Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa
File:                     238aa101-b943-3077-86c9-57b2750b798f.roa (raw, json)
Hash identifier:          5cqpgE450khbQbkK70QN2xJdfuUcmr1t9kV8bL8A+Xo=
Subject key identifier:   B1:5C:D4:D0:7E:B9:20:A7:A5:7D:92:A4:A5:04:1C:0A:E8:92:A7:3F
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D85FA7FDF3F29F80F232A580
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     63296
IP address blocks:        208.185.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a7:fd:f3:f2:9f:80:f2:32:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=3b39262a-c30c-4dbb-8168-2082488565c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:14:98:a0:a9:8e:e8:a6:57:75:21:8c:21:
                    27:30:50:42:82:5f:4a:53:40:26:7c:0a:35:96:5d:
                    2f:e2:2c:9e:a0:bf:3c:b6:68:7b:73:2e:7c:e0:82:
                    f3:20:30:a3:b9:7a:21:3d:24:c6:6d:5c:f0:9a:94:
                    f7:30:5b:8d:7f:e5:ed:e2:a0:b8:72:0b:e9:89:4a:
                    97:41:d7:49:89:ba:55:09:05:5a:a0:ce:77:05:1a:
                    76:05:09:db:39:d1:8e:38:7c:90:7f:ef:0b:ae:4b:
                    db:7d:3b:00:97:6b:ea:ad:54:46:27:26:47:d2:3d:
                    92:7c:49:18:8c:ec:37:34:06:94:59:02:b1:a6:01:
                    97:0f:fb:33:08:34:4b:b6:8c:53:62:8e:e2:41:81:
                    b5:ca:4d:bf:af:25:04:e4:d2:c3:4a:b3:0a:b7:4d:
                    11:2b:4a:63:4d:0d:a2:f7:f0:e1:2d:4f:be:14:78:
                    8a:6e:8f:6c:81:a6:2d:2e:f8:78:c9:6a:3d:cd:de:
                    bb:01:3b:b8:f7:a4:c7:70:4f:7f:53:d4:da:f0:df:
                    73:7f:24:73:ef:a3:5b:87:74:c9:de:9f:73:aa:1b:
                    35:7b:9d:95:4b:89:68:8b:0b:52:0d:88:e2:eb:55:
                    86:8f:b0:b8:eb:ce:21:50:0a:88:8f:70:99:58:12:
                    d5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5C:D4:D0:7E:B9:20:A7:A5:7D:92:A4:A5:04:1C:0A:E8:92:A7:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:83:eb:5b:07:81:f6:7b:8f:20:e0:30:f0:02:d5:ac:6c:26:
         85:ab:e5:36:1b:28:45:93:82:85:f6:80:a7:62:63:69:ba:ee:
         24:ad:3d:8d:b5:3d:8f:e7:3e:2b:b9:78:33:ae:f9:ff:c9:ce:
         4c:30:9b:db:47:3d:7e:d2:76:80:c5:83:07:14:98:70:94:8f:
         33:40:b0:6a:97:83:0b:b5:41:fb:a9:cb:db:2c:1c:1f:7e:79:
         b4:5a:6f:ac:ba:72:6d:e9:1d:2c:65:d5:0a:84:e3:1e:55:ea:
         09:24:70:b4:9a:ad:14:8a:72:d8:a6:7f:75:54:03:aa:24:70:
         96:bc:9e:97:b6:d9:38:9f:32:a0:bf:89:8b:1d:9e:03:34:c8:
         88:dd:d2:47:3e:11:18:af:90:7e:8b:4c:9a:7f:30:56:9a:a8:
         ab:0a:39:88:21:79:02:f9:70:99:3d:83:f4:13:ae:a2:61:84:
         d0:9d:97:f7:94:ea:2d:3a:6e:02:ed:4c:da:5a:fc:91:a2:6c:
         cf:6f:fd:bb:74:1a:6d:32:19:df:b1:98:98:da:72:aa:89:b4:
         20:dc:fa:b9:29:36:9d:79:e3:ae:d7:8e:d1:47:f5:21:88:35:
         d4:5d:99:fc:85:73:4f:91:e8:78:12:5e:ce:48:14:de:67:99:
         cb:6a:6d:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6f98/KfgPIypYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
M2IzOTI2MmEtYzMwYy00ZGJiLTgxNjgtMjA4MjQ4ODU2NWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie8UmKCpjuimV3UhjCEnMFBCgl9KU0AmfAo1
ll0v4iyeoL88tmh7cy584ILzIDCjuXohPSTGbVzwmpT3MFuNf+Xt4qC4cgvpiUqX
QddJibpVCQVaoM53BRp2BQnbOdGOOHyQf+8LrkvbfTsAl2vqrVRGJyZH0j2SfEkY
jOw3NAaUWQKxpgGXD/szCDRLtoxTYo7iQYG1yk2/ryUE5NLDSrMKt00RK0pjTQ2i
9/DhLU++FHiKbo9sgaYtLvh4yWo9zd67ATu496THcE9/U9Ta8N9zfyRz76Nbh3TJ
3p9zqhs1e52VS4loiwtSDYji61WGj7C4684hUAqIj3CZWBLVTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFc1NB+uSCnpX2SpKUEHArokqc/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMjM4YWExMDEtYjk0My0z
MDc3LTg2YzktNTdiMjc1MGI3OThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ll4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCD61sHgfZ7jyDgMPAC1axsJoWr5TYbKEWTgoX2gKdiY2m67iStPY21
PY/nPiu5eDOu+f/Jzkwwm9tHPX7SdoDFgwcUmHCUjzNAsGqXgwu1Qfupy9ssHB9+
ebRab6y6cm3pHSxl1QqE4x5V6gkkcLSarRSKctimf3VUA6okcJa8npe22TifMqC/
iYsdngM0yIjd0kc+ERivkH6LTJp/MFaaqKsKOYgheQL5cJk9g/QTrqJhhNCdl/eU
6i06bgLtTNpa/JGibM9v/bt0Gm0yGd+xmJjacqqJtCDc+rkpNp15467XjtFH9SGI
NdRdmfyFc0+R6HgSXs5IFN5nmctqbYQ=
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:58:50 2025 by rpki-client