Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa
File:                     63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa (raw, json)
Hash identifier:          h04IW/m6BHCgGP2gyxGiq5pS0yXr23p0g4euQUpinhY=
Subject key identifier:   15:E3:8C:7F:21:12:43:D3:DE:28:97:0B:CB:C4:0D:C5:F4:A8:F9:CA
Certificate issuer:       /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial:       010D0C9F4328584B0746C61A081AC360582D94C0
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     7922
IP address blocks:        209.135.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c6:1a:08:1a:c3:60:58:2d:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=0a39e124-d304-40c1-ab90-ecb4c2bd4db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:38:ca:00:0f:d4:cb:3b:73:0c:64:f8:9a:f3:
                    40:01:fe:1e:c4:56:87:94:96:57:26:14:b3:6c:02:
                    27:2b:df:c6:c1:57:01:4f:62:d7:8b:ef:12:d9:44:
                    7a:9c:b8:57:84:cd:91:e4:5d:73:b5:39:00:05:4f:
                    80:ca:5e:a1:62:d0:2e:29:95:cd:22:46:be:f3:c5:
                    1f:a9:f4:bb:16:5b:07:71:66:43:84:f8:56:a7:e7:
                    bd:02:2b:5b:b9:e4:0b:a1:8b:d1:8a:d6:85:a5:d7:
                    7e:8a:76:33:56:c7:02:34:fe:b5:ec:86:20:63:02:
                    7d:fd:37:20:85:6b:f0:4d:85:1f:fa:61:7d:db:61:
                    6c:5e:11:47:49:79:3d:3c:39:4d:b7:cd:7d:02:4d:
                    3c:8b:27:87:fb:5f:29:57:60:5c:6f:09:e8:05:e1:
                    5e:31:b2:a3:e6:af:4b:0d:d2:9c:62:e3:08:e5:34:
                    15:d5:be:41:52:5e:a8:6a:80:cf:b1:33:23:3d:db:
                    b3:99:e2:65:dd:74:32:2e:b2:21:ce:a8:37:d6:51:
                    20:33:d2:a7:a4:ef:d8:f2:08:d8:e9:ce:e7:13:44:
                    6d:36:75:9d:4c:73:9f:c5:8b:2f:c8:00:8d:98:9a:
                    13:b6:ed:28:3d:aa:70:1d:c8:b1:d4:3b:8d:53:ef:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E3:8C:7F:21:12:43:D3:DE:28:97:0B:CB:C4:0D:C5:F4:A8:F9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/63cf59ca-8df9-39b2-9ce2-55ba87cc92e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl

            X509v3 Authority Key Identifier:
                keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c8:50:22:40:61:c8:5b:b6:4e:d5:83:dc:83:35:d8:e4:dd:
         70:1d:83:1c:73:2a:3c:da:b2:a3:68:5c:56:01:53:07:b0:15:
         86:66:f3:54:e5:b4:82:fb:2e:ff:31:66:dc:91:26:f7:b7:bc:
         f0:43:0b:70:b6:65:3a:f0:64:21:9b:f3:6e:8a:9f:6a:a4:9a:
         f8:1d:6b:ea:3d:04:b9:77:d8:cd:ba:70:23:21:b6:12:d1:db:
         93:75:20:bc:d4:a8:9c:df:23:f6:c0:cc:b9:e6:9e:a1:8b:9e:
         e3:ad:b1:7b:82:e9:a6:9c:e6:1a:e7:3b:56:ab:1a:3a:53:2a:
         0c:cd:91:ca:60:ab:8b:36:0a:d5:b4:e1:b2:f0:97:28:96:7c:
         65:55:fc:dd:d0:1d:66:37:be:1b:8f:b9:e5:c1:51:b5:10:29:
         67:47:e9:53:bb:82:03:a3:d2:de:97:6c:73:7f:e3:a3:7f:3c:
         cc:8d:0a:90:3f:37:74:92:eb:c9:7c:01:91:15:a6:fe:cc:89:
         13:90:a3:f9:12:31:19:61:dd:0f:61:3e:d6:8c:09:09:70:8b:
         7c:24:bf:c2:22:c2:9d:9b:8f:0b:f6:7a:ab:06:3d:a2:51:7f:
         99:2e:af:8f:ed:1a:57:21:c9:91:fd:8a:b5:00:bd:dd:e6:5d:
         67:fc:2f:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsYaCBrDYFgtlMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDk2M2JmZDMtOTEwNS00NDQzLTk4ZGYtZmJkYzBhNjQx
YzYwMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
MGEzOWUxMjQtZDMwNC00MGMxLWFiOTAtZWNiNGMyYmQ0ZGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TjKAA/UyztzDGT4mvNAAf4exFaHlJZXJhSz
bAInK9/GwVcBT2LXi+8S2UR6nLhXhM2R5F1ztTkABU+Ayl6hYtAuKZXNIka+88Uf
qfS7FlsHcWZDhPhWp+e9AitbueQLoYvRitaFpdd+inYzVscCNP617IYgYwJ9/Tcg
hWvwTYUf+mF922FsXhFHSXk9PDlNt819Ak08iyeH+18pV2BcbwnoBeFeMbKj5q9L
DdKcYuMI5TQV1b5BUl6oaoDPsTMjPduzmeJl3XQyLrIhzqg31lEgM9KnpO/Y8gjY
6c7nE0RtNnWdTHOfxYsvyACNmJoTtu0oPapwHcix1DuNU+//0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXjjH8hEkPT3iiXC8vEDcX0qPnKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80OTYz
YmZkMy05MTA1LTQ0NDMtOThkZi1mYmRjMGE2NDFjNjAvNjNjZjU5Y2EtOGRmOS0z
OWIyLTljZTItNTViYTg3Y2M5MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDk2M2JmZDMtOTEwNS00NDQzLTk4
ZGYtZmJkYzBhNjQxYzYwLzQ5NjNiZmQzLTkxMDUtNDQ0My05OGRmLWZiZGMwYTY0
MWM2MC5jcmwwHwYDVR0jBBgwFoAUsAnrX19e4OYIzj3LKJ87KP/ClaAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80OTYzYmZkMy05MTA1LTQ0NDMtOThkZi1mYmRj
MGE2NDFjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Ye4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHIUCJAYchbtk7Vg9yDNdjk3XAdgxxzKjzasqNoXFYBUwewFYZm81Tl
tIL7Lv8xZtyRJve3vPBDC3C2ZTrwZCGb826Kn2qkmvgda+o9BLl32M26cCMhthLR
25N1ILzUqJzfI/bAzLnmnqGLnuOtsXuC6aac5hrnO1arGjpTKgzNkcpgq4s2CtW0
4bLwlyiWfGVV/N3QHWY3vhuPueXBUbUQKWdH6VO7ggOj0t6XbHN/46N/PMyNCpA/
N3SS68l8AZEVpv7MiROQo/kSMRlh3Q9hPtaMCQlwi3wkv8Iiwp2bjwv2eqsGPaJR
f5kur4/tGlchyZH9irUAvd3mXWf8L8U=
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:05:10 2025 by rpki-client