Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/83dd0d9b-bf75-3d68-9b81-7fd15e13e68a.roa
File:                     83dd0d9b-bf75-3d68-9b81-7fd15e13e68a.roa (raw, json)
Hash identifier:          p6LgOYYPPY1OMvkcQivrvWGcVz80A0fDP41ReYSLfmo=
Subject key identifier:   33:3D:0D:5C:45:16:CE:BE:21:C7:2B:C5:DC:4A:38:31:7E:62:F8:D9
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584B663209AAD0870807122335A0
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/83dd0d9b-bf75-3d68-9b81-7fd15e13e68a.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     33548
IP address blocks:        142.214.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:09:aa:d0:87:08:07:12:23:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=e2624fa6-bcc3-4dc9-b825-deda162fb2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:5b:1c:6f:7d:e4:0f:0a:af:63:6a:bb:ed:
                    68:40:1a:b6:c3:47:46:3d:49:84:c5:e0:ba:98:21:
                    a3:7a:22:5c:29:fd:ea:40:57:36:a7:4f:27:2f:dc:
                    d6:8a:44:3a:5e:fc:61:e7:ab:cb:be:92:3b:da:2c:
                    1b:12:7f:68:7a:4b:50:43:4b:0e:46:b2:f5:8e:4c:
                    b3:8f:f7:7e:68:d6:cf:e2:b1:de:57:b8:4c:76:e5:
                    db:0f:a9:62:f4:be:95:64:d4:9f:f4:0c:40:64:3f:
                    c4:f6:e0:4e:1c:a5:c2:8c:59:b8:49:49:58:c7:ff:
                    35:df:fe:63:9f:8a:21:9b:bf:12:70:95:65:d8:9e:
                    14:5b:d6:da:94:1b:75:ab:95:13:d9:8b:ae:05:06:
                    c2:df:bf:a2:38:1a:a4:b9:91:5c:11:d9:98:ae:5e:
                    92:d2:2a:a4:a2:4d:68:24:6a:05:85:ee:23:70:95:
                    84:bf:18:56:5e:fe:60:a5:5d:bf:a9:35:20:50:e6:
                    1c:e5:95:48:93:e1:77:c5:e8:50:c4:aa:90:c9:b6:
                    0d:7f:2b:14:a0:f6:ea:16:ea:17:da:3f:c4:09:9c:
                    15:2c:3d:27:8a:e1:af:c2:2f:1e:75:5d:09:b4:16:
                    cc:82:88:dc:02:45:39:94:ba:8a:f9:44:04:74:ed:
                    70:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3D:0D:5C:45:16:CE:BE:21:C7:2B:C5:DC:4A:38:31:7E:62:F8:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/83dd0d9b-bf75-3d68-9b81-7fd15e13e68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6d:64:a4:25:82:30:63:07:6c:dc:73:50:96:5a:fd:47:60:
         67:f5:b9:63:d3:15:e1:44:eb:dd:83:bd:9e:df:51:ed:96:99:
         47:3a:9a:33:45:d9:95:ec:b2:8a:e6:52:21:fc:3f:b7:e8:f9:
         ed:d5:c9:65:cf:ee:33:5b:1a:3d:f3:b4:96:c1:cc:38:c9:03:
         5f:36:d9:bb:fa:6d:87:2c:94:1f:4d:41:bb:f9:19:11:74:fa:
         7c:f9:60:3f:a6:16:52:46:e5:22:2c:22:ad:99:4b:7c:e9:f7:
         06:58:e5:35:bc:23:c0:3f:18:bd:c9:c2:0e:8b:c6:14:68:f6:
         c1:40:1a:7d:ed:d1:a1:ca:22:1b:9b:5f:10:64:f0:03:4a:5c:
         09:15:a8:54:c4:c3:71:44:dc:ad:a9:b0:64:18:d6:a1:c3:11:
         7c:e1:f6:f5:ed:cc:d0:ee:d8:65:6a:d0:32:cc:af:a7:6f:11:
         84:a1:1e:bf:d3:d0:4a:c1:03:5d:e5:78:b7:b0:0d:7b:57:bc:
         45:01:99:be:bd:66:24:2b:2a:ed:c0:45:38:2e:f4:6d:4d:04:
         6a:8a:32:52:8f:e4:40:f6:c0:d2:7e:04:8e:87:6f:0a:dc:1c:
         f3:5c:74:65:31:bf:07:a2:6d:33:43:80:25:cf:54:34:7b:33:
         a9:98:70:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgmq0IcIBxIjNaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk0ZGFmYmYtMzI4ZS00MGYyLWFiMGQtNDcxOGYxMTc3
ODYxMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk
ZTI2MjRmYTYtYmNjMy00ZGM5LWI4MjUtZGVkYTE2MmZiMmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5pbHG995A8Kr2Nqu+1oQBq2w0dGPUmExeC6
mCGjeiJcKf3qQFc2p08nL9zWikQ6Xvxh56vLvpI72iwbEn9oektQQ0sORrL1jkyz
j/d+aNbP4rHeV7hMduXbD6li9L6VZNSf9AxAZD/E9uBOHKXCjFm4SUlYx/813/5j
n4ohm78ScJVl2J4UW9balBt1q5UT2YuuBQbC37+iOBqkuZFcEdmYrl6S0iqkok1o
JGoFhe4jcJWEvxhWXv5gpV2/qTUgUOYc5ZVIk+F3xehQxKqQybYNfysUoPbqFuoX
2j/ECZwVLD0niuGvwi8edV0JtBbMgojcAkU5lLqK+UQEdO1wbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDM9DVxFFs6+IccrxdxKODF+YvjZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRk
YWZiZi0zMjhlLTQwZjItYWIwZC00NzE4ZjExNzc4NjEvODNkZDBkOWItYmY3NS0z
ZDY4LTliODEtN2ZkMTVlMTNlNjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk0ZGFmYmYtMzI4ZS00MGYyLWFi
MGQtNDcxOGYxMTc3ODYxL2U5NGRhZmJmLTMyOGUtNDBmMi1hYjBkLTQ3MThmMTE3
Nzg2MS5jcmwwHwYDVR0jBBgwFoAUHpbW+MBWSeEWvtPCmYRooLx45zkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRkYWZiZi0zMjhlLTQwZjItYWIwZC00NzE4
ZjExNzc4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjtblMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRtZKQlgjBjB2zcc1CWWv1HYGf1uWPTFeFE692DvZ7fUe2WmUc6mjNF
2ZXssormUiH8P7fo+e3VyWXP7jNbGj3ztJbBzDjJA1822bv6bYcslB9NQbv5GRF0
+nz5YD+mFlJG5SIsIq2ZS3zp9wZY5TW8I8A/GL3Jwg6LxhRo9sFAGn3t0aHKIhub
XxBk8ANKXAkVqFTEw3FE3K2psGQY1qHDEXzh9vXtzNDu2GVq0DLMr6dvEYShHr/T
0ErBA13leLewDXtXvEUBmb69ZiQrKu3ARTgu9G1NBGqKMlKP5ED2wNJ+BI6Hbwrc
HPNcdGUxvweibTNDgCXPVDR7M6mYcNU=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:25:17 2025 by rpki-client