Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da2def87-5b7b-33b0-a549-9ad449fa85c9.roa
File:                     da2def87-5b7b-33b0-a549-9ad449fa85c9.roa (raw, json)
Hash identifier:          vLgFjRhmf80hjQlV5Cc1nTig2Bc1wmO7Le/GvzdCGfA=
Subject key identifier:   69:89:F0:9A:FE:32:6C:BA:79:43:AB:A9:36:B8:3A:F0:A8:E2:7C:9B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A8B0B6DCBF4374EEE5030DE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da2def87-5b7b-33b0-a549-9ad449fa85c9.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     401152
IP address blocks:        168.93.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:6d:cb:f4:37:4e:ee:50:30:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=a333af78-1778-4534-b554-4b61ae7e1858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:a7:30:a6:33:f5:47:b0:1e:41:3c:b1:a7:
                    7f:d9:99:2d:f0:1e:2c:f5:6c:3e:67:aa:6e:18:a1:
                    dc:1f:d1:43:6a:1b:aa:4e:63:74:55:34:58:a8:02:
                    ad:e8:d5:43:50:60:2e:05:da:44:2d:d6:9c:b1:81:
                    9b:c0:e3:39:3a:d1:67:ad:4a:b2:a7:3d:23:11:59:
                    48:ca:79:4e:d3:94:14:10:ff:69:11:e1:4a:6a:7d:
                    d0:3f:2c:72:6c:a2:0a:93:c6:74:5b:2d:89:8f:4e:
                    92:20:d9:1c:6f:4d:91:4a:73:3e:c8:75:58:a6:6f:
                    41:16:34:c5:ea:5f:e4:f0:25:cc:13:87:14:ca:33:
                    95:54:15:dd:eb:ba:28:5f:32:b7:47:28:77:4a:a8:
                    07:0f:fb:c3:bd:21:29:35:3f:3a:d7:4c:75:dd:9e:
                    e2:04:97:6b:22:24:fe:d2:47:4f:e6:d7:75:1d:cb:
                    b5:da:46:94:5d:35:c1:53:0f:1c:17:b6:c4:11:8c:
                    6d:83:97:ef:24:5f:d1:e8:b4:f7:30:a2:5b:dc:4f:
                    38:9d:ff:53:35:47:94:d6:aa:d8:2b:a8:77:c4:67:
                    bc:fe:8b:72:e8:6d:f7:62:6d:5b:c6:e9:42:1c:18:
                    7b:bf:d8:bf:41:39:28:84:3a:f0:7a:d8:f2:a8:73:
                    67:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:89:F0:9A:FE:32:6C:BA:79:43:AB:A9:36:B8:3A:F0:A8:E2:7C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da2def87-5b7b-33b0-a549-9ad449fa85c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:9b:9d:2f:49:85:d6:18:f2:39:b6:0d:07:54:39:bc:52:4b:
         3c:86:1a:75:45:1a:f9:af:6e:ac:ed:13:a8:7b:ed:53:79:17:
         51:41:d8:6b:00:c1:c2:d4:21:48:f9:2c:15:a8:e5:1a:48:0b:
         9e:83:c0:02:15:29:30:10:6a:e1:ff:72:7e:8e:a2:be:85:41:
         d4:7e:3c:38:9a:8e:c7:42:0d:2a:33:c1:68:2a:b3:33:ac:29:
         f1:ca:74:a1:e1:ed:9f:3f:3b:ef:45:1f:e8:4f:fa:fd:2b:23:
         30:86:33:38:b5:d3:26:bc:db:02:5f:43:d4:66:f9:f8:b6:4c:
         41:04:c7:f1:5f:25:57:bd:2d:d5:b0:77:f3:0a:11:a6:08:ed:
         3c:a1:b1:0c:38:07:a1:70:16:f2:bc:93:72:3a:02:a6:16:51:
         0e:a0:49:02:3e:d2:e8:bd:fe:11:fb:9f:1b:04:06:57:61:7d:
         9a:5b:3f:65:ca:8e:c4:60:c9:c1:a6:e9:8f:2c:11:c0:ac:eb:
         c2:05:fe:6f:99:83:7b:69:7c:12:2b:44:24:15:85:d5:82:fc:
         9d:a1:b4:fc:74:1f:26:7d:db:9c:73:58:25:4c:bc:b9:ae:0e:
         a3:f4:50:e4:74:c4:9c:e2:ff:f4:5a:67:b8:ba:d5:e8:fa:55:
         f6:5b:03:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC23L9DdO7lAw3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk
YTMzM2FmNzgtMTc3OC00NTM0LWI1NTQtNGI2MWFlN2UxODU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4CnMKYz9UewHkE8sad/2Zkt8B4s9Ww+Z6pu
GKHcH9FDahuqTmN0VTRYqAKt6NVDUGAuBdpELdacsYGbwOM5OtFnrUqypz0jEVlI
ynlO05QUEP9pEeFKan3QPyxybKIKk8Z0Wy2Jj06SINkcb02RSnM+yHVYpm9BFjTF
6l/k8CXME4cUyjOVVBXd67ooXzK3Ryh3SqgHD/vDvSEpNT8610x13Z7iBJdrIiT+
0kdP5td1Hcu12kaUXTXBUw8cF7bEEYxtg5fvJF/R6LT3MKJb3E84nf9TNUeU1qrY
K6h3xGe8/oty6G33Ym1bxulCHBh7v9i/QTkohDrwetjyqHNnQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmJ8Jr+Mmy6eUOrqTa4OvCo4nybMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGEyZGVmODctNWI3Yi0z
M2IwLWE1NDktOWFkNDQ5ZmE4NWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJibnS9JhdYY8jm2DQdUObxSSzyGGnVFGvmvbqztE6h77VN5F1FB2GsA
wcLUIUj5LBWo5RpIC56DwAIVKTAQauH/cn6Oor6FQdR+PDiajsdCDSozwWgqszOs
KfHKdKHh7Z8/O+9FH+hP+v0rIzCGMzi10ya82wJfQ9Rm+fi2TEEEx/FfJVe9LdWw
d/MKEaYI7TyhsQw4B6FwFvK8k3I6AqYWUQ6gSQI+0ui9/hH7nxsEBldhfZpbP2XK
jsRgycGm6Y8sEcCs68IF/m+Zg3tpfBIrRCQVhdWC/J2htPx0HyZ925xzWCVMvLmu
DqP0UOR0xJzi//RaZ7i61ej6VfZbAz0=
-----END CERTIFICATE-----
Generated at Thu Aug 21 06:58:34 2025 by rpki-client