Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa
File:                     e986cb99-90f6-3599-9f1f-a52d8d946895.roa (raw, json)
Hash identifier:          1sKHEXQ0vQk6zvMKiaEnqnxlh0y73KvZYmfDsagoGkE=
Subject key identifier:   D7:F6:E2:1C:F0:A7:3B:AB:4C:CC:65:43:3E:C6:DE:9B:DE:44:B4:79
Certificate issuer:       /CN=022d0269-7d56-45cc-8167-b1e7ab13f1f4
Certificate serial:       010D0C9F4328584B9B3CE5D5AF07053D0118D340
Authority key identifier: 4E:42:8C:95:8C:2E:77:BF:29:92:4C:43:07:CA:4C:7A:AF:CC:AC:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     13150
IP address blocks:        45.62.176.0/20 maxlen: 24
                          149.20.192.0/20 maxlen: 24
                          150.195.192.0/20 maxlen: 24
                          199.27.32.0/19 maxlen: 24
                          216.194.96.0/20 maxlen: 24
                          216.205.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/022d0269-7d56-45cc-8167-b1e7ab13f1f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/022d0269-7d56-45cc-8167-b1e7ab13f1f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:e5:d5:af:07:05:3d:01:18:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022d0269-7d56-45cc-8167-b1e7ab13f1f4
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=38e9a7a8-0238-4e55-a141-bf919929a7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b1:a2:0d:86:6c:8e:8e:c9:14:bd:fd:54:d0:
                    7d:c0:00:2a:60:b6:7a:6d:0a:d1:b7:c4:c5:28:50:
                    3d:37:71:98:6a:67:41:4d:a9:de:ce:de:b4:a4:ba:
                    64:1d:90:10:db:48:55:84:be:14:b0:9b:c1:38:e6:
                    5d:94:e5:29:c0:98:94:b0:d2:d7:11:aa:87:cb:56:
                    98:7d:91:52:c4:97:de:2a:8e:d9:fc:de:43:78:e7:
                    6c:d8:03:19:83:dc:fc:55:59:5c:f6:20:be:ad:d5:
                    4c:a1:2d:51:c3:39:3d:60:c6:a9:18:13:aa:22:d9:
                    1b:0a:24:fa:fe:94:d7:90:6c:e7:69:4b:85:6d:3b:
                    a1:31:8b:d3:e5:59:dc:f2:6d:81:e8:80:9d:73:e0:
                    eb:0e:a6:69:f4:d9:82:cc:39:3a:99:34:93:26:6a:
                    57:ee:08:c4:e3:40:20:b7:ae:f9:0e:f0:c7:29:53:
                    36:02:c2:41:ed:ff:eb:6e:7f:40:92:8b:c4:d5:01:
                    70:a9:57:8a:03:3c:55:d4:e1:90:e5:bc:d0:55:4c:
                    26:34:ff:40:04:fd:c9:35:27:7c:4b:9a:0c:c0:fe:
                    7e:f2:11:4a:0d:14:d3:fa:18:32:16:25:f2:55:53:
                    f5:97:81:ad:56:28:53:4e:4e:35:07:9a:93:0b:54:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F6:E2:1C:F0:A7:3B:AB:4C:CC:65:43:3E:C6:DE:9B:DE:44:B4:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/e986cb99-90f6-3599-9f1f-a52d8d946895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4/022d0269-7d56-45cc-8167-b1e7ab13f1f4.crl

            X509v3 Authority Key Identifier:
                keyid:4E:42:8C:95:8C:2E:77:BF:29:92:4C:43:07:CA:4C:7A:AF:CC:AC:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/022d0269-7d56-45cc-8167-b1e7ab13f1f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.176.0/20
