Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/28478ea8-97a9-39be-a056-923c01c65688.roa
File:                     28478ea8-97a9-39be-a056-923c01c65688.roa (raw, json)
Hash identifier:          nItn56WSMhB8vLYXjPebl49bYEObrFBBWpkTw4Oq+HY=
Subject key identifier:   46:CD:01:E3:56:96:99:19:09:F5:5F:FF:1F:6C:05:78:E4:2C:94:EF
Certificate issuer:       /CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
Certificate serial:       010D0C9F4328584B110BFFDB9B6A15EA1F3ACF80
Authority key identifier: 87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/28478ea8-97a9-39be-a056-923c01c65688.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     22147
IP address blocks:        162.219.96.0/22 maxlen: 24
                          162.219.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0b:ff:db:9b:6a:15:ea:1f:3a:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=e63deddd-dd60-446a-9c52-067de73c748c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:b1:30:b5:e5:94:2f:be:df:78:8c:98:8b:
                    55:b2:6f:f8:1d:ad:e5:ae:24:17:f3:dc:8b:b5:fb:
                    18:b2:6c:cb:ea:22:ef:0b:49:22:f5:ef:13:de:95:
                    b5:b0:c5:d9:94:ff:bc:42:24:23:a5:34:5e:4d:f5:
                    60:8f:53:da:66:88:ca:2d:88:5e:27:8f:2f:f0:94:
                    30:43:74:79:11:c8:c0:d7:cf:2b:30:fe:98:ad:19:
                    a9:82:19:64:72:38:04:e9:1a:05:4c:1c:d2:0b:08:
                    ce:1d:06:ef:fd:3a:11:6e:ac:65:f7:2d:fd:b4:7e:
                    81:d0:93:ca:de:c8:a3:c2:03:be:00:24:6c:55:7e:
                    c6:9f:25:69:0f:fc:c3:6e:6c:0a:b0:8b:8f:2b:0b:
                    6c:aa:ad:46:9d:31:f1:e6:59:88:fc:22:8c:17:ac:
                    bc:8e:f7:13:ab:80:9a:9c:bd:33:7e:98:78:ee:76:
                    f4:d3:00:cd:5f:8b:be:d7:06:a2:7d:35:0e:ad:3c:
                    f2:c8:a7:2f:4c:58:0b:ee:0d:31:11:75:16:12:b6:
                    d7:4a:7f:23:07:21:6a:de:48:6e:e2:19:2e:56:84:
                    51:4f:ad:ec:75:f2:e5:e6:03:b9:d0:fa:7b:26:a2:
                    99:c2:c2:54:83:8a:2c:b1:33:10:b1:c9:7c:36:41:
                    52:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CD:01:E3:56:96:99:19:09:F5:5F:FF:1F:6C:05:78:E4:2C:94:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/28478ea8-97a9-39be-a056-923c01c65688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.crl

            X509v3 Authority Key Identifier:
                keyid:87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:88:d1:b8:da:c8:f6:39:db:c9:05:71:83:11:65:ea:65:fc:
         46:56:af:1d:35:8a:b6:29:14:29:6f:9b:57:40:54:85:55:1f:
         b9:4b:9a:4a:b2:20:4a:ce:da:89:ac:af:93:f8:31:0d:46:f0:
         24:1c:b9:35:54:0f:34:62:05:13:1c:85:47:19:62:33:c8:22:
         63:05:15:80:e5:5f:ff:15:06:4c:98:fd:68:6f:f3:24:5f:2b:
         47:11:f6:f2:d5:a5:45:2f:e6:c5:b7:92:34:14:b4:3e:9a:b7:
         84:c7:3a:81:ec:ff:54:45:86:99:12:40:4a:18:2d:09:7c:83:
         fe:25:48:17:6d:a7:8f:47:ff:c2:a2:11:49:f5:ec:5c:91:6f:
         ee:be:74:e1:35:36:67:7f:ce:6b:ea:e1:a1:24:bc:87:38:7a:
         3a:31:ae:69:1e:51:b2:3c:39:29:4d:28:3d:f6:14:53:20:13:
         a3:dc:9e:03:2d:7d:e1:c7:de:20:6b:2e:a8:d6:34:86:31:bb:
         3d:62:47:b6:c8:da:76:b9:92:70:69:d6:14:df:09:ed:f4:20:
         4c:f3:e6:43:cd:41:b4:1a:ce:e7:be:9b:c1:ca:8d:5c:13:74:
         a3:b5:b8:79:22:04:38:61:f8:94:11:00:d6:9e:96:4c:43:45:
         cc:fd:17:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRC//bm2oV6h86z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3OWY2ZmMtYmMyOS00NGQ3LWJiNjItZjc0Y2NjNTg0
YzE3MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZTYzZGVkZGQtZGQ2MC00NDZhLTljNTItMDY3ZGU3M2M3NDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwSxMLXllC++33iMmItVsm/4Ha3lriQX89yL
tfsYsmzL6iLvC0ki9e8T3pW1sMXZlP+8QiQjpTReTfVgj1PaZojKLYheJ48v8JQw
Q3R5EcjA188rMP6YrRmpghlkcjgE6RoFTBzSCwjOHQbv/ToRbqxl9y39tH6B0JPK
3sijwgO+ACRsVX7GnyVpD/zDbmwKsIuPKwtsqq1GnTHx5lmI/CKMF6y8jvcTq4Ca
nL0zfph47nb00wDNX4u+1waifTUOrTzyyKcvTFgL7g0xEXUWErbXSn8jByFq3khu
4hkuVoRRT63sdfLl5gO50Pp7JqKZwsJUg4ossTMQscl8NkFSYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEbNAeNWlpkZCfVf/x9sBXjkLJTvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOTc5
ZjZmYy1iYzI5LTQ0ZDctYmI2Mi1mNzRjY2M1ODRjMTcvMjg0NzhlYTgtOTdhOS0z
OWJlLWEwNTYtOTIzYzAxYzY1Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk3OWY2ZmMtYmMyOS00NGQ3LWJi
NjItZjc0Y2NjNTg0YzE3L2U5NzlmNmZjLWJjMjktNDRkNy1iYjYyLWY3NGNjYzU4
NGMxNy5jcmwwHwYDVR0jBBgwFoAUh0Mp31IW57n6wrG/QEsabPzoI6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOTc5ZjZmYy1iYzI5LTQ0ZDctYmI2Mi1mNzRj
Y2M1ODRjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCottgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALiI0bjayPY528kFcYMRZepl/EZWrx01irYpFClvm1dAVIVVH7lLmkqy
IErO2omsr5P4MQ1G8CQcuTVUDzRiBRMchUcZYjPIImMFFYDlX/8VBkyY/Whv8yRf
K0cR9vLVpUUv5sW3kjQUtD6at4THOoHs/1RFhpkSQEoYLQl8g/4lSBdtp49H/8Ki
EUn17FyRb+6+dOE1Nmd/zmvq4aEkvIc4ejoxrmkeUbI8OSlNKD32FFMgE6PcngMt
feHH3iBrLqjWNIYxuz1iR7bI2na5knBp1hTfCe30IEzz5kPNQbQazue+m8HKjVwT
dKO1uHkiBDhh+JQRANaelkxDRcz9F0Y=
-----END CERTIFICATE-----
Generated at Sun Oct 19 06:15:47 2025 by rpki-client