Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa
File:                     e287f98a-b890-3428-ba99-f795e90bb559.roa (raw, json)
Hash identifier:          ZZ9Z5prJo50At/C2L3EHSiHRgU4i4PrGthD2nR9QZ+I=
Subject key identifier:   09:70:88:10:71:4B:52:01:AD:AD:7A:6B:6B:F6:0F:96:20:13:33:CE
Certificate issuer:       /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
Certificate serial:       010D0C9F4328584A5E606393A21CFE87248BDD40
Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     18540
IP address blocks:        170.62.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:63:93:a2:1c:fe:87:24:8b:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=f92b2070-8c2d-47ac-8cbf-a6ea60371d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:1c:fe:fe:e4:ab:c3:66:11:92:9b:3b:de:
                    72:1c:0b:50:fe:c1:45:df:49:49:8b:6e:7b:1e:ad:
                    fb:be:41:3c:52:b1:be:ac:cb:55:cf:8a:1a:52:26:
                    f7:79:0d:d7:b0:be:cd:b8:db:94:84:60:1a:8c:05:
                    a6:f7:9e:d8:74:b6:35:d3:0f:45:95:77:6c:62:1b:
                    8c:3a:a3:9a:a0:b3:e5:14:99:07:a6:de:e1:60:91:
                    57:7d:5b:f9:2f:e3:b3:05:95:af:3a:cf:b6:6e:23:
                    74:11:30:58:8c:d8:7d:81:00:44:c9:b4:8a:9d:75:
                    78:94:10:a8:fe:d4:01:94:bb:fe:a8:96:87:5c:f4:
                    5e:0d:14:57:4a:45:b3:35:d3:36:63:0a:31:5e:57:
                    8a:aa:7f:ff:3e:ab:df:fa:98:03:d4:13:1e:ac:35:
                    8a:02:ff:52:aa:8b:93:5e:4d:9e:ad:c3:b6:a8:6e:
                    e9:62:dc:f1:5b:fe:12:bf:64:9e:77:94:91:82:6c:
                    4f:26:1b:38:d5:34:c8:bb:99:1b:a5:09:c0:16:70:
                    3d:65:7d:65:c3:84:99:85:2c:2e:d3:e8:3c:ab:5c:
                    86:51:26:ec:81:6c:85:40:5a:90:ad:b4:62:a8:1c:
                    c6:59:db:a2:23:90:ef:29:11:2c:ea:78:32:27:c5:
                    af:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:70:88:10:71:4B:52:01:AD:AD:7A:6B:6B:F6:0F:96:20:13:33:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/e287f98a-b890-3428-ba99-f795e90bb559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d2:c4:41:23:5c:47:89:99:00:c8:ff:95:04:de:d0:c3:af:
         dd:41:eb:96:58:b9:34:c3:65:cb:47:71:28:16:b5:5b:69:08:
         56:f9:82:b7:33:40:c4:0d:4a:69:0e:e7:6e:c6:8d:02:14:97:
         e4:01:d3:12:12:ea:6e:d8:20:09:07:86:81:7e:37:9d:2d:24:
         f9:d8:ad:3b:0b:a1:68:18:f4:a2:60:02:d8:9d:e9:de:7b:ea:
         f1:62:a7:df:7b:9f:3a:59:7d:5e:e1:d8:21:7e:bc:9a:28:db:
         ff:97:51:30:42:26:5a:63:93:a9:67:11:58:35:d6:3e:bf:0c:
         45:c6:ff:97:d5:38:90:8c:d6:a8:1a:1b:c9:71:c2:d9:73:ba:
         ca:0f:96:e8:da:e8:fd:76:8a:6c:51:98:67:2c:27:57:bb:c9:
         df:77:e7:65:93:22:01:2e:0f:20:9d:a1:4d:16:e3:93:2f:39:
         a0:ed:ef:7e:5d:b4:20:74:0c:04:36:8e:3b:43:2d:ea:7a:d8:
         64:81:15:28:79:12:4b:ad:d8:57:9b:1c:ad:67:3e:14:4a:7a:
         bf:ce:8b:91:38:00:80:80:61:52:f5:4a:6a:f8:fc:09:0a:67:
         24:38:c1:db:da:94:d3:43:b6:fb:22:cc:69:18:39:70:74:5f:
         aa:13:bd:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGOTohz+hySL3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2QwMDE5OGYtYTUzMC00OTBjLThlZjUtNWMzMWFjOWI4
OGVlMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk
ZjkyYjIwNzAtOGMyZC00N2FjLThjYmYtYTZlYTYwMzcxZDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvkc/v7kq8NmEZKbO95yHAtQ/sFF30lJi257
Hq37vkE8UrG+rMtVz4oaUib3eQ3XsL7NuNuUhGAajAWm957YdLY10w9FlXdsYhuM
OqOaoLPlFJkHpt7hYJFXfVv5L+OzBZWvOs+2biN0ETBYjNh9gQBEybSKnXV4lBCo
/tQBlLv+qJaHXPReDRRXSkWzNdM2YwoxXleKqn//Pqvf+pgD1BMerDWKAv9SqouT
Xk2ercO2qG7pYtzxW/4Sv2Sed5SRgmxPJhs41TTIu5kbpQnAFnA9ZX1lw4SZhSwu
0+g8q1yGUSbsgWyFQFqQrbRiqBzGWduiI5DvKREs6ngyJ8WvqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlwiBBxS1IBra16a2v2D5YgEzPOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDAw
MTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMxYWM5Yjg4ZWUvZTI4N2Y5OGEtYjg5MC0z
NDI4LWJhOTktZjc5NWU5MGJiNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2QwMDE5OGYtYTUzMC00OTBjLThl
ZjUtNWMzMWFjOWI4OGVlL2NkMDAxOThmLWE1MzAtNDkwYy04ZWY1LTVjMzFhYzli
ODhlZS5jcmwwHwYDVR0jBBgwFoAU7rLnVBdOMcl6DRXlckVdZx3zkr8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZDAwMTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMx
YWM5Yjg4ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqj5UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3SxEEjXEeJmQDI/5UE3tDDr91B65ZYuTTDZctHcSgWtVtpCFb5grcz
QMQNSmkO527GjQIUl+QB0xIS6m7YIAkHhoF+N50tJPnYrTsLoWgY9KJgAtid6d57
6vFip997nzpZfV7h2CF+vJoo2/+XUTBCJlpjk6lnEVg11j6/DEXG/5fVOJCM1qga
G8lxwtlzusoPluja6P12imxRmGcsJ1e7yd9352WTIgEuDyCdoU0W45MvOaDt735d
tCB0DAQ2jjtDLep62GSBFSh5Ekut2FebHK1nPhRKer/Oi5E4AICAYVL1Smr4/AkK
ZyQ4wdvalNNDtvsizGkYOXB0X6oTvZ8=
-----END CERTIFICATE-----
Generated at Mon Jul 7 17:26:23 2025 by rpki-client