Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e4bb03e6-adb1-38ec-bb7a-e9a3550ceab5.roa
File:                     e4bb03e6-adb1-38ec-bb7a-e9a3550ceab5.roa (raw, json)
Hash identifier:          Ls6bg/XgnY8QdGTPH4QCmHSfAkFOWlqFwLu+igazla4=
Subject key identifier:   53:E1:BF:60:A4:5C:D2:6E:FD:F3:E8:79:32:B9:8F:CC:5D:E8:C2:CD
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584AF8C1BF969E99ED08F70810E0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e4bb03e6-adb1-38ec-bb7a-e9a3550ceab5.roa
Signing time:             Mon 25 Aug 2025 08:11:37 +0000
ROA not before:           Mon 25 Aug 2025 08:11:37 +0000
ROA not after:            Sun 23 Nov 2025 09:11:37 +0000
asID:                     31898
IP address blocks:        130.35.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f8:c1:bf:96:9e:99:ed:08:f7:08:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug 25 08:11:37 2025 GMT
            Not After : Nov 23 09:11:37 2025 GMT
        Subject: CN=363de5e1-8567-431e-86d2-da0a1f35e3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:c3:e3:8b:16:7c:1e:ab:63:6d:51:5e:38:
                    78:cf:8b:83:0b:77:04:9b:9a:2e:8b:40:28:d6:e9:
                    7c:4b:eb:c5:9f:c0:0e:7e:0a:50:4b:20:62:be:0b:
                    04:1a:2f:ce:59:c4:47:4f:cf:8f:62:85:12:b9:1b:
                    a1:5c:be:09:99:e9:4c:95:7a:c2:3f:f1:1d:0c:d2:
                    f2:d1:ba:1f:e5:e2:91:15:1c:f6:da:66:6a:72:29:
                    0b:80:22:16:d8:cb:8f:d8:6b:4f:78:d1:a8:1f:3d:
                    83:e0:e4:3e:c8:45:fe:4e:e0:a2:1c:35:31:57:25:
                    3f:00:4f:36:6b:a6:46:df:f9:8e:e5:c1:6b:b9:05:
                    c0:35:87:42:7f:be:4a:b3:97:67:43:28:50:c6:42:
                    27:7c:c4:46:72:7e:31:47:4f:36:8c:4f:0e:0d:4d:
                    fc:3d:93:16:d5:10:f0:12:f0:dc:97:9e:a4:90:fe:
                    ae:99:f8:ba:b7:03:54:79:ca:da:6a:d6:d4:c7:9e:
                    60:be:f2:0a:08:4b:d9:d2:ab:52:74:dc:12:27:40:
                    51:fd:31:b4:27:dc:0a:8f:6a:3e:75:67:85:ad:60:
                    49:88:88:c3:3b:c3:50:e3:0b:68:a4:e5:d6:1f:7a:
                    ca:8a:a9:61:75:34:60:73:df:df:42:27:51:92:cc:
                    5e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E1:BF:60:A4:5C:D2:6E:FD:F3:E8:79:32:B9:8F:CC:5D:E8:C2:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e4bb03e6-adb1-38ec-bb7a-e9a3550ceab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.35.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ba:c6:d8:d3:5e:42:59:30:12:8b:d7:05:ac:85:5c:76:23:
         61:95:0f:b3:8d:83:1a:a7:27:c2:67:9f:45:91:b9:a1:8f:c7:
         79:ef:7a:df:b9:8c:d6:f5:20:87:b1:b7:d4:59:63:40:bf:ee:
         bd:99:29:fd:f7:d2:46:1f:a1:62:ca:2d:c6:00:f9:72:ae:d7:
         a8:ff:8e:37:de:dc:6d:3d:8e:72:f7:71:dd:75:5c:5f:7d:d9:
         34:7b:7b:8a:d9:fc:37:34:ad:d8:ea:3b:c1:f9:8a:e6:27:0d:
         45:81:a9:76:65:72:21:a3:dd:fe:6b:d4:42:a1:28:c1:a1:39:
         9c:dd:18:1b:aa:29:4b:55:27:5d:b1:b3:2a:05:2a:e2:b2:35:
         4b:22:43:8b:62:ec:1d:f7:34:e4:14:97:ca:34:7c:94:7e:f5:
         b2:4f:4b:1d:da:7a:dc:e0:cb:a6:6a:82:01:17:88:8d:af:92:
         d1:ea:09:27:3a:21:d1:31:73:f2:a0:6f:80:72:b7:bc:a9:78:
         19:b6:70:6e:e2:00:d5:4b:2b:f7:7f:f0:f9:ce:b5:8f:05:9d:
         d5:2e:61:d5:80:9b:28:40:05:5b:05:3c:2c:30:15:56:62:0b:
         54:18:a9:a1:ee:c7:0f:0a:63:05:e5:fd:ad:32:3d:4a:aa:c8:
         67:23:ca:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wb+WnpntCPcIEOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy
ZTQ0MB4XDTI1MDgyNTA4MTEzN1oXDTI1MTEyMzA5MTEzN1owLzEtMCsGA1UEAxMk
MzYzZGU1ZTEtODU2Ny00MzFlLTg2ZDItZGEwYTFmMzVlM2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEbD44sWfB6rY21RXjh4z4uDC3cEm5oui0Ao
1ul8S+vFn8AOfgpQSyBivgsEGi/OWcRHT8+PYoUSuRuhXL4JmelMlXrCP/EdDNLy
0bof5eKRFRz22mZqcikLgCIW2MuP2GtPeNGoHz2D4OQ+yEX+TuCiHDUxVyU/AE82
a6ZG3/mO5cFruQXANYdCf75Ks5dnQyhQxkInfMRGcn4xR082jE8ODU38PZMW1RDw
EvDcl56kkP6umfi6twNUecraatbUx55gvvIKCEvZ0qtSdNwSJ0BR/TG0J9wKj2o+
dWeFrWBJiIjDO8NQ4wtopOXWH3rKiqlhdTRgc9/fQidRksxeAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFPhv2CkXNJu/fPoeTK5j8xd6MLNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0
MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZTRiYjAzZTYtYWRiMS0z
OGVjLWJiN2EtZTlhMzU1MGNlYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx
MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj
MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1
MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiOQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACS6xtjTXkJZMBKL1wWshVx2I2GVD7ONgxqnJ8Jnn0WRuaGPx3nvet+5
jNb1IIext9RZY0C/7r2ZKf330kYfoWLKLcYA+XKu16j/jjfe3G09jnL3cd11XF99
2TR7e4rZ/Dc0rdjqO8H5iuYnDUWBqXZlciGj3f5r1EKhKMGhOZzdGBuqKUtVJ12x
syoFKuKyNUsiQ4ti7B33NOQUl8o0fJR+9bJPSx3aetzgy6ZqggEXiI2vktHqCSc6
IdExc/Kgb4Byt7ypeBm2cG7iANVLK/d/8PnOtY8FndUuYdWAmyhABVsFPCwwFVZi
C1QYqaHuxw8KYwXl/a0yPUqqyGcjyjM=
-----END CERTIFICATE-----
Generated at Wed Oct 8 22:52:29 2025 by rpki-client