Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/1820bf93-645e-302b-b259-48e4c1114e3e.roa
File:                     1820bf93-645e-302b-b259-48e4c1114e3e.roa (raw, json)
Hash identifier:          Go2DvGFLC1+6gn6VKM1x2AvDrwW9Hiz2ZhEar53i7pI=
Subject key identifier:   B2:14:3D:77:CD:57:E5:67:80:D5:F8:6E:5E:B9:33:B7:74:0E:60:3D
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F4328584AB91B82D83498A87F21947100
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/1820bf93-645e-302b-b259-48e4c1114e3e.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     19331
IP address blocks:        162.251.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:82:d8:34:98:a8:7f:21:94:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=9c010286-fd8a-47c8-a79f-a797cde31aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:6c:e9:95:c7:2b:ec:ee:ce:fb:bc:3c:00:
                    20:63:b2:9a:61:56:ae:64:e6:51:1d:f5:0b:c4:fa:
                    b1:75:08:3b:51:01:2c:fd:1f:06:58:12:9b:85:20:
                    68:73:38:75:75:b9:79:09:0a:e6:23:24:d2:83:7c:
                    09:58:4b:8a:5e:59:43:77:a2:54:f2:37:e0:2b:9c:
                    22:6f:75:3b:2a:34:c4:b2:c0:72:a1:18:0e:08:2f:
                    22:9e:90:ad:3a:34:de:a7:79:5c:95:38:ef:db:ce:
                    d2:d1:c7:72:79:38:91:12:21:34:f9:f6:6a:59:65:
                    31:5f:a3:36:c3:d4:83:78:8f:73:ea:c4:f0:a0:66:
                    6c:3e:58:a4:65:29:19:cd:64:b5:f1:47:d7:81:db:
                    12:4b:72:ae:a4:be:2c:6a:8e:17:83:1a:3e:67:71:
                    a1:db:40:51:06:a4:43:77:4f:0a:a4:bb:36:0b:e8:
                    84:b6:0a:1d:e8:c5:1a:41:2e:bc:29:7b:21:2e:b9:
                    55:6e:6c:3b:e2:57:63:e1:87:96:f8:0b:80:d5:5e:
                    d4:e9:cf:2f:c4:c9:fd:3d:90:ed:47:42:51:f3:2e:
                    32:37:ad:3b:e9:c2:c1:ec:b2:dc:e6:5a:f4:8b:60:
                    82:a2:8e:ab:c9:6b:4c:8f:dd:57:1c:bd:5d:e3:7a:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:14:3D:77:CD:57:E5:67:80:D5:F8:6E:5E:B9:33:B7:74:0E:60:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/1820bf93-645e-302b-b259-48e4c1114e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:cd:7e:de:a4:78:86:cf:90:a6:5a:3e:7a:4b:15:48:e5:b4:
         e3:5b:3f:2a:bb:bf:1d:7d:35:a2:19:49:e4:b4:ca:9c:8c:15:
         84:36:98:25:58:83:3b:6c:98:3b:68:fb:50:68:4d:bf:0a:ce:
         5c:58:06:14:89:33:f7:37:40:37:d0:56:17:f7:26:d3:06:1f:
         f6:5b:74:8a:f4:52:ec:4f:74:04:11:f2:a4:6b:0c:29:65:6c:
         a8:1b:13:f2:1b:3b:4a:1a:32:f8:ab:13:42:56:20:80:1d:3a:
         c3:2b:d6:5c:d3:7b:1d:f0:2d:66:9e:a7:aa:e1:a0:db:1c:32:
         39:eb:96:be:df:ca:8e:e3:75:af:cb:96:f5:48:28:5f:4c:95:
         29:7d:ad:ce:e0:e2:18:0d:9c:76:59:e5:f2:82:fe:9d:b2:f3:
         54:02:c1:be:5c:a7:d7:44:08:f6:c2:38:e2:b3:e8:27:a8:b1:
         7d:35:36:5a:9a:24:20:e4:40:07:62:68:36:c1:e6:a9:2a:48:
         86:8e:75:8a:de:d5:56:c4:fd:84:8b:8a:29:5d:81:3a:f6:89:
         ca:f3:b3:d1:a9:b2:0a:e4:67:a2:c5:0c:f0:55:64:5a:10:f4:
         69:cf:9d:bc:4c:0c:79:a4:3c:27:d2:71:fe:3b:c6:a0:83:ce:
         65:37:1e:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4LYNJiofyGUcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhiMDJlZDItZjg5Ny00NWJlLWI5ZmItMzQ2Mjk0NDE4
ZWNiMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
OWMwMTAyODYtZmQ4YS00N2M4LWE3OWYtYTc5N2NkZTMxYWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHps6ZXHK+zuzvu8PAAgY7KaYVauZOZRHfUL
xPqxdQg7UQEs/R8GWBKbhSBoczh1dbl5CQrmIyTSg3wJWEuKXllDd6JU8jfgK5wi
b3U7KjTEssByoRgOCC8inpCtOjTep3lclTjv287S0cdyeTiREiE0+fZqWWUxX6M2
w9SDeI9z6sTwoGZsPlikZSkZzWS18UfXgdsSS3KupL4sao4Xgxo+Z3Gh20BRBqRD
d08KpLs2C+iEtgod6MUaQS68KXshLrlVbmw74ldj4YeW+AuA1V7U6c8vxMn9PZDt
R0JR8y4yN6076cLB7LLc5lr0i2CCoo6ryWtMj91XHL1d43rnkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLIUPXfNV+VngNX4bl65M7d0DmA9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OGIw
MmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYyOTQ0MThlY2IvMTgyMGJmOTMtNjQ1ZS0z
MDJiLWIyNTktNDhlNGMxMTE0ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDhiMDJlZDItZjg5Ny00NWJlLWI5
ZmItMzQ2Mjk0NDE4ZWNiLzQ4YjAyZWQyLWY4OTctNDViZS1iOWZiLTM0NjI5NDQx
OGVjYi5jcmwwHwYDVR0jBBgwFoAU8ShDZzN0rvFkkge9rUVjecCogvAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80OGIwMmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYy
OTQ0MThlY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovs4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/Nft6keIbPkKZaPnpLFUjltONbPyq7vx19NaIZSeS0ypyMFYQ2mCVY
gztsmDto+1BoTb8KzlxYBhSJM/c3QDfQVhf3JtMGH/ZbdIr0UuxPdAQR8qRrDCll
bKgbE/IbO0oaMvirE0JWIIAdOsMr1lzTex3wLWaep6rhoNscMjnrlr7fyo7jda/L
lvVIKF9MlSl9rc7g4hgNnHZZ5fKC/p2y81QCwb5cp9dECPbCOOKz6CeosX01Nlqa
JCDkQAdiaDbB5qkqSIaOdYre1VbE/YSLiildgTr2icrzs9GpsgrkZ6LFDPBVZFoQ
9GnPnbxMDHmkPCfScf47xqCDzmU3HhU=
-----END CERTIFICATE-----
Generated at Sun Aug 3 00:47:04 2025 by rpki-client