Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1ae3bd2c-0ec0-35d7-a14f-8160821990fa.roa
File:                     1ae3bd2c-0ec0-35d7-a14f-8160821990fa.roa (raw, json)
Hash identifier:          3XbJn0WJXY7EAH8+9JombEg+giUPMlnDJ4nssbN+lK4=
Subject key identifier:   F4:A2:ED:A7:0D:D0:37:28:FF:77:FB:79:D8:90:65:47:F4:9A:6E:53
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584ADD66813A8D11290898297380
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1ae3bd2c-0ec0-35d7-a14f-8160821990fa.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     16503
IP address blocks:        216.178.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:81:3a:8d:11:29:08:98:29:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=67a76c0d-67dd-40f5-9a75-72a770fc81e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:06:46:98:54:ac:f8:cd:11:8a:75:3e:c8:
                    1d:19:8f:d3:2d:92:35:32:0d:57:aa:13:71:ab:91:
                    cd:3f:df:b2:07:90:35:af:82:34:f3:d3:d3:85:b5:
                    53:83:fa:e7:a1:2d:c3:af:5f:4a:68:5d:10:45:96:
                    57:a9:62:5a:15:86:b7:5f:2d:69:e9:60:eb:c6:f7:
                    c5:67:35:d3:15:38:b4:fc:0b:8a:38:61:30:f0:85:
                    78:b1:a3:bd:da:4f:db:96:b9:ae:fc:7b:dc:41:62:
                    39:8b:b2:75:db:59:de:37:38:ff:08:16:01:3d:b0:
                    73:74:98:c9:e3:da:eb:fa:73:68:ee:91:c2:79:64:
                    1f:75:cf:a9:c8:70:61:0f:ec:65:9b:8c:17:95:4e:
                    44:f9:d6:4b:c6:6e:b2:ae:f9:5c:d5:e0:e4:e1:62:
                    a2:b5:d9:45:b4:00:a1:c4:d2:ba:db:44:b8:c7:5b:
                    c2:b3:e6:c4:d7:a6:f6:ea:3d:99:ec:91:33:13:c5:
                    49:e0:87:55:66:13:2a:31:31:9a:a2:92:b4:8f:ea:
                    1b:9f:17:42:f5:f1:25:ac:ac:a3:86:35:54:ba:f6:
                    35:dc:31:7f:2f:72:a1:71:6f:ad:26:a5:db:28:60:
                    94:8e:52:de:91:cd:5a:3f:7e:60:35:3a:c4:63:1e:
                    43:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A2:ED:A7:0D:D0:37:28:FF:77:FB:79:D8:90:65:47:F4:9A:6E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1ae3bd2c-0ec0-35d7-a14f-8160821990fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.178.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:35:6b:47:9b:48:01:4c:af:4c:24:70:85:fe:06:a3:8e:01:
         de:da:77:87:44:17:e0:5b:91:6c:fc:e1:99:b9:39:66:20:6c:
         8f:2d:9b:cb:ae:2d:3e:cc:b2:38:87:5f:2e:11:47:9e:b6:bc:
         61:1b:b8:3c:34:03:2f:ea:26:ac:db:3e:3c:6c:8c:35:cc:31:
         e1:54:66:02:c5:f5:e9:b9:93:2d:32:cf:7a:e2:29:93:4c:80:
         61:05:4a:e7:4e:11:4b:33:7f:2f:2c:84:51:ad:6f:c7:7a:ae:
         51:e5:09:38:0a:c4:8b:0d:c9:b3:84:4b:19:c2:54:36:12:86:
         4c:ac:e8:6a:df:b3:f9:cf:55:fa:64:6d:1f:fa:d2:b0:68:76:
         ba:45:d4:77:5a:77:94:4f:5a:b8:88:f8:a6:57:fe:a9:d1:0b:
         c9:66:5d:41:84:fe:94:4f:e8:26:68:02:11:8f:06:bb:90:82:
         68:ae:e2:c2:64:41:c9:b1:17:b3:07:d4:4a:58:ae:3b:ca:36:
         63:55:c2:0d:c7:4a:a1:6e:60:73:2b:aa:33:be:2c:26:de:02:
         12:98:7b:aa:0c:c9:09:6e:da:e8:e9:8b:9a:ed:35:18:fa:1c:
         96:36:3d:fc:2b:2b:a8:82:5f:4e:10:f6:38:cb:ee:cb:47:06:
         b0:67:3f:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoE6jREpCJgpc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk
NjdhNzZjMGQtNjdkZC00MGY1LTlhNzUtNzJhNzcwZmM4MWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLgGRphUrPjNEYp1PsgdGY/TLZI1Mg1XqhNx
q5HNP9+yB5A1r4I089PThbVTg/rnoS3Dr19KaF0QRZZXqWJaFYa3Xy1p6WDrxvfF
ZzXTFTi0/AuKOGEw8IV4saO92k/blrmu/HvcQWI5i7J121neNzj/CBYBPbBzdJjJ
49rr+nNo7pHCeWQfdc+pyHBhD+xlm4wXlU5E+dZLxm6yrvlc1eDk4WKitdlFtACh
xNK620S4x1vCs+bE16b26j2Z7JEzE8VJ4IdVZhMqMTGaopK0j+obnxdC9fElrKyj
hjVUuvY13DF/L3KhcW+tJqXbKGCUjlLekc1aP35gNTrEYx5D/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPSi7acN0Dco/3f7ediQZUf0mm5TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMWFlM2JkMmMtMGVjMC0z
NWQ3LWExNGYtODE2MDgyMTk5MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABY1a0ebSAFMr0wkcIX+BqOOAd7ad4dEF+BbkWz84Zm5OWYgbI8tm8uu
LT7MsjiHXy4RR562vGEbuDw0Ay/qJqzbPjxsjDXMMeFUZgLF9em5ky0yz3riKZNM
gGEFSudOEUszfy8shFGtb8d6rlHlCTgKxIsNybOESxnCVDYShkys6Grfs/nPVfpk
bR/60rBodrpF1Hdad5RPWriI+KZX/qnRC8lmXUGE/pRP6CZoAhGPBruQgmiu4sJk
QcmxF7MH1EpYrjvKNmNVwg3HSqFuYHMrqjO+LCbeAhKYe6oMyQlu2ujpi5rtNRj6
HJY2PfwrK6iCX04Q9jjL7stHBrBnP90=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:14 2025 by rpki-client