Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa
File:                     90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa (raw, json)
Hash identifier:          5LWjLFtTBDhtmcJlW8neEpwyzHk0F10BeWeMxwKRxpE=
Subject key identifier:   06:A4:98:BA:8A:32:5C:C1:7A:55:14:9D:89:17:F1:93:42:AF:06:5E
Certificate issuer:       /CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
Certificate serial:       010D0C9F4328584B477C68D850C7CDE9BF7E0780
Authority key identifier: 6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     8075
IP address blocks:        167.92.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:68:d8:50:c7:cd:e9:bf:7e:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=27311fb1-e31c-4b2f-afd9-c9ae96076792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:4a:e2:7b:dc:3f:b0:d9:6c:52:d5:36:c9:
                    d9:7b:68:7c:b2:ad:66:bd:1d:74:4a:e1:74:42:33:
                    3f:02:da:84:0a:67:43:a7:90:7e:cb:2e:ba:11:6f:
                    2a:10:d1:0c:13:24:ff:e6:11:17:1f:3f:44:83:98:
                    fc:e0:19:05:04:0c:4c:6d:78:37:c5:58:13:68:8c:
                    c6:32:c3:10:96:93:1b:ea:67:51:bf:69:e0:8f:ef:
                    4d:9e:15:4e:f3:25:11:d7:99:e3:5e:60:ae:02:cf:
                    07:59:e3:61:13:39:93:20:4f:a5:df:4a:fe:41:b3:
                    aa:eb:68:4f:e8:57:93:32:9c:2e:db:08:e3:14:a0:
                    d0:5c:6c:60:b6:8a:8d:08:50:73:7e:6f:9b:1f:51:
                    e8:7a:32:79:77:36:9d:84:de:3e:2c:9c:16:ad:62:
                    2e:56:19:9c:35:cb:08:0d:18:b5:4b:ef:f6:89:d7:
                    f1:11:5f:9f:99:16:86:b4:89:c0:7d:eb:2c:7b:43:
                    f5:a5:dc:76:6b:aa:ed:f5:07:a0:75:f4:06:9c:78:
                    2f:c4:64:e2:81:a5:98:84:81:0c:a1:30:7b:15:d4:
                    57:dc:da:ef:d1:88:8b:af:6b:ae:69:51:a7:98:ce:
                    e0:c5:4c:53:c8:a9:94:f3:84:06:fb:3d:cc:b3:5b:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:98:BA:8A:32:5C:C1:7A:55:14:9D:89:17:F1:93:42:AF:06:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl

            X509v3 Authority Key Identifier:
                keyid:6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.92.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1b:f7:c9:ed:62:01:38:ff:93:9d:33:79:7f:54:4b:0a:f9:
         8a:8a:14:98:dd:46:ee:af:ef:87:84:d7:df:f7:67:17:05:72:
         25:9f:1a:a3:d2:9e:2a:04:48:b9:3f:d8:70:a3:52:27:2e:13:
         a5:cb:54:8d:40:d8:f5:01:7a:30:d4:6b:a2:c1:9f:5e:88:91:
         4d:91:ae:fc:ac:91:a9:ee:71:52:7c:ee:03:31:ab:7a:f1:5d:
         e9:00:06:32:dc:4a:a9:05:f6:96:df:a3:3f:d6:ec:07:0f:c6:
         50:b4:d8:ca:2b:a6:a6:db:33:cb:d9:c6:b8:9a:c6:e3:54:ba:
         1f:05:18:73:e7:15:92:3c:b6:f7:9d:6b:87:30:f6:20:70:21:
         49:7b:81:c3:a8:3b:15:81:95:62:bd:0d:9f:64:fb:ac:82:6f:
         f4:4e:e6:60:36:9f:82:b4:63:76:6e:10:0c:5f:3c:16:cd:8d:
         15:b8:9b:ed:1d:d4:6e:0f:ff:50:4c:88:81:b8:2e:69:7f:1c:
         58:e8:84:b8:61:b8:45:9b:54:3a:32:5f:3c:af:43:d6:b9:e1:
         92:98:15:c1:50:af:19:cc:7c:25:5d:37:f5:94:c1:5f:4b:dc:
         ee:fc:02:18:d6:1d:64:eb:07:ef:9b:a1:37:9d:48:0b:6e:c0:
         4c:4b:8c:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfGjYUMfN6b9+B4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmNkYzc0MzQtZTFjZC00ZGVlLWIwZmEtMWQ3MDk3MzA2
YjljMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
MjczMTFmYjEtZTMxYy00YjJmLWFmZDktYzlhZTk2MDc2NzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXpK4nvcP7DZbFLVNsnZe2h8sq1mvR10SuF0
QjM/AtqECmdDp5B+yy66EW8qENEMEyT/5hEXHz9Eg5j84BkFBAxMbXg3xVgTaIzG
MsMQlpMb6mdRv2ngj+9NnhVO8yUR15njXmCuAs8HWeNhEzmTIE+l30r+QbOq62hP
6FeTMpwu2wjjFKDQXGxgtoqNCFBzfm+bH1HoejJ5dzadhN4+LJwWrWIuVhmcNcsI
DRi1S+/2idfxEV+fmRaGtInAfesse0P1pdx2a6rt9QegdfQGnHgvxGTigaWYhIEM
oTB7FdRX3Nrv0YiLr2uuaVGnmM7gxUxTyKmU84QG+z3Ms1tWOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAakmLqKMlzBelUUnYkX8ZNCrwZeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Rj
NzQzNC1lMWNkLTRkZWUtYjBmYS0xZDcwOTczMDZiOWMvOTBkNmUzZTgtODk3Ni0z
YTExLTg5YWItN2RjOThmMzUzMWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNkYzc0MzQtZTFjZC00ZGVlLWIw
ZmEtMWQ3MDk3MzA2YjljLzJjZGM3NDM0LWUxY2QtNGRlZS1iMGZhLTFkNzA5NzMw
NmI5Yy5jcmwwHwYDVR0jBBgwFoAUb8qZKCmONhWahLmpDXaMB0Dx904wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2RjNzQzNC1lMWNkLTRkZWUtYjBmYS0xZDcw
OTczMDZiOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1zTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgb98ntYgE4/5OdM3l/VEsK+YqKFJjdRu6v74eE19/3ZxcFciWfGqPS
nioESLk/2HCjUicuE6XLVI1A2PUBejDUa6LBn16IkU2RrvyskanucVJ87gMxq3rx
XekABjLcSqkF9pbfoz/W7AcPxlC02MorpqbbM8vZxriaxuNUuh8FGHPnFZI8tved
a4cw9iBwIUl7gcOoOxWBlWK9DZ9k+6yCb/RO5mA2n4K0Y3ZuEAxfPBbNjRW4m+0d
1G4P/1BMiIG4Lml/HFjohLhhuEWbVDoyXzyvQ9a54ZKYFcFQrxnMfCVdN/WUwV9L
3O78AhjWHWTrB++boTedSAtuwExLjLY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:43:37 2025 by rpki-client