Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a10a3811-bbb6-32c9-bf38-4e26a3c958e0.roa
File:                     a10a3811-bbb6-32c9-bf38-4e26a3c958e0.roa (raw, json)
Hash identifier:          2Fqp9nUbtdQBNMhdGhB/gUtYMYW1RTnpt5U/IyOKerI=
Subject key identifier:   8E:D1:E2:13:E7:80:93:AE:B5:8D:49:BE:BE:36:08:10:4C:D2:1F:B6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A9E65360C9A41E03961094880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a10a3811-bbb6-32c9-bf38-4e26a3c958e0.roa
Signing time:             Wed 23 Jul 2025 23:22:25 +0000
ROA not before:           Wed 23 Jul 2025 23:22:25 +0000
ROA not after:            Tue 21 Oct 2025 23:22:25 +0000
asID:                     7385
IP address blocks:        168.93.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:36:0c:9a:41:e0:39:61:09:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 23 23:22:25 2025 GMT
            Not After : Oct 21 23:22:25 2025 GMT
        Subject: CN=df9590cc-8fea-4d1e-abb7-e5ee5c27ac1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:6e:11:1f:a9:9a:36:c2:be:57:20:49:2e:
                    a3:d9:f5:94:80:26:ee:6a:2f:f3:d0:bf:1c:90:ab:
                    82:56:a4:16:53:fd:1a:79:d8:db:49:37:86:b7:e8:
                    85:ae:81:63:69:47:d0:a7:44:a4:cc:21:0d:49:a7:
                    cd:17:9f:17:61:4d:22:3f:79:da:9f:a6:90:8e:28:
                    14:3d:e4:ed:63:64:14:24:fa:41:1c:af:bf:0a:03:
                    93:f4:e6:ef:41:90:ea:f6:3f:a6:23:18:6a:0e:a8:
                    03:6f:51:c9:e1:f9:55:c0:71:5f:7d:c6:a5:7f:f4:
                    9e:31:11:56:f8:11:df:f0:a0:a5:7c:ff:0d:07:8f:
                    3a:36:fc:b8:76:07:c0:e7:8a:1e:8a:b7:db:79:7d:
                    39:2a:d3:87:05:ef:a9:19:4f:95:a4:bd:78:c0:d8:
                    67:52:96:c4:46:06:ef:25:d8:ee:d4:5a:12:61:a2:
                    db:58:cd:56:5c:ad:6b:db:b9:92:95:ba:3a:7a:7a:
                    7a:f2:b5:68:f5:8d:17:02:68:22:13:2a:98:6e:b2:
                    f9:1f:b3:56:46:77:80:45:2f:4c:2e:0b:df:93:ab:
                    cb:47:8c:32:bc:32:c3:21:8f:65:7d:cc:0f:ee:6e:
                    39:36:bd:a9:9d:22:97:bf:39:83:e4:7e:d5:91:cd:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D1:E2:13:E7:80:93:AE:B5:8D:49:BE:BE:36:08:10:4C:D2:1F:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a10a3811-bbb6-32c9-bf38-4e26a3c958e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:09:c1:9c:c8:fb:ce:4f:2b:df:df:52:e3:fe:ca:26:6c:c0:
         d2:8a:bf:93:44:d6:e2:59:2d:56:f4:af:d9:ad:3b:a2:87:2d:
         95:88:47:8b:e7:bf:57:a3:d1:a6:a1:3e:4c:ac:e2:85:ac:8b:
         f8:fb:ad:a6:01:96:9f:88:87:b6:cb:bb:59:1c:5d:58:8f:8c:
         77:37:c3:75:e6:1e:01:d7:fd:0e:db:0e:7d:f1:dd:79:fa:a3:
         5a:a6:c1:05:60:a6:f5:45:ff:ed:14:81:7e:49:4d:b1:ed:1b:
         b4:ce:91:c0:94:3e:b5:b8:7d:22:51:40:6e:41:3b:8f:a5:6b:
         a0:50:09:ee:52:b1:c6:7e:0b:c6:1f:ca:29:6f:bf:49:ac:29:
         81:c7:62:b1:34:87:bd:5a:77:20:97:6d:9f:0d:68:30:97:ee:
         24:cf:ba:11:62:3e:35:27:56:f9:42:27:7c:9f:c7:7f:d1:4a:
         61:3f:47:f9:66:be:ac:01:cd:9f:91:9f:5e:f6:6e:ab:9f:9f:
         23:ad:5b:ec:cb:8e:44:6e:42:5c:5a:68:8f:d9:ad:cb:84:e7:
         25:60:08:12:73:68:19:bf:61:b7:58:17:e4:15:ed:11:2b:59:
         e0:ab:00:af:01:07:23:94:77:b9:b7:e3:ea:ab:7e:4b:a4:49:
         6f:f3:7d:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeZTYMmkHgOWEJSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcyMzIzMjIyNVoXDTI1MTAyMTIzMjIyNVowLzEtMCsGA1UEAxMk
ZGY5NTkwY2MtOGZlYS00ZDFlLWFiYjctZTVlZTVjMjdhYzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wxuER+pmjbCvlcgSS6j2fWUgCbuai/z0L8c
kKuCVqQWU/0aedjbSTeGt+iFroFjaUfQp0SkzCENSafNF58XYU0iP3nan6aQjigU
PeTtY2QUJPpBHK+/CgOT9ObvQZDq9j+mIxhqDqgDb1HJ4flVwHFffcalf/SeMRFW
+BHf8KClfP8NB486Nvy4dgfA54oeirfbeX05KtOHBe+pGU+VpL14wNhnUpbERgbv
Jdju1FoSYaLbWM1WXK1r27mSlbo6enp68rVo9Y0XAmgiEyqYbrL5H7NWRneARS9M
Lgvfk6vLR4wyvDLDIY9lfcwP7m45Nr2pnSKXvzmD5H7Vkc0t/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7R4hPngJOutY1Jvr42CBBM0h+2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTEwYTM4MTEtYmJiNi0z
MmM5LWJmMzgtNGUyNmEzYzk1OGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIJwZzI+85PK9/fUuP+yiZswNKKv5NE1uJZLVb0r9mtO6KHLZWIR4vn
v1ej0aahPkys4oWsi/j7raYBlp+Ih7bLu1kcXViPjHc3w3XmHgHX/Q7bDn3x3Xn6
o1qmwQVgpvVF/+0UgX5JTbHtG7TOkcCUPrW4fSJRQG5BO4+la6BQCe5SscZ+C8Yf
yilvv0msKYHHYrE0h71adyCXbZ8NaDCX7iTPuhFiPjUnVvlCJ3yfx3/RSmE/R/lm
vqwBzZ+Rn172bqufnyOtW+zLjkRuQlxaaI/ZrcuE5yVgCBJzaBm/YbdYF+QV7REr
WeCrAK8BByOUd7m34+qrfkukSW/zfYw=
-----END CERTIFICATE-----
Generated at Sat Jul 26 13:02:54 2025 by rpki-client