Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/1ba6c63c-750e-35ff-b1ce-055d22298e22.roa
File:                     1ba6c63c-750e-35ff-b1ce-055d22298e22.roa (raw, json)
Hash identifier:          mAuWYVzlRRxOkgcTSDXU4nADcCeTxez0OqDEKJEG3j4=
Subject key identifier:   5B:A3:61:76:48:E9:44:7F:8F:C0:F5:C5:E8:CE:A9:9A:43:BB:33:BA
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584B328C328F2CF6D45DAAA5C680
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/1ba6c63c-750e-35ff-b1ce-055d22298e22.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     395201
IP address blocks:        134.65.192.0/23 maxlen: 23
                          164.152.160.0/23 maxlen: 23
                          169.155.44.0/23 maxlen: 23
                          169.155.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:32:8f:2c:f6:d4:5d:aa:a5:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=ea555d66-b859-4d69-a8c7-b0b457ca7688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:40:44:e2:bf:b8:92:91:0a:1a:d7:f9:ec:23:
                    c8:2a:01:66:b8:9d:73:4f:ee:a6:84:8d:fb:8b:8c:
                    c8:1c:c8:92:a9:5d:40:b1:16:25:17:af:53:1d:82:
                    20:1e:dd:fe:d5:6c:5d:09:b2:b7:74:b4:9f:d4:cd:
                    df:40:c3:59:42:c1:f9:69:75:92:db:c4:7e:95:c4:
                    0f:e8:92:2e:75:d8:f2:7b:66:b3:04:47:6c:8f:a2:
                    29:74:d7:de:e1:2a:2a:53:64:19:ad:19:e2:09:9b:
                    3c:8a:90:bd:77:f4:4e:68:3d:69:a3:8d:ac:22:28:
                    03:83:f6:ea:3a:17:66:19:a7:c0:c5:6c:03:1e:94:
                    ab:1b:d0:ea:49:46:77:6e:d0:3c:33:8f:dd:e3:c8:
                    57:4a:d6:b6:42:db:51:a6:26:10:c4:1a:66:7c:fb:
                    39:ca:0b:9a:28:68:8f:9a:39:74:4c:66:c4:a7:77:
                    6a:af:98:0b:50:15:ac:55:0b:d2:75:e4:67:39:e7:
                    a7:2a:bc:ef:9d:dd:00:8d:56:25:78:bb:69:83:97:
                    8d:65:e9:c2:0d:08:f8:f7:ae:86:32:42:d1:c3:a7:
                    76:6b:0a:26:99:3d:20:8c:16:0f:fe:e0:41:b7:b5:
                    f7:80:70:ba:10:13:21:f1:46:3c:0b:32:93:c7:d9:
                    fe:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:61:76:48:E9:44:7F:8F:C0:F5:C5:E8:CE:A9:9A:43:BB:33:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/1ba6c63c-750e-35ff-b1ce-055d22298e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.192.0/23
                  164.152.160.0/23
                  169.155.44.0/23
                  169.155.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ce:10:50:7c:eb:28:1b:cd:31:c3:0e:bb:ed:5e:db:c2:32:
         cd:59:be:2c:b8:d8:65:55:eb:ee:a7:a1:5e:c1:ec:f6:ed:20:
         38:85:29:2d:65:d0:f9:40:d7:c5:5e:23:47:72:be:3a:e7:7d:
         79:9e:8d:6a:61:f8:c6:0f:ae:bf:05:99:20:23:67:19:f2:88:
         9f:6e:da:23:87:1a:bb:18:dd:aa:a2:e3:a2:8e:c3:2f:84:f9:
         da:e8:97:d3:44:83:21:a3:f3:bf:b6:a6:ff:f2:88:2c:05:f8:
         1c:b5:b2:b0:af:c2:99:8e:cb:e7:f6:b1:4e:c5:38:34:36:9c:
         c2:84:f7:d7:66:a7:f6:9a:93:fc:15:5d:3d:9a:53:46:20:1e:
         6e:90:49:ec:04:fe:93:1f:60:80:d4:cb:99:38:33:9e:38:aa:
         63:35:3c:4b:67:0d:4a:2d:6f:ea:6a:28:97:99:62:bb:e8:7f:
         40:6c:2a:32:eb:90:21:5c:b8:51:97:a5:bb:96:81:9d:4c:3f:
         37:e6:bc:64:63:73:73:ab:4c:03:56:de:e2:08:ad:59:f6:95:
         a2:d4:32:b4:8a:13:94:3c:8b:57:b0:1e:01:50:64:73:36:09:
         97:25:84:f8:d1:c6:65:a4:61:79:b1:91:ee:e7:a4:86:5b:35:
         19:97:3f:11
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEsyjDKPLPbUXaqlxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl
ZGRiMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZWE1NTVkNjYtYjg1OS00ZDY5LWE4YzctYjBiNDU3Y2E3Njg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEBE4r+4kpEKGtf57CPIKgFmuJ1zT+6mhI37
i4zIHMiSqV1AsRYlF69THYIgHt3+1WxdCbK3dLSf1M3fQMNZQsH5aXWS28R+lcQP
6JIuddjye2azBEdsj6IpdNfe4SoqU2QZrRniCZs8ipC9d/ROaD1po42sIigDg/bq
OhdmGafAxWwDHpSrG9DqSUZ3btA8M4/d48hXSta2QttRpiYQxBpmfPs5yguaKGiP
mjl0TGbEp3dqr5gLUBWsVQvSdeRnOeenKrzvnd0AjVYleLtpg5eNZenCDQj4966G
MkLRw6d2awommT0gjBYP/uBBt7X3gHC6EBMh8UY8CzKTx9n+HQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFFujYXZI6UR/j8D1xejOqZpDuzO6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj
ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvMWJhNmM2M2MtNzUwZS0z
NWZmLWIxY2UtMDU1ZDIyMjk4ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl
MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw
ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm
MGRjMGVkZGIuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBhkHAAwQB
pJigAwQBqZssAwQBqZuoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAInOEFB86ygbzTHDDrvtXtvCMs1Zviy4
2GVV6+6noV7B7PbtIDiFKS1l0PlA18VeI0dyvjrnfXmejWph+MYPrr8FmSAjZxny
iJ9u2iOHGrsY3aqi46KOwy+E+drol9NEgyGj87+2pv/yiCwF+By1srCvwpmOy+f2
sU7FODQ2nMKE99dmp/aak/wVXT2aU0YgHm6QSewE/pMfYIDUy5k4M544qmM1PEtn
DUotb+pqKJeZYrvof0BsKjLrkCFcuFGXpbuWgZ1MPzfmvGRjc3OrTANW3uIIrVn2
laLUMrSKE5Q8i1ewHgFQZHM2CZclhPjRxmWkYXmxke7npIZbNRmXPxE=
-----END CERTIFICATE-----
Generated at Tue Oct 14 02:20:26 2025 by rpki-client