Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa
File:                     84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa (raw, json)
Hash identifier:          a7G2JXGBdRO/mYzW81JP/r+bSIK6lLfQVX6qNiz62GQ=
Subject key identifier:   88:3F:02:EB:07:10:21:BF:BF:9B:F9:55:A8:5D:8F:24:D8:E1:35:74
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584B80B767BEC46E2DE6098DEA20
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     22843
IP address blocks:        67.231.144.0/20 maxlen: 24
                          148.163.128.0/19 maxlen: 24
                          208.84.64.0/22 maxlen: 24
                          208.86.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:67:be:c4:6e:2d:e6:09:8d:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=f7a30248-a9c0-405d-8aa3-f93c64d0963d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a7:24:4d:6d:74:ff:cf:82:67:ad:8c:fb:20:
                    cf:bd:f9:64:99:6a:39:77:a6:b5:72:51:5b:c6:c7:
                    69:fd:34:0a:8f:ca:17:e2:9b:6d:b9:64:73:49:86:
                    18:fe:25:9f:dd:74:73:2a:e9:74:9f:d0:92:18:f7:
                    bf:01:21:a3:23:9c:5b:aa:72:92:12:7b:19:58:8f:
                    12:e0:a6:7f:64:9c:18:22:28:ea:9a:15:12:74:e4:
                    91:f7:a1:e3:e9:b0:ab:95:0e:fc:75:2c:c3:26:85:
                    f4:43:af:55:b7:de:99:d9:cd:b8:b2:12:85:7c:73:
                    28:3b:d9:74:43:34:2d:94:29:3e:07:70:ec:58:1a:
                    af:e0:6f:ae:85:d2:5c:5a:9b:b2:f2:fb:cd:a0:17:
                    03:85:44:0e:3d:f7:94:fa:28:26:3c:3c:d9:45:d2:
                    e0:cd:28:b3:c2:da:d3:b3:0f:af:9b:d1:a9:6b:6d:
                    38:cc:42:cc:4b:5a:3e:2b:b6:3e:57:79:34:1f:50:
                    0f:6c:25:ef:66:e8:8e:26:09:66:8d:0a:53:33:28:
                    d5:61:fc:44:46:7a:e8:22:1c:eb:6b:8d:2d:41:65:
                    27:b2:5f:c8:7b:55:a9:6e:6c:07:4b:3d:ea:ea:bb:
                    f6:c1:ae:bc:99:14:72:ef:70:b4:75:11:e0:85:43:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3F:02:EB:07:10:21:BF:BF:9B:F9:55:A8:5D:8F:24:D8:E1:35:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/84f6829d-da6a-36a2-9ed3-6db6c86a50f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.231.144.0/20
                  148.163.128.0/19
                  208.84.64.0/22
                  208.86.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ee:c2:ca:91:b3:55:0e:02:ac:6b:59:47:41:ab:d6:cf:33:
         1e:2f:dd:4c:1b:f1:05:65:f8:3f:4d:63:60:a4:41:f6:32:de:
         55:e1:d0:b7:d5:0f:25:83:97:2c:cd:9a:00:79:ac:35:9c:a2:
         fd:a2:59:02:7a:34:c0:22:7a:a6:ba:72:5c:2a:b8:42:04:95:
         55:37:1f:39:84:31:51:68:70:f6:b1:fe:48:f8:17:84:95:c4:
         af:38:7b:28:67:ab:ec:1d:73:0e:73:a7:f1:dd:06:cd:68:eb:
         9c:30:e6:58:52:31:3d:52:6a:74:ac:4d:3c:c1:72:66:e3:ac:
         07:12:56:d3:61:14:15:22:f1:f1:22:4b:1f:3e:63:f0:62:19:
         e0:4e:8e:54:ba:37:08:08:7d:50:14:36:89:d5:b3:f3:09:89:
         35:b9:44:2a:30:1c:80:9c:61:da:9c:5c:64:fd:5c:6b:78:a5:
         9a:60:0c:e8:1d:be:aa:23:aa:1b:2c:0f:51:ee:45:c8:37:91:
         46:8d:37:dd:2f:7f:68:da:b5:4d:55:35:8d:c9:ec:e1:ac:a6:
         07:c0:7e:3c:88:ab:68:9e:89:ab:48:ec:3d:cb:4d:2b:8f:41:
         ff:e9:a1:7b:1b:f8:0d:5d:18:a1:ea:85:db:07:3d:14:80:56:
         8f:70:c9:15
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEuAt2e+xG4t5gmN6iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
ZjdhMzAyNDgtYTljMC00MDVkLThhYTMtZjkzYzY0ZDA5NjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKckTW10/8+CZ62M+yDPvflkmWo5d6a1clFb
xsdp/TQKj8oX4pttuWRzSYYY/iWf3XRzKul0n9CSGPe/ASGjI5xbqnKSEnsZWI8S
4KZ/ZJwYIijqmhUSdOSR96Hj6bCrlQ78dSzDJoX0Q69Vt96Z2c24shKFfHMoO9l0
QzQtlCk+B3DsWBqv4G+uhdJcWpuy8vvNoBcDhUQOPfeU+igmPDzZRdLgzSizwtrT
sw+vm9Gpa204zELMS1o+K7Y+V3k0H1APbCXvZuiOJglmjQpTMyjVYfxERnroIhzr
a40tQWUnsl/Ie1WpbmwHSz3q6rv2wa68mRRy73C0dRHghUP3ewIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFIg/AusHECG/v5v5VahdjyTY4TV0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvODRmNjgyOWQtZGE2YS0z
NmEyLTllZDMtNmRiNmM4NmE1MGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEQ+eQAwQF
lKOAAwQC0FRAAwQC0FbIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEjuwsqRs1UOAqxrWUdBq9bPMx4v3Uwb
8QVl+D9NY2CkQfYy3lXh0LfVDyWDlyzNmgB5rDWcov2iWQJ6NMAieqa6clwquEIE
lVU3HzmEMVFocPax/kj4F4SVxK84eyhnq+wdcw5zp/HdBs1o65ww5lhSMT1SanSs
TTzBcmbjrAcSVtNhFBUi8fEiSx8+Y/BiGeBOjlS6NwgIfVAUNonVs/MJiTW5RCow
HICcYdqcXGT9XGt4pZpgDOgdvqojqhssD1HuRcg3kUaNN90vf2jatU1VNY3J7OGs
pgfAfjyIq2ieiatI7D3LTSuPQf/poXsb+A1dGKHqhdsHPRSAVo9wyRU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:43 2025 by rpki-client