Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bdaef7d-61e4-33a9-a168-75cb034a8456.roa
File:                     3bdaef7d-61e4-33a9-a168-75cb034a8456.roa (raw, json)
Hash identifier:          enxCbvjIq439Xwb1ejGpl6EJfI9TQl/yBdKrTysAhBo=
Subject key identifier:   0F:C2:C8:8A:56:B6:F6:DA:B4:98:D6:29:0F:D1:98:84:C6:BF:BB:30
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B7C876770A4A22EE5AB9DB800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bdaef7d-61e4-33a9-a168-75cb034a8456.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     24319
IP address blocks:        184.28.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:67:70:a4:a2:2e:e5:ab:9d:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=1dceee3f-c2ac-4329-9359-2567a51c09c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a0:6a:6a:b8:55:81:df:c0:ee:b2:09:31:d1:
                    2d:0c:78:3c:b9:4d:ac:67:cc:29:8d:de:5d:a1:21:
                    59:de:1d:3a:1b:b4:59:71:a1:b1:b7:81:3b:06:17:
                    d4:2d:a2:9b:55:58:a1:7f:1d:ef:4b:14:95:3e:a3:
                    b8:8f:6f:43:f1:24:83:b8:6b:51:8a:1c:b5:10:b8:
                    1f:78:6d:4e:98:9b:ed:db:4b:43:f1:30:74:13:ad:
                    a8:6f:d9:8f:e9:f0:0d:4d:23:d0:80:c1:6b:dd:62:
                    08:f5:8b:93:6c:54:76:4d:0c:48:eb:94:61:60:7e:
                    4b:d1:27:62:39:2c:20:32:5b:b1:25:a3:e3:95:44:
                    2a:44:81:c7:69:c5:76:90:c5:d9:ed:bd:f9:69:2b:
                    89:42:52:67:19:13:8c:ea:cc:da:83:8c:82:ee:35:
                    fa:08:f4:7a:f3:7a:32:97:6a:2b:98:3f:b4:8e:7d:
                    58:27:91:f3:66:ca:f1:88:e6:a0:b2:bb:17:03:56:
                    a9:09:a6:b4:5e:6b:ea:e2:c9:b7:cb:03:c4:45:9c:
                    5f:40:03:f8:c8:15:c9:d1:d4:fd:12:7d:15:df:fb:
                    5e:37:4a:0e:5d:35:5a:3b:43:cc:67:b1:02:95:b8:
                    71:b7:8c:56:2a:02:87:03:22:bf:f8:f1:0b:88:54:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C2:C8:8A:56:B6:F6:DA:B4:98:D6:29:0F:D1:98:84:C6:BF:BB:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bdaef7d-61e4-33a9-a168-75cb034a8456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f4:89:f7:17:e8:41:75:4e:ab:b1:ff:0b:0b:5d:e2:14:eb:
         fd:23:42:68:3e:4f:76:12:5d:4a:89:81:3c:73:b6:c8:1c:0b:
         61:72:c6:44:f6:97:03:75:76:03:0b:8c:3b:d2:c1:b1:d4:21:
         a6:e8:cf:63:fb:a6:b5:53:77:eb:d0:5e:6c:64:6b:95:0e:bd:
         5b:d6:8c:e5:cc:43:4e:3b:93:24:79:00:b2:96:85:8f:ab:59:
         17:30:a4:08:d4:86:32:a6:12:84:2e:c3:0b:16:26:cb:f2:ca:
         04:66:ee:03:08:83:bd:af:92:5f:d3:e4:28:4a:4d:48:cf:ad:
         a2:49:7a:9f:b6:d0:f3:50:bc:20:3e:e6:99:81:ec:59:c0:e1:
         58:df:26:75:92:35:99:95:23:88:81:c7:b1:e0:c8:66:68:36:
         70:44:5b:73:46:69:69:c1:cc:6f:80:cc:1d:87:cb:1d:fe:6f:
         74:08:c2:18:60:cd:b5:a0:fe:06:14:0c:ed:91:13:e4:15:35:
         3c:43:c9:c4:b5:de:be:e1:e6:64:6e:05:51:20:50:aa:8e:39:
         8c:81:b7:56:08:76:28:aa:8c:ee:ab:23:ca:49:23:f5:32:05:
         50:68:9f:17:b9:93:d8:ba:5c:73:3f:0f:83:85:51:78:eb:37:
         ac:08:68:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2dwpKIu5auduAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk
MWRjZWVlM2YtYzJhYy00MzI5LTkzNTktMjU2N2E1MWMwOWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKBqarhVgd/A7rIJMdEtDHg8uU2sZ8wpjd5d
oSFZ3h06G7RZcaGxt4E7BhfULaKbVVihfx3vSxSVPqO4j29D8SSDuGtRihy1ELgf
eG1OmJvt20tD8TB0E62ob9mP6fANTSPQgMFr3WII9YuTbFR2TQxI65RhYH5L0Sdi
OSwgMluxJaPjlUQqRIHHacV2kMXZ7b35aSuJQlJnGROM6szag4yC7jX6CPR683oy
l2ormD+0jn1YJ5HzZsrxiOagsrsXA1apCaa0Xmvq4sm3ywPERZxfQAP4yBXJ0dT9
En0V3/teN0oOXTVaO0PMZ7EClbhxt4xWKgKHAyK/+PELiFQPgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/CyIpWtvbatJjWKQ/RmITGv7swMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2JkYWVmN2QtNjFlNC0z
M2E5LWExNjgtNzVjYjAzNGE4NDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBxmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA70ifcX6EF1Tqux/wsLXeIU6/0jQmg+T3YSXUqJgTxztsgcC2FyxkT2
lwN1dgMLjDvSwbHUIaboz2P7prVTd+vQXmxka5UOvVvWjOXMQ047kyR5ALKWhY+r
WRcwpAjUhjKmEoQuwwsWJsvyygRm7gMIg72vkl/T5ChKTUjPraJJep+20PNQvCA+
5pmB7FnA4VjfJnWSNZmVI4iBx7HgyGZoNnBEW3NGaWnBzG+AzB2Hyx3+b3QIwhhg
zbWg/gYUDO2RE+QVNTxDycS13r7h5mRuBVEgUKqOOYyBt1YIdiiqjO6rI8pJI/Uy
BVBonxe5k9i6XHM/D4OFUXjrN6wIaMQ=
-----END CERTIFICATE-----
Generated at Wed Oct 22 05:00:32 2025 by rpki-client