Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2b7bc67b-c259-3ac6-80c8-3ae415e93ee0.roa
File:                     2b7bc67b-c259-3ac6-80c8-3ae415e93ee0.roa (raw, json)
Hash identifier:          5wXZrjUYBFiDm4XDRcW3bNt2bXj5/gMHywzz1AeqCgw=
Subject key identifier:   33:6E:6E:B6:4B:11:C3:A8:79:1D:99:71:C0:3B:54:22:24:DE:94:2D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A49AA503C6881420E010FD000
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2b7bc67b-c259-3ac6-80c8-3ae415e93ee0.roa
Signing time:             Mon 23 Jun 2025 14:57:56 +0000
ROA not before:           Mon 23 Jun 2025 14:57:56 +0000
ROA not after:            Sun 21 Sep 2025 14:57:56 +0000
asID:                     15290
IP address blocks:        184.94.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:aa:50:3c:68:81:42:0e:01:0f:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 14:57:56 2025 GMT
            Not After : Sep 21 14:57:56 2025 GMT
        Subject: CN=2cc85983-edde-4f94-8177-0dd02b4833d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:1f:9d:22:ef:b3:39:8a:f9:92:e8:5c:11:
                    f5:78:f6:12:f3:7f:4a:6a:8e:19:66:75:82:b8:6d:
                    b9:27:09:e9:a9:71:4d:8c:c6:c5:13:20:ae:8c:58:
                    ec:c3:1b:e5:e9:63:0c:cf:ba:da:a4:14:8b:8b:91:
                    7f:4b:32:c6:6d:59:11:1e:57:d7:17:4c:d8:9f:4a:
                    6c:96:0b:d3:2b:53:71:2c:13:45:f4:f7:7e:38:27:
                    03:77:ea:07:da:50:26:a2:45:d1:ed:a4:a7:5f:48:
                    ab:b2:17:40:01:a2:df:0e:b6:76:89:47:22:c8:3d:
                    85:8e:32:66:39:56:73:d3:01:2f:16:7e:c4:f6:b8:
                    9d:e7:2b:e4:41:8c:fd:f5:d5:41:54:73:d8:f3:84:
                    cf:b7:32:dc:5c:14:2c:ae:68:f5:5b:55:ea:1e:62:
                    57:99:df:ce:29:41:62:4e:67:74:cf:8c:22:d0:08:
                    5d:26:3b:6c:35:18:7c:55:ec:d0:87:af:3a:08:e7:
                    f0:f1:08:da:23:ef:42:41:87:36:da:05:a9:7a:c5:
                    b5:e2:1e:66:e5:7a:3c:d2:b6:e4:16:53:98:e0:f2:
                    89:26:fa:9d:7a:c5:57:ca:45:03:27:21:f1:6e:c0:
                    76:fa:17:ad:0b:47:0d:c2:fb:3e:d8:58:41:e1:6c:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:6E:B6:4B:11:C3:A8:79:1D:99:71:C0:3B:54:22:24:DE:94:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2b7bc67b-c259-3ac6-80c8-3ae415e93ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:5c:b2:9c:e4:d4:69:0b:4c:02:29:68:fc:1b:c7:da:6b:82:
         12:65:3f:2f:08:a9:fd:11:c7:9e:d3:16:af:a7:3e:e7:c4:52:
         dc:b3:17:e8:86:a5:f3:c2:2d:aa:78:92:b3:4d:b5:31:e8:62:
         05:d8:c5:ac:6a:94:02:21:42:f5:5b:76:e2:b5:70:bf:70:f2:
         52:fd:7c:be:08:b3:71:d4:f0:ed:cb:17:fb:35:00:af:f1:a7:
         4a:47:ab:0a:9f:08:3b:f5:39:d6:8a:77:9a:11:d0:c8:3d:85:
         b6:90:6f:d9:34:ce:8a:23:ed:bb:6f:c3:6d:52:63:99:7b:09:
         56:ad:ac:0f:4a:17:e2:cd:48:e4:bd:db:ba:e5:a7:6b:e4:7c:
         c7:ef:82:92:10:84:1a:b9:a7:b7:7d:24:73:fd:d8:83:f2:7c:
         78:e3:6e:d1:50:e4:6a:b2:4f:75:00:04:c2:8d:50:fc:03:4e:
         7a:cd:da:01:ca:85:8f:be:0b:52:9e:50:30:32:6e:a0:a9:63:
         5a:be:b4:80:53:9e:34:79:4b:2f:62:76:38:c7:e4:b1:1b:ce:
         fb:3c:94:8f:d7:9c:27:e6:a5:05:f7:50:f2:b6:99:e5:8a:2a:
         a1:d8:cf:b9:be:da:0b:25:21:cd:6b:23:f5:72:5b:56:71:2d:
         57:ae:17:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJqlA8aIFCDgEP0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDYyMzE0NTc1NloXDTI1MDkyMTE0NTc1NlowLzEtMCsGA1UEAxMk
MmNjODU5ODMtZWRkZS00Zjk0LTgxNzctMGRkMDJiNDgzM2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFMfnSLvszmK+ZLoXBH1ePYS839Kao4ZZnWC
uG25JwnpqXFNjMbFEyCujFjswxvl6WMMz7rapBSLi5F/SzLGbVkRHlfXF0zYn0ps
lgvTK1NxLBNF9Pd+OCcDd+oH2lAmokXR7aSnX0irshdAAaLfDrZ2iUciyD2FjjJm
OVZz0wEvFn7E9rid5yvkQYz99dVBVHPY84TPtzLcXBQsrmj1W1XqHmJXmd/OKUFi
Tmd0z4wi0AhdJjtsNRh8VezQh686COfw8QjaI+9CQYc22gWpesW14h5m5Xo80rbk
FlOY4PKJJvqdesVXykUDJyHxbsB2+hetC0cNwvs+2FhB4Wwz1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNubrZLEcOoeR2ZccA7VCIk3pQtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMmI3YmM2N2ItYzI1OS0z
YWM2LTgwYzgtM2FlNDE1ZTkzZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuF4kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtcspzk1GkLTAIpaPwbx9prghJlPy8Iqf0Rx57TFq+nPufEUtyzF+iG
pfPCLap4krNNtTHoYgXYxaxqlAIhQvVbduK1cL9w8lL9fL4Is3HU8O3LF/s1AK/x
p0pHqwqfCDv1OdaKd5oR0Mg9hbaQb9k0zooj7btvw21SY5l7CVatrA9KF+LNSOS9
27rlp2vkfMfvgpIQhBq5p7d9JHP92IPyfHjjbtFQ5GqyT3UABMKNUPwDTnrN2gHK
hY++C1KeUDAybqCpY1q+tIBTnjR5Sy9idjjH5LEbzvs8lI/XnCfmpQX3UPK2meWK
KqHYz7m+2gslIc1rI/VyW1ZxLVeuF0U=
-----END CERTIFICATE-----
Generated at Sun Jun 29 18:31:04 2025 by rpki-client