Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6fc98399-f523-33d0-8d75-b093f04c1af4.roa
File:                     6fc98399-f523-33d0-8d75-b093f04c1af4.roa (raw, json)
Hash identifier:          Mm31L4zloG3maU+Zo56AjaXQbQVXt/TfZFZ2/G7H7Uc=
Subject key identifier:   6B:FE:68:F2:8E:53:BF:C2:0A:2D:F8:AC:8B:72:EC:38:EA:DA:1C:66
Certificate issuer:       /CN=4cbd1783-5272-4e33-b882-bdd928a5e339
Certificate serial:       010D0C9F4328584B99D78F6FD1EADBA822FD95C0
Authority key identifier: 04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6fc98399-f523-33d0-8d75-b093f04c1af4.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     31996
IP address blocks:        209.198.16.0/22 maxlen: 24
                          209.198.22.0/23 maxlen: 24
                          209.198.28.0/23 maxlen: 24
                          209.198.40.0/22 maxlen: 24
                          209.198.44.0/23 maxlen: 24
                          216.189.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:8f:6f:d1:ea:db:a8:22:fd:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbd1783-5272-4e33-b882-bdd928a5e339
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=37f573f5-f2a8-4c03-8fa6-68626fa3bdd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:86:be:9e:4a:68:2c:41:f6:7d:65:61:aa:38:
                    ee:4f:82:62:32:73:7d:4b:47:51:f1:c2:75:42:56:
                    c6:00:88:02:59:e7:90:9c:73:b2:47:9a:e8:cb:e7:
                    94:56:16:e4:37:d5:3f:9c:ce:e6:3e:47:4e:ce:01:
                    6a:f2:da:34:4e:b0:93:fb:5b:6f:fe:96:ee:6c:f3:
                    52:6d:24:c6:8e:74:c7:bc:4f:97:9b:a4:4f:2e:0f:
                    2f:2c:1a:bc:4e:b8:7e:85:5a:75:43:03:a3:31:83:
                    35:6a:16:42:b7:4b:4b:87:04:48:a9:4e:49:30:e1:
                    67:95:7c:16:e8:b1:2f:5f:4e:98:8c:0d:3e:35:a9:
                    ce:69:10:19:f8:c6:d4:4e:ff:6b:f1:df:af:54:68:
                    98:a1:97:e9:f4:92:13:6d:13:c4:67:9e:ca:a4:23:
                    48:82:f9:a2:3f:aa:c2:fa:e4:bf:93:39:44:eb:33:
                    3c:55:8b:16:ca:73:d7:7a:b2:fd:42:11:24:d2:a7:
                    1b:1c:b1:22:ef:32:b9:46:bc:af:48:e7:7f:9d:cf:
                    82:9d:63:f2:84:db:f4:f2:78:a4:fd:39:0d:27:1d:
                    cc:86:b5:ba:4f:3f:3a:2e:88:68:5e:bf:26:12:52:
                    08:9f:9c:ae:f8:fc:d6:09:45:80:d2:57:ff:b1:b8:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FE:68:F2:8E:53:BF:C2:0A:2D:F8:AC:8B:72:EC:38:EA:DA:1C:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6fc98399-f523-33d0-8d75-b093f04c1af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl

            X509v3 Authority Key Identifier:
                keyid:04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.198.16.0/22
                  209.198.22.0/23
                  209.198.28.0/23
