Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/93a1b843-74a2-369d-b6df-752f028943a5.roa
File:                     93a1b843-74a2-369d-b6df-752f028943a5.roa (raw, json)
Hash identifier:          cL4zxto1u0CX7All+5OvGUxkrVy8ukpyJmQwSimuLH8=
Subject key identifier:   45:ED:29:09:EB:DE:00:8C:69:86:9F:A8:EC:B2:7C:B8:7F:89:D7:AB
Certificate issuer:       /CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
Certificate serial:       010D0C9F4328584B2066D55F06FE950E67AEAA10
Authority key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/93a1b843-74a2-369d-b6df-752f028943a5.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     4186
IP address blocks:        192.104.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d5:5f:06:fe:95:0e:67:ae:aa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=3156fc34-3b60-4f18-961e-1b5af5284423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:b3:b7:b5:5c:3f:77:c3:2e:0d:c3:13:25:
                    97:5e:df:15:c4:cd:0e:be:7e:fb:fe:2e:79:20:83:
                    3d:a5:ab:33:44:8a:c9:0d:ec:30:af:f9:25:77:35:
                    b9:c9:38:0b:ea:bb:7c:74:42:5d:31:bb:f8:66:5b:
                    73:26:c4:0b:a9:27:fd:4c:8e:50:d9:1c:68:19:89:
                    1e:0d:2d:b5:13:a4:46:41:3d:de:a1:dd:45:7a:34:
                    b4:14:6a:9f:9d:9d:5c:c4:a5:4d:dd:fc:f0:1c:b1:
                    b0:4d:a9:52:e3:e9:84:86:d9:66:c3:da:2b:d2:ab:
                    ed:5b:b5:8c:60:07:9b:86:76:86:b0:38:f3:28:8a:
                    01:5e:14:3e:9c:4a:8d:2d:7d:db:ea:91:3d:65:a8:
                    3c:e1:48:21:1c:cf:72:73:c3:dd:8d:a6:e1:ca:83:
                    2f:71:05:a7:e5:a8:ba:39:31:de:2e:60:ef:68:cb:
                    d9:63:91:c4:07:5c:d4:ad:56:87:50:87:df:b9:01:
                    be:3e:ce:0d:87:72:2b:7e:19:6d:05:7e:eb:ae:16:
                    3e:66:1e:fa:8f:72:40:16:1c:94:44:a6:62:02:6a:
                    a0:a1:ed:e9:c7:69:de:a2:65:74:c0:38:58:77:76:
                    86:de:9e:0e:b1:86:d0:df:cb:00:c2:db:70:79:92:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:ED:29:09:EB:DE:00:8C:69:86:9F:A8:EC:B2:7C:B8:7F:89:D7:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/93a1b843-74a2-369d-b6df-752f028943a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl

            X509v3 Authority Key Identifier:
                keyid:46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f2:f7:01:b3:da:46:43:5c:7b:1e:3e:17:8b:28:8a:79:70:
         b4:06:7b:8d:e2:70:42:9b:18:60:8b:c1:de:ea:99:11:73:0a:
         98:04:17:80:92:b6:57:bb:f2:0c:bc:bf:86:4a:6c:36:1b:d6:
         8b:57:9c:9b:7f:71:19:67:68:0e:76:f6:d6:b4:6c:1f:65:d6:
         7a:4c:c3:7d:cf:c6:24:c8:2f:45:d5:8b:e3:d8:b3:f8:ca:b8:
         26:f4:9f:6b:68:36:81:f5:88:b4:ed:9d:4c:76:df:fc:d5:c4:
         c0:32:28:aa:6e:4e:9a:e9:25:91:e0:57:22:d4:13:1d:84:93:
         a0:e9:3e:bf:76:7c:a4:2b:9e:0d:35:96:6f:83:73:27:01:18:
         3e:26:a4:57:bd:d6:6e:c4:dd:f7:05:b1:32:ec:2c:e7:47:9a:
         d5:b9:ba:b7:68:25:2d:60:c2:96:3a:ad:49:4a:5d:13:52:fd:
         74:89:97:cc:33:23:f6:84:d2:ce:36:4e:24:4d:10:ca:fb:ef:
         10:12:23:c0:de:3e:3a:cc:ad:70:85:43:1d:0e:c4:50:bc:01:
         dc:03:83:9e:89:d1:f2:38:02:88:da:73:aa:f4:b1:ce:f6:43:
         8d:6f:9f:3f:bd:9e:dd:e5:96:d7:5d:7c:53:4d:64:13:23:2f:
         35:f9:95:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtVfBv6VDmeuqhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwMTY2NzgtZGFiMy00M2QxLWI3ZWEtNWQzYWQ4MTQ4
ZTk3MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk
MzE1NmZjMzQtM2I2MC00ZjE4LTk2MWUtMWI1YWY1Mjg0NDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6uzt7VcP3fDLg3DEyWXXt8VxM0Ovn77/i55
IIM9paszRIrJDewwr/kldzW5yTgL6rt8dEJdMbv4ZltzJsQLqSf9TI5Q2RxoGYke
DS21E6RGQT3eod1FejS0FGqfnZ1cxKVN3fzwHLGwTalS4+mEhtlmw9or0qvtW7WM
YAebhnaGsDjzKIoBXhQ+nEqNLX3b6pE9Zag84UghHM9yc8PdjabhyoMvcQWn5ai6
OTHeLmDvaMvZY5HEB1zUrVaHUIffuQG+Ps4Nh3IrfhltBX7rrhY+Zh76j3JAFhyU
RKZiAmqgoe3px2neomV0wDhYd3aG3p4OsYbQ38sAwttweZJL4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXtKQnr3gCMaYafqOyyfLh/iderMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jZjAx
NjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNhZDgxNDhlOTcvOTNhMWI4NDMtNzRhMi0z
NjlkLWI2ZGYtNzUyZjAyODk0M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2YwMTY2NzgtZGFiMy00M2QxLWI3
ZWEtNWQzYWQ4MTQ4ZTk3L2NmMDE2Njc4LWRhYjMtNDNkMS1iN2VhLTVkM2FkODE0
OGU5Ny5jcmwwHwYDVR0jBBgwFoAURoXSUGuQUNMXk24RcerDi5nlATYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jZjAxNjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNh
ZDgxNDhlOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGg2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACfy9wGz2kZDXHsePheLKIp5cLQGe43icEKbGGCLwd7qmRFzCpgEF4CS
tle78gy8v4ZKbDYb1otXnJt/cRlnaA529ta0bB9l1npMw33PxiTIL0XVi+PYs/jK
uCb0n2toNoH1iLTtnUx23/zVxMAyKKpuTprpJZHgVyLUEx2Ek6DpPr92fKQrng01
lm+DcycBGD4mpFe91m7E3fcFsTLsLOdHmtW5urdoJS1gwpY6rUlKXRNS/XSJl8wz
I/aE0s42TiRNEMr77xASI8DePjrMrXCFQx0OxFC8AdwDg56J0fI4Aojac6r0sc72
Q41vnz+9nt3lltddfFNNZBMjLzX5lU8=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:33:11 2025 by rpki-client