Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa
File:                     01fb150d-a072-39ec-b4dd-9952490d8c1a.roa (raw, json)
Hash identifier:          HdAdPmO6OqfEQpXBLlIm23/3PDNnzpGHc7EepqjTPTY=
Subject key identifier:   13:51:D1:F1:D0:04:86:44:3F:B8:78:A4:3C:45:A2:3A:D6:0D:A8:00
Certificate issuer:       /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
Certificate serial:       010D0C9F4328584B1AD187788FCB391EE22ECF00
Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     40788
IP address blocks:        162.247.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:87:78:8f:cb:39:1e:e2:2e:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=70095cf0-31e2-409a-b0c8-71c82416374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:29:79:33:56:90:7f:46:82:ec:1d:61:44:
                    4c:69:d6:6c:31:c4:91:e9:b8:07:cf:f8:82:f5:cb:
                    3b:46:b6:99:32:be:67:4b:5c:88:cc:5c:5c:9d:69:
                    33:45:a8:88:4e:0b:7f:a0:3b:96:8f:85:28:29:11:
                    bd:ba:65:c7:4e:6a:23:28:08:60:f7:85:b4:50:df:
                    13:a0:c5:2f:de:34:3f:4b:27:42:41:6c:7e:0c:1a:
                    27:15:95:77:10:8d:e5:1c:fe:83:22:24:71:29:52:
                    9d:e9:e6:60:27:cc:0f:37:63:0c:d5:34:5c:7e:b6:
                    6b:23:45:51:c5:6f:4a:17:05:26:3e:72:15:7a:fc:
                    6b:25:0b:90:77:a0:a8:4f:1a:20:34:50:c6:d0:7f:
                    8b:48:ce:0f:c0:10:e8:3a:8c:df:4f:e2:5a:49:e6:
                    84:64:0d:0f:3f:f6:9b:89:b8:81:a4:2e:7e:f1:3e:
                    e6:75:14:1d:29:c3:b9:f1:f9:c8:ed:7a:f7:7a:44:
                    90:a8:93:c8:d2:b4:df:9a:b3:c2:b5:24:4b:0c:5b:
                    81:0f:5f:94:c0:6d:1f:85:e3:b3:ce:02:6c:4c:e8:
                    10:64:23:e4:7a:30:e4:ab:ed:64:bb:1d:85:99:f4:
                    c4:8c:14:9e:19:e4:8d:a9:a9:46:da:3e:07:68:24:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:51:D1:F1:D0:04:86:44:3F:B8:78:A4:3C:45:A2:3A:D6:0D:A8:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/01fb150d-a072-39ec-b4dd-9952490d8c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:16:4c:38:96:d6:48:83:3c:c2:3c:d6:f9:f9:2a:79:65:fe:
         b8:32:11:b3:32:67:f6:99:ae:19:f6:ce:c2:68:70:63:9e:43:
         d8:3a:82:d9:92:fe:4f:86:5c:f6:22:10:2b:ba:ad:c5:b0:16:
         f6:63:63:37:e0:db:92:4a:97:c6:bf:db:b4:99:5e:36:17:ee:
         db:ac:9e:72:b6:26:46:ae:39:ff:fd:71:54:18:a3:bc:ff:68:
         a5:40:b7:98:d4:10:50:0a:44:0b:57:68:f1:ab:62:dc:75:9d:
         af:df:2f:47:b3:e2:7a:66:34:89:b6:47:f7:cb:7a:f9:a2:b8:
         d5:b0:1b:f3:1d:22:38:ca:3c:15:52:22:bf:80:da:24:d5:ef:
         50:09:5e:98:62:96:3d:b6:e5:f4:d6:12:c0:15:b9:90:2d:1a:
         ba:2d:ea:b6:78:4b:69:6e:f7:c1:6c:75:0b:8a:b2:45:64:7d:
         6f:a1:fe:ee:87:f0:89:0c:ae:b7:81:ea:1b:24:ba:f8:bd:aa:
         7c:d1:6e:0f:35:69:f8:79:63:d2:14:65:66:ab:09:7f:cb:46:
         24:8e:44:0d:c3:27:38:90:91:f8:84:da:7d:5e:16:ab:b2:ba:
         fb:2b:4c:f3:81:19:d8:9a:f5:bc:62:52:62:e4:d8:6f:be:05:
         dc:04:e4:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Yd4j8s5HuIuzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0Y2QwZDQtNmRhOC00OTdjLWIyNzAtY2I2NThkNDVm
NGU4MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
NzAwOTVjZjAtMzFlMi00MDlhLWIwYzgtNzFjODI0MTYzNzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMApeTNWkH9GguwdYURMadZsMcSR6bgHz/iC
9cs7RraZMr5nS1yIzFxcnWkzRaiITgt/oDuWj4UoKRG9umXHTmojKAhg94W0UN8T
oMUv3jQ/SydCQWx+DBonFZV3EI3lHP6DIiRxKVKd6eZgJ8wPN2MM1TRcfrZrI0VR
xW9KFwUmPnIVevxrJQuQd6CoTxogNFDG0H+LSM4PwBDoOozfT+JaSeaEZA0PP/ab
ibiBpC5+8T7mdRQdKcO58fnI7Xr3ekSQqJPI0rTfmrPCtSRLDFuBD1+UwG0fheOz
zgJsTOgQZCPkejDkq+1kux2FmfTEjBSeGeSNqalG2j4HaCTEYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNR0fHQBIZEP7h4pDxFojrWDagAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80NjRj
ZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1OGQ0NWY0ZTgvMDFmYjE1MGQtYTA3Mi0z
OWVjLWI0ZGQtOTk1MjQ5MGQ4YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDY0Y2QwZDQtNmRhOC00OTdjLWIy
NzAtY2I2NThkNDVmNGU4LzQ2NGNkMGQ0LTZkYTgtNDk3Yy1iMjcwLWNiNjU4ZDQ1
ZjRlOC5jcmwwHwYDVR0jBBgwFoAUS39fShDtIwmAi5OI16u8VyHwb6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80NjRjZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1
OGQ0NWY0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgWTDiW1kiDPMI81vn5Knll/rgyEbMyZ/aZrhn2zsJocGOeQ9g6gtmS
/k+GXPYiECu6rcWwFvZjYzfg25JKl8a/27SZXjYX7tusnnK2JkauOf/9cVQYo7z/
aKVAt5jUEFAKRAtXaPGrYtx1na/fL0ez4npmNIm2R/fLevmiuNWwG/MdIjjKPBVS
Ir+A2iTV71AJXphilj225fTWEsAVuZAtGrot6rZ4S2lu98FsdQuKskVkfW+h/u6H
8IkMrreB6hskuvi9qnzRbg81afh5Y9IUZWarCX/LRiSORA3DJziQkfiE2n1eFquy
uvsrTPOBGdia9bxiUmLk2G++BdwE5Ew=
-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:21 2025 by rpki-client