Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa
File:                     a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa (raw, json)
Hash identifier:          jLXZABgKmIWIqMAqRTKEHqPV6FCI56/+n9BVtPdTgKA=
Subject key identifier:   33:74:8C:18:EA:DB:03:17:23:BB:54:96:59:46:85:D9:2A:9F:23:3D
Certificate issuer:       /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
Certificate serial:       010D0C9F4328584AFC1C1F2802702B4107BBF780
Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        162.120.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:1f:28:02:70:2b:41:07:bb:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=8f91d52e-67be-4398-b445-a1f6531ea0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:f4:8d:eb:9c:c9:02:63:bf:46:5e:d4:81:
                    d0:53:bb:af:57:52:1c:b5:7c:32:9a:a0:6f:58:a9:
                    24:5f:ab:16:db:d8:e4:9c:2b:53:38:56:d5:24:7b:
                    53:63:51:23:60:95:ae:3a:eb:81:d6:de:ed:7b:69:
                    7b:8a:cd:70:24:dd:c0:79:cf:63:43:3e:39:43:1d:
                    87:61:73:cc:f5:8b:bc:df:fc:04:f9:d7:63:c9:34:
                    ed:db:1b:a7:73:de:6e:96:8c:66:51:f7:f2:b5:f0:
                    5a:f7:9d:56:0e:66:ba:99:5d:fc:c1:2d:15:19:bb:
                    ca:78:eb:ed:1a:60:b8:cd:e7:e1:4c:35:95:83:6a:
                    c7:4a:50:66:80:f5:5d:d5:29:51:dd:ed:cd:a6:22:
                    7d:01:d2:ae:96:63:1a:5d:78:b1:81:e4:44:5a:82:
                    d2:7a:91:b1:1e:61:35:31:8b:fe:ac:77:02:db:ee:
                    51:36:6d:35:e2:f8:ff:7e:42:d5:60:ec:63:f4:a8:
                    42:43:93:a4:0e:48:48:e5:d1:a6:8b:29:71:2d:f0:
                    ee:1b:5c:61:75:b3:94:2d:b0:cb:be:7d:52:1a:4e:
                    2a:24:56:2b:0f:cd:d5:9d:08:91:47:65:3a:a8:f9:
                    cd:7a:19:c2:86:aa:ba:f1:6a:63:4f:15:16:22:7b:
                    48:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:74:8C:18:EA:DB:03:17:23:BB:54:96:59:46:85:D9:2A:9F:23:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a62a27eb-0e4c-392e-bbb7-46cda838e71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl

            X509v3 Authority Key Identifier:
                keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.120.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:10:f3:67:83:8e:31:02:38:8f:fa:e6:13:79:b6:73:c4:d3:
         f5:ff:b4:44:73:2a:e5:89:b1:66:62:5e:4c:72:ac:df:43:c1:
         06:fe:b0:cc:97:83:f3:cc:0e:41:78:0b:f1:4a:e9:88:9d:c1:
         8f:de:08:83:54:90:d2:24:82:40:3c:bf:82:ca:bb:91:f6:26:
         35:79:68:bc:26:b5:55:bd:df:53:cb:73:9b:c6:ae:dd:08:ba:
         cb:65:80:3a:ba:b9:60:45:3e:16:90:e2:e5:e8:61:76:8e:19:
         88:56:ba:aa:71:4e:1b:ea:1c:91:21:03:3d:4d:6a:84:68:52:
         26:32:02:5c:1d:64:3a:0b:b3:97:1d:96:99:2b:81:99:13:0c:
         9e:bb:a3:dd:75:21:2c:a4:96:a2:16:cb:f8:07:3f:d4:da:7d:
         03:a4:14:9f:de:9e:1d:8e:4f:8c:49:25:66:37:08:59:e0:d9:
         31:4e:b8:2d:2c:1a:be:71:d8:7c:22:71:fd:20:e7:4b:d3:f5:
         a1:7b:e7:59:73:71:4e:e7:24:fa:a0:49:e9:55:8d:3c:38:ca:
         1b:a0:22:b8:c5:31:ea:33:f2:f3:02:51:2d:62:2b:92:12:1e:
         bc:5c:da:bd:aa:14:00:32:91:a0:df:4b:03:50:8f:cc:fd:41:
         27:eb:71:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HB8oAnArQQe794AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTdlOTM2NzMtNWQxOS00ZmYyLTgyNTAtZjEwOTRmNGUx
MmM5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
OGY5MWQ1MmUtNjdiZS00Mzk4LWI0NDUtYTFmNjUzMWVhMGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoj0jeucyQJjv0Ze1IHQU7uvV1IctXwymqBv
WKkkX6sW29jknCtTOFbVJHtTY1EjYJWuOuuB1t7te2l7is1wJN3Aec9jQz45Qx2H
YXPM9Yu83/wE+ddjyTTt2xunc95uloxmUffytfBa951WDma6mV38wS0VGbvKeOvt
GmC4zefhTDWVg2rHSlBmgPVd1SlR3e3NpiJ9AdKulmMaXXixgeREWoLSepGxHmE1
MYv+rHcC2+5RNm014vj/fkLVYOxj9KhCQ5OkDkhI5dGmiylxLfDuG1xhdbOULbDL
vn1SGk4qJFYrD83VnQiRR2U6qPnNehnChqq68WpjTxUWIntISQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDN0jBjq2wMXI7tUlllGhdkqnyM9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85N2U5
MzY3My01ZDE5LTRmZjItODI1MC1mMTA5NGY0ZTEyYzkvYTYyYTI3ZWItMGU0Yy0z
OTJlLWJiYjctNDZjZGE4MzhlNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTdlOTM2NzMtNWQxOS00ZmYyLTgy
NTAtZjEwOTRmNGUxMmM5Lzk3ZTkzNjczLTVkMTktNGZmMi04MjUwLWYxMDk0ZjRl
MTJjOS5jcmwwHwYDVR0jBBgwFoAUWadl+i0+WSa9aBzBzIa9bovmt/MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85N2U5MzY3My01ZDE5LTRmZjItODI1MC1mMTA5
NGY0ZTEyYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQConhYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUQ82eDjjECOI/65hN5tnPE0/X/tERzKuWJsWZiXkxyrN9DwQb+sMyX
g/PMDkF4C/FK6YidwY/eCINUkNIkgkA8v4LKu5H2JjV5aLwmtVW931PLc5vGrt0I
ustlgDq6uWBFPhaQ4uXoYXaOGYhWuqpxThvqHJEhAz1NaoRoUiYyAlwdZDoLs5cd
lpkrgZkTDJ67o911ISyklqIWy/gHP9TafQOkFJ/enh2OT4xJJWY3CFng2TFOuC0s
Gr5x2Hwicf0g50vT9aF751lzcU7nJPqgSelVjTw4yhugIrjFMeoz8vMCUS1iK5IS
Hrxc2r2qFAAykaDfSwNQj8z9QSfrcWg=
-----END CERTIFICATE-----
Generated at Fri Oct 10 19:55:58 2025 by rpki-client