Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c90b710-f1d3-32c4-9fb2-f39dc2c1b327.roa
File:                     8c90b710-f1d3-32c4-9fb2-f39dc2c1b327.roa (raw, json)
Hash identifier:          z6nOQXTlALYqkq86VLayixeAFK5SoIicH5sOLKrUNJ8=
Subject key identifier:   FC:4D:54:AE:FC:90:6E:BC:C2:6C:0F:4D:CC:D5:E8:58:C0:31:50:13
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD2C1F3EBBE006CB6BEF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c90b710-f1d3-32c4-9fb2-f39dc2c1b327.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:2c:1f:3e:bb:e0:06:cb:6b:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=70b52734-b0fc-45ac-90f9-94bd9b16c9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ad:71:0e:4f:2e:7a:00:df:82:ec:95:0d:00:
                    8c:4c:cc:f4:01:50:42:d1:f4:86:87:a2:c2:e5:00:
                    14:1d:3f:45:b9:d6:29:2a:0f:f3:cf:7b:33:ce:76:
                    a4:26:b5:e2:e9:a6:33:9d:1f:43:b5:b3:5e:73:40:
                    11:15:a5:31:97:a1:53:10:02:34:99:59:a8:75:15:
                    ee:33:9a:12:87:a7:a3:d6:aa:6b:c6:d8:a7:f1:b9:
                    aa:f7:f6:a9:41:ef:76:84:95:58:ad:5c:30:3f:86:
                    af:9a:4a:d2:a8:6a:eb:c3:f1:f0:2b:cb:11:34:95:
                    5b:68:cd:18:69:3c:04:6a:32:87:8d:ec:0e:a7:1e:
                    f8:ce:ed:1c:50:82:7a:d0:bc:94:e3:91:85:76:2d:
                    dd:f9:cd:c5:c7:e6:d5:af:8e:a0:b2:7b:ec:c4:06:
                    ea:78:a2:be:c3:e5:1a:7c:bd:88:53:4f:ec:b3:41:
                    19:7a:9d:7f:32:c4:82:12:ac:4f:dc:84:8a:a1:dd:
                    0a:7a:6f:30:d6:b1:52:21:b6:fe:5d:30:11:73:0e:
                    8c:7e:fd:d5:30:eb:c7:c6:09:5c:4e:12:45:0e:26:
                    05:c8:be:a2:ab:7e:c4:b6:b1:31:70:55:54:c7:6c:
                    82:c9:1d:ae:78:1d:2e:fb:dd:bf:97:95:a8:1e:42:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4D:54:AE:FC:90:6E:BC:C2:6C:0F:4D:CC:D5:E8:58:C0:31:50:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c90b710-f1d3-32c4-9fb2-f39dc2c1b327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:74:2a:ea:ce:6f:27:3c:c4:ad:df:e6:c0:47:62:23:67:6a:
         a6:d1:ab:47:54:4d:97:e7:03:50:3d:10:94:d7:d2:1f:e8:a5:
         20:17:82:22:18:ff:12:4f:af:47:69:49:f8:0c:66:d9:88:d8:
         c3:3d:21:49:ee:1b:ea:c2:46:c7:a5:5f:46:bc:c8:74:b6:48:
         9a:44:c3:e0:50:47:96:15:24:bd:a9:8d:64:1e:8c:ae:db:5f:
         27:f1:d0:be:01:18:7c:55:ba:0c:23:bb:ea:a3:01:3c:c6:45:
         be:bb:d6:a1:20:a0:c9:04:93:46:b9:47:75:74:56:00:af:c3:
         e8:ec:b3:43:c2:49:85:9a:58:4c:5d:d5:4c:f5:20:37:7c:3d:
         73:46:a4:94:ee:fb:ea:2c:bc:ac:51:d6:a3:3e:b2:3b:d5:7d:
         ef:9e:b7:e2:04:b8:f1:54:e7:8d:b5:3f:e3:1f:68:ba:31:86:
         76:29:6a:82:49:37:1d:08:55:3e:2f:93:cb:3d:53:86:68:7e:
         fc:b9:5e:ba:74:17:b6:f0:ac:dc:49:83:8d:6b:fc:91:47:81:
         42:ce:d3:7e:94:33:f6:a8:b1:db:62:e6:e5:c9:32:5f:7a:55:
         cb:cd:b8:f1:60:f4:db:45:e4:a2:27:55:29:3f:72:19:d0:94:
         2c:b5:6c:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSwfPrvgBstr7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NzBiNTI3MzQtYjBmYy00NWFjLTkwZjktOTRiZDliMTZjOWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga1xDk8uegDfguyVDQCMTMz0AVBC0fSGh6LC
5QAUHT9FudYpKg/zz3szznakJrXi6aYznR9DtbNec0ARFaUxl6FTEAI0mVmodRXu
M5oSh6ej1qprxtin8bmq9/apQe92hJVYrVwwP4avmkrSqGrrw/HwK8sRNJVbaM0Y
aTwEajKHjewOpx74zu0cUIJ60LyU45GFdi3d+c3Fx+bVr46gsnvsxAbqeKK+w+Ua
fL2IU0/ss0EZep1/MsSCEqxP3ISKod0Kem8w1rFSIbb+XTARcw6Mfv3VMOvHxglc
ThJFDiYFyL6iq37EtrExcFVUx2yCyR2ueB0u+92/l5WoHkKULQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxNVK78kG68wmwPTczV6FjAMVATMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGM5MGI3MTAtZjFkMy0z
MmM0LTlmYjItZjM5ZGMyYzFiMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBSlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMF0KurObyc8xK3f5sBHYiNnaqbRq0dUTZfnA1A9EJTX0h/opSAXgiIY
/xJPr0dpSfgMZtmI2MM9IUnuG+rCRselX0a8yHS2SJpEw+BQR5YVJL2pjWQejK7b
Xyfx0L4BGHxVugwju+qjATzGRb671qEgoMkEk0a5R3V0VgCvw+jss0PCSYWaWExd
1Uz1IDd8PXNGpJTu++osvKxR1qM+sjvVfe+et+IEuPFU5421P+MfaLoxhnYpaoJJ
Nx0IVT4vk8s9U4Zofvy5Xrp0F7bwrNxJg41r/JFHgULO036UM/aosdti5uXJMl96
VcvNuPFg9NtF5KInVSk/chnQlCy1bO4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:21:53 2025 by rpki-client