                  209.198.40.0-209.198.45.255
                  216.189.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:60:2d:4c:d1:eb:b1:c5:15:b6:31:1f:aa:6d:f3:31:2d:1d:
         e5:54:bd:a8:ec:1d:2c:c3:4b:2d:a3:5e:95:41:77:c8:4d:08:
         d2:63:b3:54:2f:02:14:01:e9:35:d7:f8:2e:d8:47:33:64:3f:
         08:4a:29:af:69:9a:c1:9d:e0:21:76:f4:4c:99:ea:6a:62:f3:
         c1:1c:a8:e1:23:69:f7:4c:eb:fe:e7:92:d6:81:c1:5f:9b:ee:
         e1:f0:b0:21:83:ad:bb:47:a6:82:2c:21:46:46:80:66:ac:ac:
         02:83:b6:a2:33:6c:d9:7d:f0:4c:7b:ba:11:27:34:b7:10:58:
         29:b3:52:4a:45:c0:f4:d6:c8:68:3d:a2:69:df:81:f7:00:db:
         96:26:02:6e:ea:a9:b3:38:69:5c:4c:21:7b:c5:7a:b9:7e:19:
         9c:42:a6:35:f4:53:cf:51:bf:7f:ce:07:ed:30:22:39:0c:a2:
         6d:e5:c5:d0:1c:5d:80:1d:2d:4c:d4:95:bd:4f:23:f6:7e:bc:
         88:1d:60:06:2d:59:b2:0d:62:8e:5f:b8:27:db:39:45:e5:b2:
         66:0c:33:74:ca:2d:94:9c:2e:2b:84:3b:7e:c3:eb:b0:c5:a0:
         3a:77:22:d8:05:67:1c:fd:cd:12:39:a0:fd:de:c0:44:0d:73:
         cb:44:45:d8
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEuZ149v0erbqCL9lcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNiZDE3ODMtNTI3Mi00ZTMzLWI4ODItYmRkOTI4YTVl
MzM5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
MzdmNTczZjUtZjJhOC00YzAzLThmYTYtNjg2MjZmYTNiZGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4a+nkpoLEH2fWVhqjjuT4JiMnN9S0dR8cJ1
QlbGAIgCWeeQnHOyR5roy+eUVhbkN9U/nM7mPkdOzgFq8to0TrCT+1tv/pbubPNS
bSTGjnTHvE+Xm6RPLg8vLBq8Trh+hVp1QwOjMYM1ahZCt0tLhwRIqU5JMOFnlXwW
6LEvX06YjA0+NanOaRAZ+MbUTv9r8d+vVGiYoZfp9JITbRPEZ57KpCNIgvmiP6rC
+uS/kzlE6zM8VYsWynPXerL9QhEk0qcbHLEi7zK5RryvSOd/nc+CnWPyhNv08nik
/TkNJx3MhrW6Tz86LohoXr8mElIIn5yu+PzWCUWA0lf/sbh8JQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFGv+aPKOU7/CCi34rIty7Djq2hxmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80Y2Jk
MTc4My01MjcyLTRlMzMtYjg4Mi1iZGQ5MjhhNWUzMzkvNmZjOTgzOTktZjUyMy0z
M2QwLThkNzUtYjA5M2YwNGMxYWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGNiZDE3ODMtNTI3Mi00ZTMzLWI4
ODItYmRkOTI4YTVlMzM5LzRjYmQxNzgzLTUyNzItNGUzMy1iODgyLWJkZDkyOGE1
ZTMzOS5jcmwwHwYDVR0jBBgwFoAUBHyAUw64RhKpLHGzqNzKbVrcWU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80Y2JkMTc4My01MjcyLTRlMzMtYjg4Mi1iZGQ5
MjhhNWUzMzkuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQC0cYQAwQB
0cYWAwQB0cYcMAwDBAPRxigDBAHRxiwDBAPYvSgwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAW2AtTNHrscUV
tjEfqm3zMS0d5VS9qOwdLMNLLaNelUF3yE0I0mOzVC8CFAHpNdf4LthHM2Q/CEop
r2mawZ3gIXb0TJnqamLzwRyo4SNp90zr/ueS1oHBX5vu4fCwIYOtu0emgiwhRkaA
ZqysAoO2ojNs2X3wTHu6ESc0txBYKbNSSkXA9NbIaD2iad+B9wDbliYCbuqpszhp
XEwhe8V6uX4ZnEKmNfRTz1G/f84H7TAiOQyibeXF0BxdgB0tTNSVvU8j9n68iB1g
Bi1Zsg1ijl+4J9s5ReWyZgwzdMotlJwuK4Q7fsPrsMWgOnci2AVnHP3NEjmg/d7A
RA1zy0RF2A==
-----END CERTIFICATE-----
Generated at Wed Oct 22 07:41:09 2025 by rpki-client