Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa
File:                     5e637b51-80c2-35fa-ad18-b5f148be60c5.roa (raw, json)
Hash identifier:          rXYUWHNEogH2eeJYdYjtqW3QYapiaU+8E8ypHdqBK4E=
Subject key identifier:   06:99:FD:DA:13:4F:7A:35:AB:F5:74:14:DB:98:3E:8A:57:0C:D3:4C
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584B13D6C83E51C8F0CD9928AA10
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     2152
IP address blocks:        137.164.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c8:3e:51:c8:f0:cd:99:28:aa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=77a5fde9-68b4-40cc-9fdc-543e7adf7a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:72:09:60:c5:20:9d:7a:d4:82:ed:68:0d:
                    df:fd:34:ed:76:ef:7e:7e:ba:31:f2:55:e1:94:0d:
                    86:e7:b6:8d:07:c8:3a:9e:c7:d6:8f:d0:26:6a:9e:
                    78:88:06:83:7c:f9:8e:7f:b5:93:bb:e4:73:86:ba:
                    22:8d:72:61:f7:79:47:49:b9:42:f9:a2:00:21:25:
                    8b:6c:eb:38:12:c9:fb:7b:c2:bd:ea:de:50:ee:f7:
                    34:8a:c9:3f:e7:b4:e3:72:41:aa:33:4a:ac:ab:52:
                    ea:19:7b:1f:3b:2a:95:80:2b:f2:bb:d1:d1:1c:51:
                    8c:b9:16:16:c3:15:4f:53:95:89:19:cc:60:56:e1:
                    b8:ee:04:ff:56:66:b4:6c:b8:b4:ba:f4:1a:c1:02:
                    8f:90:bd:be:cf:98:c5:13:44:5e:ec:13:9b:c1:13:
                    e1:f2:b9:e6:c3:03:a2:25:1d:71:0d:c9:36:fc:ed:
                    e5:53:1b:c4:0b:27:81:b1:43:eb:d4:3b:2f:9c:da:
                    92:7b:d3:a0:10:09:cc:8d:97:8c:88:0b:77:59:b2:
                    1d:bd:4d:49:f3:1b:c7:d3:2d:fe:e2:26:2d:ec:cc:
                    ee:bc:c2:9f:b7:41:2d:97:28:b5:ca:93:a9:d9:51:
                    ec:0e:a5:a5:0f:ac:6b:95:bb:38:83:ba:73:af:ed:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:99:FD:DA:13:4F:7A:35:AB:F5:74:14:DB:98:3E:8A:57:0C:D3:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/5e637b51-80c2-35fa-ad18-b5f148be60c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5b:4e:03:f0:2f:85:d8:56:d8:22:f5:7e:d1:fc:26:89:3c:
         f1:f8:bb:7f:5a:ae:4e:21:fa:8f:21:c8:28:18:07:37:b2:9e:
         56:b8:c6:f9:b4:13:61:d7:72:6d:9b:8f:3f:bd:ff:ec:d9:3b:
         31:b1:2e:9d:17:b5:3f:14:fd:3f:02:67:33:1d:db:34:a0:15:
         c5:ed:02:4f:90:e8:51:98:dc:60:8b:e8:d3:6c:0b:5a:da:1d:
         b8:28:0d:bf:1b:8d:10:5f:79:a2:c3:42:cd:4b:93:e0:24:c2:
         40:34:e3:7e:2e:95:85:cb:88:89:1f:0a:84:3f:5c:cb:be:e0:
         e6:d4:3e:fb:b2:0e:53:e7:69:7b:2f:1a:93:cd:6f:12:e7:3c:
         bd:d1:0f:ee:ca:3f:7b:9e:b1:1a:9b:b8:98:97:93:f2:66:74:
         7f:ff:a7:ea:c8:0a:3a:0d:6e:a0:af:58:87:d9:7f:33:43:df:
         ed:02:d6:60:a7:b7:f1:bb:e7:1e:f3:0f:a4:a2:30:05:e8:db:
         7f:50:f0:6c:7b:92:0d:6f:f9:dd:80:3f:36:c4:b2:32:1b:5b:
         a7:dc:45:19:91:ce:53:44:18:92:8e:f3:c0:d3:1e:53:e1:2d:
         15:8d:de:63:40:78:cd:94:bc:6a:ac:54:01:00:97:89:45:e3:
         55:ff:01:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sg+UcjwzZkoqhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
NzdhNWZkZTktNjhiNC00MGNjLTlmZGMtNTQzZTdhZGY3YTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD9yCWDFIJ161ILtaA3f/TTtdu9+frox8lXh
lA2G57aNB8g6nsfWj9Amap54iAaDfPmOf7WTu+RzhroijXJh93lHSblC+aIAISWL
bOs4Esn7e8K96t5Q7vc0isk/57TjckGqM0qsq1LqGXsfOyqVgCvyu9HRHFGMuRYW
wxVPU5WJGcxgVuG47gT/Vma0bLi0uvQawQKPkL2+z5jFE0Re7BObwRPh8rnmwwOi
JR1xDck2/O3lUxvECyeBsUPr1DsvnNqSe9OgEAnMjZeMiAt3WbIdvU1J8xvH0y3+
4iYt7MzuvMKft0Etlyi1ypOp2VHsDqWlD6xrlbs4g7pzr+01SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAaZ/doTT3o1q/V0FNuYPopXDNNMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvNWU2MzdiNTEtODBjMi0z
NWZhLWFkMTgtYjVmMTQ4YmU2MGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaT+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFbTgPwL4XYVtgi9X7R/CaJPPH4u39ark4h+o8hyCgYBzeynla4xvm0
E2HXcm2bjz+9/+zZOzGxLp0XtT8U/T8CZzMd2zSgFcXtAk+Q6FGY3GCL6NNsC1ra
HbgoDb8bjRBfeaLDQs1Lk+AkwkA0434ulYXLiIkfCoQ/XMu+4ObUPvuyDlPnaXsv
GpPNbxLnPL3RD+7KP3uesRqbuJiXk/JmdH//p+rICjoNbqCvWIfZfzND3+0C1mCn
t/G75x7zD6SiMAXo239Q8Gx7kg1v+d2APzbEsjIbW6fcRRmRzlNEGJKO88DTHlPh
LRWN3mNAeM2UvGqsVAEAl4lF41X/Ac8=
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:54 2025 by rpki-client