Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afe237b6-ed82-3f24-9be6-523a4617e118.roa
File:                     afe237b6-ed82-3f24-9be6-523a4617e118.roa (raw, json)
Hash identifier:          OxFwSznqKwHtWV2O1OdvCTWox48w1ZTtMKQ5KO5annw=
Subject key identifier:   50:F3:11:C8:A5:2F:E3:D6:49:9F:4E:CB:A3:6B:FA:AE:8C:CF:9A:09
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6F0B78B59F93E4C2DDD00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afe237b6-ed82-3f24-9be6-523a4617e118.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        167.82.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:f0:b7:8b:59:f9:3e:4c:2d:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=67cea133-a87e-4bd3-849b-d29d0ed5dba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:fc:7c:28:07:0c:fc:5f:79:12:07:c1:72:
                    08:4a:d2:28:4b:44:b4:22:60:08:31:eb:27:2b:be:
                    6b:0e:ea:75:5f:46:60:28:36:9e:1e:37:4c:47:ab:
                    ad:58:16:c3:b9:4c:1a:46:8c:b9:ca:6b:fc:37:52:
                    31:ce:3d:7b:20:c2:5b:85:05:c4:1c:e7:5f:7b:9d:
                    4e:8b:53:2c:35:ea:33:dd:d9:cd:92:cf:50:06:80:
                    d7:e9:4d:50:7e:5d:8d:08:fb:c7:45:4c:08:8f:8f:
                    22:27:08:36:59:28:c4:b2:7e:d5:c6:60:12:5b:7a:
                    39:99:71:52:b6:50:99:9b:03:b3:4d:c8:2d:57:85:
                    ef:f1:1e:24:31:5e:fb:68:72:49:43:2f:56:a2:b3:
                    11:1d:ed:8c:78:9f:6b:9e:20:73:50:23:3a:e8:55:
                    c1:47:ab:11:15:b8:26:18:a7:bf:a9:a1:06:c0:8a:
                    e4:09:92:0d:3a:10:18:9d:f1:22:1e:6f:4f:56:57:
                    fb:7c:d2:9a:4d:d6:b2:9d:61:bd:12:7d:44:b3:48:
                    fd:7a:54:a0:f2:ab:54:3d:3c:42:6e:8a:36:bf:d0:
                    da:72:94:2f:0d:1a:38:70:8f:29:3e:6c:8c:42:b2:
                    6c:14:5d:18:6f:af:27:60:17:7c:a2:6a:a0:f0:6e:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F3:11:C8:A5:2F:E3:D6:49:9F:4E:CB:A3:6B:FA:AE:8C:CF:9A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afe237b6-ed82-3f24-9be6-523a4617e118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.82.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bd:7c:54:25:46:0f:ad:97:af:58:de:5e:bd:26:59:ef:16:
         8f:86:60:40:90:f3:e1:6a:13:41:bd:f2:16:02:c4:e2:3b:e8:
         86:17:3d:78:59:0c:db:c9:91:2f:a8:79:ef:a3:29:e9:d7:db:
         44:50:eb:46:7e:69:b8:14:bd:d5:d0:d1:d7:2c:eb:e9:c7:b9:
         14:5b:92:f3:17:e2:22:79:c5:f3:d4:98:4f:86:02:01:77:46:
         f6:c7:34:39:be:52:96:37:80:fc:a5:3a:4d:d4:52:9a:38:5d:
         44:e4:7f:70:b0:2a:c6:60:5e:d2:86:76:6f:0d:10:18:2a:6c:
         77:77:32:14:87:db:27:a1:ac:80:0d:51:75:e0:00:73:e6:3e:
         52:22:4c:7d:cb:b1:42:7c:36:e9:78:d9:e8:08:5f:55:4a:ec:
         e1:c8:db:0b:da:12:ea:f8:93:9b:28:2c:f0:55:75:ae:d5:e7:
         c0:c4:ce:d2:53:ad:17:92:87:3f:95:65:1a:70:1c:eb:f2:f3:
         84:65:5f:b9:03:8c:5b:db:63:d2:b5:cb:18:23:64:4d:29:ff:
         bd:d8:5d:52:fc:dc:35:b9:06:7e:23:ba:7c:b6:40:80:50:c9:
         45:83:79:77:8f:f2:22:87:54:90:44:2e:31:60:01:91:eb:94:
         c5:c1:f7:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1vC3i1n5Pkwt3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
NjdjZWExMzMtYTg3ZS00YmQzLTg0OWItZDI5ZDBlZDVkYmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAT8fCgHDPxfeRIHwXIIStIoS0S0ImAIMesn
K75rDup1X0ZgKDaeHjdMR6utWBbDuUwaRoy5ymv8N1Ixzj17IMJbhQXEHOdfe51O
i1MsNeoz3dnNks9QBoDX6U1Qfl2NCPvHRUwIj48iJwg2WSjEsn7VxmASW3o5mXFS
tlCZmwOzTcgtV4Xv8R4kMV77aHJJQy9WorMRHe2MeJ9rniBzUCM66FXBR6sRFbgm
GKe/qaEGwIrkCZINOhAYnfEiHm9PVlf7fNKaTdaynWG9En1Es0j9elSg8qtUPTxC
boo2v9DacpQvDRo4cI8pPmyMQrJsFF0Yb68nYBd8omqg8G7XJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFDzEcilL+PWSZ9Oy6Nr+q6Mz5oJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWZlMjM3YjYtZWQ4Mi0z
ZjI0LTliZTYtNTIzYTQ2MTdlMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1LvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABi9fFQlRg+tl69Y3l69JlnvFo+GYECQ8+FqE0G98hYCxOI76IYXPXhZ
DNvJkS+oee+jKenX20RQ60Z+abgUvdXQ0dcs6+nHuRRbkvMX4iJ5xfPUmE+GAgF3
RvbHNDm+UpY3gPylOk3UUpo4XUTkf3CwKsZgXtKGdm8NEBgqbHd3MhSH2yehrIAN
UXXgAHPmPlIiTH3LsUJ8Nul42egIX1VK7OHI2wvaEur4k5soLPBVda7V58DEztJT
rReShz+VZRpwHOvy84RlX7kDjFvbY9K1yxgjZE0p/73YXVL83DW5Bn4juny2QIBQ
yUWDeXeP8iKHVJBELjFgAZHrlMXB96Q=
-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:52 2025 by rpki-client