Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/93f3558b-1f94-3403-880e-9a27786d4878.roa
File:                     93f3558b-1f94-3403-880e-9a27786d4878.roa (raw, json)
Hash identifier:          faE7mK1BnYOgBwVNUKva+tpuuIhoC+GGMW+daCiBQZ8=
Subject key identifier:   BC:A7:66:17:3B:9C:F1:38:A7:32:4E:3B:FC:36:86:F7:97:44:D6:80
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F4328584B08ABEC23F1445B9F7342DD80
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/93f3558b-1f94-3403-880e-9a27786d4878.roa
Signing time:             Sun 31 Aug 2025 01:00:33 +0000
ROA not before:           Sun 31 Aug 2025 01:00:33 +0000
ROA not after:            Sat 29 Nov 2025 02:00:33 +0000
asID:                     3257
IP address blocks:        141.195.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:08:ab:ec:23:f1:44:5b:9f:73:42:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Aug 31 01:00:33 2025 GMT
            Not After : Nov 29 02:00:33 2025 GMT
        Subject: CN=46bbd866-8ff3-4b44-aea8-37ef9579574c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:15:69:92:a8:bb:71:c6:63:ec:01:7a:a1:
                    70:3d:a1:42:97:5c:bf:79:aa:8a:e8:7f:31:da:20:
                    e7:48:9b:c8:b1:0a:33:b6:11:cb:bb:17:1a:a3:f4:
                    aa:e1:c6:75:a2:57:d8:7b:e5:37:7e:f2:27:f0:1d:
                    9a:2b:8d:0f:af:2a:2b:8c:3d:13:9c:22:7a:55:b3:
                    24:8a:45:5b:be:62:3e:b6:61:1e:d9:1f:88:76:75:
                    f5:94:8a:28:49:e8:21:96:88:d5:d0:44:da:f0:36:
                    33:67:f7:bd:50:41:00:cb:ae:3a:ea:83:5a:1a:cd:
                    50:c2:9c:60:5f:48:55:e5:79:c3:f3:b1:d7:22:2d:
                    5f:20:d4:f2:7f:95:ca:85:57:5d:fe:d7:f4:ab:7b:
                    2b:cf:40:fa:20:a2:e5:6d:64:6d:8c:80:7a:c6:9b:
                    4b:8d:f7:2b:5e:e8:f1:87:82:2e:7f:11:c9:7d:19:
                    22:43:97:30:95:28:f5:50:48:4d:93:16:f7:14:eb:
                    01:3d:c6:6d:4e:e7:f0:92:b3:12:e4:ad:93:ab:dd:
                    5b:7e:90:44:95:98:94:20:23:2f:40:0b:10:da:a9:
                    b1:36:43:c8:bf:cf:97:6e:95:ea:86:f9:81:66:9a:
                    bd:67:cb:61:6d:0a:6d:3f:f9:0b:c7:cf:f9:e1:d9:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A7:66:17:3B:9C:F1:38:A7:32:4E:3B:FC:36:86:F7:97:44:D6:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/93f3558b-1f94-3403-880e-9a27786d4878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:02:c6:a7:46:de:8e:d4:da:07:01:b5:83:a4:e3:12:95:
         b8:ff:47:56:b6:9e:40:3f:e5:4e:54:63:8c:06:de:8a:d2:71:
         c1:a7:3f:20:ba:98:27:34:17:0f:7a:10:31:bd:ab:59:78:65:
         a5:c7:fd:74:ea:cc:f2:8f:c9:a7:7c:61:b9:43:2f:ca:2b:41:
         7c:e7:e4:9f:cf:dc:e9:f5:52:04:ba:94:43:43:e0:e1:40:48:
         61:b6:93:fe:01:6c:f7:6b:6a:33:97:6b:37:d6:cb:d4:0d:03:
         ee:a7:8e:e9:9f:ba:7e:d4:38:21:e8:6e:df:3f:1d:3c:b4:80:
         ba:c5:8e:2a:7d:fa:c5:9f:72:88:cb:bc:57:07:aa:27:ff:fd:
         5d:d5:17:79:a3:a0:10:e5:13:7a:29:a1:09:58:e3:77:c2:21:
         9b:6f:c7:71:6f:a8:57:77:3e:f3:9c:91:d9:8e:54:f9:f9:b1:
         fc:a4:b3:a3:12:38:92:66:37:b0:6e:63:55:9a:14:17:65:5e:
         87:3b:f8:92:26:5f:8a:e0:28:66:b9:03:0a:94:e0:28:e1:16:
         ef:c9:ff:22:22:01:69:2f:e6:52:0e:d6:57:98:41:91:1f:43:
         6c:d9:00:e3:56:1e:25:5b:32:30:50:58:64:a9:b0:e1:de:95:
         ed:ad:3b:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsIq+wj8URbn3NC3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFlOTE5MjgtMzVjZi00NmVkLWJmODctOTJkOWJmZDYy
OWVjMB4XDTI1MDgzMTAxMDAzM1oXDTI1MTEyOTAyMDAzM1owLzEtMCsGA1UEAxMk
NDZiYmQ4NjYtOGZmMy00YjQ0LWFlYTgtMzdlZjk1Nzk1NzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYsVaZKou3HGY+wBeqFwPaFCl1y/eaqK6H8x
2iDnSJvIsQozthHLuxcao/Sq4cZ1olfYe+U3fvIn8B2aK40PryorjD0TnCJ6VbMk
ikVbvmI+tmEe2R+IdnX1lIooSeghlojV0ETa8DYzZ/e9UEEAy6466oNaGs1Qwpxg
X0hV5XnD87HXIi1fINTyf5XKhVdd/tf0q3srz0D6IKLlbWRtjIB6xptLjfcrXujx
h4IufxHJfRkiQ5cwlSj1UEhNkxb3FOsBPcZtTufwkrMS5K2Tq91bfpBElZiUICMv
QAsQ2qmxNkPIv8+XbpXqhvmBZpq9Z8thbQptP/kLx8/54dnyKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLynZhc7nPE4pzJOO/w2hveXRNaAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWU5
MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZkNjI5ZWMvOTNmMzU1OGItMWY5NC0z
NDAzLTg4MGUtOWEyNzc4NmQ0ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFlOTE5MjgtMzVjZi00NmVkLWJm
ODctOTJkOWJmZDYyOWVjLzhhZTkxOTI4LTM1Y2YtNDZlZC1iZjg3LTkyZDliZmQ2
MjllYy5jcmwwHwYDVR0jBBgwFoAU2TQRwLPFpEBlZAHjBJjcizLXl+UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5
YmZkNjI5ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcNzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCaAsanRt6O1NoHAbWDpOMSlbj/R1a2nkA/5U5UY4wG3orSccGnPyC6
mCc0Fw96EDG9q1l4ZaXH/XTqzPKPyad8YblDL8orQXzn5J/P3On1UgS6lEND4OFA
SGG2k/4BbPdrajOXazfWy9QNA+6njumfun7UOCHobt8/HTy0gLrFjip9+sWfcojL
vFcHqif//V3VF3mjoBDlE3opoQlY43fCIZtvx3FvqFd3PvOckdmOVPn5sfyks6MS
OJJmN7BuY1WaFBdlXoc7+JImX4rgKGa5AwqU4CjhFu/J/yIiAWkv5lIO1leYQZEf
Q2zZAONWHiVbMjBQWGSpsOHele2tO3E=
-----END CERTIFICATE-----
Generated at Sun Oct 19 07:44:37 2025 by rpki-client