Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/995df7fe-cb96-3240-811c-16a02c3703cb.roa
File:                     995df7fe-cb96-3240-811c-16a02c3703cb.roa (raw, json)
Hash identifier:          PvBBWC5usNRm9GpB95K/9cSR5OWK3zCV3pTIQCc050A=
Subject key identifier:   88:86:8A:DF:50:2B:87:33:32:6E:B5:67:98:18:69:DC:7D:30:04:36
Certificate issuer:       /CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Certificate serial:       010D0C9F4328584B1C36C5F9E85AF405BB5D7B00
Authority key identifier: B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/995df7fe-cb96-3240-811c-16a02c3703cb.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     2648
IP address blocks:        198.177.182.0/24 maxlen: 24
                          198.200.151.0/24 maxlen: 24
                          199.104.104.0/24 maxlen: 24
                          199.104.105.0/24 maxlen: 24
                          204.145.202.0/24 maxlen: 24
                          204.228.170.0/24 maxlen: 24
                          204.228.175.0/24 maxlen: 24
                          204.228.176.0/24 maxlen: 24
                          204.228.177.0/24 maxlen: 24
                          204.228.178.0/24 maxlen: 24
                          204.228.179.0/24 maxlen: 24
                          204.228.180.0/24 maxlen: 24
                          204.228.181.0/24 maxlen: 24
                          204.228.182.0/24 maxlen: 24
                          204.228.183.0/24 maxlen: 24
                          204.228.184.0/24 maxlen: 24
                          204.228.185.0/24 maxlen: 24
                          204.228.186.0/24 maxlen: 24
                          204.228.187.0/24 maxlen: 24
                          204.228.188.0/24 maxlen: 24
                          204.228.189.0/24 maxlen: 24
                          204.228.190.0/24 maxlen: 24
                          204.228.191.0/24 maxlen: 24
                          204.238.94.0/24 maxlen: 24
                          204.238.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:c5:f9:e8:5a:f4:05:bb:5d:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=2bd77726-e372-496f-8a2f-4c525b1dcfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:22:33:d8:9e:2b:fa:67:f3:41:52:d6:65:
                    c0:2b:0d:65:d2:f2:69:ea:b8:85:f2:9d:01:a7:22:
                    b5:2e:61:38:f1:ab:b7:76:ae:a9:de:86:45:86:b1:
                    02:59:f2:56:1f:53:0d:03:ac:06:db:21:73:c2:50:
                    7e:5c:a6:d4:3f:46:8a:56:b0:31:97:0c:72:a9:60:
                    8f:5a:ae:01:55:f9:e7:c0:4d:ff:7d:74:22:d1:88:
                    f4:7e:06:54:8f:75:8a:1e:8f:cb:33:ef:0b:38:6d:
                    f0:cc:fc:c8:88:4d:be:24:3c:10:1f:43:be:92:8b:
                    a4:31:40:9e:44:13:1e:b2:58:b5:35:f8:7e:3a:22:
                    76:fa:26:d2:fa:d6:e1:4e:01:97:17:17:d6:90:34:
                    3f:8c:76:b6:49:52:85:f1:3a:14:e9:34:5a:df:9c:
                    eb:63:6b:5d:63:67:f3:ac:db:7c:af:1a:a3:a5:fa:
                    f6:96:d9:8c:0b:67:f1:c5:0d:cd:bd:13:35:f8:ae:
                    9d:50:40:68:78:86:e1:50:d7:a3:8c:39:24:be:7c:
                    61:ed:fc:74:cc:77:e1:3a:9d:46:35:a3:ba:7d:49:
                    bf:d7:35:f2:d3:48:79:f7:8f:13:a0:92:a3:05:a1:
                    7e:d5:78:5f:71:53:71:56:25:22:3c:4c:5f:35:93:
