Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3c8a9fb6-902d-32dd-abbe-0191df6d7621.roa
File:                     3c8a9fb6-902d-32dd-abbe-0191df6d7621.roa (raw, json)
Hash identifier:          VRHy1ok9As93mBDOkJ6VSszkgjOGVOQXhM0c99r+Ut8=
Subject key identifier:   B8:F4:CA:C2:E1:FA:BD:66:CD:62:E8:77:FF:F7:BC:7F:53:9B:CD:8C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2FC19A497D2199A4EFAAE400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3c8a9fb6-902d-32dd-abbe-0191df6d7621.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     11525
IP address blocks:        64.184.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:9a:49:7d:21:99:a4:ef:aa:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=65e497c5-c1f1-447a-a6be-c1235d1b3964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:be:b0:6d:01:c2:e1:73:15:ae:24:4e:22:
                    e6:23:c1:f1:00:67:92:d4:ab:24:05:4f:48:7f:80:
                    a4:29:60:2d:56:69:e4:e0:1a:bc:e0:e2:11:92:48:
                    ac:09:0c:86:1e:af:e9:c2:56:ed:86:e7:40:aa:89:
                    57:3b:13:5c:bf:ac:54:87:72:1f:b5:9b:b2:d7:3c:
                    66:2c:25:b7:10:8d:f1:de:c3:66:10:25:8f:13:79:
                    29:7e:1c:59:6c:4d:bf:5d:ce:d1:36:1e:f3:68:d2:
                    07:23:86:5b:c8:03:f9:44:20:d2:b5:d0:ef:67:4f:
                    72:71:26:27:50:d9:6e:3e:04:8e:8a:71:97:54:75:
                    9f:d7:b1:c2:6c:b1:22:40:e5:db:01:8e:25:48:fc:
                    27:c0:52:9f:d9:73:da:3a:db:40:e5:c3:a1:63:f4:
                    fd:08:6b:fd:9e:18:bf:91:cd:73:b3:be:87:84:88:
                    19:4d:2c:fa:06:ca:1a:e5:f2:2a:6e:04:eb:cf:48:
                    40:d6:c1:7c:04:6f:7e:55:cd:72:08:3a:0b:d7:7a:
                    93:31:c8:3e:dd:c4:79:ab:63:c0:5f:95:a7:c3:4b:
                    00:0a:1e:a8:d5:50:1b:ad:4b:61:b0:5b:e5:de:85:
                    18:f1:28:94:e2:ca:49:78:96:c8:b9:b7:99:05:07:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F4:CA:C2:E1:FA:BD:66:CD:62:E8:77:FF:F7:BC:7F:53:9B:CD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3c8a9fb6-902d-32dd-abbe-0191df6d7621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:91:ea:56:02:e0:6a:9a:5e:27:d0:e0:83:56:65:56:93:9a:
         c6:51:80:dd:7b:87:63:1d:d9:47:a1:a7:6e:7f:95:4d:ff:b6:
         15:92:5a:07:98:39:2f:2e:b9:7c:ce:3d:0e:24:9c:29:06:b9:
         f0:11:f1:a4:2c:d6:6d:17:1e:23:d5:c5:c3:33:ce:3b:44:17:
         dd:32:65:4d:04:db:09:a5:d1:14:0b:88:3b:0c:ee:46:c5:40:
         84:29:1d:f9:3b:22:03:96:44:c2:e2:d6:dd:dc:c9:09:57:61:
         7b:86:33:24:83:e2:b3:47:88:cf:4b:3d:65:f8:10:b9:18:3f:
         f7:c8:b9:ef:e9:dc:5a:a1:e5:40:b0:d0:b7:6b:e1:76:27:66:
         8e:99:d6:e4:71:db:8e:d7:d9:ca:e7:38:84:02:97:f3:3a:14:
         bb:aa:90:07:b5:9d:ff:17:fa:a6:f8:c7:8a:a3:4d:e4:95:cb:
         d3:c2:71:63:c3:a4:15:7a:b7:0c:ed:10:e6:e5:aa:e2:7a:9c:
         3a:f4:32:0e:23:fd:8a:4a:82:01:ee:bf:aa:5d:44:a5:6e:43:
         80:57:73:2b:ec:3c:06:80:e9:60:1c:66:92:b6:0b:b1:59:a4:
         df:90:0f:5c:ea:fd:7a:a0:4a:d1:93:e7:c2:89:4e:59:35:68:
         fd:2d:f2:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZpJfSGZpO+q5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk
NjVlNDk3YzUtYzFmMS00NDdhLWE2YmUtYzEyMzVkMWIzOTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLW+sG0BwuFzFa4kTiLmI8HxAGeS1KskBU9I
f4CkKWAtVmnk4Bq84OIRkkisCQyGHq/pwlbthudAqolXOxNcv6xUh3IftZuy1zxm
LCW3EI3x3sNmECWPE3kpfhxZbE2/Xc7RNh7zaNIHI4ZbyAP5RCDStdDvZ09ycSYn
UNluPgSOinGXVHWf17HCbLEiQOXbAY4lSPwnwFKf2XPaOttA5cOhY/T9CGv9nhi/
kc1zs76HhIgZTSz6Bsoa5fIqbgTrz0hA1sF8BG9+Vc1yCDoL13qTMcg+3cR5q2PA
X5Wnw0sACh6o1VAbrUthsFvl3oUY8SiU4spJeJbIubeZBQdM+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLj0ysLh+r1mzWLod//3vH9Tm82MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvM2M4YTlmYjYtOTAyZC0z
MmRkLWFiYmUtMDE5MWRmNmQ3NjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQLgIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMWR6lYC4GqaXifQ4INWZVaTmsZRgN17h2Md2Uehp25/lU3/thWSWgeY
OS8uuXzOPQ4knCkGufAR8aQs1m0XHiPVxcMzzjtEF90yZU0E2wml0RQLiDsM7kbF
QIQpHfk7IgOWRMLi1t3cyQlXYXuGMySD4rNHiM9LPWX4ELkYP/fIue/p3Fqh5UCw
0Ldr4XYnZo6Z1uRx247X2crnOIQCl/M6FLuqkAe1nf8X+qb4x4qjTeSVy9PCcWPD
pBV6twztEOblquJ6nDr0Mg4j/YpKggHuv6pdRKVuQ4BXcyvsPAaA6WAcZpK2C7FZ
pN+QD1zq/XqgStGT58KJTlk1aP0t8rg=
-----END CERTIFICATE-----
Generated at Fri Oct 10 09:51:56 2025 by rpki-client