Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/134e0c9e-8d70-34cd-8437-81300f87d508.roa
File:                     134e0c9e-8d70-34cd-8437-81300f87d508.roa (raw, json)
Hash identifier:          uRJ8FumiAc30g+TrJyyMbVohlNl/vzd3ZhauL/XwdTc=
Subject key identifier:   0E:B7:97:23:C3:34:99:50:85:D7:24:CD:D5:93:96:51:1A:F8:EF:83
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584B8D4779682908CD9AFB546E80
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/134e0c9e-8d70-34cd-8437-81300f87d508.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     36549
IP address blocks:        63.167.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:79:68:29:08:cd:9a:fb:54:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=b7b06afb-d973-494d-8747-0a136ee409d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bd:39:3a:1e:66:59:3b:73:2d:0a:af:67:26:
                    38:66:5e:e6:ac:35:d0:cf:8a:1c:d4:5d:d1:1a:e5:
                    2f:4c:a1:01:b5:48:d7:3e:b6:0b:0d:07:6d:ff:42:
                    52:2e:dc:52:2f:75:b7:a1:b5:3b:5a:ba:ae:b1:f8:
                    99:c1:47:04:1b:03:b2:f1:bc:8e:96:02:a9:92:84:
                    5e:8c:8a:cb:2b:26:c6:fc:99:99:a3:81:72:0f:6a:
                    bf:53:40:d7:c6:e6:5d:3e:6f:9d:d2:07:4f:16:ae:
                    4b:39:5b:a9:bc:12:00:8d:95:ab:6b:a9:96:25:cb:
                    4a:f7:93:40:dc:55:d7:90:a2:be:d4:2d:62:15:ed:
                    ba:dc:93:00:7e:47:77:4e:4f:19:53:4f:9f:cd:fc:
                    fe:ae:35:24:43:df:22:90:6b:cd:6c:85:2c:b0:4a:
                    73:35:c1:cc:8d:1c:50:72:75:34:94:c6:fb:20:73:
                    a9:b2:3c:97:6c:6f:bf:d8:76:6b:fc:57:5d:15:79:
                    dc:90:37:80:86:9e:fa:c0:1a:3e:5f:c3:43:96:ef:
                    40:46:21:8c:c3:5e:bc:18:cd:ce:d0:4a:55:6d:0e:
                    a6:68:2b:12:2a:4c:75:50:3d:d6:3d:f7:89:6d:ec:
                    bf:33:de:c0:37:ea:46:64:e2:e5:a2:86:f9:89:55:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B7:97:23:C3:34:99:50:85:D7:24:CD:D5:93:96:51:1A:F8:EF:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/134e0c9e-8d70-34cd-8437-81300f87d508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.167.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b0:22:63:54:2f:dc:bc:01:b3:eb:9f:a8:3a:3e:c7:c1:bb:
         71:ee:2d:62:e1:6f:a8:6c:88:bb:13:51:1d:1c:63:b5:7e:cb:
         cc:2c:50:c7:9f:fe:4c:9e:dd:65:c8:16:2d:16:82:6d:8b:c7:
         db:42:86:11:da:e0:cc:c0:00:19:77:f9:21:16:82:51:69:f6:
         45:7e:2c:eb:3d:e5:10:f6:9e:6a:9a:6e:3c:3a:6f:1f:14:68:
         4b:5a:4f:5a:78:96:05:91:96:e7:b3:89:e5:02:8a:12:00:f2:
         ce:78:94:5f:71:cb:68:b7:d7:82:a7:ac:10:c4:aa:11:fc:11:
         96:2e:70:45:8a:5f:7d:66:65:e1:5b:74:3f:a7:9d:38:1a:5b:
         f1:99:60:60:3c:e7:d1:36:d5:1f:d4:02:28:fd:be:1b:00:21:
         ed:7b:ce:36:98:bd:10:c1:5a:11:d4:cf:14:d0:0a:2a:8c:38:
         4a:80:fb:88:20:1d:df:25:c0:9f:ce:c1:8f:c9:fa:12:4b:34:
         2a:7d:d2:0f:36:0e:84:46:86:c4:4c:49:fb:7b:1d:e4:cd:8a:
         dd:70:fa:d7:9f:40:39:59:9c:69:f4:f9:a1:ec:21:ae:e1:d1:
         f4:c5:8c:5c:39:09:a2:42:75:cd:30:a7:73:aa:33:de:b7:47:
         28:a5:1b:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR3loKQjNmvtUboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk
YjdiMDZhZmItZDk3My00OTRkLTg3NDctMGExMzZlZTQwOWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2705Oh5mWTtzLQqvZyY4Zl7mrDXQz4oc1F3R
GuUvTKEBtUjXPrYLDQdt/0JSLtxSL3W3obU7WrqusfiZwUcEGwOy8byOlgKpkoRe
jIrLKybG/JmZo4FyD2q/U0DXxuZdPm+d0gdPFq5LOVupvBIAjZWra6mWJctK95NA
3FXXkKK+1C1iFe263JMAfkd3Tk8ZU0+fzfz+rjUkQ98ikGvNbIUssEpzNcHMjRxQ
cnU0lMb7IHOpsjyXbG+/2HZr/FddFXnckDeAhp76wBo+X8NDlu9ARiGMw168GM3O
0EpVbQ6maCsSKkx1UD3WPfeJbey/M97AN+pGZOLloob5iVVgFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA63lyPDNJlQhdckzdWTllEa+O+DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvMTM0ZTBjOWUtOGQ3MC0z
NGNkLTg0MzctODEzMDBmODdkNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP6fQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGwImNUL9y8AbPrn6g6PsfBu3HuLWLhb6hsiLsTUR0cY7V+y8wsUMef
/kye3WXIFi0Wgm2Lx9tChhHa4MzAABl3+SEWglFp9kV+LOs95RD2nmqabjw6bx8U
aEtaT1p4lgWRluezieUCihIA8s54lF9xy2i314KnrBDEqhH8EZYucEWKX31mZeFb
dD+nnTgaW/GZYGA859E21R/UAij9vhsAIe17zjaYvRDBWhHUzxTQCiqMOEqA+4gg
Hd8lwJ/OwY/J+hJLNCp90g82DoRGhsRMSft7HeTNit1w+tefQDlZnGn0+aHsIa7h
0fTFjFw5CaJCdc0wp3OqM963RyilG74=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:19 2025 by rpki-client