Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec8d074e-caff-3234-a9fd-36ce7687171a.roa
File:                     ec8d074e-caff-3234-a9fd-36ce7687171a.roa (raw, json)
Hash identifier:          lYXk0C0YpsB70M/TDZUtI0EwGuvic9N1pTqtwDkMdWA=
Subject key identifier:   D6:8D:1A:6A:36:F8:C8:6E:D3:FF:29:EA:F7:A1:F5:4C:45:2E:59:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A898B06F317144F8BC7680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec8d074e-caff-3234-a9fd-36ce7687171a.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        174.162.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:98:b0:6f:31:71:44:f8:bc:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=e61187a6-78a5-4990-b5bf-22f592719517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:cd:26:1d:3b:f0:00:60:7a:22:c4:c0:e6:
                    b8:2e:20:20:78:40:6d:50:34:6d:9c:a6:5b:2c:e4:
                    dc:e8:45:cd:ae:ff:2b:16:f6:eb:0f:0c:2a:4e:d5:
                    02:a1:20:9a:3d:36:83:8a:2b:2f:c1:05:79:57:54:
                    b8:5f:76:68:a7:9c:aa:9d:3f:17:d3:4e:cc:16:8d:
                    77:25:0b:b1:1c:6b:bc:4b:e0:cb:0c:72:0b:4b:de:
                    64:35:fd:30:57:21:c2:00:03:ea:4a:e6:76:fe:0d:
                    b1:b7:3a:2f:38:d2:9d:59:e9:09:75:48:bb:91:8a:
                    d0:3b:4f:fa:3e:0e:9b:2d:93:3d:4c:5b:f7:27:cc:
                    0b:65:e1:1c:7f:81:e3:39:a1:e3:04:3a:06:93:13:
                    f3:21:75:fc:6c:e3:c8:2b:9e:a8:82:e5:05:17:04:
                    1a:e4:85:89:8b:97:26:e6:56:68:eb:ad:fb:b2:e8:
                    9c:cd:a6:cf:df:20:c8:a4:e1:d9:a3:09:55:5d:8b:
                    be:6f:d8:8f:95:4b:93:b4:23:4a:ed:e3:79:6e:1a:
                    02:05:61:91:3a:6c:14:ed:1f:90:fc:79:0a:b5:29:
                    44:33:63:78:1c:e4:a1:82:a6:1a:ec:02:aa:e3:d5:
                    f9:0d:f7:c9:67:95:d8:2f:83:1c:2c:09:52:44:eb:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8D:1A:6A:36:F8:C8:6E:D3:FF:29:EA:F7:A1:F5:4C:45:2E:59:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec8d074e-caff-3234-a9fd-36ce7687171a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.162.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:6c:4d:9c:79:85:6f:06:38:dd:bc:30:da:a7:0c:eb:1c:
         e1:9c:57:d6:8a:5d:50:e6:f3:c3:f8:a3:fd:f0:41:19:62:e2:
         2d:96:f2:c7:9c:b4:75:f0:06:79:ab:f4:56:fd:03:1d:b2:14:
         ec:d2:de:7d:8a:6b:dd:23:f8:1e:14:3a:9f:f4:05:45:0a:0f:
         84:02:f2:1c:77:f8:b7:3a:35:ae:f4:69:15:42:89:80:85:ed:
         24:a0:d4:d1:87:76:19:ff:c0:f6:97:6e:9c:d2:6a:87:80:bf:
         83:bf:54:e8:0d:97:02:5d:64:bd:8c:34:42:f2:20:cc:17:59:
         1d:53:11:20:44:9e:9d:5a:18:a2:1d:31:a0:42:e1:67:c6:6e:
         17:d2:c8:9e:b4:a7:56:66:8e:45:44:d9:71:c2:8e:be:11:c3:
         08:d5:eb:41:ee:12:3f:4c:3c:3c:70:e4:1b:2b:90:5b:10:32:
         c1:2d:ce:b9:34:3e:23:2f:e1:f5:44:09:f1:51:48:5e:90:b2:
         c0:8c:31:f6:3f:b6:99:12:a6:eb:be:4f:ff:43:66:34:5c:38:
         bc:83:5a:0e:b2:f3:4c:67:ec:6c:5d:9e:45:b4:1e:cf:80:f3:
         c1:e6:9c:37:e0:32:29:16:ca:71:38:b3:b5:ed:65:10:11:3d:
         d7:bd:b2:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqJiwbzFxRPi8doAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
ZTYxMTg3YTYtNzhhNS00OTkwLWI1YmYtMjJmNTkyNzE5NTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKrNJh078ABgeiLEwOa4LiAgeEBtUDRtnKZb
LOTc6EXNrv8rFvbrDwwqTtUCoSCaPTaDiisvwQV5V1S4X3Zop5yqnT8X007MFo13
JQuxHGu8S+DLDHILS95kNf0wVyHCAAPqSuZ2/g2xtzovONKdWekJdUi7kYrQO0/6
Pg6bLZM9TFv3J8wLZeEcf4HjOaHjBDoGkxPzIXX8bOPIK56oguUFFwQa5IWJi5cm
5lZo6637suiczabP3yDIpOHZowlVXYu+b9iPlUuTtCNK7eN5bhoCBWGROmwU7R+Q
/HkKtSlEM2N4HOShgqYa7AKq49X5DffJZ5XYL4McLAlSROspsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNaNGmo2+Mhu0/8p6veh9UxFLlmxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWM4ZDA3NGUtY2FmZi0z
MjM0LWE5ZmQtMzZjZTc2ODcxNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqIIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJimbE2ceYVvBjjdvDDapwzrHOGcV9aKXVDm88P4o/3wQRli4i2W8sec
tHXwBnmr9Fb9Ax2yFOzS3n2Ka90j+B4UOp/0BUUKD4QC8hx3+Lc6Na70aRVCiYCF
7SSg1NGHdhn/wPaXbpzSaoeAv4O/VOgNlwJdZL2MNELyIMwXWR1TESBEnp1aGKId
MaBC4WfGbhfSyJ60p1ZmjkVE2XHCjr4RwwjV60HuEj9MPDxw5BsrkFsQMsEtzrk0
PiMv4fVECfFRSF6QssCMMfY/tpkSpuu+T/9DZjRcOLyDWg6y80xn7GxdnkW0Hs+A
88HmnDfgMikWynE4s7XtZRARPde9sng=
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:34:13 2025 by rpki-client