Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa
File:                     b7fb26c9-27d4-3d17-b963-60799756d2e8.roa (raw, json)
Hash identifier:          VXbo8BtDTa/kdkh+DOwaeQRpQyIBUbWmWQTH7qNLVfA=
Subject key identifier:   52:A2:A5:F6:BD:E0:60:3D:94:12:46:50:27:4D:AA:BC:A8:2A:E4:A9
Certificate issuer:       /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial:       010D0C9F4328584B0746C5C948F215096505A480
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     6079
IP address blocks:        209.135.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c5:c9:48:f2:15:09:65:05:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=fe660f2e-e5de-4166-966b-9257218e48b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0a:2c:c4:61:9c:af:08:c8:cd:e9:c3:5f:25:
                    95:a7:f8:5b:b6:6b:5c:93:d3:b7:4a:b1:1c:17:d3:
                    dd:6b:50:b5:fc:89:fe:0b:c3:fa:90:01:fa:ec:f5:
                    79:42:55:87:5e:4a:01:fb:69:fe:64:30:f3:d7:1c:
                    30:47:5f:27:cb:4c:d1:af:5f:9f:6b:a1:53:78:73:
                    8e:a2:99:a6:77:59:93:b6:17:cf:05:9e:7c:f0:27:
                    40:ea:54:85:8c:86:f5:52:60:fb:cc:5f:9d:70:5c:
                    c7:a3:a5:c9:f6:4d:44:e1:5c:3d:58:e0:06:1f:e4:
                    74:f9:a5:4f:6a:f6:05:f4:db:ad:34:a1:b9:e8:41:
                    fa:cf:05:52:a7:a5:31:3f:42:8c:1e:0e:aa:a2:ef:
                    37:d7:f8:4e:48:23:c2:5c:00:6d:9f:6a:ea:b6:51:
                    6a:cd:7d:a9:47:97:bb:cc:0c:1b:17:74:32:28:89:
                    b2:96:ea:30:93:5c:64:3d:ae:fb:92:47:6f:e8:e0:
                    ac:82:a5:26:fd:53:4c:ae:a6:d3:97:c2:ce:fa:1d:
                    a0:0e:00:b7:c4:44:92:1b:51:29:09:f3:bf:36:fe:
                    f8:8e:80:b6:b1:58:12:e5:6f:4b:d7:d1:b8:90:9b:
                    e9:fa:3d:81:2c:50:66:8e:d9:70:86:ac:13:20:7b:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A2:A5:F6:BD:E0:60:3D:94:12:46:50:27:4D:AA:BC:A8:2A:E4:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl

            X509v3 Authority Key Identifier:
                keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6c:27:07:50:9e:f4:ab:e9:f6:a9:e0:6b:53:5f:ea:47:49:
         07:ac:ba:c3:aa:a1:f4:0c:4a:63:a1:b5:db:6a:53:03:af:f7:
         6a:bf:f3:f5:3b:81:7b:ec:c4:2c:1f:62:9d:4c:c8:66:b8:35:
         42:a8:c0:1f:2b:8e:55:6e:ff:99:9f:9b:a5:34:d4:fe:c4:12:
         e0:9d:95:cd:a1:4b:74:90:bb:10:4e:6e:31:3a:1a:22:0d:35:
         d3:88:ba:f8:72:09:8d:cd:1e:ee:40:66:c7:2c:93:cd:c4:70:
         fc:67:33:bc:7a:38:a9:0e:4b:97:ab:ed:21:c3:ac:57:c0:e0:
         04:cc:ea:70:74:7b:b8:53:42:0a:d5:0b:27:65:6a:14:87:eb:
         e3:27:62:ec:41:aa:6b:56:f4:af:ed:05:63:8b:0f:70:75:a0:
         a5:88:cb:a9:b8:88:77:2b:7d:fd:1d:f4:9e:96:b5:fa:09:f9:
         a0:92:ff:1e:2d:66:46:79:3e:70:92:49:44:ea:66:d6:78:f5:
         04:28:9c:54:05:71:56:ec:55:38:3c:97:02:17:a3:ea:72:cc:
         61:24:60:a5:e8:a7:9e:27:c6:0f:3b:db:ce:b4:c2:d7:d5:af:
         6e:2e:53:3a:8f:3f:17:a3:ed:61:f5:3d:7e:19:07:a6:ce:df:
         da:2b:9c:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsXJSPIVCWUFpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDk2M2JmZDMtOTEwNS00NDQzLTk4ZGYtZmJkYzBhNjQx
YzYwMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
ZmU2NjBmMmUtZTVkZS00MTY2LTk2NmItOTI1NzIxOGU0OGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwosxGGcrwjIzenDXyWVp/hbtmtck9O3SrEc
F9Pda1C1/In+C8P6kAH67PV5QlWHXkoB+2n+ZDDz1xwwR18ny0zRr1+fa6FTeHOO
opmmd1mTthfPBZ588CdA6lSFjIb1UmD7zF+dcFzHo6XJ9k1E4Vw9WOAGH+R0+aVP
avYF9NutNKG56EH6zwVSp6UxP0KMHg6qou831/hOSCPCXABtn2rqtlFqzX2pR5e7
zAwbF3QyKImyluowk1xkPa77kkdv6OCsgqUm/VNMrqbTl8LO+h2gDgC3xESSG1Ep
CfO/Nv74joC2sVgS5W9L19G4kJvp+j2BLFBmjtlwhqwTIHtXKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKipfa94GA9lBJGUCdNqryoKuSpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80OTYz
YmZkMy05MTA1LTQ0NDMtOThkZi1mYmRjMGE2NDFjNjAvYjdmYjI2YzktMjdkNC0z
ZDE3LWI5NjMtNjA3OTk3NTZkMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDk2M2JmZDMtOTEwNS00NDQzLTk4
ZGYtZmJkYzBhNjQxYzYwLzQ5NjNiZmQzLTkxMDUtNDQ0My05OGRmLWZiZGMwYTY0
MWM2MC5jcmwwHwYDVR0jBBgwFoAUsAnrX19e4OYIzj3LKJ87KP/ClaAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80OTYzYmZkMy05MTA1LTQ0NDMtOThkZi1mYmRj
MGE2NDFjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Ye4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtsJwdQnvSr6fap4GtTX+pHSQesusOqofQMSmOhtdtqUwOv92q/8/U7
gXvsxCwfYp1MyGa4NUKowB8rjlVu/5mfm6U01P7EEuCdlc2hS3SQuxBObjE6GiIN
NdOIuvhyCY3NHu5AZscsk83EcPxnM7x6OKkOS5er7SHDrFfA4ATM6nB0e7hTQgrV
CydlahSH6+MnYuxBqmtW9K/tBWOLD3B1oKWIy6m4iHcrff0d9J6WtfoJ+aCS/x4t
ZkZ5PnCSSUTqZtZ49QQonFQFcVbsVTg8lwIXo+pyzGEkYKXop54nxg872860wtfV
r24uUzqPPxej7WH1PX4ZB6bO39ornI4=
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:32 2025 by rpki-client