Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4653b429-e21f-3f93-8058-1196b0953db4.roa
File:                     4653b429-e21f-3f93-8058-1196b0953db4.roa (raw, json)
Hash identifier:          8jc++NMCTRzW9rA+ZnWxzCwGD9FSKuqBsFwb4bvSLJM=
Subject key identifier:   25:2A:83:C8:DD:23:CE:C6:DF:FF:3C:E5:16:45:B4:5F:AC:D0:CB:29
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A18955452D2D37E5F75511C00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4653b429-e21f-3f93-8058-1196b0953db4.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     5650
IP address blocks:        168.93.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:54:52:d2:d3:7e:5f:75:51:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=e1eaa358-2595-470e-8ab4-ae96bdb52ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ff:bb:87:63:23:19:25:26:74:d8:34:86:2a:
                    c6:d7:65:7b:5e:d5:7a:e1:60:4e:83:4e:fa:4b:e6:
                    e0:54:ef:7a:cd:b2:b2:09:b0:b0:01:f6:ea:f5:df:
                    4f:e1:e7:b1:6e:f7:64:fa:c4:aa:c9:cd:d8:35:92:
                    13:a5:6c:9e:be:97:fc:d6:bf:a6:15:c1:a8:95:10:
                    93:77:66:47:da:f3:b1:de:16:c7:5e:49:2b:20:07:
                    b6:03:26:c6:d0:23:7a:68:7c:bc:d4:69:9e:fa:7c:
                    e0:81:90:ce:47:c1:67:57:27:93:8c:c1:d5:41:c9:
                    ab:14:ea:a3:c4:df:fe:ca:b3:25:25:ef:03:54:29:
                    05:f7:ce:24:99:44:53:a0:9d:27:0f:d3:3f:16:30:
                    f0:f1:4d:06:ce:c7:c1:71:cd:a3:b7:e0:2c:c4:ac:
                    cd:7c:7b:93:d2:9b:57:c0:16:5f:5d:d1:65:fd:93:
                    3b:80:12:bc:39:c8:22:25:4e:48:a9:2d:de:56:f1:
                    76:2f:6d:47:f0:2a:5f:9a:22:02:0d:9d:a9:0d:ae:
                    c8:20:5a:2b:82:f0:32:f5:37:85:09:d2:7c:54:29:
                    bc:8c:8c:12:d4:68:f0:b7:1e:be:c8:97:42:a0:09:
                    20:50:bc:fd:9a:dd:56:0b:7b:a6:a8:09:ee:1e:30:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2A:83:C8:DD:23:CE:C6:DF:FF:3C:E5:16:45:B4:5F:AC:D0:CB:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4653b429-e21f-3f93-8058-1196b0953db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:50:7b:a8:c3:61:bc:b2:85:a6:96:2b:b0:15:98:74:cf:
         53:bc:12:44:77:ff:fa:08:d2:8f:f5:19:af:b7:ad:2a:93:ea:
         db:eb:24:2a:cf:3b:5b:65:0c:f2:cb:a4:32:4f:9d:9d:ef:31:
         0e:e6:68:82:2d:44:18:cb:4f:41:b8:fa:87:2c:f0:e3:37:90:
         ae:f9:2d:ad:c4:51:28:07:f7:f0:a8:11:01:0f:d9:c7:ea:12:
         1e:71:dc:11:a5:6e:d3:3c:43:3a:70:4e:20:ad:d5:01:08:3a:
         0a:70:d6:4b:eb:72:f2:f5:51:fd:80:a8:e7:ac:d2:89:35:9b:
         0c:ae:73:ea:81:2d:e1:14:c6:f9:a3:bb:f2:56:34:91:bb:98:
         48:1f:73:65:2b:95:5b:98:55:1a:9c:fb:b4:4e:54:5a:78:22:
         75:9b:95:ca:58:f3:6b:d4:6a:f0:4b:d6:24:62:ac:2a:4f:d2:
         14:08:d5:1d:a7:66:95:e2:33:17:07:6f:a9:3c:37:ec:49:e2:
         12:89:2a:93:13:a9:10:f5:ca:34:2a:e2:78:5e:a4:fe:c4:98:
         e4:87:62:66:a5:db:23:55:b1:9e:2a:49:fe:c7:48:70:ac:0d:
         5c:96:80:d6:b6:20:a1:05:95:6a:a9:57:dd:03:e6:42:bf:d2:
         9d:d0:d6:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlVRS0tN+X3VRHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
ZTFlYWEzNTgtMjU5NS00NzBlLThhYjQtYWU5NmJkYjUyZmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v+7h2MjGSUmdNg0hirG12V7XtV64WBOg076
S+bgVO96zbKyCbCwAfbq9d9P4eexbvdk+sSqyc3YNZITpWyevpf81r+mFcGolRCT
d2ZH2vOx3hbHXkkrIAe2AybG0CN6aHy81Gme+nzggZDOR8FnVyeTjMHVQcmrFOqj
xN/+yrMlJe8DVCkF984kmURToJ0nD9M/FjDw8U0GzsfBcc2jt+AsxKzNfHuT0ptX
wBZfXdFl/ZM7gBK8OcgiJU5IqS3eVvF2L21H8CpfmiICDZ2pDa7IIForgvAy9TeF
CdJ8VCm8jIwS1Gjwtx6+yJdCoAkgULz9mt1WC3umqAnuHjAVUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUqg8jdI87G3/885RZFtF+s0MspMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDY1M2I0MjktZTIxZi0z
ZjkzLTgwNTgtMTE5NmIwOTUzZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF36MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6rUHuow2G8soWmliuwFZh0z1O8EkR3//oI0o/1Ga+3rSqT6tvrJCrP
O1tlDPLLpDJPnZ3vMQ7maIItRBjLT0G4+ocs8OM3kK75La3EUSgH9/CoEQEP2cfq
Eh5x3BGlbtM8QzpwTiCt1QEIOgpw1kvrcvL1Uf2AqOes0ok1mwyuc+qBLeEUxvmj
u/JWNJG7mEgfc2UrlVuYVRqc+7ROVFp4InWblcpY82vUavBL1iRirCpP0hQI1R2n
ZpXiMxcHb6k8N+xJ4hKJKpMTqRD1yjQq4nhepP7EmOSHYmal2yNVsZ4qSf7HSHCs
DVyWgNa2IKEFlWqpV90D5kK/0p3Q1r4=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:56:21 2025 by rpki-client