Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa
File:                     f4637f85-f045-3611-b433-908584a54b6e.roa (raw, json)
Hash identifier:          yNoY19Zar4SLrRgiRgrDmyvPKUJuxE/xPAyZCkOH68g=
Subject key identifier:   72:0B:A7:9E:89:01:5E:01:C3:FD:CF:5E:8E:B7:43:78:97:F9:82:0F
Certificate issuer:       /CN=cbd9e34f-e30d-4184-956a-7e3e22cee6c8
Certificate serial:       010D0C9F4328584B4E7719A86FD4709E03E0D3E0
Authority key identifier: 49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     40194
IP address blocks:        192.152.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:19:a8:6f:d4:70:9e:03:e0:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd9e34f-e30d-4184-956a-7e3e22cee6c8
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=4bd036a3-e60c-424d-a8bf-9c29ecb74399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:aa:66:23:73:a4:d2:dd:71:a1:04:93:b0:f6:
                    dc:56:e0:1e:9d:46:36:1d:be:aa:9d:35:85:00:50:
                    0c:66:b0:89:0a:de:f0:2a:0b:ab:84:d1:e4:e0:47:
                    76:57:aa:5c:6d:a5:6b:74:31:5b:7e:00:bf:3a:83:
                    ac:51:3b:a9:aa:b3:00:11:15:c3:aa:27:f0:f2:39:
                    f3:f2:59:f3:bd:18:32:3d:d7:52:d0:90:4f:e0:df:
                    03:34:bb:6e:11:e3:55:29:b9:a3:ac:50:cc:c6:3a:
                    c9:2a:73:5b:c6:af:d1:47:69:e9:37:42:a4:ac:d6:
                    07:1b:8e:38:2b:e5:20:29:07:4e:fa:66:69:dc:9b:
                    1f:45:47:98:5b:35:c8:0f:e6:66:a6:e9:68:70:2a:
                    d7:a9:0e:35:a6:b6:07:89:58:fb:08:4e:8b:f7:d7:
                    c9:9b:80:b2:44:63:d0:a8:c9:61:11:44:83:6a:e6:
                    90:8b:97:37:b8:7e:11:c8:10:59:09:3b:8a:b8:71:
                    15:ab:e4:3f:12:dc:a0:7d:4c:56:41:25:b4:15:64:
                    12:00:7c:11:cc:67:eb:b2:21:4f:c8:9a:42:82:3d:
                    73:5f:28:42:d0:48:00:f2:24:b3:14:ba:7f:7a:0e:
                    08:b9:84:5b:5b:bf:4e:73:e8:dd:06:45:30:fe:87:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0B:A7:9E:89:01:5E:01:C3:FD:CF:5E:8E:B7:43:78:97:F9:82:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.crl

            X509v3 Authority Key Identifier:
                keyid:49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:25:31:e5:e4:9d:ff:f1:d3:a6:6a:e9:97:be:8a:8a:66:
         2a:ef:79:13:f2:d4:43:cf:bf:37:47:63:16:7a:16:62:46:54:
         8b:44:b2:0c:fa:2d:a5:88:10:bf:04:f5:0f:7c:63:e5:ff:29:
         a3:9a:c0:5b:0a:01:b8:da:06:b3:e8:e9:41:46:a8:36:8a:42:
         2d:0f:04:d8:18:85:22:2a:20:bb:ae:bf:c3:aa:eb:cc:fb:32:
         db:b4:80:a9:1e:5b:bc:e4:aa:52:87:d9:e4:cf:e7:06:e0:96:
         16:08:4f:7f:d7:8e:fd:86:30:67:0b:18:b1:32:da:b1:6d:3d:
         f1:78:7f:09:00:6d:91:dc:ec:b4:fa:79:5c:07:83:4c:93:b5:
         4e:ef:7c:95:3e:6c:bc:c7:e3:05:5b:98:29:72:98:bd:13:ae:
         9a:42:11:a0:58:75:36:f2:50:46:8e:dd:5d:b3:5f:ee:1b:b4:
         a4:0b:69:b5:89:68:de:af:ed:b8:72:ff:51:83:4f:7d:3b:36:
         ec:1d:e4:6f:77:84:2d:cd:56:80:b4:92:67:02:84:58:6b:c8:
         5e:04:54:4a:68:0e:cb:20:7b:66:4d:b9:47:96:08:f6:76:f8:
         e2:4f:9a:48:b6:2e:a4:38:a0:d2:9a:a9:ca:42:4d:d2:0e:ad:
         22:0f:9a:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxmob9RwngPg0+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JkOWUzNGYtZTMwZC00MTg0LTk1NmEtN2UzZTIyY2Vl
NmM4MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
NGJkMDM2YTMtZTYwYy00MjRkLWE4YmYtOWMyOWVjYjc0Mzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KpmI3Ok0t1xoQSTsPbcVuAenUY2Hb6qnTWF
AFAMZrCJCt7wKgurhNHk4Ed2V6pcbaVrdDFbfgC/OoOsUTupqrMAERXDqifw8jnz
8lnzvRgyPddS0JBP4N8DNLtuEeNVKbmjrFDMxjrJKnNbxq/RR2npN0KkrNYHG444
K+UgKQdO+mZp3JsfRUeYWzXID+ZmpulocCrXqQ41prYHiVj7CE6L99fJm4CyRGPQ
qMlhEUSDauaQi5c3uH4RyBBZCTuKuHEVq+Q/EtygfUxWQSW0FWQSAHwRzGfrsiFP
yJpCgj1zXyhC0EgA8iSzFLp/eg4IuYRbW79Oc+jdBkUw/ofaGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHILp56JAV4Bw/3PXo63Q3iX+YIPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYmQ5
ZTM0Zi1lMzBkLTQxODQtOTU2YS03ZTNlMjJjZWU2YzgvZjQ2MzdmODUtZjA0NS0z
NjExLWI0MzMtOTA4NTg0YTU0YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2JkOWUzNGYtZTMwZC00MTg0LTk1
NmEtN2UzZTIyY2VlNmM4L2NiZDllMzRmLWUzMGQtNDE4NC05NTZhLTdlM2UyMmNl
ZTZjOC5jcmwwHwYDVR0jBBgwFoAUSR/ddgOoFuDLis2EVBdyYE2FVr4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jYmQ5ZTM0Zi1lMzBkLTQxODQtOTU2YS03ZTNl
MjJjZWU2YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJh2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwvJTHl5J3/8dOmaumXvoqKZirveRPy1EPPvzdHYxZ6FmJGVItEsgz6
LaWIEL8E9Q98Y+X/KaOawFsKAbjaBrPo6UFGqDaKQi0PBNgYhSIqILuuv8Oq68z7
Mtu0gKkeW7zkqlKH2eTP5wbglhYIT3/Xjv2GMGcLGLEy2rFtPfF4fwkAbZHc7LT6
eVwHg0yTtU7vfJU+bLzH4wVbmClymL0TrppCEaBYdTbyUEaO3V2zX+4btKQLabWJ
aN6v7bhy/1GDT307Nuwd5G93hC3NVoC0kmcChFhryF4EVEpoDssge2ZNuUeWCPZ2
+OJPmki2LqQ4oNKaqcpCTdIOrSIPmpU=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:25:28 2025 by rpki-client