Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c62613fd-8e54-3d5f-a334-61233e0fc00b.roa
File:                     c62613fd-8e54-3d5f-a334-61233e0fc00b.roa (raw, json)
Hash identifier:          nHZOG1fzTlPePSes+3rYNZ+e+FP7K3viC5nQJw609FQ=
Subject key identifier:   E5:EA:0B:E0:00:96:6A:AB:A4:D6:A2:73:94:BA:7C:5D:41:01:0D:7A
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584B13D6BD4A08534EC6C637C400
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c62613fd-8e54-3d5f-a334-61233e0fc00b.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     2152
IP address blocks:        137.164.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:bd:4a:08:53:4e:c6:c6:37:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=c692b3d2-c2be-4adf-b212-e6bcf06a76d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:24:e6:59:ec:23:d2:aa:53:69:79:d8:54:
                    3f:2c:7c:f4:5b:c4:08:26:4b:be:9f:ed:0c:f5:c1:
                    bd:c0:e6:19:11:65:40:2d:96:a7:89:0f:77:89:25:
                    15:ed:d5:e0:46:4c:b2:8b:43:1a:9c:fb:77:af:4e:
                    20:cb:18:3f:f0:36:13:81:de:1b:22:4d:ef:35:d9:
                    b9:dd:a0:d8:9a:6d:82:6c:7b:a1:54:50:04:2c:57:
                    06:9f:f2:e7:1d:1a:31:93:39:cf:bf:80:81:7b:a7:
                    6f:29:5d:47:70:5d:5e:df:35:25:fe:7e:6c:60:8d:
                    dd:0f:a0:4f:43:db:31:2a:a6:fc:f9:69:bb:28:8c:
                    c3:ed:48:e0:ec:79:40:8f:d4:8b:1e:a3:07:da:72:
                    55:d9:7c:4c:c5:5e:a2:bf:98:37:4b:18:56:60:27:
                    6b:e2:9c:b7:1b:e8:7d:03:e3:78:19:af:48:4a:e5:
                    d7:e3:ed:b7:10:e2:e2:26:f2:f2:b3:cc:9b:ed:b2:
                    e8:0c:98:89:db:a9:f2:b1:aa:24:35:42:8b:37:fc:
                    bf:c9:ce:b3:64:16:91:9f:68:61:bd:97:d9:3b:c5:
                    e1:4f:2b:b2:0f:39:b1:67:3d:0b:d6:c0:fb:8d:a7:
                    1d:2c:76:bd:1e:0f:91:96:7f:1f:62:4c:31:a0:62:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EA:0B:E0:00:96:6A:AB:A4:D6:A2:73:94:BA:7C:5D:41:01:0D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c62613fd-8e54-3d5f-a334-61233e0fc00b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:e2:aa:03:bd:b5:7d:a8:0f:71:0c:74:b5:61:8e:85:29:bb:
         86:5c:f0:da:ad:ed:07:66:8f:f8:f2:81:c7:39:44:ae:8b:d4:
         9e:b7:af:03:65:5f:ec:24:6c:17:dc:2e:87:fd:c7:68:a7:03:
         43:7b:0e:98:17:33:8d:d4:99:c3:3c:b8:2b:14:69:fc:6c:07:
         b8:81:ab:d7:dc:86:f8:98:53:95:57:c3:32:31:9a:c2:87:b2:
         c8:69:8a:0a:6c:ea:f5:98:4c:42:59:69:b0:60:0a:07:f8:ad:
         95:8c:41:17:2a:89:a9:ca:38:1d:44:06:8c:93:85:14:3f:7f:
         5b:4c:5f:da:29:0b:5d:97:ed:c6:35:37:12:95:78:7c:d3:20:
         17:5b:f3:f2:8d:31:57:dc:dc:e4:99:ab:04:c2:64:73:91:56:
         98:48:fc:17:21:fc:7b:9b:4f:e0:49:93:2f:c9:ce:42:9a:e3:
         2c:c5:43:73:d3:18:c4:bb:8b:c7:58:4a:26:78:45:ed:c0:a8:
         99:59:24:09:5f:58:2f:1e:55:a6:79:ad:fa:32:26:66:28:e7:
         07:ac:c7:da:6f:91:e7:35:32:ff:55:97:db:53:23:9f:56:01:
         1c:f3:83:fe:d2:62:b4:b8:c0:a4:62:ed:f8:5c:c1:76:cb:c6:
         e8:ef:f2:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1r1KCFNOxsY3xAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
YzY5MmIzZDItYzJiZS00YWRmLWIyMTItZTZiY2YwNmE3NmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M4k5lnsI9KqU2l52FQ/LHz0W8QIJku+n+0M
9cG9wOYZEWVALZaniQ93iSUV7dXgRkyyi0ManPt3r04gyxg/8DYTgd4bIk3vNdm5
3aDYmm2CbHuhVFAELFcGn/LnHRoxkznPv4CBe6dvKV1HcF1e3zUl/n5sYI3dD6BP
Q9sxKqb8+Wm7KIzD7Ujg7HlAj9SLHqMH2nJV2XxMxV6iv5g3SxhWYCdr4py3G+h9
A+N4Ga9ISuXX4+23EOLiJvLys8yb7bLoDJiJ26nysaokNUKLN/y/yc6zZBaRn2hh
vZfZO8XhTyuyDzmxZz0L1sD7jacdLHa9Hg+Rln8fYkwxoGKOHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXqC+AAlmqrpNaic5S6fF1BAQ16MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYzYyNjEzZmQtOGU1NC0z
ZDVmLWEzMzQtNjEyMzNlMGZjMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMLiqgO9tX2oD3EMdLVhjoUpu4Zc8Nqt7Qdmj/jygcc5RK6L1J63rwNl
X+wkbBfcLof9x2inA0N7DpgXM43UmcM8uCsUafxsB7iBq9fchviYU5VXwzIxmsKH
sshpigps6vWYTEJZabBgCgf4rZWMQRcqianKOB1EBoyThRQ/f1tMX9opC12X7cY1
NxKVeHzTIBdb8/KNMVfc3OSZqwTCZHORVphI/Bch/HubT+BJky/JzkKa4yzFQ3PT
GMS7i8dYSiZ4Re3AqJlZJAlfWC8eVaZ5rfoyJmYo5wesx9pvkec1Mv9Vl9tTI59W
ARzzg/7SYrS4wKRi7fhcwXbLxujv8ok=
-----END CERTIFICATE-----
Generated at Fri Sep 5 05:58:08 2025 by rpki-client