed4d+KYb64OGP8p3aBhcjRDQKE9q2UdUojuxvB9qEjTNgqP
h2HViYUwOvHR3+CAmBrpD4D0wCYii4f8kf2G+6qLZTupVwXMV4ieKIzlU+DEUTbA
SVs4JhLxtetqqG5/fw+L7FljYiPIPJ0=
-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:07 2025 by rpki-client