Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa
File:                     7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa (raw, json)
Hash identifier:          v3OmXGGN2MBWLzVb5fwUvVrgALbBUpuiIFJ5+xDRL3Q=
Subject key identifier:   B5:83:F5:1B:F8:B5:BC:ED:10:8C:8A:24:CC:68:EA:5B:3C:2C:97:9C
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584B0B76B714FFFE37FDE89F3C40
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     36184
IP address blocks:        209.160.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b7:14:ff:fe:37:fd:e8:9f:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=1658cf03-d4a1-4776-b74d-3effb3113073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:77:74:49:4a:aa:09:ed:a2:4c:82:92:94:a6:
                    9d:25:1a:e1:12:5d:65:18:66:bf:26:f7:04:1b:de:
                    ef:43:06:c2:5a:89:09:3f:97:26:79:65:7a:c6:5b:
                    82:6b:94:ce:87:cb:ba:8f:f2:10:82:f8:2a:a4:5c:
                    13:40:a2:9f:2f:c3:87:68:bd:07:54:6e:3c:48:39:
                    70:a5:07:c7:81:d5:2b:0f:29:a6:44:4b:6c:68:cf:
                    87:43:34:5c:a7:f6:38:a5:53:2f:e4:fd:bd:67:dc:
                    ca:6d:53:e2:ad:b1:88:eb:cf:28:c0:eb:8a:14:1e:
                    e6:18:58:01:cd:d9:1a:23:a5:dd:13:e3:30:ca:f6:
                    17:98:1b:76:e1:79:b2:11:19:39:68:d8:84:02:d4:
                    16:f2:03:e9:36:f2:30:38:a7:3b:17:17:e4:40:d7:
                    80:97:d1:26:a9:23:90:69:c1:08:fd:01:93:67:22:
                    4d:ab:5f:7d:0a:fd:42:87:6c:4d:55:c6:28:1f:56:
                    a2:3c:69:62:d6:fe:8f:f6:c1:13:83:e7:3f:d6:23:
                    ad:60:3f:19:72:97:87:60:10:43:ed:3e:0d:0d:15:
                    b3:1a:d3:cc:20:7d:81:ea:e4:72:f0:f2:f1:00:90:
                    49:8b:46:77:fe:3e:38:d7:04:1a:d7:89:c6:c4:03:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:F5:1B:F8:B5:BC:ED:10:8C:8A:24:CC:68:EA:5B:3C:2C:97:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:a3:e5:fc:09:87:52:d6:df:7c:ff:1f:eb:f9:65:d6:ae:
         5e:22:d2:b0:d8:fc:57:2a:b5:a0:58:26:98:10:4b:73:97:cd:
         72:75:a3:b6:07:d0:1e:8e:aa:21:d0:9e:03:31:75:e3:68:83:
         2a:bf:ab:19:fa:e3:69:4f:c2:ee:bf:86:e5:a8:b8:85:28:47:
         f2:85:18:d9:30:c9:fd:36:3e:6c:3e:9b:84:39:f3:8c:24:62:
         dd:9e:96:96:de:be:c0:2d:75:c6:ac:9e:83:24:25:ca:83:32:
         a2:55:bc:e2:31:82:7a:d2:70:31:d8:1d:73:c7:bb:0a:1a:98:
         9e:ac:a2:50:cc:70:5a:df:36:90:a3:eb:97:7a:8d:65:d8:2c:
         b2:38:e3:50:bf:3c:e9:d2:98:f3:06:76:2c:b8:c7:3b:ed:52:
         f7:7e:0c:9f:4f:41:fd:02:e8:d6:bf:54:16:db:4b:a1:9c:ec:
         2b:92:19:53:c4:c1:3c:39:19:74:4b:0f:e5:7d:a9:3a:06:43:
         fc:4b:bf:7b:cc:10:d3:99:39:74:9a:5d:e3:79:8c:06:b9:33:
         fb:31:55:93:b0:8b:bf:fa:7f:70:48:13:eb:db:96:62:31:e4:
         9e:d2:a7:9a:16:76:f7:02:af:df:97:11:26:c6:34:bb:73:b1:
         b7:62:fe:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrcU//43/eifPEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwODg0ZjQtZmExNC00YTEzLWFjM2ItZWZiN2M5NDEy
MDgyMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk
MTY1OGNmMDMtZDRhMS00Nzc2LWI3NGQtM2VmZmIzMTEzMDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnd0SUqqCe2iTIKSlKadJRrhEl1lGGa/JvcE
G97vQwbCWokJP5cmeWV6xluCa5TOh8u6j/IQgvgqpFwTQKKfL8OHaL0HVG48SDlw
pQfHgdUrDymmREtsaM+HQzRcp/Y4pVMv5P29Z9zKbVPirbGI688owOuKFB7mGFgB
zdkaI6XdE+MwyvYXmBt24XmyERk5aNiEAtQW8gPpNvIwOKc7FxfkQNeAl9EmqSOQ
acEI/QGTZyJNq199Cv1Ch2xNVcYoH1aiPGli1v6P9sETg+c/1iOtYD8ZcpeHYBBD
7T4NDRWzGtPMIH2B6uRy8PLxAJBJi0Z3/j441wQa14nGxAPffwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWD9Rv4tbztEIyKJMxo6ls8LJecMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lNjA4
ODRmNC1mYTE0LTRhMTMtYWMzYi1lZmI3Yzk0MTIwODIvN2E0ZTUzYzUtZTQ0OC0z
MzEzLWIwNTUtZWI5YjhlMDM4N2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTYwODg0ZjQtZmExNC00YTEzLWFj
M2ItZWZiN2M5NDEyMDgyL2U2MDg4NGY0LWZhMTQtNGExMy1hYzNiLWVmYjdjOTQx
MjA4Mi5jcmwwHwYDVR0jBBgwFoAUDJp86W2MOEia8zvKQWbziUd9SQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lNjA4ODRmNC1mYTE0LTRhMTMtYWMzYi1lZmI3
Yzk0MTIwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0aBQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCyo+X8CYdS1t98/x/r+WXWrl4i0rDY/FcqtaBYJpgQS3OXzXJ1o7YH
0B6OqiHQngMxdeNogyq/qxn642lPwu6/huWouIUoR/KFGNkwyf02Pmw+m4Q584wk
Yt2elpbevsAtdcasnoMkJcqDMqJVvOIxgnrScDHYHXPHuwoamJ6solDMcFrfNpCj
65d6jWXYLLI441C/POnSmPMGdiy4xzvtUvd+DJ9PQf0C6Na/VBbbS6Gc7CuSGVPE
wTw5GXRLD+V9qToGQ/xLv3vMENOZOXSaXeN5jAa5M/sxVZOwi7/6f3BIE+vblmIx
5J7Sp5oWdvcCr9+XESbGNLtzsbdi/nE=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:52 2025 by rpki-client