Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dfd77c62-62e5-3750-87bc-8410d1e287ab.roa
File:                     dfd77c62-62e5-3750-87bc-8410d1e287ab.roa (raw, json)
Hash identifier:          MyZrL6FoHyZrTwTszd9bSIy1Iq3eZtrzTeYBqyiN5TE=
Subject key identifier:   04:A7:D9:D9:81:90:C3:FE:A5:2E:2C:78:24:E7:09:B2:47:B2:52:95
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B68FC97A670FD3F53CEC73080
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dfd77c62-62e5-3750-87bc-8410d1e287ab.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     23473
IP address blocks:        153.33.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:97:a6:70:fd:3f:53:ce:c7:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=8fa34782-db62-49b0-93cf-6ecf09262dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:d8:51:40:e0:49:3e:09:a0:99:a5:5d:ab:
                    35:ba:9b:58:59:77:fa:a0:c1:2a:6e:b7:dd:f7:28:
                    3a:30:8a:6f:79:8c:ee:6c:94:fd:3d:f0:5e:64:95:
                    b1:62:54:c7:a0:cd:ce:fc:f7:47:8c:b3:f6:b9:c3:
                    5e:04:13:76:98:94:6a:d5:c6:b7:a5:ab:44:b3:71:
                    51:c0:af:4c:8a:2f:aa:bc:82:7c:6c:98:37:82:80:
                    af:13:a8:e4:5d:61:f0:ce:35:ef:f2:2e:f6:01:55:
                    37:64:b9:87:36:8e:5a:38:b3:5e:dc:63:16:e1:2e:
                    74:dd:16:6f:a8:d3:fa:9b:c2:4a:43:54:a9:f6:44:
                    fa:55:c5:cc:cc:bc:c9:8f:21:9e:7c:d7:7e:85:fc:
                    95:2c:4f:fb:c2:12:90:d5:b2:d6:09:ea:b5:16:5d:
                    71:70:ed:6b:e7:6e:28:cc:34:35:67:ea:62:f0:1f:
                    b6:5d:eb:8a:af:43:75:f5:af:a9:7c:4d:62:f0:b6:
                    86:6a:3b:44:33:02:54:d0:60:97:0f:30:d9:1f:3a:
                    06:e0:25:eb:7b:be:38:b1:f1:22:e4:16:68:75:51:
                    82:01:9b:94:54:6f:9a:7a:37:63:98:87:e0:ed:82:
                    50:66:02:05:ee:fb:f0:15:eb:87:7f:21:d1:88:1a:
                    49:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A7:D9:D9:81:90:C3:FE:A5:2E:2C:78:24:E7:09:B2:47:B2:52:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dfd77c62-62e5-3750-87bc-8410d1e287ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f3:a2:80:e2:d2:a9:41:28:7f:9d:d5:da:10:89:78:33:bd:
         f9:ae:c5:5e:23:91:92:a8:99:11:66:62:a3:4d:00:fa:57:9c:
         9a:76:d0:6e:72:fa:6f:2a:44:b1:e5:fe:0d:ba:06:20:33:de:
         2b:a5:b2:07:f2:53:99:45:79:6a:bd:24:18:4d:46:8f:6f:e0:
         c8:c3:9e:28:68:f7:9a:0a:6d:c6:9d:83:a2:7b:bd:9c:29:b5:
         eb:d2:70:22:fc:4a:8c:a2:4c:33:23:34:38:4f:96:c5:53:0f:
         22:b3:d5:94:53:80:c7:9c:c1:34:65:30:bf:80:25:3a:51:2b:
         71:42:0f:c7:22:69:f8:7a:54:ee:3b:20:97:9c:92:f8:0f:c9:
         89:93:e6:ac:16:ff:67:49:95:c5:99:b7:52:95:5c:2d:42:1c:
         de:ee:49:8a:4b:cd:b3:56:61:4e:99:b8:f3:1f:a0:f8:a4:ac:
         d3:51:08:34:05:8a:80:30:15:d0:1b:ad:f8:09:34:86:93:6f:
         fe:59:a4:e7:9b:e7:73:1e:a4:26:35:e9:87:d9:23:f8:73:74:
         2f:ae:3a:88:2d:35:6a:a7:03:f1:f4:ef:3d:f1:62:36:02:67:
         99:e2:7a:d0:8f:ce:dc:1a:9b:32:52:d3:04:f4:76:eb:c3:61:
         a0:77:6a:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JemcP0/U87HMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk
OGZhMzQ3ODItZGI2Mi00OWIwLTkzY2YtNmVjZjA5MjYyZGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhjYUUDgST4JoJmlXas1uptYWXf6oMEqbrfd
9yg6MIpveYzubJT9PfBeZJWxYlTHoM3O/PdHjLP2ucNeBBN2mJRq1ca3patEs3FR
wK9Mii+qvIJ8bJg3goCvE6jkXWHwzjXv8i72AVU3ZLmHNo5aOLNe3GMW4S503RZv
qNP6m8JKQ1Sp9kT6VcXMzLzJjyGefNd+hfyVLE/7whKQ1bLWCeq1Fl1xcO1r524o
zDQ1Z+pi8B+2XeuKr0N19a+pfE1i8LaGajtEMwJU0GCXDzDZHzoG4CXre744sfEi
5BZodVGCAZuUVG+aejdjmIfg7YJQZgIF7vvwFeuHfyHRiBpJ4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFASn2dmBkMP+pS4seCTnCbJHslKVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZGZkNzdjNjItNjJlNS0z
NzUwLTg3YmMtODQxMGQxZTI4N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSG4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvzooDi0qlBKH+d1doQiXgzvfmuxV4jkZKomRFmYqNNAPpXnJp20G5y
+m8qRLHl/g26BiAz3iulsgfyU5lFeWq9JBhNRo9v4MjDniho95oKbcadg6J7vZwp
tevScCL8SoyiTDMjNDhPlsVTDyKz1ZRTgMecwTRlML+AJTpRK3FCD8ciafh6VO47
IJeckvgPyYmT5qwW/2dJlcWZt1KVXC1CHN7uSYpLzbNWYU6ZuPMfoPikrNNRCDQF
ioAwFdAbrfgJNIaTb/5ZpOeb53MepCY16YfZI/hzdC+uOogtNWqnA/H07z3xYjYC
Z5nietCPztwamzJS0wT0duvDYaB3agg=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:53:18 2025 by rpki-client