Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/07ec0c0b-8644-3cb9-92da-40f2ba8bef6a.roa
File:                     07ec0c0b-8644-3cb9-92da-40f2ba8bef6a.roa (raw, json)
Hash identifier:          O164Lo4Hqh+vTZxXx0vl59ZrhEqCttQCt/ux0SPT36k=
Subject key identifier:   85:28:34:D5:7B:AA:33:BD:93:BB:50:A9:4E:CC:BB:CD:D0:A4:21:6E
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584B84E7749B04325A49F0577A34
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/07ec0c0b-8644-3cb9-92da-40f2ba8bef6a.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     16509
IP address blocks:        136.184.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:74:9b:04:32:5a:49:f0:57:7a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=883a23d5-a829-437e-8982-cd763c0d913a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:0b:5f:da:9d:dd:62:98:e0:b9:90:e8:32:
                    44:95:cc:d9:01:6c:de:9b:fa:4f:77:19:67:c7:fb:
                    d3:8f:5c:04:e4:2d:70:1e:e9:28:01:5d:ac:5c:e2:
                    58:c6:3d:82:e5:3d:08:ab:aa:72:c4:85:d9:fc:43:
                    95:72:f7:73:4c:37:25:58:95:9f:21:c5:36:0a:bd:
                    38:fb:b6:35:3c:26:db:73:c9:c3:be:c4:22:c3:42:
                    64:b7:38:07:1b:f1:b3:73:b2:50:a6:f8:90:8b:4c:
                    03:7b:e1:d3:72:d2:a3:c0:36:67:49:26:71:97:df:
                    23:42:e1:05:02:7b:f3:71:09:20:54:8b:fb:11:e6:
                    5c:b2:61:a6:ad:9d:81:72:e8:61:15:a0:bf:8d:5c:
                    d2:03:75:8a:9e:a3:1a:bb:09:0f:42:04:e4:6d:11:
                    f2:11:9d:66:09:e3:aa:74:ff:41:7e:96:6e:5c:72:
                    d6:24:4b:6f:be:5a:be:40:c2:9c:40:2c:22:b3:9c:
                    f9:69:fa:68:5f:ed:d5:22:3f:da:d5:c9:b2:56:3e:
                    44:7b:d0:83:81:d0:af:5c:c4:d6:ac:95:ac:ca:a8:
                    7e:e7:f9:04:d6:ba:00:6f:4e:ed:da:54:e8:9e:d0:
                    65:bc:db:46:aa:86:c4:89:1e:b5:0a:2a:78:8d:e4:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:28:34:D5:7B:AA:33:BD:93:BB:50:A9:4E:CC:BB:CD:D0:A4:21:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/07ec0c0b-8644-3cb9-92da-40f2ba8bef6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:58:36:89:42:2f:4f:72:72:da:ba:07:5e:05:00:28:62:
         b0:de:00:65:8b:2f:4d:d0:eb:4c:cb:a5:88:06:3f:43:f7:cd:
         1c:94:44:d0:21:ae:21:0a:69:a8:53:39:80:91:3b:b6:0a:33:
         55:84:1e:39:d6:e1:eb:c9:92:f8:cc:85:11:d1:5f:be:60:43:
         ea:27:a3:6a:ff:c0:9b:0c:c0:e2:cf:1c:90:c7:84:8b:bb:da:
         d2:33:a4:75:5a:db:6b:90:e3:0e:b4:16:97:b4:b5:85:48:39:
         e4:44:ba:6b:f4:a8:6d:43:b6:02:af:5f:3a:a6:d9:4e:66:e3:
         4f:f2:72:2e:bf:b8:be:01:11:44:21:2d:78:7e:4e:82:b8:69:
         f4:7a:da:bc:8f:e7:7d:66:34:dc:ac:45:b0:06:15:6a:84:a0:
         c0:f3:1d:b9:33:fd:1a:72:ae:5a:d3:dc:6f:20:36:29:2f:9f:
         4f:c6:77:ad:79:62:6d:ab:82:93:47:d1:ef:1c:51:ae:a7:d7:
         30:8a:82:49:91:da:44:75:e9:7b:9f:2f:80:65:e5:ad:64:32:
         b8:65:db:b0:ec:fa:75:8a:57:4b:f2:2a:6f:91:ca:1c:19:b1:
         da:56:c2:f0:8c:4b:9f:a2:c2:30:7b:25:d2:0c:10:d3:fc:2d:
         28:b6:bb:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53SbBDJaSfBXejQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM3MDM1ZjAtZDVkMS00NWQwLWI2NDctN2EyM2Y5ZTNk
NTRjMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
ODgzYTIzZDUtYTgyOS00MzdlLTg5ODItY2Q3NjNjMGQ5MTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3ALX9qd3WKY4LmQ6DJElczZAWzem/pPdxln
x/vTj1wE5C1wHukoAV2sXOJYxj2C5T0Iq6pyxIXZ/EOVcvdzTDclWJWfIcU2Cr04
+7Y1PCbbc8nDvsQiw0JktzgHG/Gzc7JQpviQi0wDe+HTctKjwDZnSSZxl98jQuEF
AnvzcQkgVIv7EeZcsmGmrZ2BcuhhFaC/jVzSA3WKnqMauwkPQgTkbRHyEZ1mCeOq
dP9BfpZuXHLWJEtvvlq+QMKcQCwis5z5afpoX+3VIj/a1cmyVj5Ee9CDgdCvXMTW
rJWsyqh+5/kE1roAb07t2lTontBlvNtGqobEiR61Cip4jeRrCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIUoNNV7qjO9k7tQqU7Mu83QpCFuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcw
MzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIzZjllM2Q1NGMvMDdlYzBjMGItODY0NC0z
Y2I5LTkyZGEtNDBmMmJhOGJlZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzM3MDM1ZjAtZDVkMS00NWQwLWI2
NDctN2EyM2Y5ZTNkNTRjLzMzNzAzNWYwLWQ1ZDEtNDVkMC1iNjQ3LTdhMjNmOWUz
ZDU0Yy5jcmwwHwYDVR0jBBgwFoAUQxtL6ZGGkmChwHIkxJcDv+hKMW8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcwMzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIz
ZjllM2Q1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLjjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1KWDaJQi9PcnLaugdeBQAoYrDeAGWLL03Q60zLpYgGP0P3zRyURNAh
riEKaahTOYCRO7YKM1WEHjnW4evJkvjMhRHRX75gQ+ono2r/wJsMwOLPHJDHhIu7
2tIzpHVa22uQ4w60Fpe0tYVIOeREumv0qG1DtgKvXzqm2U5m40/yci6/uL4BEUQh
LXh+ToK4afR62ryP531mNNysRbAGFWqEoMDzHbkz/RpyrlrT3G8gNikvn0/Gd615
Ym2rgpNH0e8cUa6n1zCKgkmR2kR16XufL4Bl5a1kMrhl27Ds+nWKV0vyKm+RyhwZ
sdpWwvCMS5+iwjB7JdIMENP8LSi2u0E=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:04:57 2025 by rpki-client