Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/818cac6a-5b10-346f-ba3b-260466a1c8a5.roa
File:                     818cac6a-5b10-346f-ba3b-260466a1c8a5.roa (raw, json)
Hash identifier:          YdSC1p/qMcAvTsscJ04xn3zZSqNAtvumuMekjNf2c+E=
Subject key identifier:   2F:D3:56:8E:D0:39:1A:46:43:DF:B3:C6:F3:B3:8C:BD:5F:91:66:E1
Certificate issuer:       /CN=9df74e6e-da16-4cba-a854-ee087e767113
Certificate serial:       010D0C9F4328584B1806DB922D54334C0B8C0800
Authority key identifier: 12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/818cac6a-5b10-346f-ba3b-260466a1c8a5.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     22953
IP address blocks:        198.168.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:db:92:2d:54:33:4c:0b:8c:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df74e6e-da16-4cba-a854-ee087e767113
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=f2b5e843-d3c3-4792-8c72-223c0ea88ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:65:9c:92:81:a5:61:dd:9e:19:0f:b6:6d:3d:
                    c5:b3:68:a4:9e:49:dd:bc:1a:ee:ea:95:81:7e:c8:
                    a3:97:ea:b6:24:40:a2:2f:04:d1:d2:95:14:14:d8:
                    48:4a:ea:f9:f8:38:df:a5:14:cd:2c:a9:d4:e6:e3:
                    c1:b2:56:d4:3f:99:90:5b:9d:73:3e:4a:4a:64:b2:
                    62:16:02:26:d9:15:a5:01:34:b2:f7:5e:14:ca:29:
                    a1:f4:c3:28:27:46:94:a1:bb:ab:5a:fa:13:94:2d:
                    92:25:69:ee:14:a6:a1:0f:a0:d5:8e:0f:37:eb:a6:
                    fa:76:7b:d4:78:22:fa:0f:58:59:d8:7a:74:60:5f:
                    a1:a7:4e:44:9f:90:b1:da:0a:80:b6:ad:0e:7f:09:
                    5f:e6:ce:34:50:86:50:b9:5b:6f:5f:dd:88:0d:d5:
                    c2:4e:73:c2:81:5c:e1:08:d3:6e:94:0f:f0:8e:b3:
                    33:c1:e4:8a:68:03:43:92:87:2c:d1:44:7c:73:ac:
                    1f:3d:d3:90:7f:1c:fa:d6:d9:51:94:f0:04:b1:c2:
                    4e:18:56:1a:e7:85:ce:74:5d:fb:62:cb:66:b2:f4:
                    44:6b:02:ad:ff:0c:c0:73:b7:bd:87:db:d0:03:49:
                    f1:ee:41:80:06:0b:96:25:87:dd:2a:e1:c5:08:18:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D3:56:8E:D0:39:1A:46:43:DF:B3:C6:F3:B3:8C:BD:5F:91:66:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/818cac6a-5b10-346f-ba3b-260466a1c8a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl

            X509v3 Authority Key Identifier:
                keyid:12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:02:19:e8:19:ea:9a:6f:16:3e:26:bf:42:1c:36:12:b4:42:
         07:8b:fd:60:b0:02:b5:f4:90:86:1d:4f:fd:f7:3c:2b:fb:c5:
         dd:67:e7:fa:f5:b5:76:ca:0e:db:c6:a2:06:ea:ac:87:be:b1:
         59:e6:e4:a1:60:e8:97:7d:0f:20:26:ee:8e:67:0f:49:09:fe:
         83:11:d4:00:95:9a:4b:46:f7:a6:76:07:3c:d3:dd:59:dc:27:
         9b:8e:2e:35:ea:53:14:64:f1:b3:8d:96:06:5a:c2:69:d4:fa:
         c6:ae:05:23:64:d1:6e:2f:03:aa:31:83:82:bb:95:45:bd:41:
         92:25:47:75:af:be:da:58:9c:a9:61:20:28:3d:32:20:38:7e:
         1f:4d:6c:f8:3a:8f:42:22:95:59:34:db:b0:93:3e:18:f9:ad:
         5e:5e:12:1c:df:01:72:cc:8c:17:be:aa:36:3f:8a:00:f1:bf:
         de:b5:a7:68:32:61:81:07:80:89:f6:8d:3b:bb:39:b7:a9:e1:
         eb:5b:a0:58:8c:63:4c:36:f2:d3:3c:df:09:df:60:b1:52:68:
         09:1a:88:0c:48:2d:8d:61:a3:ff:8b:24:1f:83:d0:04:87:ed:
         cf:b3:d3:d1:ff:05:ac:41:0d:d3:82:36:50:18:b8:50:42:27:
         88:8c:94:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtuSLVQzTAuMCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRmNzRlNmUtZGExNi00Y2JhLWE4NTQtZWUwODdlNzY3
MTEzMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZjJiNWU4NDMtZDNjMy00NzkyLThjNzItMjIzYzBlYTg4ZWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmWckoGlYd2eGQ+2bT3Fs2iknkndvBru6pWB
fsijl+q2JECiLwTR0pUUFNhISur5+DjfpRTNLKnU5uPBslbUP5mQW51zPkpKZLJi
FgIm2RWlATSy914Uyimh9MMoJ0aUoburWvoTlC2SJWnuFKahD6DVjg8366b6dnvU
eCL6D1hZ2Hp0YF+hp05En5Cx2gqAtq0Ofwlf5s40UIZQuVtvX92IDdXCTnPCgVzh
CNNulA/wjrMzweSKaANDkocs0UR8c6wfPdOQfxz61tlRlPAEscJOGFYa54XOdF37
YstmsvREawKt/wzAc7e9h9vQA0nx7kGABguWJYfdKuHFCBgvYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/TVo7QORpGQ9+zxvOzjL1fkWbhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85ZGY3
NGU2ZS1kYTE2LTRjYmEtYTg1NC1lZTA4N2U3NjcxMTMvODE4Y2FjNmEtNWIxMC0z
NDZmLWJhM2ItMjYwNDY2YTFjOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWRmNzRlNmUtZGExNi00Y2JhLWE4
NTQtZWUwODdlNzY3MTEzLzlkZjc0ZTZlLWRhMTYtNGNiYS1hODU0LWVlMDg3ZTc2
NzExMy5jcmwwHwYDVR0jBBgwFoAUEq4Uchdx/w2XT9UGiVP+2vDxfRgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85ZGY3NGU2ZS1kYTE2LTRjYmEtYTg1NC1lZTA4
N2U3NjcxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxqi4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQCGegZ6ppvFj4mv0IcNhK0QgeL/WCwArX0kIYdT/33PCv7xd1n5/r1
tXbKDtvGogbqrIe+sVnm5KFg6Jd9DyAm7o5nD0kJ/oMR1ACVmktG96Z2BzzT3Vnc
J5uOLjXqUxRk8bONlgZawmnU+sauBSNk0W4vA6oxg4K7lUW9QZIlR3WvvtpYnKlh
ICg9MiA4fh9NbPg6j0IilVk027CTPhj5rV5eEhzfAXLMjBe+qjY/igDxv961p2gy
YYEHgIn2jTu7Obep4etboFiMY0w28tM83wnfYLFSaAkaiAxILY1ho/+LJB+D0ASH
7c+z09H/BaxBDdOCNlAYuFBCJ4iMlKs=
-----END CERTIFICATE-----
Generated at Mon Sep 15 17:15:09 2025 by rpki-client