Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9d92d2c8-db91-318c-a590-f894b4dd3c2c.roa
File:                     9d92d2c8-db91-318c-a590-f894b4dd3c2c.roa (raw, json)
Hash identifier:          kUlJTnPk2qaa+g47fDB0q/0Bp5LSH/BMItFLm/5n/lc=
Subject key identifier:   D5:96:92:BB:14:C1:10:2A:BE:76:C2:F0:51:49:04:6C:5E:89:D9:99
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584B715D0FA3161EDAF7A7F41CA0
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9d92d2c8-db91-318c-a590-f894b4dd3c2c.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     21782
IP address blocks:        199.30.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5d:0f:a3:16:1e:da:f7:a7:f4:1c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=aa16b56d-ca0a-4325-8aec-f252977b51fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:a5:0d:e6:f2:18:1c:43:fa:47:88:21:a9:
                    e7:26:39:f4:c2:c3:43:05:3b:89:e6:25:12:7a:e7:
                    7d:69:55:fe:19:98:52:42:01:56:c7:da:6c:51:8b:
                    80:d2:f4:7c:2d:8c:82:27:6b:6d:79:45:19:49:4f:
                    25:04:86:f4:8b:b9:df:1e:73:25:1f:90:2b:9d:e6:
                    38:c2:0e:a5:58:5a:56:af:0e:77:21:1e:43:0f:b2:
                    86:98:f4:30:ec:43:d6:3e:b4:e4:56:fe:44:a0:74:
                    85:b0:d4:34:f0:42:fe:38:01:36:93:2a:31:ec:7e:
                    9c:a5:de:bb:db:3c:a3:6b:18:30:85:89:67:ba:5e:
                    0b:98:b8:b8:c1:bd:70:0f:ca:13:98:4e:eb:34:ae:
                    c5:9c:ff:85:37:3e:a3:cf:78:3d:30:67:49:b0:8e:
                    ea:5e:90:0b:18:4a:fc:18:b4:0d:ce:06:83:1b:d7:
                    47:5e:ea:50:16:4e:69:9c:cd:6e:88:eb:88:66:6e:
                    8e:7d:37:16:ed:f9:9b:00:e1:d2:e8:9c:f8:8f:ef:
                    6b:f2:ac:df:b9:3f:7b:ed:12:e8:da:23:5a:5e:10:
                    f9:f4:56:1e:80:38:05:6c:ac:59:86:48:bd:de:7c:
                    52:4a:8e:e7:cf:28:75:94:a7:74:2e:27:c1:e2:05:
                    e3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:96:92:BB:14:C1:10:2A:BE:76:C2:F0:51:49:04:6C:5E:89:D9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/9d92d2c8-db91-318c-a590-f894b4dd3c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8d:85:5a:56:2e:ad:45:67:c0:58:b3:32:d7:54:82:96:9d:
         88:36:d9:e9:1f:e3:c5:41:52:f7:0d:76:cd:67:f2:4e:57:59:
         c8:50:83:64:8b:c8:13:26:49:60:5a:4e:48:c1:e8:47:ba:ff:
         20:b2:ea:e7:d3:61:fe:cf:16:5a:f0:f3:da:b9:a7:f5:4d:53:
         6e:5b:fe:c2:1c:33:cb:e7:77:b4:7b:02:7d:ff:1b:3e:d5:a3:
         06:02:79:d7:40:d3:34:e4:1d:14:21:32:76:b1:60:7a:b6:2a:
         cc:8a:7f:d5:2c:f4:e7:ee:c8:53:d4:43:33:0d:29:13:a6:5f:
         22:68:8b:65:ef:98:13:e2:93:77:90:8e:f3:06:3d:13:5a:a0:
         82:44:c1:77:71:ac:f3:58:e7:f6:69:28:1d:dd:97:ca:76:ea:
         2c:c3:03:46:98:9c:fc:53:f0:5d:d9:9f:34:22:92:10:46:4c:
         83:42:dc:8f:ee:31:33:12:9d:c8:38:9e:5a:ba:84:ab:ae:82:
         34:7b:93:e5:07:e8:e9:c6:98:7a:f4:02:e7:4c:19:95:34:5c:
         54:74:7d:4f:11:84:45:fb:3d:e6:e3:19:e3:da:ce:00:11:f6:
         98:fd:4e:85:51:59:3c:4e:e4:09:8e:d2:ea:ab:82:65:ad:92:
         36:dc:b9:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQ+jFh7a96f0HKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl
OTNhMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
YWExNmI1NmQtY2EwYS00MzI1LThhZWMtZjI1Mjk3N2I1MWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv42lDebyGBxD+keIIannJjn0wsNDBTuJ5iUS
eud9aVX+GZhSQgFWx9psUYuA0vR8LYyCJ2tteUUZSU8lBIb0i7nfHnMlH5ArneY4
wg6lWFpWrw53IR5DD7KGmPQw7EPWPrTkVv5EoHSFsNQ08EL+OAE2kyox7H6cpd67
2zyjaxgwhYlnul4LmLi4wb1wD8oTmE7rNK7FnP+FNz6jz3g9MGdJsI7qXpALGEr8
GLQNzgaDG9dHXupQFk5pnM1uiOuIZm6OfTcW7fmbAOHS6Jz4j+9r8qzfuT977RLo
2iNaXhD59FYegDgFbKxZhki93nxSSo7nzyh1lKd0LifB4gXjwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWWkrsUwRAqvnbC8FFJBGxeidmZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk
YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvOWQ5MmQyYzgtZGI5MS0z
MThjLWE1OTAtZjg5NGI0ZGQzYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4
YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz
ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1
MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx5UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyNhVpWLq1FZ8BYszLXVIKWnYg22ekf48VBUvcNds1n8k5XWchQg2SL
yBMmSWBaTkjB6Ee6/yCy6ufTYf7PFlrw89q5p/VNU25b/sIcM8vnd7R7An3/Gz7V
owYCeddA0zTkHRQhMnaxYHq2KsyKf9Us9OfuyFPUQzMNKROmXyJoi2XvmBPik3eQ
jvMGPRNaoIJEwXdxrPNY5/ZpKB3dl8p26izDA0aYnPxT8F3ZnzQikhBGTINC3I/u
MTMSncg4nlq6hKuugjR7k+UH6OnGmHr0AudMGZU0XFR0fU8RhEX7PebjGePazgAR
9pj9ToVRWTxO5AmO0uqrgmWtkjbcuXw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 19:56:01 2025 by rpki-client