Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa
File:                     ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa (raw, json)
Hash identifier:          w9Xs8dHMDREhpmctLdvpm1rteGmbqEYpMTCbclWdSOw=
Subject key identifier:   97:4D:1A:76:60:26:19:C6:C4:6B:B5:ED:EC:C0:5F:30:51:B5:68:C4
Certificate issuer:       /CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4
Certificate serial:       010D0C9F4328584B3DB70381C7B6EF2BACD80280
Authority key identifier: 60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     40910
IP address blocks:        198.205.16.0/20 maxlen: 20
                          198.205.24.0/21 maxlen: 21
                          199.119.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:03:81:c7:b6:ef:2b:ac:d8:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=07ebd04e-106c-42a4-9145-90fdd5fccb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:6c:6d:3f:bb:5a:9c:b4:25:d6:9f:c8:1e:
                    c0:c4:63:74:56:40:bf:eb:f8:85:a0:6a:9b:23:a7:
                    af:f6:c2:f9:d2:1c:14:45:4b:30:3a:3f:27:f8:3c:
                    1f:9d:f1:ad:9b:26:99:b7:f2:01:7b:ca:23:96:65:
                    4c:7f:11:98:f1:89:d3:e9:8a:ed:1a:38:99:01:a7:
                    d8:39:d9:12:94:2d:74:c2:f3:f6:11:11:64:e6:19:
                    00:1e:5c:d4:43:f5:d8:95:c5:c3:af:3b:f1:5e:c3:
                    a7:d6:fc:18:18:4b:d5:22:f6:e1:34:0f:b9:a1:9b:
                    e9:54:47:9f:8b:14:0b:3e:ce:27:42:9e:16:dd:71:
                    f7:df:0d:a6:90:91:ee:e0:89:a9:c6:bd:89:a8:07:
                    76:6c:5d:38:6a:c6:f1:7e:c6:9d:39:ef:9d:6f:0f:
                    ba:39:e2:fe:30:cd:5d:70:ac:c6:67:b4:ee:04:cd:
                    50:6d:a9:56:5b:a1:4b:0d:86:bb:5f:0d:8e:2c:e9:
                    d2:53:24:e5:98:af:0b:de:00:37:b5:4b:45:22:79:
                    f8:40:ff:72:89:aa:96:c7:cb:cf:6f:17:4f:1a:09:
                    58:3d:34:81:f4:97:71:c7:f2:a0:83:5c:d8:cc:10:
                    ff:94:1b:84:fb:e5:3c:d5:b7:c1:ad:43:27:d6:6a:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4D:1A:76:60:26:19:C6:C4:6B:B5:ED:EC:C0:5F:30:51:B5:68:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/ed5d61e3-46f0-3c34-8be9-3ffce8ad8c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.crl

            X509v3 Authority Key Identifier:
                keyid:60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.205.16.0/20
                  199.119.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7e:63:38:ef:a3:01:cb:4a:66:d8:63:f5:1e:26:08:1b:9f:
         6e:03:47:a6:21:0f:42:bb:b0:30:31:b3:22:2b:69:08:39:19:
         11:c2:e8:d0:11:b8:a1:d0:d8:dd:f0:d5:f1:40:19:57:1d:d1:
         d1:2f:41:74:70:4a:e9:73:f2:ab:c9:37:0c:cf:95:2a:9f:cf:
         c3:f7:22:ab:46:20:77:5e:c4:40:55:53:ea:44:a8:63:20:e1:
         7c:dd:40:b9:5b:8d:57:da:da:39:27:71:cb:58:1c:50:03:35:
         4a:7f:b3:83:5e:d7:8d:55:6e:37:01:04:63:5f:6d:39:ca:43:
         66:ec:e6:7e:d3:fe:cb:86:ab:b0:e2:63:97:1d:73:87:68:01:
         f1:a0:a1:d2:9f:61:4f:32:bd:41:7d:75:ed:67:f1:5e:0d:e2:
         cc:78:4e:8f:d4:49:37:09:48:ea:82:3a:c1:b8:61:07:da:14:
         0c:45:b1:06:3c:5c:91:0d:0c:dd:a5:c9:17:1b:9c:7d:91:33:
         e0:ed:49:2f:9e:2e:2b:9f:a2:09:b2:21:4d:b6:44:e2:14:67:
         0d:21:9f:74:71:2f:70:5f:e4:af:55:2b:5e:1f:72:00:c9:64:
         67:ab:68:49:d9:64:3c:64:18:c1:1e:89:47:21:83:82:c3:58:
         92:a0:12:b4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEs9twOBx7bvK6zYAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ0YmRjYWMtMDVmZC00ZGQ1LWFkYmQtOWRiZDJmYjI5
NWM0MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
MDdlYmQwNGUtMTA2Yy00MmE0LTkxNDUtOTBmZGQ1ZmNjYjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqihsbT+7Wpy0JdafyB7AxGN0VkC/6/iFoGqb
I6ev9sL50hwURUswOj8n+DwfnfGtmyaZt/IBe8ojlmVMfxGY8YnT6YrtGjiZAafY
OdkSlC10wvP2ERFk5hkAHlzUQ/XYlcXDrzvxXsOn1vwYGEvVIvbhNA+5oZvpVEef
ixQLPs4nQp4W3XH33w2mkJHu4Impxr2JqAd2bF04asbxfsadOe+dbw+6OeL+MM1d
cKzGZ7TuBM1QbalWW6FLDYa7Xw2OLOnSUyTlmK8L3gA3tUtFInn4QP9yiaqWx8vP
bxdPGglYPTSB9Jdxx/Kgg1zYzBD/lBuE++U81bfBrUMn1mrQJQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJdNGnZgJhnGxGu17ezAXzBRtWjEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDRi
ZGNhYy0wNWZkLTRkZDUtYWRiZC05ZGJkMmZiMjk1YzQvZWQ1ZDYxZTMtNDZmMC0z
YzM0LThiZTktM2ZmY2U4YWQ4YzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ0YmRjYWMtMDVmZC00ZGQ1LWFk
YmQtOWRiZDJmYjI5NWM0LzY0NGJkY2FjLTA1ZmQtNGRkNS1hZGJkLTlkYmQyZmIy
OTVjNC5jcmwwHwYDVR0jBBgwFoAUYBcIFTvweroYlsRQE4TENSVS8BUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDRiZGNhYy0wNWZkLTRkZDUtYWRiZC05ZGJk
MmZiMjk1YzQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQExs0QAwQA
x3cZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAG5+YzjvowHLSmbYY/UeJggbn24DR6YhD0K7sDAxsyIraQg5
GRHC6NARuKHQ2N3w1fFAGVcd0dEvQXRwSulz8qvJNwzPlSqfz8P3IqtGIHdexEBV
U+pEqGMg4XzdQLlbjVfa2jkncctYHFADNUp/s4Ne141VbjcBBGNfbTnKQ2bs5n7T
/suGq7DiY5cdc4doAfGgodKfYU8yvUF9de1n8V4N4sx4To/USTcJSOqCOsG4YQfa
FAxFsQY8XJENDN2lyRcbnH2RM+DtSS+eLiufogmyIU22ROIUZw0hn3RxL3Bf5K9V
K14fcgDJZGeraEnZZDxkGMEeiUchg4LDWJKgErQ=
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:05:13 2025 by rpki-client