                  149.20.192.0/20
                  150.195.192.0/20
                  199.27.32.0/19
                  216.194.96.0/20
                  216.205.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:fa:c8:cf:81:87:1c:6f:e2:b3:31:fa:83:d5:30:66:7a:7c:
         9f:ad:80:97:73:68:cf:75:c5:fc:c7:b2:b1:b6:9e:24:c2:ff:
         48:46:23:c6:ed:7f:5c:4c:b5:a6:09:88:99:8a:e4:33:46:5f:
         d4:89:9b:a9:f5:27:9f:21:f7:ea:f1:8c:ed:b9:d7:e7:e8:c0:
         f9:1a:57:93:39:ec:ee:39:be:ab:b1:29:64:38:28:10:0c:5a:
         40:f0:81:91:3a:99:29:04:33:f0:3e:63:76:f1:e5:b1:5a:b2:
         63:71:d7:77:81:be:0a:53:8c:b1:62:5f:7a:07:c9:a0:80:e7:
         10:61:08:50:4c:a4:fc:e9:02:1d:f2:d3:b1:ad:f7:0c:5e:b5:
         4f:fc:27:04:0d:2c:29:90:12:13:4d:aa:61:99:1a:4e:b9:51:
         c7:66:28:e1:5b:68:8d:c6:1e:d0:09:7b:31:4e:b9:83:b9:8b:
         5c:be:f3:65:88:d0:e8:53:07:90:e6:8d:a1:6e:29:47:b1:79:
         30:9d:f7:8c:68:f2:e2:ba:29:19:ec:22:bf:3c:95:ce:a8:5b:
         44:8b:54:ef:4e:32:95:bf:7c:48:8a:eb:0d:7e:eb:54:61:84:
         11:31:94:2e:b5:2d:a3:1d:59:04:67:3a:be:25:e5:70:ee:6f:
         26:ec:91:26
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEubPOXVrwcFPQEY00AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDIyZDAyNjktN2Q1Ni00NWNjLTgxNjctYjFlN2FiMTNm
MWY0MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk
MzhlOWE3YTgtMDIzOC00ZTU1LWExNDEtYmY5MTk5MjlhN2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLGiDYZsjo7JFL39VNB9wAAqYLZ6bQrRt8TF
KFA9N3GYamdBTanezt60pLpkHZAQ20hVhL4UsJvBOOZdlOUpwJiUsNLXEaqHy1aY
fZFSxJfeKo7Z/N5DeOds2AMZg9z8VVlc9iC+rdVMoS1Rwzk9YMapGBOqItkbCiT6
/pTXkGznaUuFbTuhMYvT5Vnc8m2B6ICdc+DrDqZp9NmCzDk6mTSTJmpX7gjE40Ag
t675DvDHKVM2AsJB7f/rbn9AkovE1QFwqVeKAzxV1OGQ5bzQVUwmNP9ABP3JNSd8
S5oMwP5+8hFKDRTT+hgyFiXyVVP1l4GtVihTTk41B5qTC1QobwIDAQABo4IDczCC
A28wHQYDVR0OBBYEFNf24hzwpzurTMxlQz7G3pveRLR5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMjJk
MDI2OS03ZDU2LTQ1Y2MtODE2Ny1iMWU3YWIxM2YxZjQvZTk4NmNiOTktOTBmNi0z
NTk5LTlmMWYtYTUyZDhkOTQ2ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDIyZDAyNjktN2Q1Ni00NWNjLTgx
NjctYjFlN2FiMTNmMWY0LzAyMmQwMjY5LTdkNTYtNDVjYy04MTY3LWIxZTdhYjEz
ZjFmNC5jcmwwHwYDVR0jBBgwFoAUTkKMlYwud78pkkxDB8pMeq/MrI8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wMjJkMDI2OS03ZDU2LTQ1Y2MtODE2Ny1iMWU3
YWIxM2YxZjQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQELT6wAwQE
lRTAAwQElsPAAwQFxxsgAwQE2MJgAwQE2M1wMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ76yM+Bhxxv4rMx
+oPVMGZ6fJ+tgJdzaM91xfzHsrG2niTC/0hGI8btf1xMtaYJiJmK5DNGX9SJm6n1
J58h9+rxjO251+fowPkaV5M57O45vquxKWQ4KBAMWkDwgZE6mSkEM/A+Y3bx5bFa
smNx13eBvgpTjLFiX3oHyaCA5xBhCFBMpPzpAh3y07Gt9wxetU/8JwQNLCmQEhNN
qmGZGk65UcdmKOFbaI3GHtAJezFOuYO5i1y+82WI0OhTB5DmjaFuKUexeTCd94xo
8uK6KRnsIr88lc6oW0SLVO9OMpW/fEiK6w1+61RhhBExlC61LaMdWQRnOr4l5XDu
bybskSY=
-----END CERTIFICATE-----
Generated at Mon Nov 3 08:29:04 2025 by rpki-client