Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/17039ee6-44c8-3b8c-af98-be2275b6403d.roa
File:                     17039ee6-44c8-3b8c-af98-be2275b6403d.roa (raw, json)
Hash identifier:          BefObr9bdsEcpb7ew5h898m876D5HvoECqc964pksbA=
Subject key identifier:   DC:E4:13:51:E7:5D:2A:39:9B:D2:A4:C9:1A:11:19:14:D9:D7:E7:C8
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584B821CC4668BD7191B3F41D740
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/17039ee6-44c8-3b8c-af98-be2275b6403d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     14618
IP address blocks:        136.184.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c4:66:8b:d7:19:1b:3f:41:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=0f169678-76e1-4c41-a16d-f71e22992f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:1f:c8:e5:72:01:f8:e2:ae:11:31:78:f8:
                    35:cd:8a:64:f1:f1:3f:8f:b6:a6:f1:80:7d:36:d1:
                    0a:07:b2:d1:c1:1c:b2:35:20:4b:40:38:f9:22:39:
                    65:35:dc:85:f2:44:fe:67:e4:d0:c2:0b:44:cf:ec:
                    30:07:3c:73:69:d3:87:92:75:99:4c:89:c5:cb:81:
                    df:38:31:bc:d2:00:ff:30:3d:fe:30:2d:ae:3a:15:
                    25:c4:04:6e:79:9a:d9:d7:b8:21:85:5b:de:05:af:
                    d1:ed:dd:7e:37:a2:9a:de:61:40:43:b1:fc:40:6e:
                    dc:16:33:4c:4d:89:70:c7:35:51:99:a2:bb:c8:5f:
                    03:b3:c0:b1:35:2c:a6:f1:cf:18:e0:fe:d8:63:18:
                    d7:bc:c7:f5:a4:30:c5:49:55:01:0a:b4:ad:9b:11:
                    2e:54:d3:cd:b5:b7:f6:7e:6c:78:49:b8:53:e7:25:
                    3d:a6:8a:f0:b4:52:e3:00:e3:6e:c9:9b:00:b7:88:
                    f8:73:89:90:b7:45:9f:38:8e:c3:ca:f0:78:43:1e:
                    5c:1e:33:4a:c9:47:76:31:53:4b:6e:85:cf:8c:6a:
                    d5:da:b6:40:c9:f4:d3:9b:3a:17:80:cd:68:77:e4:
                    c0:5f:a1:95:fa:40:37:68:82:f7:3a:e4:ae:9e:07:
                    ed:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E4:13:51:E7:5D:2A:39:9B:D2:A4:C9:1A:11:19:14:D9:D7:E7:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/17039ee6-44c8-3b8c-af98-be2275b6403d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:20:e4:af:7b:e0:ab:a5:43:bc:f0:2d:db:83:76:e1:f0:58:
         00:6c:2f:04:4f:9c:22:6d:73:99:8b:55:d1:c8:09:75:c6:e2:
         86:67:e2:1d:5e:d3:68:4f:72:93:3e:2a:f4:ba:17:fb:d8:0f:
         90:2b:84:75:f5:21:24:4e:02:53:09:7e:15:00:31:06:fc:77:
         3f:64:07:9c:2c:cb:24:77:69:9a:7f:10:83:dc:5b:25:50:05:
         6c:62:6a:fa:d2:e2:02:71:2f:06:6f:65:1c:32:13:a1:a2:7a:
         29:bb:6c:a8:d3:6c:63:29:6d:1e:ac:3b:3d:4d:9f:00:8a:7a:
         88:b9:1d:d9:8d:1a:c1:a0:10:76:5e:83:2c:45:8f:bf:a7:ec:
         36:1a:f7:d0:83:b8:4f:96:cc:b8:9d:29:cf:98:ea:84:ea:ff:
         5f:d4:31:7b:1e:d5:a7:bc:f9:3c:74:bd:b0:46:db:5b:d5:f3:
         a1:b9:b0:a4:07:aa:ea:21:43:85:e7:88:fc:e4:8a:95:1d:3e:
         e7:3d:64:d3:14:65:4d:26:8a:42:b5:01:e6:46:fc:11:e8:ab:
         a6:f8:d7:14:7a:7d:99:05:24:9e:cc:ec:4a:36:ea:47:f7:90:
         45:b6:c6:0e:b6:47:4b:fe:dd:db:9c:9f:6e:c7:46:6c:54:d3:
         46:e0:d5:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMRmi9cZGz9B10AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM3MDM1ZjAtZDVkMS00NWQwLWI2NDctN2EyM2Y5ZTNk
NTRjMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MGYxNjk2NzgtNzZlMS00YzQxLWExNmQtZjcxZTIyOTkyZjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw18fyOVyAfjirhExePg1zYpk8fE/j7am8YB9
NtEKB7LRwRyyNSBLQDj5IjllNdyF8kT+Z+TQwgtEz+wwBzxzadOHknWZTInFy4Hf
ODG80gD/MD3+MC2uOhUlxARueZrZ17ghhVveBa/R7d1+N6Ka3mFAQ7H8QG7cFjNM
TYlwxzVRmaK7yF8Ds8CxNSym8c8Y4P7YYxjXvMf1pDDFSVUBCrStmxEuVNPNtbf2
fmx4SbhT5yU9porwtFLjAONuyZsAt4j4c4mQt0WfOI7DyvB4Qx5cHjNKyUd2MVNL
boXPjGrV2rZAyfTTmzoXgM1od+TAX6GV+kA3aIL3OuSungftZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzkE1HnXSo5m9KkyRoRGRTZ1+fIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcw
MzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIzZjllM2Q1NGMvMTcwMzllZTYtNDRjOC0z
YjhjLWFmOTgtYmUyMjc1YjY0MDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzM3MDM1ZjAtZDVkMS00NWQwLWI2
NDctN2EyM2Y5ZTNkNTRjLzMzNzAzNWYwLWQ1ZDEtNDVkMC1iNjQ3LTdhMjNmOWUz
ZDU0Yy5jcmwwHwYDVR0jBBgwFoAUQxtL6ZGGkmChwHIkxJcDv+hKMW8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcwMzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIz
ZjllM2Q1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsg5K974KulQ7zwLduDduHwWABsLwRPnCJtc5mLVdHICXXG4oZn4h1e
02hPcpM+KvS6F/vYD5ArhHX1ISROAlMJfhUAMQb8dz9kB5wsyyR3aZp/EIPcWyVQ
BWxiavrS4gJxLwZvZRwyE6Gieim7bKjTbGMpbR6sOz1NnwCKeoi5HdmNGsGgEHZe
gyxFj7+n7DYa99CDuE+WzLidKc+Y6oTq/1/UMXse1ae8+Tx0vbBG21vV86G5sKQH
quohQ4XniPzkipUdPuc9ZNMUZU0mikK1AeZG/BHoq6b41xR6fZkFJJ7M7Eo26kf3
kEW2xg62R0v+3ducn27HRmxU00bg1aA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:11:15 2025 by rpki-client