Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa
File:                     daab1a35-5ba6-3617-8f32-534a11d5dd38.roa (raw, json)
Hash identifier:          VK1Ei5RKLrFixSiYplqKcJn+WtAyMK9c5DsCKTEQth0=
Subject key identifier:   A3:42:FF:88:AA:6A:86:47:F2:23:B5:81:75:8C:68:8C:3E:5F:41:4E
Certificate issuer:       /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
Certificate serial:       010D0C9F4328584A66C071E0930CF34B54A20340
Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        192.84.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:71:e0:93:0c:f3:4b:54:a2:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=c4dc6d48-6a49-4c8c-b8b8-82bea8c96bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:10:8f:b5:71:c3:f7:3e:a9:e8:5b:f5:97:09:
                    f2:41:df:3f:c3:62:c6:4d:26:e6:98:5a:9b:47:f4:
                    d8:ca:06:4e:47:0c:4d:9e:92:d6:7f:51:31:ef:16:
                    2c:86:58:8f:fa:b4:bc:07:52:ea:bc:be:d9:64:1f:
                    79:d9:8e:6e:86:6a:b6:eb:e3:6b:a9:a8:4a:75:5f:
                    af:c6:13:4d:54:8a:2d:f9:47:a1:e7:ab:74:a7:5f:
                    d6:f7:b3:94:c2:76:c3:df:7b:53:95:64:1d:db:73:
                    f1:14:e2:35:df:0f:5e:ad:b5:06:41:fd:e1:ea:34:
                    7a:c0:80:df:ed:9b:1a:5a:52:1f:70:71:41:cd:97:
                    f1:f6:7e:30:77:9c:ca:d4:ec:1f:95:10:d7:8f:e8:
                    ac:85:f6:85:36:67:1f:13:d8:11:71:53:fa:69:29:
                    75:f0:13:12:c0:d0:c2:90:da:c4:2f:a2:5d:cd:5d:
                    b4:57:fc:f8:0c:5f:4d:6e:ed:ee:37:1f:e8:d7:e2:
                    5a:37:0d:69:2f:c5:5a:71:66:80:90:c4:57:f7:9c:
                    2d:0d:0c:76:79:dc:a0:30:55:4f:74:06:73:0f:ca:
                    70:f8:32:d8:69:62:ad:07:65:ef:04:02:9a:be:7b:
                    8c:b4:9a:04:70:bf:f2:25:87:67:53:75:a3:6f:af:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:42:FF:88:AA:6A:86:47:F2:23:B5:81:75:8C:68:8C:3E:5F:41:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/daab1a35-5ba6-3617-8f32-534a11d5dd38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl

            X509v3 Authority Key Identifier:
                keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:fa:4f:ee:47:42:05:5b:5e:f3:86:fc:78:ce:2f:70:b8:ba:
         51:93:d5:46:e1:b1:1b:14:17:47:fc:0e:05:19:43:4c:20:65:
         c0:c9:1e:08:1b:d2:f3:d4:4f:bb:cf:df:cd:57:b9:79:e8:e6:
         36:4f:4a:c2:b7:2b:32:ed:68:b7:10:91:4e:06:c9:53:85:60:
         ee:6a:06:6a:f2:59:af:a1:11:fb:85:c0:1c:1c:68:97:60:80:
         9d:9e:6f:0b:b8:ae:d1:94:59:60:21:7c:a5:3d:69:4f:9f:d6:
         88:db:67:49:33:7e:70:5e:94:2f:e2:a4:25:bd:f4:01:fd:22:
         a0:39:54:1b:8e:6d:68:72:0d:ed:52:6b:d2:44:d5:de:a2:3c:
         60:44:44:ea:9f:75:2f:57:7f:f5:0c:e9:7f:91:90:39:73:e5:
         68:82:7c:f5:cb:d3:92:42:ec:65:9d:e3:ad:1d:53:0f:ed:f0:
         81:16:30:ef:fa:61:5e:98:5d:7a:64:77:16:9a:a7:bf:55:6e:
         8e:0c:33:7d:2a:03:4e:ad:60:77:6b:29:ae:d8:ff:16:e4:0e:
         c0:a1:45:13:13:6c:35:3c:e7:63:68:0b:9f:57:30:69:6b:8e:
         34:19:e6:bb:75:a1:0d:82:1a:57:ea:d1:f7:48:0d:d8:dc:db:
         94:b4:3a:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHHgkwzzS1SiA0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz
ZDhhMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
YzRkYzZkNDgtNmE0OS00YzhjLWI4YjgtODJiZWE4Yzk2YmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixCPtXHD9z6p6Fv1lwnyQd8/w2LGTSbmmFqb
R/TYygZORwxNnpLWf1Ex7xYshliP+rS8B1LqvL7ZZB952Y5uhmq26+NrqahKdV+v
xhNNVIot+Ueh56t0p1/W97OUwnbD33tTlWQd23PxFOI13w9erbUGQf3h6jR6wIDf
7ZsaWlIfcHFBzZfx9n4wd5zK1OwflRDXj+ishfaFNmcfE9gRcVP6aSl18BMSwNDC
kNrEL6JdzV20V/z4DF9Nbu3uNx/o1+JaNw1pL8VacWaAkMRX95wtDQx2edygMFVP
dAZzD8pw+DLYaWKtB2XvBAKavnuMtJoEcL/yJYdnU3Wjb68hBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNC/4iqaoZH8iO1gXWMaIw+X0FOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi
Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvZGFhYjFhMzUtNWJhNi0z
NjE3LThmMzItNTM0YTExZDVkZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw
OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw
M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy
ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFTnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHz6T+5HQgVbXvOG/HjOL3C4ulGT1UbhsRsUF0f8DgUZQ0wgZcDJHggb
0vPUT7vP381XuXno5jZPSsK3KzLtaLcQkU4GyVOFYO5qBmryWa+hEfuFwBwcaJdg
gJ2ebwu4rtGUWWAhfKU9aU+f1ojbZ0kzfnBelC/ipCW99AH9IqA5VBuObWhyDe1S
a9JE1d6iPGBEROqfdS9Xf/UM6X+RkDlz5WiCfPXL05JC7GWd460dUw/t8IEWMO/6
YV6YXXpkdxaap79Vbo4MM30qA06tYHdrKa7Y/xbkDsChRRMTbDU852NoC59XMGlr
jjQZ5rt1oQ2CGlfq0fdIDdjc25S0OvI=
-----END CERTIFICATE-----
Generated at Wed Jul 9 16:35:54 2025 by rpki-client