Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/fd786dc7-6d99-3c08-8e02-e4ef797a38e0.roa
File:                     fd786dc7-6d99-3c08-8e02-e4ef797a38e0.roa (raw, json)
Hash identifier:          mr65eFmgAlVKWHI8dG+2xs6wdrEU2jU4T4S6XpL4xS4=
Subject key identifier:   E8:67:FC:4B:2B:4B:62:F9:15:AF:DB:F6:16:9A:99:C5:87:6F:14:5E
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584BA7B41E8A11C1DE367205F400
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/fd786dc7-6d99-3c08-8e02-e4ef797a38e0.roa
Signing time:             Mon 27 Oct 2025 00:10:37 +0000
ROA not before:           Mon 27 Oct 2025 00:10:37 +0000
ROA not after:            Sun 25 Jan 2026 01:10:37 +0000
asID:                     834
IP address blocks:        45.62.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:b4:1e:8a:11:c1:de:36:72:05:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Oct 27 00:10:37 2025 GMT
            Not After : Jan 25 01:10:37 2026 GMT
        Subject: CN=b564e791-a79b-43c0-b063-d4df3ff67a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:a7:5f:e2:fa:cd:63:8e:7e:c1:83:1a:9f:
                    6e:fc:cd:f2:e5:6f:9c:3d:16:a3:0a:59:a2:11:58:
                    48:8d:5e:0b:ce:6a:20:4b:6b:d8:44:23:08:10:2a:
                    95:8c:37:ef:28:7e:56:94:d4:51:7b:c3:4f:27:1e:
                    6b:0c:4b:53:2f:44:17:4c:f2:f2:f9:b8:72:1f:e3:
                    c7:db:ee:6b:22:65:6b:e6:ea:ca:d8:c9:b0:73:4c:
                    9a:82:3e:69:16:7f:28:0f:9d:e2:a2:cf:5e:ec:66:
                    72:dc:ba:b5:d9:ee:9e:7d:cc:5d:81:d3:8f:b7:06:
                    8b:37:c3:c1:cc:c9:57:30:de:3d:a4:ad:b7:f6:7c:
                    02:42:ec:79:8c:ce:b5:15:81:be:a3:3b:a3:c4:48:
                    94:92:39:93:77:51:21:5c:1c:52:7b:97:b5:68:27:
                    df:8a:6a:e3:ee:ef:d7:9b:e0:50:aa:ce:29:02:4c:
                    0d:9a:7f:d6:24:b5:f3:3b:f1:47:c5:09:a3:82:96:
                    8f:d1:7a:20:71:fd:d8:82:da:30:51:2b:47:ed:b4:
                    b4:ff:d8:e4:5d:c7:4f:ec:43:69:f1:b6:fa:59:e8:
                    e4:17:02:7c:0d:b5:9b:22:4e:a2:12:2e:94:fb:b5:
                    4a:1c:20:70:87:77:54:86:a9:99:f1:49:46:c7:81:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:67:FC:4B:2B:4B:62:F9:15:AF:DB:F6:16:9A:99:C5:87:6F:14:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/fd786dc7-6d99-3c08-8e02-e4ef797a38e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:62:66:4b:cc:aa:5a:77:cd:02:86:c6:11:df:0b:01:b7:
         75:cc:5a:ec:b7:73:f4:d6:36:9c:b2:b1:09:ed:8a:59:20:20:
         73:6e:11:d5:42:30:69:24:9a:68:fb:61:c6:c7:7d:8a:fd:38:
         4a:65:d6:83:91:33:7f:45:71:46:b2:a4:a1:45:cd:0e:ff:67:
         8a:f2:2b:91:0b:3b:f0:55:7c:39:4c:78:2c:98:d7:58:ee:c3:
         e1:14:ce:eb:8c:80:5b:23:65:5f:12:59:b7:48:90:76:10:34:
         3c:9a:32:3a:10:d6:cc:25:31:b4:b1:bb:02:43:03:ce:0a:37:
         5b:61:ac:31:42:b6:fe:63:b2:f8:f8:de:22:c9:da:3d:01:1a:
         64:53:7a:32:bf:06:6b:7a:cf:9e:1d:0d:95:8e:9a:93:32:49:
         2e:ce:96:3e:52:5d:b7:c3:24:7b:f4:89:2f:5c:3d:56:8e:bc:
         ef:ac:1f:02:4c:f7:ed:37:96:32:b4:64:b1:6b:9c:ce:b8:96:
         c4:0d:52:0c:cf:35:60:8c:04:2d:bc:14:0f:0f:c2:21:fb:c6:
         ed:3d:fb:dc:d3:ce:77:e9:a8:61:73:8a:0f:92:ed:e2:7e:f3:
         2f:2f:1f:87:c0:ec:0e:51:fb:18:a7:2f:af:5f:93:52:cf:e0:
         5e:96:36:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuntB6KEcHeNnIF9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw
YzRkMB4XDTI1MTAyNzAwMTAzN1oXDTI2MDEyNTAxMTAzN1owLzEtMCsGA1UEAxMk
YjU2NGU3OTEtYTc5Yi00M2MwLWIwNjMtZDRkZjNmZjY3YTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIKnX+L6zWOOfsGDGp9u/M3y5W+cPRajClmi
EVhIjV4LzmogS2vYRCMIECqVjDfvKH5WlNRRe8NPJx5rDEtTL0QXTPLy+bhyH+PH
2+5rImVr5urK2Mmwc0yagj5pFn8oD53ios9e7GZy3Lq12e6efcxdgdOPtwaLN8PB
zMlXMN49pK239nwCQux5jM61FYG+ozujxEiUkjmTd1EhXBxSe5e1aCffimrj7u/X
m+BQqs4pAkwNmn/WJLXzO/FHxQmjgpaP0Xogcf3YgtowUStH7bS0/9jkXcdP7ENp
8bb6WejkFwJ8DbWbIk6iEi6U+7VKHCBwh3dUhqmZ8UlGx4E+bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOhn/EsrS2L5Fa/b9haamcWHbxReMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz
YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvZmQ3ODZkYzctNmQ5OS0z
YzA4LThlMDItZTRlZjc5N2EzOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0
ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3
MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl
YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2QYmZLzKpad80ChsYR3wsBt3XMWuy3c/TWNpyysQntilkgIHNuEdVC
MGkkmmj7YcbHfYr9OEpl1oORM39FcUaypKFFzQ7/Z4ryK5ELO/BVfDlMeCyY11ju
w+EUzuuMgFsjZV8SWbdIkHYQNDyaMjoQ1swlMbSxuwJDA84KN1thrDFCtv5jsvj4
3iLJ2j0BGmRTejK/Bmt6z54dDZWOmpMySS7Olj5SXbfDJHv0iS9cPVaOvO+sHwJM
9+03ljK0ZLFrnM64lsQNUgzPNWCMBC28FA8PwiH7xu09+9zTznfpqGFzig+S7eJ+
8y8vH4fA7A5R+xinL69fk1LP4F6WNk8=
-----END CERTIFICATE-----
Generated at Fri Oct 31 05:43:34 2025 by rpki-client