                    81:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:86:8A:DF:50:2B:87:33:32:6E:B5:67:98:18:69:DC:7D:30:04:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/995df7fe-cb96-3240-811c-16a02c3703cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.182.0/24
                  198.200.151.0/24
                  199.104.104.0/23
                  204.145.202.0/24
                  204.228.170.0/24
                  204.228.175.0-204.228.191.255
                  204.238.94.0/24
                  204.238.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3d:34:66:94:ab:73:9f:fc:3f:24:f5:92:f4:16:bd:b4:ca:
         40:71:32:84:0c:78:46:f4:41:14:2f:da:88:a8:7b:71:56:b5:
         b5:d1:78:22:fb:5b:ac:c2:54:93:f0:a4:15:58:1e:65:3a:fc:
         56:43:f1:10:11:65:4f:f0:ba:c9:ef:86:e5:ec:fc:98:e5:1d:
         9c:69:52:b4:cb:0f:d2:92:86:6b:da:9b:93:c9:1c:01:f4:33:
         63:01:00:11:af:b9:9f:0b:45:8b:f7:c0:93:ec:c2:82:06:eb:
         e0:24:9f:e4:a8:38:44:ad:17:c1:cb:95:7e:4e:bf:6f:3d:03:
         e2:97:4e:89:f6:0b:8b:d8:c4:1f:12:b9:fd:86:5a:65:96:f5:
         62:c1:e6:42:99:78:ce:91:64:a5:33:6a:3f:ed:1c:b8:0d:4d:
         6b:ba:0a:03:b3:8c:da:61:0f:84:fa:7d:87:e3:4c:59:8b:23:
         b0:ee:a5:5b:56:50:56:1e:fe:00:14:ca:f7:44:a7:5e:50:73:
         84:2c:6c:89:02:7f:8c:15:9c:3e:e5:bd:e2:03:2d:42:3f:2c:
         af:a6:c0:3b:76:78:1d:2d:af:dc:0c:57:68:8d:07:d3:c1:b3:
         b7:b9:5a:4f:74:a0:8e:24:36:7f:dd:cd:0d:3a:f4:82:d9:f8:
         ed:53:27:14
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWEscNsX56Fr0BbtdewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDMzOWVmYWEtMzEyMS00YTgyLThkZDgtMTkyZjU2YWI0
N2QxMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
MmJkNzc3MjYtZTM3Mi00OTZmLThhMmYtNGM1MjViMWRjZmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3psiM9ieK/pn80FS1mXAKw1l0vJp6riF8p0B
pyK1LmE48au3dq6p3oZFhrECWfJWH1MNA6wG2yFzwlB+XKbUP0aKVrAxlwxyqWCP
Wq4BVfnnwE3/fXQi0Yj0fgZUj3WKHo/LM+8LOG3wzPzIiE2+JDwQH0O+koukMUCe
RBMesli1Nfh+OiJ2+ibS+tbhTgGXFxfWkDQ/jHa2SVKF8ToU6TRa35zrY2tdY2fz
rNt8rxqjpfr2ltmMC2fxxQ3NvRM1+K6dUEBoeIbhUNejjDkkvnxh7fx0zHfhOp1G
NaO6fUm/1zXy00h5948ToJKjBaF+1XhfcVNxViUiPExfNZOBmwIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFIiGit9QK4czMm61Z5gYadx9MAQ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzM5
ZWZhYS0zMTIxLTRhODItOGRkOC0xOTJmNTZhYjQ3ZDEvOTk1ZGY3ZmUtY2I5Ni0z
MjQwLTgxMWMtMTZhMDJjMzcwM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDMzOWVmYWEtMzEyMS00YTgyLThk
ZDgtMTkyZjU2YWI0N2QxLzAzMzllZmFhLTMxMjEtNGE4Mi04ZGQ4LTE5MmY1NmFi
NDdkMS5jcmwwHwYDVR0jBBgwFoAUt9QukUgCMxhaZGylKwyTt68f7LMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMzM5ZWZhYS0zMTIxLTRhODItOGRkOC0xOTJm
NTZhYjQ3ZDEuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAxrG2AwQA
xsiXAwQBx2hoAwQAzJHKAwQAzOSqMAwDBADM5K8DBAbM5IADBADM7l4DBADM7nsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAED00ZpSrc5/8PyT1kvQWvbTKQHEyhAx4RvRBFC/aiKh7cVa1tdF4
IvtbrMJUk/CkFVgeZTr8VkPxEBFlT/C6ye+G5ez8mOUdnGlStMsP0pKGa9qbk8kc
AfQzYwEAEa+5nwtFi/fAk+zCggbr4CSf5Kg4RK0XwcuVfk6/bz0D4pdOifYLi9jE
HxK5/YZaZZb1YsHmQpl4zpFkpTNqP+0cuA1Na7oKA7OM2mEPhPp9h+NMWYsjsO6l
W1ZQVh7+ABTK90SnXlBzhCxsiQJ/jBWcPuW94gMtQj8sr6bAO3Z4HS2v3AxXaI0H
08Gzt7laT3SgjiQ2f93NDTr0gtn47VMnFA==
-----END CERTIFICATE-----
Generated at Fri Oct 10 14:16:05 2025 by rpki-client