Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/6f03f16a-f39d-35fa-a9bd-35bf88d0eca7.roa
File:                     6f03f16a-f39d-35fa-a9bd-35bf88d0eca7.roa (raw, json)
Hash identifier:          2yox6Q87vpZKqnaaasSiUQqXHWgrTFVoBoyZEqL0bLY=
Subject key identifier:   94:B1:0C:19:CF:06:51:94:8A:7D:CE:52:69:D6:8E:11:F3:6E:00:BB
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F4328584BBB758AF741DAA20D90BBDAC0
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/6f03f16a-f39d-35fa-a9bd-35bf88d0eca7.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     23158
IP address blocks:        162.0.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:8a:f7:41:da:a2:0d:90:bb:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=17f7b6d7-a902-42d7-98fe-3efbf6b2ae46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0a:56:0c:40:63:ca:39:e6:07:cc:b5:1c:7d:
                    03:6c:b3:fa:92:9a:11:61:b0:c1:a4:c4:a0:df:76:
                    4d:eb:5d:c0:e9:c3:f5:4d:e9:85:f4:05:22:3e:a8:
                    27:af:60:80:85:5d:74:58:02:b7:46:63:3d:6e:5d:
                    36:7a:e7:a9:1c:38:93:11:12:9b:11:b3:78:15:db:
                    90:84:15:52:7b:bb:01:35:16:39:33:94:db:fe:cb:
                    8a:de:d2:e1:9a:63:66:09:07:47:45:68:95:40:bd:
                    7a:b1:cc:69:83:67:7f:8d:de:ce:10:fd:db:3f:ba:
                    97:50:60:a1:29:28:89:7b:09:0d:3f:51:c1:b0:66:
                    77:89:6a:e7:9c:30:27:ad:db:8c:4e:bf:90:5f:ba:
                    07:db:26:96:ff:74:cf:5f:2f:47:cb:83:2d:7a:59:
                    23:70:b3:d3:ee:5e:6e:69:fe:58:de:29:d3:a9:22:
                    9b:ec:f1:79:41:44:d1:c5:21:b9:e0:33:46:c6:71:
                    a0:46:07:df:3c:bb:9e:17:df:80:b9:ef:0c:1e:e9:
                    a5:13:23:02:43:92:1b:f0:2a:26:15:ce:d0:68:ed:
                    2d:ab:5e:86:4a:e0:c5:dd:fa:40:0d:99:4e:e7:7e:
                    ca:74:7b:aa:0b:a0:9e:24:0f:78:b9:6e:28:16:d6:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B1:0C:19:CF:06:51:94:8A:7D:CE:52:69:D6:8E:11:F3:6E:00:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/6f03f16a-f39d-35fa-a9bd-35bf88d0eca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.0.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:f1:f6:5b:87:00:95:b5:40:35:87:5a:bc:3d:ff:1b:ca:
         49:a9:29:9e:b2:95:5a:5a:a7:d4:24:82:c1:bf:29:75:07:59:
         34:83:52:61:e4:45:d4:fb:46:28:53:14:3d:c5:9d:a9:17:78:
         4c:86:7a:fa:fe:39:c4:9d:9e:06:2c:52:b6:e9:c6:e9:74:8e:
         e5:d3:16:21:a3:ed:7e:46:d6:d2:b4:64:2c:f6:c3:03:9f:01:
         c7:aa:7a:6c:fa:9f:de:7c:4d:70:02:4d:b5:c7:b0:3d:86:6f:
         e6:cf:ea:fd:85:e0:89:03:3c:6d:34:65:a2:19:fe:0f:81:04:
         3e:6f:85:26:7b:bd:d6:67:d5:7b:b4:46:6d:eb:8f:6d:0f:4b:
         6f:db:cc:ee:df:97:9a:b7:71:ef:8f:bf:8d:4b:8f:d6:32:ee:
         20:15:66:4e:91:1e:2b:5f:b9:75:b1:c7:3b:77:61:d5:4a:a2:
         01:3f:e5:da:5f:81:e0:87:db:01:85:99:fb:69:5f:aa:0d:38:
         52:92:ea:ce:35:b4:6c:b9:c4:61:7f:af:b4:ab:c5:56:9c:07:
         93:0f:1f:b2:ad:81:3b:fe:49:08:86:04:66:90:dc:ca:11:b0:
         d1:b8:dd:53:7e:80:0e:89:8a:d2:b6:25:2c:ff:97:c9:fc:3c:
         50:d3:84:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYr3QdqiDZC72sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy
ZDUyMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk
MTdmN2I2ZDctYTkwMi00MmQ3LTk4ZmUtM2VmYmY2YjJhZTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQpWDEBjyjnmB8y1HH0DbLP6kpoRYbDBpMSg
33ZN613A6cP1TemF9AUiPqgnr2CAhV10WAK3RmM9bl02euepHDiTERKbEbN4FduQ
hBVSe7sBNRY5M5Tb/suK3tLhmmNmCQdHRWiVQL16scxpg2d/jd7OEP3bP7qXUGCh
KSiJewkNP1HBsGZ3iWrnnDAnrduMTr+QX7oH2yaW/3TPXy9Hy4MtelkjcLPT7l5u
af5Y3inTqSKb7PF5QUTRxSG54DNGxnGgRgffPLueF9+Aue8MHumlEyMCQ5Ib8Com
Fc7QaO0tq16GSuDF3fpADZlO537KdHuqC6CeJA94uW4oFtapKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJSxDBnPBlGUin3OUmnWjhHzbgC7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj
NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvNmYwM2YxNmEtZjM5ZC0z
NWZhLWE5YmQtMzViZjg4ZDBlY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll
MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi
MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0
MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDogDwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACAa8fZbhwCVtUA1h1q8Pf8bykmpKZ6ylVpap9QkgsG/KXUHWTSDUmHk
RdT7RihTFD3FnakXeEyGevr+OcSdngYsUrbpxul0juXTFiGj7X5G1tK0ZCz2wwOf
Aceqemz6n958TXACTbXHsD2Gb+bP6v2F4IkDPG00ZaIZ/g+BBD5vhSZ7vdZn1Xu0
Rm3rj20PS2/bzO7fl5q3ce+Pv41Lj9Yy7iAVZk6RHitfuXWxxzt3YdVKogE/5dpf
geCH2wGFmftpX6oNOFKS6s41tGy5xGF/r7SrxVacB5MPH7KtgTv+SQiGBGaQ3MoR
sNG43VN+gA6JitK2JSz/l8n8PFDThKc=
-----END CERTIFICATE-----
Generated at Mon Nov 3 08:38:10 2025 by rpki-client