Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/0397d616-845a-3a5d-9ca7-2d7583a9f252.roa
File:                     0397d616-845a-3a5d-9ca7-2d7583a9f252.roa (raw, json)
Hash identifier:          ZlbQjyBjvRtFTIwCi+FFvLploUR78rOg3742a70Yhcc=
Subject key identifier:   14:3E:07:D8:44:B9:66:58:C8:DF:12:CD:37:5B:07:B6:2F:DA:27:C2
Certificate issuer:       /CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
Certificate serial:       010D0C9F4328584B477C700DA1FD32E455B47C00
Authority key identifier: 6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/0397d616-845a-3a5d-9ca7-2d7583a9f252.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     8075
IP address blocks:        167.92.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:70:0d:a1:fd:32:e4:55:b4:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=0d2aac4f-53ff-4a6c-b44b-2cb14fabe0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:f5:5a:05:bf:5a:53:6b:5d:d4:51:43:16:
                    3b:41:71:56:0b:36:b3:0d:ee:4d:f6:cd:db:97:7b:
                    57:2c:47:94:df:50:e8:7e:bc:27:e1:62:a6:8e:63:
                    5a:fe:07:e5:6c:84:01:a9:9c:9a:f3:80:19:98:d5:
                    10:6e:71:1e:b0:0e:8b:c8:66:84:bb:68:7c:60:a3:
                    12:bb:f9:eb:33:cc:2a:a3:62:62:47:c0:cf:31:8a:
                    4f:c6:49:2b:ca:0b:41:df:a6:44:7d:08:dc:6d:fc:
                    5c:2e:b8:d8:00:fe:c6:2a:a1:4a:b8:b0:08:05:68:
                    7a:79:e1:1d:a1:bc:f0:fa:8d:6e:83:f8:1c:39:40:
                    0a:95:06:f7:fa:f3:0b:91:57:85:94:ab:80:d2:de:
                    92:38:44:ff:8f:56:83:c2:1c:d7:d6:49:55:15:89:
                    4c:02:56:8e:77:ce:62:ce:e9:ba:68:b5:2d:ec:d9:
                    44:b3:59:f8:5e:47:63:7d:af:c5:dd:c5:2c:92:82:
                    3b:21:0d:30:b0:eb:9e:04:89:b0:a5:2e:66:c3:58:
                    18:9e:1f:b9:67:f1:89:60:a4:57:32:85:a1:7b:98:
                    92:8d:6c:b0:a5:e3:c8:b9:cf:44:75:a6:35:aa:3a:
                    77:13:32:0c:27:68:65:0a:b6:1c:4c:bb:a9:64:a2:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3E:07:D8:44:B9:66:58:C8:DF:12:CD:37:5B:07:B6:2F:DA:27:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/0397d616-845a-3a5d-9ca7-2d7583a9f252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl

            X509v3 Authority Key Identifier:
                keyid:6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.92.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:39:47:02:61:26:ed:d3:34:f8:ba:8c:73:ae:f3:36:15:
         87:1a:35:75:b4:c9:e6:10:ef:42:ec:1b:e9:d1:59:c9:ff:1b:
         81:eb:e7:55:13:52:39:7a:2a:68:90:bd:ea:95:af:64:16:75:
         04:dd:9c:00:97:b7:ca:7f:54:13:c8:84:fb:10:65:e7:28:cc:
         a9:66:70:6b:7b:21:8d:6d:dc:7f:03:5c:d6:c6:b6:25:98:84:
         31:c3:8f:21:d7:85:97:de:0d:bb:13:69:1e:bf:1e:6f:80:51:
         b6:a5:ed:33:c7:bb:4f:35:1d:b8:41:ca:24:f0:04:48:9e:2e:
         8d:7e:6a:52:f0:7e:11:93:39:b7:fb:2a:a5:e1:66:d3:51:36:
         c3:6b:de:f0:1e:fc:12:72:f3:94:1e:2e:da:2b:94:23:78:28:
         5a:5a:39:ad:26:bb:87:0f:44:75:6e:49:6f:a9:81:f4:42:be:
         3b:f7:06:aa:90:b1:d2:14:89:1f:de:99:a9:f1:70:67:7f:de:
         e1:60:c6:30:9d:fd:04:01:68:24:18:5b:1f:14:48:68:e3:92:
         e5:37:1b:04:44:b2:76:fc:45:5b:0c:eb:52:20:e7:fa:e6:7c:
         35:4d:39:ef:f1:a8:c5:94:45:6d:33:27:25:2e:b6:fe:dc:bb:
         ae:0b:94:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHANof0y5FW0fAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmNkYzc0MzQtZTFjZC00ZGVlLWIwZmEtMWQ3MDk3MzA2
YjljMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
MGQyYWFjNGYtNTNmZi00YTZjLWI0NGItMmNiMTRmYWJlMGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZr1WgW/WlNrXdRRQxY7QXFWCzazDe5N9s3b
l3tXLEeU31Dofrwn4WKmjmNa/gflbIQBqZya84AZmNUQbnEesA6LyGaEu2h8YKMS
u/nrM8wqo2JiR8DPMYpPxkkrygtB36ZEfQjcbfxcLrjYAP7GKqFKuLAIBWh6eeEd
obzw+o1ug/gcOUAKlQb3+vMLkVeFlKuA0t6SOET/j1aDwhzX1klVFYlMAlaOd85i
zum6aLUt7NlEs1n4Xkdjfa/F3cUskoI7IQ0wsOueBImwpS5mw1gYnh+5Z/GJYKRX
MoWhe5iSjWywpePIuc9EdaY1qjp3EzIMJ2hlCrYcTLupZKL3wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQ+B9hEuWZYyN8SzTdbB7Yv2ifCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Rj
NzQzNC1lMWNkLTRkZWUtYjBmYS0xZDcwOTczMDZiOWMvMDM5N2Q2MTYtODQ1YS0z
YTVkLTljYTctMmQ3NTgzYTlmMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNkYzc0MzQtZTFjZC00ZGVlLWIw
ZmEtMWQ3MDk3MzA2YjljLzJjZGM3NDM0LWUxY2QtNGRlZS1iMGZhLTFkNzA5NzMw
NmI5Yy5jcmwwHwYDVR0jBBgwFoAUb8qZKCmONhWahLmpDXaMB0Dx904wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2RjNzQzNC1lMWNkLTRkZWUtYjBmYS0xZDcw
OTczMDZiOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1zUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEA8OUcCYSbt0zT4uoxzrvM2FYcaNXW0yeYQ70LsG+nRWcn/G4Hr51UT
Ujl6KmiQveqVr2QWdQTdnACXt8p/VBPIhPsQZecozKlmcGt7IY1t3H8DXNbGtiWY
hDHDjyHXhZfeDbsTaR6/Hm+AUbal7TPHu081HbhByiTwBEieLo1+alLwfhGTObf7
KqXhZtNRNsNr3vAe/BJy85QeLtorlCN4KFpaOa0mu4cPRHVuSW+pgfRCvjv3BqqQ
sdIUiR/emanxcGd/3uFgxjCd/QQBaCQYWx8USGjjkuU3GwREsnb8RVsM61Ig5/rm
fDVNOe/xqMWURW0zJyUutv7cu64LlM0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:21 2025 by rpki-client