Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/047b55fb-ca06-3412-837e-1b6284bb505b.roa
File:                     047b55fb-ca06-3412-837e-1b6284bb505b.roa (raw, json)
Hash identifier:          BLXDJrn7HJfBkexj1QlypQyllfgEu9qVhJ+cIQCtk8A=
Subject key identifier:   34:46:18:A7:8C:C0:24:73:7D:99:28:AA:22:C1:E5:D1:F2:86:FE:84
Certificate issuer:       /CN=fff22b91-ff6b-40b0-b626-033566818ca6
Certificate serial:       010D0C9F4328584AFC1C083BCB5073C8924EB400
Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/047b55fb-ca06-3412-837e-1b6284bb505b.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     16823
IP address blocks:        135.84.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:08:3b:cb:50:73:c8:92:4e:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=e5bf57e9-c9e5-49da-a83d-cfd46ede382f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:ed:13:e5:91:32:9f:27:ee:0b:8f:c1:a7:
                    4d:54:83:7e:f4:d1:f9:d0:ce:52:1f:9a:a7:d6:fe:
                    5b:51:f9:46:7e:dc:4d:c4:25:fd:aa:08:35:04:45:
                    9e:f2:a2:9b:d8:d1:3e:bb:6b:64:14:8a:19:c3:ef:
                    0c:e0:fa:e7:6f:0b:c8:c8:3a:7e:75:25:4d:3c:17:
                    d7:91:43:6b:37:4d:e9:bf:18:bd:da:b6:63:b6:cd:
                    e6:97:45:bb:7d:3c:93:0d:ec:25:b5:ad:59:a4:82:
                    d3:ba:6f:b8:e3:0b:9e:bf:2a:a4:aa:f6:52:6d:85:
                    44:71:b9:f1:f9:ba:83:24:f6:ed:65:85:21:0d:b2:
                    c0:aa:9c:b7:ff:a7:97:2d:9d:6d:7d:20:19:41:42:
                    51:c0:6d:22:26:3d:df:05:dc:b5:92:c4:16:e3:d6:
                    72:0e:e5:3f:9b:76:73:5d:a9:fb:8a:22:66:cc:79:
                    52:4d:04:4e:bc:13:73:97:22:25:db:6a:9e:d0:79:
                    cf:0b:54:36:a1:4a:46:05:6a:6c:cb:df:b7:2d:17:
                    e5:76:33:58:d1:53:d7:e1:97:fe:d5:71:a3:20:92:
                    c9:12:22:e6:52:36:45:d0:d5:b8:9d:ff:1a:40:03:
                    53:a1:5c:a8:a4:51:7b:b0:db:b4:0b:00:c9:f7:02:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:46:18:A7:8C:C0:24:73:7D:99:28:AA:22:C1:E5:D1:F2:86:FE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/047b55fb-ca06-3412-837e-1b6284bb505b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:cf:ff:4e:03:c7:52:af:de:e3:58:11:00:97:35:a7:40:b8:
         09:76:75:d2:6d:c3:e5:8f:22:ff:df:13:dd:a1:6d:c6:11:ad:
         83:ff:08:32:7a:0b:c3:25:60:a1:77:e8:98:43:08:0e:f3:9c:
         83:c3:1b:2e:d1:c0:d6:c4:4b:6a:84:06:52:5b:d1:d2:e6:d3:
         9a:53:d6:37:9e:99:5f:3f:ad:7e:80:2c:cf:aa:d0:ec:47:20:
         cb:18:30:7f:93:9e:3a:a8:de:f5:eb:f8:76:de:82:c2:5a:a9:
         61:24:2d:7d:05:b4:83:7a:bd:6d:e1:f2:17:85:b7:3f:b7:2b:
         db:a8:ca:6f:86:59:21:b5:ad:df:f6:19:69:6a:87:50:b6:a5:
         94:d8:97:3e:00:ce:c9:a0:5e:4c:f8:87:54:6b:61:6a:73:5f:
         74:c8:84:35:aa:17:b7:e0:b6:e9:d0:c8:a3:ea:d0:d8:79:4d:
         26:a9:43:04:5e:04:ee:94:91:11:9c:1d:3b:a7:c0:71:aa:60:
         eb:21:1e:66:a0:b8:88:c5:40:08:6f:8b:12:56:30:2d:8a:31:
         86:07:64:63:33:86:3f:ac:ea:6b:bb:1d:a6:0e:64:73:54:04:
         e0:f9:f1:cc:bc:55:36:58:1b:28:52:d3:5e:81:81:31:9d:70:
         d2:2b:16:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAg7y1BzyJJOtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4
Y2E2MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTViZjU3ZTktYzllNS00OWRhLWE4M2QtY2ZkNDZlZGUzODJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkTtE+WRMp8n7guPwadNVIN+9NH50M5SH5qn
1v5bUflGftxNxCX9qgg1BEWe8qKb2NE+u2tkFIoZw+8M4PrnbwvIyDp+dSVNPBfX
kUNrN03pvxi92rZjts3ml0W7fTyTDewlta1ZpILTum+44wuevyqkqvZSbYVEcbnx
+bqDJPbtZYUhDbLAqpy3/6eXLZ1tfSAZQUJRwG0iJj3fBdy1ksQW49ZyDuU/m3Zz
Xan7iiJmzHlSTQROvBNzlyIl22qe0HnPC1Q2oUpGBWpsy9+3LRfldjNY0VPX4Zf+
1XGjIJLJEiLmUjZF0NW4nf8aQANToVyopFF7sNu0CwDJ9wIKIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRGGKeMwCRzfZkoqiLB5dHyhv6EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy
MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvMDQ3YjU1ZmItY2EwNi0z
NDEyLTgzN2UtMWI2Mjg0YmI1MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2
MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx
OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1
NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDh1SYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjP/04Dx1Kv3uNYEQCXNadAuAl2ddJtw+WPIv/fE92hbcYRrYP/CDJ6
C8MlYKF36JhDCA7znIPDGy7RwNbES2qEBlJb0dLm05pT1jeemV8/rX6ALM+q0OxH
IMsYMH+Tnjqo3vXr+HbegsJaqWEkLX0FtIN6vW3h8heFtz+3K9uoym+GWSG1rd/2
GWlqh1C2pZTYlz4AzsmgXkz4h1RrYWpzX3TIhDWqF7fgtunQyKPq0Nh5TSapQwRe
BO6UkRGcHTunwHGqYOshHmaguIjFQAhvixJWMC2KMYYHZGMzhj+s6mu7HaYOZHNU
BOD58cy8VTZYGyhS016BgTGdcNIrFtQ=
-----END CERTIFICATE-----
Generated at Fri Oct 17 23:34:43 2025 by rpki-client