Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/a2c05db2-f3d8-3301-bf77-c015351fe8fa.roa
File:                     a2c05db2-f3d8-3301-bf77-c015351fe8fa.roa (raw, json)
Hash identifier:          Wg5kN70gV7xUMiUlUfevrB2Yq5AXe1YPbUI/2Fob/L0=
Subject key identifier:   C4:59:70:19:23:AE:3F:FF:B1:92:95:6B:3F:74:C5:12:91:9F:3D:F7
Certificate issuer:       /CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
Certificate serial:       010D0C9F4328584B153C25B3045FB190D3912CC0
Authority key identifier: 92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/a2c05db2-f3d8-3301-bf77-c015351fe8fa.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     18659
IP address blocks:        64.57.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:25:b3:04:5f:b1:90:d3:91:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=261c339b-b883-4f4c-a1dd-9163c17a5245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5a:65:7d:a6:1a:28:93:77:6e:67:e0:a3:e8:
                    55:b8:30:56:88:04:f7:70:76:b0:c1:06:6a:35:bb:
                    47:cb:7b:05:65:99:d8:7b:71:e5:63:b5:dd:77:49:
                    85:26:8a:cc:90:f6:ae:c1:e4:13:30:ee:74:b9:00:
                    59:53:04:35:5a:4f:6d:68:2d:6d:4c:d8:ef:7f:3f:
                    63:ca:93:77:a1:60:cd:a2:d3:df:21:f8:36:48:b4:
                    6e:5f:70:36:c8:d3:41:a9:fd:75:c3:a1:cb:6f:32:
                    cb:6c:05:76:62:63:42:92:91:74:d0:3c:82:1d:3e:
                    f9:9c:43:7f:15:7a:1d:07:af:91:45:29:f0:7b:c3:
                    74:8a:15:74:a3:d6:17:e5:d1:a5:70:b1:85:b4:8e:
                    80:ea:7c:65:cf:f5:93:f7:0a:91:a0:6a:34:18:c5:
                    e7:2f:42:f7:4e:14:62:84:c1:8c:89:4c:59:e9:16:
                    71:42:9d:f9:fb:46:aa:f0:b4:36:a4:3a:89:7b:04:
                    f5:7b:3c:8d:62:a8:05:da:57:6d:c3:66:9c:b9:95:
                    3d:f4:33:20:68:24:9a:a3:fa:41:62:10:32:ef:1d:
                    cd:1d:5c:9e:98:6a:63:99:d6:d9:7f:f9:45:bb:d0:
                    6a:64:19:60:e6:95:e6:7f:b3:63:2b:9e:7d:0f:5f:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:59:70:19:23:AE:3F:FF:B1:92:95:6B:3F:74:C5:12:91:9F:3D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/a2c05db2-f3d8-3301-bf77-c015351fe8fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl

            X509v3 Authority Key Identifier:
                keyid:92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:22:6d:5e:63:2c:6c:27:07:c4:6f:cc:ed:06:fa:94:5e:37:
         58:01:1a:1e:0f:c9:13:3e:21:24:2c:03:3f:d5:54:ea:3f:90:
         87:d1:d6:65:c3:6e:52:21:1d:d0:b7:21:58:d0:78:08:75:73:
         f0:34:38:12:34:db:25:cc:fe:ac:af:20:7f:97:26:be:81:54:
         09:9e:9b:4d:96:14:4b:28:8f:2c:8c:e8:c7:2f:e3:88:61:4f:
         a0:f5:68:d3:fc:23:11:6a:bd:1b:7f:78:38:a4:18:de:19:5c:
         63:5a:99:80:5b:b0:ad:a5:95:8a:a9:e2:8f:79:04:62:dd:42:
         e4:f8:b4:07:51:4a:ac:cb:44:54:da:34:d3:20:3f:29:2e:b5:
         86:03:c2:72:f0:c7:fc:69:40:30:00:2a:bf:2e:98:31:e3:3d:
         6f:a3:cd:6e:a2:04:42:67:b4:1e:b5:71:af:95:d2:5d:79:6c:
         9c:0c:3a:d1:3b:bd:f5:b4:40:8e:8f:e6:35:5f:69:b3:29:1b:
         37:ea:2f:f6:1e:4c:bf:0d:1f:fa:5e:e8:90:61:87:15:dc:32:
         b2:06:8b:0c:a5:30:f9:71:93:8f:66:23:3a:d2:e0:ca:b1:c2:
         f3:f4:f8:a2:21:c4:49:05:ae:88:1e:60:71:17:5e:dc:8f:5e:
         0a:99:51:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCWzBF+xkNORLMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRiNDExOWYtMzRmYy00ZmNlLThkYmYtYjY5YWUzM2E0
OTNhMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk
MjYxYzMzOWItYjg4My00ZjRjLWExZGQtOTE2M2MxN2E1MjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VplfaYaKJN3bmfgo+hVuDBWiAT3cHawwQZq
NbtHy3sFZZnYe3HlY7Xdd0mFJorMkPauweQTMO50uQBZUwQ1Wk9taC1tTNjvfz9j
ypN3oWDNotPfIfg2SLRuX3A2yNNBqf11w6HLbzLLbAV2YmNCkpF00DyCHT75nEN/
FXodB6+RRSnwe8N0ihV0o9YX5dGlcLGFtI6A6nxlz/WT9wqRoGo0GMXnL0L3ThRi
hMGMiUxZ6RZxQp35+0aq8LQ2pDqJewT1ezyNYqgF2ldtw2acuZU99DMgaCSao/pB
YhAy7x3NHVyemGpjmdbZf/lFu9BqZBlg5pXmf7NjK559D1/SzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRZcBkjrj//sZKVaz90xRKRnz33MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80NGI0
MTE5Zi0zNGZjLTRmY2UtOGRiZi1iNjlhZTMzYTQ5M2EvYTJjMDVkYjItZjNkOC0z
MzAxLWJmNzctYzAxNTM1MWZlOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDRiNDExOWYtMzRmYy00ZmNlLThk
YmYtYjY5YWUzM2E0OTNhLzQ0YjQxMTlmLTM0ZmMtNGZjZS04ZGJmLWI2OWFlMzNh
NDkzYS5jcmwwHwYDVR0jBBgwFoAUkhzQDf4HPGnnVgNSvWxdESmlE+wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80NGI0MTE5Zi0zNGZjLTRmY2UtOGRiZi1iNjlh
ZTMzYTQ5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDmcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwibV5jLGwnB8RvzO0G+pReN1gBGh4PyRM+ISQsAz/VVOo/kIfR1mXD
blIhHdC3IVjQeAh1c/A0OBI02yXM/qyvIH+XJr6BVAmem02WFEsojyyM6Mcv44hh
T6D1aNP8IxFqvRt/eDikGN4ZXGNamYBbsK2llYqp4o95BGLdQuT4tAdRSqzLRFTa
NNMgPykutYYDwnLwx/xpQDAAKr8umDHjPW+jzW6iBEJntB61ca+V0l15bJwMOtE7
vfW0QI6P5jVfabMpGzfqL/YeTL8NH/pe6JBhhxXcMrIGiwylMPlxk49mIzrS4Mqx
wvP0+KIhxEkFrogeYHEXXtyPXgqZUfY=
-----END CERTIFICATE-----
Generated at Fri Oct 10 16:13:42 2025 by rpki-client