Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/84de89dc-15a9-3fcd-a3e0-3759e44040de.roa
File:                     84de89dc-15a9-3fcd-a3e0-3759e44040de.roa (raw, json)
Hash identifier:          uwC8noAx8TLDl1mxu6nGOC4yODu+PYt0ZSv+1BrpPDg=
Subject key identifier:   B0:45:EB:C7:1E:89:66:D8:8A:C8:C6:6D:29:40:F1:0C:22:E8:4D:6D
Certificate issuer:       /CN=700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a
Certificate serial:       010D0C9F4328584B2A2C26F8A2EA63434E351240
Authority key identifier: B1:50:98:51:7F:5C:92:2A:E9:5E:CC:4C:9B:E4:A7:4C:59:A9:AC:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/84de89dc-15a9-3fcd-a3e0-3759e44040de.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     8030
IP address blocks:        142.79.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:26:f8:a2:ea:63:43:4e:35:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=959635b0-b742-42df-8ec6-b6e8d888b966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f5:47:b9:40:46:d0:fb:55:87:e6:89:a0:31:
                    bc:d1:7a:d5:4f:86:ec:09:94:5e:91:9f:bd:e5:10:
                    f3:fd:97:03:04:39:76:b3:86:75:f6:49:bc:dd:e2:
                    5b:2b:c4:b2:c8:82:72:95:83:26:09:fc:ec:70:8d:
                    23:0b:6c:59:5d:de:8e:e9:87:e6:06:b3:18:e0:a4:
                    77:bc:b7:3a:0e:12:ae:d2:e6:ea:a4:02:58:50:1b:
                    0c:7b:8b:63:40:8a:57:2d:a3:4a:85:61:d3:bd:f2:
                    2c:6e:33:68:1f:fa:dd:63:f8:6d:1b:5c:83:8c:d2:
                    3a:d3:bf:ab:6c:3b:f3:7c:40:7f:f7:7e:b6:92:b8:
                    e5:ac:2a:c6:31:ac:92:a9:9f:20:bc:5c:9f:87:05:
                    41:84:98:f0:59:fc:c6:0f:b7:ae:ee:f7:6f:0a:49:
                    54:cc:ad:e3:96:77:b7:a9:cd:8a:d0:ab:aa:53:42:
                    20:8c:cf:09:9c:b6:8e:28:ca:cc:bf:2b:73:27:16:
                    28:d6:a5:f3:b8:58:6d:74:d8:9e:0e:35:24:f7:2a:
                    ac:82:79:5e:d6:d3:27:61:c9:9e:23:5b:75:64:67:
                    b2:86:db:41:c5:22:1b:a6:1e:d3:2f:4c:aa:ef:41:
                    47:7f:7e:8f:17:28:1e:9f:48:e4:54:29:df:1d:cb:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:45:EB:C7:1E:89:66:D8:8A:C8:C6:6D:29:40:F1:0C:22:E8:4D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/84de89dc-15a9-3fcd-a3e0-3759e44040de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.crl

            X509v3 Authority Key Identifier:
                keyid:B1:50:98:51:7F:5C:92:2A:E9:5E:CC:4C:9B:E4:A7:4C:59:A9:AC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:43:63:8e:be:5a:cf:45:4b:f9:bb:06:07:e7:87:5a:96:c8:
         17:30:29:10:cf:c3:8a:5c:2f:d7:28:ed:cf:e8:7e:09:19:be:
         64:8b:e0:ad:0f:67:d4:bf:0b:94:ef:49:25:09:04:13:90:6f:
         09:4a:fe:94:79:f2:f9:ac:e1:a8:d9:40:4b:38:dc:fc:f7:2d:
         31:1c:56:d0:26:07:dc:45:69:b0:2d:70:1d:38:da:f5:17:3b:
         f4:b8:11:d1:ce:51:72:34:f0:38:30:90:cd:5e:85:11:31:ab:
         f1:eb:21:3b:02:46:5d:31:b7:6d:64:86:25:90:f2:41:2b:22:
         41:7a:2d:cf:32:ca:3c:79:7a:53:c7:11:50:77:92:bd:5c:a0:
         bd:55:ff:3a:89:8c:20:26:8b:a9:3a:08:6c:53:b2:fd:86:da:
         a9:42:c4:81:dc:4e:ba:3d:df:57:7c:de:20:b8:e2:f7:2a:e0:
         5f:3b:ae:ba:db:86:40:52:a4:87:95:fb:d7:8b:1f:46:7d:6c:
         b4:c1:56:36:3d:69:fe:33:73:6d:f6:27:34:b6:a9:91:07:fa:
         46:c0:40:d0:be:df:f8:7e:08:41:1a:f0:d3:30:c9:11:12:25:
         34:fa:e4:6c:ab:a5:25:cf:d4:31:7c:0a:63:a8:50:e4:42:54:
         7c:e5:6a:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCb4oupjQ041EkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzAwYzQxZDMtYmExYi00ZDEyLWFkY2ItNWYxYTdlZTRh
YzBhMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
OTU5NjM1YjAtYjc0Mi00MmRmLThlYzYtYjZlOGQ4ODhiOTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPVHuUBG0PtVh+aJoDG80XrVT4bsCZRekZ+9
5RDz/ZcDBDl2s4Z19km83eJbK8SyyIJylYMmCfzscI0jC2xZXd6O6YfmBrMY4KR3
vLc6DhKu0ubqpAJYUBsMe4tjQIpXLaNKhWHTvfIsbjNoH/rdY/htG1yDjNI607+r
bDvzfEB/9362krjlrCrGMaySqZ8gvFyfhwVBhJjwWfzGD7eu7vdvCklUzK3jlne3
qc2K0KuqU0IgjM8JnLaOKMrMvytzJxYo1qXzuFhtdNieDjUk9yqsgnle1tMnYcme
I1t1ZGeyhttBxSIbph7TL0yq70FHf36PFygen0jkVCnfHcts0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBF68ceiWbYisjGbSlA8Qwi6E1tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDBj
NDFkMy1iYTFiLTRkMTItYWRjYi01ZjFhN2VlNGFjMGEvODRkZTg5ZGMtMTVhOS0z
ZmNkLWEzZTAtMzc1OWU0NDA0MGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAwYzQxZDMtYmExYi00ZDEyLWFk
Y2ItNWYxYTdlZTRhYzBhLzcwMGM0MWQzLWJhMWItNGQxMi1hZGNiLTVmMWE3ZWU0
YWMwYS5jcmwwHwYDVR0jBBgwFoAUsVCYUX9ckirpXsxMm+SnTFmprOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MDBjNDFkMy1iYTFiLTRkMTItYWRjYi01ZjFh
N2VlNGFjMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjk+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFDY46+Ws9FS/m7Bgfnh1qWyBcwKRDPw4pcL9co7c/ofgkZvmSL4K0P
Z9S/C5TvSSUJBBOQbwlK/pR58vms4ajZQEs43Pz3LTEcVtAmB9xFabAtcB042vUX
O/S4EdHOUXI08DgwkM1ehRExq/HrITsCRl0xt21khiWQ8kErIkF6Lc8yyjx5elPH
EVB3kr1coL1V/zqJjCAmi6k6CGxTsv2G2qlCxIHcTro931d83iC44vcq4F87rrrb
hkBSpIeV+9eLH0Z9bLTBVjY9af4zc232JzS2qZEH+kbAQNC+3/h+CEEa8NMwyRES
JTT65GyrpSXP1DF8CmOoUORCVHzlaiA=
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:30:58 2025 by rpki-client