Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b207e51-2a77-3c3f-9fce-9581f3e832c5.roa
File:                     8b207e51-2a77-3c3f-9fce-9581f3e832c5.roa (raw, json)
Hash identifier:          p7zVhG0b3Z1+beuNvk2tcpgl3qlnTpeTjpOscmCR1XE=
Subject key identifier:   EC:58:66:A8:B9:91:F2:C3:DC:EA:2E:75:F7:BE:36:22:31:2D:E7:56
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C545C9CD891AE8C9E2800
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b207e51-2a77-3c3f-9fce-9581f3e832c5.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        2001:4c8:10a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:54:5c:9c:d8:91:ae:8c:9e:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=da72a330-aa3c-4279-a2a6-9df8b844d571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:1f:35:44:f5:b3:80:0e:69:d6:b2:f8:15:
                    e7:15:70:88:10:1b:37:58:4d:7a:43:8f:75:1e:b8:
                    6a:68:14:42:1d:8a:bc:f1:78:c2:6c:8c:f5:bb:d3:
                    50:54:fe:90:21:89:88:d4:50:60:64:e8:74:37:c3:
                    68:28:4d:23:68:e8:61:01:f7:21:af:b7:b5:07:af:
                    7e:d3:ce:f3:64:56:04:b0:d3:5e:4a:3d:a1:f0:4a:
                    29:b5:42:23:f5:49:3f:bd:f9:22:63:5d:44:12:e5:
                    36:04:0a:c9:6d:85:11:2d:ab:72:6a:d5:a4:25:b7:
                    42:d2:a1:c6:4a:5f:c6:f7:6a:32:07:32:ba:6d:f7:
                    81:f4:26:08:99:34:ee:a9:a7:5b:a3:b1:b5:d0:5c:
                    6a:f3:f7:0a:93:29:53:06:cd:52:ce:83:ec:60:f3:
                    36:c1:d3:0e:29:02:71:cc:6a:53:54:01:ef:f6:0b:
                    bf:e9:79:a5:30:de:16:e9:0c:fd:10:5e:69:ff:9f:
                    c0:cd:d4:b0:96:ce:b8:1b:56:c2:f1:83:ba:f6:34:
                    9d:e4:96:fc:27:4c:ef:1f:d1:1e:22:13:fd:4d:e7:
                    0a:d8:ca:9d:5c:cf:fb:c3:22:ce:da:10:77:2c:3f:
                    9b:11:a6:0b:0d:27:f3:a8:4c:e6:50:7c:50:f9:80:
                    5b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:58:66:A8:B9:91:F2:C3:DC:EA:2E:75:F7:BE:36:22:31:2D:E7:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b207e51-2a77-3c3f-9fce-9581f3e832c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:10a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:15:94:ff:e2:dd:61:78:05:57:4a:50:84:d2:46:b4:67:f4:
         93:8d:8b:d6:17:9c:f2:05:55:54:b3:6b:80:e4:cb:31:bf:7c:
         be:4a:3b:16:2e:74:9b:12:bc:43:01:32:5d:f5:2e:d8:c7:3b:
         0b:b1:88:92:a2:74:a9:6f:6f:ad:78:8e:8e:90:c1:68:51:1b:
         e6:62:79:dc:45:23:e4:a8:ff:85:52:d5:84:cf:69:b6:8d:27:
         5a:d0:4d:2b:dd:2a:d5:7f:23:41:90:4c:2b:4b:e2:31:48:ad:
         fc:c4:73:62:0b:8c:50:7d:38:35:da:90:38:1d:2d:74:33:21:
         b1:42:08:5d:44:31:fa:c7:57:95:98:02:17:16:9e:12:48:43:
         36:32:f5:0e:f0:96:a2:3d:08:53:5d:d5:7c:70:7a:0b:69:4e:
         bc:8b:aa:2e:7e:d0:4e:2a:18:dd:da:01:ef:13:16:32:84:47:
         c9:5b:68:72:bd:c4:ee:fe:e0:50:51:d5:d1:8e:ba:09:b8:2b:
         3a:45:53:dd:87:28:51:5b:18:5b:f9:f7:53:01:f4:5b:b6:f2:
         29:8e:e3:16:eb:19:da:40:57:a0:50:35:07:a2:40:66:12:f8:
         ff:dd:14:bb:5b:c7:d6:3c:58:ee:b4:dc:38:ad:37:71:fa:95:
         ab:36:0b:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsqLFRcnNiRroyeKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZGE3MmEzMzAtYWEzYy00Mjc5LWEyYTYtOWRmOGI4NDRkNTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVIfNUT1s4AOaday+BXnFXCIEBs3WE16Q491
HrhqaBRCHYq88XjCbIz1u9NQVP6QIYmI1FBgZOh0N8NoKE0jaOhhAfchr7e1B69+
087zZFYEsNNeSj2h8EoptUIj9Uk/vfkiY11EEuU2BArJbYURLatyatWkJbdC0qHG
Sl/G92oyBzK6bfeB9CYImTTuqadbo7G10Fxq8/cKkylTBs1SzoPsYPM2wdMOKQJx
zGpTVAHv9gu/6XmlMN4W6Qz9EF5p/5/AzdSwls64G1bC8YO69jSd5Jb8J0zvH9Ee
IhP9TecK2MqdXM/7wyLO2hB3LD+bEaYLDSfzqEzmUHxQ+YBbaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOxYZqi5kfLD3Ooudfe+NiIxLedWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOGIyMDdlNTEtMmE3Ny0z
YzNmLTlmY2UtOTU4MWYzZTgzMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBCh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEIVlP/i3WF4BVdKUITSRrRn9JONi9YXnPIFVVSza4DkyzG/fL5K
OxYudJsSvEMBMl31LtjHOwuxiJKidKlvb614jo6QwWhRG+ZiedxFI+So/4VS1YTP
abaNJ1rQTSvdKtV/I0GQTCtL4jFIrfzEc2ILjFB9ODXakDgdLXQzIbFCCF1EMfrH
V5WYAhcWnhJIQzYy9Q7wlqI9CFNd1XxwegtpTryLqi5+0E4qGN3aAe8TFjKER8lb
aHK9xO7+4FBR1dGOugm4KzpFU92HKFFbGFv591MB9Fu28imO4xbrGdpAV6BQNQei
QGYS+P/dFLtbx9Y8WO603DitN3H6las2C9o=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:32:14 2025 by rpki-client