Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/62ff3ec6-eac8-397e-af4d-eb92f92e2c8d.roa
File:                     62ff3ec6-eac8-397e-af4d-eb92f92e2c8d.roa (raw, json)
Hash identifier:          SgEN3fISofUkuqXBRjWf6rj5hYh0Z6iPh2jwHD6g51g=
Subject key identifier:   E9:D6:D7:7C:A4:09:91:DD:E3:B5:1C:0C:0F:4E:BA:51:5B:2A:C2:65
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F4328584A7A4B4BAA143B421AB4F53000
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/62ff3ec6-eac8-397e-af4d-eb92f92e2c8d.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     23341
IP address blocks:        143.55.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:4b:aa:14:3b:42:1a:b4:f5:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=c8a52b7d-4e9c-448d-8cbe-c9c9e3861bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:81:ec:b7:0c:fd:fa:98:e3:72:9b:5e:01:
                    78:a3:df:9b:4d:77:fc:d7:18:e8:d2:8f:5c:b0:82:
                    94:1f:e6:d2:0d:dc:57:4b:9d:70:53:5b:81:6a:92:
                    a1:98:21:0c:5e:55:7f:3f:8c:7f:2c:6b:3f:3c:30:
                    bc:5c:49:8d:b3:d2:db:23:b1:26:49:fb:81:1f:a1:
                    88:80:59:25:97:e8:b5:3c:bc:b2:92:25:e6:94:6e:
                    df:2c:eb:be:34:80:22:38:be:e1:52:c7:f5:fd:26:
                    b2:e5:07:af:c9:0c:bd:fc:54:7c:74:e9:02:1e:43:
                    64:17:6e:e6:c1:cf:b4:40:78:31:74:21:16:08:fa:
                    3d:14:f2:f0:a1:ab:a4:a5:72:d6:03:28:c6:f0:ff:
                    5d:5f:0d:d8:94:0e:49:5e:9b:2e:cf:2c:01:32:ce:
                    1d:cc:00:1b:9d:52:33:7b:b6:92:e3:13:8e:eb:1d:
                    fa:39:5a:6e:56:a2:ee:ec:01:b4:79:8c:76:89:c9:
                    68:8b:bd:7e:ab:e5:8c:09:e2:ae:bf:e7:36:2a:51:
                    78:c5:6f:8b:bc:8b:5a:a9:40:df:59:cd:82:b0:75:
                    69:eb:38:37:48:fe:6b:9a:37:cc:8b:fb:07:7c:bb:
                    3d:23:1a:e4:c8:cc:90:5a:d0:8c:2b:e4:ae:9f:59:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D6:D7:7C:A4:09:91:DD:E3:B5:1C:0C:0F:4E:BA:51:5B:2A:C2:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/62ff3ec6-eac8-397e-af4d-eb92f92e2c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2c:a4:34:90:59:29:43:56:84:bb:bc:68:48:7f:2d:68:a6:
         67:e3:4b:27:31:d0:12:ca:cb:3a:74:85:e9:00:14:8d:47:88:
         39:31:1f:e3:07:c8:67:38:c7:79:a1:13:a2:03:06:a9:37:3e:
         aa:f8:59:b0:52:1c:5d:70:02:d0:05:0b:b0:1d:f4:b7:92:1b:
         8d:d9:64:e7:16:ac:69:3d:70:08:5f:57:97:10:b5:bb:1f:b0:
         39:43:66:b8:1d:c4:fd:30:0a:bf:e5:8d:80:ef:3a:16:eb:de:
         19:04:2d:61:a2:ce:12:02:60:81:1c:97:e5:15:6e:59:db:0a:
         e4:ce:4b:a7:bf:d4:78:58:83:9a:43:69:b2:6e:94:02:fd:36:
         34:2b:a0:5d:ec:b0:7b:18:7e:42:97:30:99:83:56:16:da:dd:
         b5:c5:2b:03:60:92:71:ee:78:66:cb:05:8d:31:76:ac:19:ce:
         4e:b3:23:09:95:c1:f3:91:99:77:97:61:e4:45:a0:3d:44:11:
         74:e4:67:b7:9b:08:64:33:a9:08:56:5e:0b:6a:89:48:d9:09:
         4d:d0:04:9f:f1:ec:3e:f5:c9:94:8d:80:e7:5f:9c:69:cd:38:
         06:c9:03:7f:10:b9:33:06:ed:a2:35:51:6a:83:1c:5a:7c:e9:
         55:f8:43:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0uqFDtCGrT1MAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI2ZmQyNjItOTRlYS00ZTMzLWFmM2UtMjEyYWJlMGZj
NjI4MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
YzhhNTJiN2QtNGU5Yy00NDhkLThjYmUtYzljOWUzODYxYmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtECB7LcM/fqY43KbXgF4o9+bTXf81xjo0o9c
sIKUH+bSDdxXS51wU1uBapKhmCEMXlV/P4x/LGs/PDC8XEmNs9LbI7EmSfuBH6GI
gFkll+i1PLyykiXmlG7fLOu+NIAiOL7hUsf1/Say5QevyQy9/FR8dOkCHkNkF27m
wc+0QHgxdCEWCPo9FPLwoaukpXLWAyjG8P9dXw3YlA5JXpsuzywBMs4dzAAbnVIz
e7aS4xOO6x36OVpuVqLu7AG0eYx2icloi71+q+WMCeKuv+c2KlF4xW+LvItaqUDf
Wc2CsHVp6zg3SP5rmjfMi/sHfLs9IxrkyMyQWtCMK+Sun1mz+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOnW13ykCZHd47UcDA9OulFbKsJlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YjZm
ZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJhYmUwZmM2MjgvNjJmZjNlYzYtZWFjOC0z
OTdlLWFmNGQtZWI5MmY5MmUyYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWI2ZmQyNjItOTRlYS00ZTMzLWFm
M2UtMjEyYWJlMGZjNjI4LzViNmZkMjYyLTk0ZWEtNGUzMy1hZjNlLTIxMmFiZTBm
YzYyOC5jcmwwHwYDVR0jBBgwFoAUNjzIUHmlbKUy9HhU//w8/Bj4M/cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81YjZmZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJh
YmUwZmM2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjzcEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgspDSQWSlDVoS7vGhIfy1opmfjSycx0BLKyzp0hekAFI1HiDkxH+MH
yGc4x3mhE6IDBqk3Pqr4WbBSHF1wAtAFC7Ad9LeSG43ZZOcWrGk9cAhfV5cQtbsf
sDlDZrgdxP0wCr/ljYDvOhbr3hkELWGizhICYIEcl+UVblnbCuTOS6e/1HhYg5pD
abJulAL9NjQroF3ssHsYfkKXMJmDVhba3bXFKwNgknHueGbLBY0xdqwZzk6zIwmV
wfORmXeXYeRFoD1EEXTkZ7ebCGQzqQhWXgtqiUjZCU3QBJ/x7D71yZSNgOdfnGnN
OAbJA38QuTMG7aI1UWqDHFp86VX4Q5M=
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:25:07 2025 by rpki-client