Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/56cf1587-b405-3906-bb62-bc6558e6a079.roa
File:                     56cf1587-b405-3906-bb62-bc6558e6a079.roa (raw, json)
Hash identifier:          UjMHEGrKM4Td10IcQkWlKTCcGzuXnXykp5vw9Hw9Y3Y=
Subject key identifier:   0E:67:68:B1:04:77:F2:35:A6:72:B5:4D:88:9F:34:55:4A:56:42:A1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B21CC41AC6388A0075290BC80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/56cf1587-b405-3906-bb62-bc6558e6a079.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     400523
IP address blocks:        208.185.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:41:ac:63:88:a0:07:52:90:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=c98b99f8-5055-4f6c-b03b-8411f64f19ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:2e:b8:57:4a:af:f9:b1:c2:3a:23:2b:d6:
                    b0:69:4b:57:4b:a5:43:c1:c5:00:08:ca:84:b6:48:
                    82:5b:66:de:cb:ea:57:9b:11:67:71:e0:ed:a8:c9:
                    7e:e7:50:da:28:1e:de:9d:b1:4f:67:94:9c:cd:14:
                    e5:85:1a:6b:11:9e:95:2b:ab:7f:ab:11:13:b4:07:
                    a9:84:41:35:8f:2e:db:f9:46:95:c6:d1:ec:69:5b:
                    9d:4d:5e:dc:48:4e:9d:89:b3:4d:24:fa:59:a8:ba:
                    84:f8:37:30:64:d6:b7:11:4c:96:5e:38:59:02:5a:
                    83:76:ea:9c:b9:b9:a9:c5:d7:28:ea:0b:45:74:50:
                    bb:bf:eb:13:5e:66:8f:da:6d:7b:f6:3b:14:a2:25:
                    10:3b:63:64:e5:87:bd:e3:d9:82:57:10:6f:7d:5a:
                    44:6f:34:af:38:06:1b:cb:9f:32:d0:a8:66:f2:8d:
                    17:79:2c:ef:be:c2:91:d5:f5:0d:2e:83:83:02:3c:
                    19:80:ed:63:c0:9e:3d:be:4c:42:dd:5b:33:ed:a4:
                    14:02:2f:96:07:17:6b:e1:4f:ed:34:b2:cc:5a:c7:
                    4a:f5:73:2c:c6:c1:c3:7e:01:df:e5:ed:7d:07:34:
                    b8:a8:f2:7d:1a:3e:40:75:b1:75:65:62:da:5e:43:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:67:68:B1:04:77:F2:35:A6:72:B5:4D:88:9F:34:55:4A:56:42:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/56cf1587-b405-3906-bb62-bc6558e6a079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ca:25:5e:93:4d:f6:27:20:36:7d:b0:c0:0c:74:f6:71:d2:
         59:aa:48:80:7b:d8:7e:ab:7c:0c:f8:74:ca:47:ce:ec:3b:7b:
         1b:b9:7d:16:1d:d8:da:0b:ff:2d:cd:14:e3:4a:f4:9f:d4:cb:
         be:c7:0f:be:99:44:6c:dd:24:5f:81:7c:ec:2d:7f:6c:10:ea:
         f3:0a:f9:8d:4c:6c:f4:53:f7:4f:48:74:29:4f:98:cc:5c:b7:
         11:fc:b4:f0:e3:a4:d1:6a:1f:f2:34:60:b4:82:25:f5:db:0b:
         28:a6:c5:d0:a3:4a:93:a8:81:8e:55:38:2e:63:40:f0:a2:c3:
         4f:e9:e6:10:95:ec:35:a3:70:f2:76:ea:a7:61:9f:26:06:03:
         12:a7:1c:51:04:6b:37:10:49:4a:14:fc:6a:c6:37:e2:21:7f:
         5e:5b:40:d7:76:45:22:03:7f:8d:a3:1b:94:a3:fe:63:37:97:
         bc:34:cb:f4:4e:37:49:7a:ae:d4:00:5f:93:ba:d5:41:ad:de:
         33:89:65:34:29:95:4c:3a:ae:63:27:95:4c:66:04:43:1a:55:
         dd:1f:e5:43:60:81:31:a9:40:97:28:0d:a5:0e:d5:ed:1b:0c:
         58:9f:86:7a:7f:3d:eb:e6:3c:b7:eb:cc:89:0e:21:eb:db:22:
         95:24:8a:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzEGsY4igB1KQvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
Yzk4Yjk5ZjgtNTA1NS00ZjZjLWIwM2ItODQxMWY2NGYxOWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLkuuFdKr/mxwjojK9awaUtXS6VDwcUACMqE
tkiCW2bey+pXmxFnceDtqMl+51DaKB7enbFPZ5SczRTlhRprEZ6VK6t/qxETtAep
hEE1jy7b+UaVxtHsaVudTV7cSE6dibNNJPpZqLqE+DcwZNa3EUyWXjhZAlqDduqc
ubmpxdco6gtFdFC7v+sTXmaP2m179jsUoiUQO2Nk5Ye949mCVxBvfVpEbzSvOAYb
y58y0Khm8o0XeSzvvsKR1fUNLoODAjwZgO1jwJ49vkxC3Vsz7aQUAi+WBxdr4U/t
NLLMWsdK9XMsxsHDfgHf5e19BzS4qPJ9Gj5AdbF1ZWLaXkNn8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5naLEEd/I1pnK1TYifNFVKVkKhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNTZjZjE1ODctYjQwNS0z
OTA2LWJiNjItYmM2NTU4ZTZhMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LmEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDKJV6TTfYnIDZ9sMAMdPZx0lmqSIB72H6rfAz4dMpHzuw7exu5fRYd
2NoL/y3NFONK9J/Uy77HD76ZRGzdJF+BfOwtf2wQ6vMK+Y1MbPRT909IdClPmMxc
txH8tPDjpNFqH/I0YLSCJfXbCyimxdCjSpOogY5VOC5jQPCiw0/p5hCV7DWjcPJ2
6qdhnyYGAxKnHFEEazcQSUoU/GrGN+Ihf15bQNd2RSIDf42jG5Sj/mM3l7w0y/RO
N0l6rtQAX5O61UGt3jOJZTQplUw6rmMnlUxmBEMaVd0f5UNggTGpQJcoDaUO1e0b
DFifhnp/PevmPLfrzIkOIevbIpUkiqw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:37:03 2025 by rpki-client