Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a4892964-6f46-32fa-b6a9-27369929a5ba.roa
File:                     a4892964-6f46-32fa-b6a9-27369929a5ba.roa (raw, json)
Hash identifier:          4wZsbHSyfd2xuqlRsWVfCjgqWX6c2pFPOtp+vkj9Pwc=
Subject key identifier:   A5:F4:D1:09:A4:25:A9:00:72:0E:33:8E:F6:C2:5E:24:7A:B7:80:61
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B2066D69A8A923E8BEB1A2800
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a4892964-6f46-32fa-b6a9-27369929a5ba.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     17252
IP address blocks:        67.227.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d6:9a:8a:92:3e:8b:eb:1a:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=5683cbc4-c6e4-499d-8032-43e766476781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:df:88:58:bc:8d:7e:09:71:81:05:b7:9f:c5:
                    2e:cd:29:36:c4:b3:44:05:32:b2:63:da:65:37:ac:
                    1e:ad:b3:0d:67:88:d5:08:ce:f7:ec:ea:e8:e4:4c:
                    7d:6f:1f:b7:84:9a:f5:e8:0b:fa:ee:d2:0b:78:ad:
                    f1:5d:d5:56:39:21:9e:6b:37:c3:81:38:de:b1:26:
                    b1:c8:77:21:86:93:0e:6e:90:53:a6:0a:e9:ee:1d:
                    33:0c:dc:18:65:48:8e:02:6b:88:44:18:f8:2b:2b:
                    22:31:1c:ec:95:f8:9d:f0:09:f7:40:5a:bf:40:ea:
                    8b:45:63:90:c2:b5:4d:f8:04:08:3e:16:67:59:1f:
                    72:c4:36:ae:a6:e3:6b:b3:f6:3e:83:c4:17:d8:d5:
                    0c:6b:67:b2:6d:ff:f5:a5:92:57:9f:ee:e2:69:ca:
                    ab:6b:98:42:5d:8d:ac:2e:67:47:98:e0:e4:73:44:
                    91:c7:28:08:4f:14:6d:fa:94:27:23:cb:83:78:8c:
                    81:cd:c5:8d:b6:e0:a4:4d:e4:73:49:55:1c:f5:17:
                    07:86:66:00:7f:a1:70:eb:35:c3:00:a8:ba:9a:64:
                    32:50:52:17:a2:c9:39:58:bd:f9:93:57:cd:04:06:
                    ca:2a:3e:bf:71:00:40:1e:09:b7:4a:69:92:93:1b:
                    d5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F4:D1:09:A4:25:A9:00:72:0E:33:8E:F6:C2:5E:24:7A:B7:80:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a4892964-6f46-32fa-b6a9-27369929a5ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8f:c3:85:78:70:6a:71:a3:f0:53:4c:b0:61:b0:ee:99:dc:
         32:2c:dc:32:c5:b3:58:98:ee:15:21:7f:86:5f:30:79:fd:c2:
         12:f0:7b:33:b2:a5:c4:fc:80:79:78:59:92:bb:ab:86:b9:dc:
         0f:77:49:0b:62:a5:18:89:1a:be:7d:ee:fb:a8:c1:49:f7:40:
         fe:a4:cd:0a:3b:82:56:02:d8:5f:2c:c5:84:5f:73:01:9c:13:
         3d:06:fe:b9:f1:3f:d9:40:fd:1b:dc:3d:37:44:16:b0:2e:8b:
         d0:19:07:f3:35:b2:46:c9:a6:37:01:d4:83:69:bf:21:11:98:
         29:52:10:b2:10:48:73:fa:f7:1c:5a:df:2f:01:12:b2:6c:30:
         a0:d7:c6:d2:8f:9c:25:48:17:bf:36:f3:be:1f:26:f5:e7:b1:
         fc:c9:98:26:c1:7f:06:fe:20:fb:2e:90:96:43:c8:df:50:53:
         2d:a4:b2:aa:c6:f7:1d:9a:ea:56:63:1f:b8:f6:62:b7:9f:3c:
         d0:c2:be:2e:7a:17:46:1a:1d:20:13:b4:1f:1c:d1:9e:ee:9e:
         a9:4e:13:ad:e7:61:82:b2:5b:3a:c8:cf:b9:2b:48:73:36:6b:
         e9:d9:52:4a:32:0e:53:46:b1:13:b1:59:ae:d7:f0:39:e7:21:
         d7:d5:1b:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtaaipI+i+saKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk
NTY4M2NiYzQtYzZlNC00OTlkLTgwMzItNDNlNzY2NDc2NzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9+IWLyNfglxgQW3n8UuzSk2xLNEBTKyY9pl
N6werbMNZ4jVCM737Oro5Ex9bx+3hJr16Av67tILeK3xXdVWOSGeazfDgTjesSax
yHchhpMObpBTpgrp7h0zDNwYZUiOAmuIRBj4KysiMRzslfid8An3QFq/QOqLRWOQ
wrVN+AQIPhZnWR9yxDaupuNrs/Y+g8QX2NUMa2eybf/1pZJXn+7iacqra5hCXY2s
LmdHmODkc0SRxygITxRt+pQnI8uDeIyBzcWNtuCkTeRzSVUc9RcHhmYAf6Fw6zXD
AKi6mmQyUFIXosk5WL35k1fNBAbKKj6/cQBAHgm3SmmSkxvVywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKX00QmkJakAcg4zjvbCXiR6t4BhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYTQ4OTI5NjQtNmY0Ni0z
MmZhLWI2YTktMjczNjk5MjlhNWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ+MQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAePw4V4cGpxo/BTTLBhsO6Z3DIs3DLFs1iY7hUhf4ZfMHn9whLwezOy
pcT8gHl4WZK7q4a53A93SQtipRiJGr597vuowUn3QP6kzQo7glYC2F8sxYRfcwGc
Ez0G/rnxP9lA/RvcPTdEFrAui9AZB/M1skbJpjcB1INpvyERmClSELIQSHP69xxa
3y8BErJsMKDXxtKPnCVIF782874fJvXnsfzJmCbBfwb+IPsukJZDyN9QUy2ksqrG
9x2a6lZjH7j2YrefPNDCvi56F0YaHSATtB8c0Z7unqlOE63nYYKyWzrIz7krSHM2
a+nZUkoyDlNGsROxWa7X8DnnIdfVG0w=
-----END CERTIFICATE-----
Generated at Mon Sep 15 04:23:31 2025 by rpki-client