Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6365dff0-29e9-32c8-ac9c-3c98299d0c82.roa
File:                     6365dff0-29e9-32c8-ac9c-3c98299d0c82.roa (raw, json)
Hash identifier:          lJoV9uRwbwZmfnR8DQsdWoVe2AivCoA9rbE3IQ2pGRo=
Subject key identifier:   DF:82:C5:A4:71:63:E5:0B:FE:55:D4:41:F5:16:F5:A9:84:EA:D2:AE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584ACD611F22A02DD7D47BE48980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6365dff0-29e9-32c8-ac9c-3c98299d0c82.roa
Signing time:             Sat 09 Aug 2025 19:17:10 +0000
ROA not before:           Sat 09 Aug 2025 19:17:10 +0000
ROA not after:            Fri 07 Nov 2025 20:17:10 +0000
asID:                     31898
IP address blocks:        130.162.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cd:61:1f:22:a0:2d:d7:d4:7b:e4:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug  9 19:17:10 2025 GMT
            Not After : Nov  7 20:17:10 2025 GMT
        Subject: CN=26b4b617-dd9d-4954-9e2c-ae09bf996db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:18:85:60:85:d5:66:05:05:24:d8:62:36:e6:
                    52:6f:3e:11:82:f4:b6:a8:0f:2e:d8:b5:b5:71:99:
                    78:90:67:e7:7f:ee:b3:94:1a:14:71:e6:e5:88:de:
                    3f:64:b7:35:cc:d1:d4:d0:69:a4:d0:e8:67:97:c3:
                    33:86:57:dd:16:37:0d:b3:61:b0:9a:30:30:5b:12:
                    67:a0:dc:ca:ad:84:c6:68:b3:4d:e4:1c:df:5a:6a:
                    35:d1:94:6c:0f:b5:a6:3c:9b:df:12:63:31:ac:4a:
                    96:96:54:f4:d6:a0:74:e4:bd:c9:df:96:c1:29:96:
                    80:bb:75:ab:58:f3:f9:85:77:ba:74:9f:2b:47:c1:
                    48:7a:b4:df:41:fa:82:12:25:1e:3a:da:b3:43:7b:
                    a8:64:d9:58:7f:65:ea:a4:ab:50:1f:c8:3b:83:53:
                    fc:34:37:74:28:ee:4e:fb:72:4f:06:e3:87:a4:db:
                    31:c5:f9:77:6e:ff:47:13:e3:13:3f:de:7a:82:bc:
                    3e:16:51:c8:31:10:d5:36:62:73:24:7c:97:d6:48:
                    ec:05:70:ff:20:ae:11:66:58:44:42:81:23:7f:2b:
                    9f:7c:11:a5:f2:56:ba:3e:56:f7:c5:f6:13:e2:21:
                    0c:bf:88:8b:ad:dd:18:c7:bf:60:45:6c:17:ec:c0:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:82:C5:A4:71:63:E5:0B:FE:55:D4:41:F5:16:F5:A9:84:EA:D2:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6365dff0-29e9-32c8-ac9c-3c98299d0c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.162.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:51:ac:50:16:79:3f:59:c4:c4:a7:d0:02:8e:55:ac:6c:a7:
         be:fb:db:ac:b9:91:0e:29:52:6e:3a:73:69:69:f8:73:2a:5b:
         9f:df:91:8d:fc:76:24:0e:45:8d:f7:a7:44:62:f8:2c:20:fa:
         6d:53:86:90:42:9d:7f:79:85:b8:65:38:3f:95:b9:46:6d:1e:
         a6:8e:70:46:9a:55:60:10:67:3b:8b:d0:f7:77:eb:02:72:f8:
         9d:e3:09:cd:c8:38:6e:af:fb:a8:ec:d6:0a:a5:4e:2c:0f:07:
         32:7c:a7:27:37:6e:69:95:7c:d9:81:62:94:35:8d:71:e1:6c:
         ae:52:88:c8:35:df:94:a5:72:3a:da:a5:62:42:e6:47:f3:0c:
         e9:a9:2d:85:9c:e1:6a:f6:45:cf:08:b8:2a:78:8e:fd:c4:4d:
         19:34:a6:e7:98:ae:21:36:a7:15:52:2c:e2:01:30:0f:49:9a:
         0a:78:ef:06:ca:3c:26:c9:2e:ec:41:04:b1:0c:bd:29:a7:dd:
         69:43:fe:91:4a:86:59:6a:cb:de:bb:78:bb:27:81:85:ca:a1:
         e6:07:ff:cd:a9:51:e9:c2:4c:6a:55:2f:c0:8c:60:3a:cb:1f:
         37:1e:a3:eb:45:f0:72:ac:ce:af:b8:95:b2:df:25:55:90:c4:
         14:05:f2:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYR8ioC3X1HvkiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgwOTE5MTcxMFoXDTI1MTEwNzIwMTcxMFowLzEtMCsGA1UEAxMk
MjZiNGI2MTctZGQ5ZC00OTU0LTllMmMtYWUwOWJmOTk2ZGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghiFYIXVZgUFJNhiNuZSbz4RgvS2qA8u2LW1
cZl4kGfnf+6zlBoUcebliN4/ZLc1zNHU0Gmk0Ohnl8MzhlfdFjcNs2GwmjAwWxJn
oNzKrYTGaLNN5BzfWmo10ZRsD7WmPJvfEmMxrEqWllT01qB05L3J35bBKZaAu3Wr
WPP5hXe6dJ8rR8FIerTfQfqCEiUeOtqzQ3uoZNlYf2XqpKtQH8g7g1P8NDd0KO5O
+3JPBuOHpNsxxfl3bv9HE+MTP956grw+FlHIMRDVNmJzJHyX1kjsBXD/IK4RZlhE
QoEjfyuffBGl8la6Plb3xfYT4iEMv4iLrd0Yx79gRWwX7MDglwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN+CxaRxY+UL/lXUQfUW9amE6tKuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjM2NWRmZjAtMjllOS0z
MmM4LWFjOWMtM2M5ODI5OWQwYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgqKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFRrFAWeT9ZxMSn0AKOVaxsp77726y5kQ4pUm46c2lp+HMqW5/fkY38
diQORY33p0Ri+Cwg+m1ThpBCnX95hbhlOD+VuUZtHqaOcEaaVWAQZzuL0Pd36wJy
+J3jCc3IOG6v+6js1gqlTiwPBzJ8pyc3bmmVfNmBYpQ1jXHhbK5SiMg135Slcjra
pWJC5kfzDOmpLYWc4Wr2Rc8IuCp4jv3ETRk0pueYriE2pxVSLOIBMA9Jmgp47wbK
PCbJLuxBBLEMvSmn3WlD/pFKhllqy967eLsngYXKoeYH/82pUenCTGpVL8CMYDrL
Hzceo+tF8HKszq+4lbLfJVWQxBQF8mA=
-----END CERTIFICATE-----
Generated at Wed Aug 20 03:23:22 2025 by rpki-client