Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/061348a2-718a-3f0e-aadf-22705c6c3f7e.roa
File:                     061348a2-718a-3f0e-aadf-22705c6c3f7e.roa (raw, json)
Hash identifier:          yyGjyjyYdZa5hqv0+qHZPCRShho/3BCdBYn7Bhsrn4E=
Subject key identifier:   D9:C2:65:4E:35:AD:8F:94:DB:20:43:7A:50:91:EA:D3:81:59:49:EA
Certificate issuer:       /CN=d583dbef-fd91-4a47-a2e9-6fab66d8dd4b
Certificate serial:       010D0C9F4328584B5141BB936348E56D6384FFC0
Authority key identifier: 6D:E8:6E:80:1C:21:D1:8C:28:12:67:4E:6E:36:58:55:6C:67:33:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/061348a2-718a-3f0e-aadf-22705c6c3f7e.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        198.144.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:bb:93:63:48:e5:6d:63:84:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d583dbef-fd91-4a47-a2e9-6fab66d8dd4b
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=9b5dd245-63a0-4d0e-b0f0-08a6d1380117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:8f:fc:fa:06:3c:94:10:1e:91:03:42:c7:
                    d3:b4:58:34:26:7c:d0:8e:df:c3:7b:ae:e2:4e:39:
                    83:9d:3c:0f:cb:61:a0:40:5b:b8:49:c2:4c:1c:05:
                    c4:2d:2e:6b:b8:5d:22:64:74:08:fa:94:77:cc:3a:
                    61:d4:ef:f1:2e:c4:22:f0:9b:16:44:de:93:1d:05:
                    ff:08:ea:9c:39:87:73:ab:4d:9f:00:fd:c4:f7:b7:
                    9e:18:8c:a0:dd:59:dd:ec:4e:2b:bb:82:cc:f7:3e:
                    e4:5c:3c:26:49:90:1e:18:cf:1e:9c:e7:86:a6:de:
                    56:c1:74:47:27:5a:aa:4e:3f:f4:65:ca:42:64:34:
                    9c:53:63:eb:53:2e:b2:c0:b5:e0:76:e7:6a:6a:eb:
                    42:20:47:0c:f1:ab:06:2f:ad:80:63:51:30:ec:07:
                    84:af:67:11:b1:fb:79:7d:9d:55:a3:72:ca:94:cb:
                    2e:99:89:e1:5b:1a:af:b3:36:1b:ca:e9:54:06:c1:
                    d7:92:cf:ab:ff:4e:08:33:b0:c9:37:16:b8:9a:3a:
                    6f:66:15:dc:07:ac:be:f5:3a:25:40:7d:2c:e7:dc:
                    7c:43:88:d0:9a:e5:ff:03:e5:a3:63:65:7d:2e:99:
                    f0:28:a1:47:25:75:8c:f5:72:a4:a1:82:1f:d6:ca:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C2:65:4E:35:AD:8F:94:DB:20:43:7A:50:91:EA:D3:81:59:49:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/061348a2-718a-3f0e-aadf-22705c6c3f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:E8:6E:80:1C:21:D1:8C:28:12:67:4E:6E:36:58:55:6C:67:33:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d583dbef-fd91-4a47-a2e9-6fab66d8dd4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.144.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:95:41:05:ce:e9:f8:a8:47:2f:ab:9d:4b:e0:96:1d:1f:34:
         a0:56:2f:ea:bf:96:97:98:0b:45:ef:bf:1e:41:65:f0:a4:18:
         ba:14:39:b0:df:f6:db:9b:cc:d1:31:e9:da:dc:5b:58:91:57:
         91:f5:9c:62:58:a0:64:1b:49:94:d0:a6:01:f8:04:ba:ad:c6:
         42:c0:39:3e:93:81:a4:98:86:30:02:18:fe:09:30:bb:f1:a1:
         b3:39:85:7e:25:ed:4c:1a:25:3e:e0:85:d1:ac:a0:72:22:a9:
         f8:96:de:9d:3d:c8:3f:61:0a:72:84:95:83:28:b1:37:ed:b5:
         4d:ae:13:d7:0e:70:30:8e:68:75:24:1c:71:65:91:54:fb:ca:
         01:f0:27:3c:73:07:7e:d9:33:a8:5d:98:48:d8:ce:9b:78:2e:
         77:1f:63:03:e9:48:8f:c8:da:c8:2d:e1:90:32:c6:a8:a9:96:
         9b:7b:38:c6:f7:18:54:53:ff:27:f3:c4:e6:99:a1:6e:00:b4:
         de:55:a9:60:cf:bc:f0:fc:c2:56:94:ac:a5:ce:14:e5:15:ea:
         66:a3:15:2b:61:d3:7b:2e:6c:54:7b:7b:98:15:59:29:4b:4e:
         0b:46:b8:a3:82:97:3e:63:ac:7b:80:0d:ad:a6:36:f7:62:45:
         73:26:d3:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbuTY0jlbWOE/8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDU4M2RiZWYtZmQ5MS00YTQ3LWEyZTktNmZhYjY2ZDhk
ZDRiMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
OWI1ZGQyNDUtNjNhMC00ZDBlLWIwZjAtMDhhNmQxMzgwMTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4CP/PoGPJQQHpEDQsfTtFg0JnzQjt/De67i
TjmDnTwPy2GgQFu4ScJMHAXELS5ruF0iZHQI+pR3zDph1O/xLsQi8JsWRN6THQX/
COqcOYdzq02fAP3E97eeGIyg3Vnd7E4ru4LM9z7kXDwmSZAeGM8enOeGpt5WwXRH
J1qqTj/0ZcpCZDScU2PrUy6ywLXgdudqautCIEcM8asGL62AY1Ew7AeEr2cRsft5
fZ1Vo3LKlMsumYnhWxqvszYbyulUBsHXks+r/04IM7DJNxa4mjpvZhXcB6y+9Tol
QH0s59x8Q4jQmuX/A+WjY2V9LpnwKKFHJXWM9XKkoYIf1srrJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnCZU41rY+U2yBDelCR6tOBWUnqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNTgz
ZGJlZi1mZDkxLTRhNDctYTJlOS02ZmFiNjZkOGRkNGIvMDYxMzQ4YTItNzE4YS0z
ZjBlLWFhZGYtMjI3MDVjNmMzZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDU4M2RiZWYtZmQ5MS00YTQ3LWEy
ZTktNmZhYjY2ZDhkZDRiL2Q1ODNkYmVmLWZkOTEtNGE0Ny1hMmU5LTZmYWI2NmQ4
ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUbehugBwh0YwoEmdObjZYVWxnM/8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kNTgzZGJlZi1mZDkxLTRhNDctYTJlOS02ZmFi
NjZkOGRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxpAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOVQQXO6fioRy+rnUvglh0fNKBWL+q/lpeYC0Xvvx5BZfCkGLoUObDf
9tubzNEx6drcW1iRV5H1nGJYoGQbSZTQpgH4BLqtxkLAOT6TgaSYhjACGP4JMLvx
obM5hX4l7UwaJT7ghdGsoHIiqfiW3p09yD9hCnKElYMosTfttU2uE9cOcDCOaHUk
HHFlkVT7ygHwJzxzB37ZM6hdmEjYzpt4LncfYwPpSI/I2sgt4ZAyxqiplpt7OMb3
GFRT/yfzxOaZoW4AtN5VqWDPvPD8wlaUrKXOFOUV6majFSth03subFR7e5gVWSlL
TgtGuKOClz5jrHuADa2mNvdiRXMm04s=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:16:59 2025 by rpki-client