Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/685cac4a-415d-3ec6-af42-26b9656bff5b.roa
File:                     685cac4a-415d-3ec6-af42-26b9656bff5b.roa (raw, json)
Hash identifier:          oYxyYS1fSsVyqTe71cvvfQcE+RbiW/qdG4wLr7GLUwU=
Subject key identifier:   F4:E7:1B:3E:20:E2:3D:9C:AA:E2:A3:D7:75:D5:B4:A3:BF:3A:FA:8C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A4A8D98E56B91B1AA1FBAFB90
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/685cac4a-415d-3ec6-af42-26b9656bff5b.roa
Signing time:             Mon 23 Jun 2025 22:35:53 +0000
ROA not before:           Mon 23 Jun 2025 22:35:53 +0000
ROA not after:            Sun 21 Sep 2025 22:35:53 +0000
asID:                     22863
IP address blocks:        159.18.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:8d:98:e5:6b:91:b1:aa:1f:ba:fb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 22:35:53 2025 GMT
            Not After : Sep 21 22:35:53 2025 GMT
        Subject: CN=0edaa96c-e96f-4b53-b75e-6840ca759181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:86:dd:5f:f5:54:71:c1:c4:d0:dd:95:cf:66:
                    62:96:41:aa:a7:e9:c7:5e:6d:29:1a:3a:94:93:17:
                    bc:52:8d:61:72:76:9d:16:3f:53:65:73:23:d0:d2:
                    d6:a9:71:ad:b3:9b:37:fe:8a:cf:0a:04:f4:f7:e8:
                    8b:08:55:7e:1c:f7:c0:9b:4f:49:13:8d:ef:ae:d8:
                    01:0a:88:d0:af:cc:e2:f4:34:75:76:2e:29:e3:8a:
                    d1:58:74:0f:f2:8e:29:70:08:73:d1:34:7f:08:a9:
                    46:27:41:95:a5:83:b4:f9:9d:ca:bb:38:e1:6d:0a:
                    b6:2e:1a:af:4e:e4:36:b0:10:11:6c:05:11:4e:72:
                    b0:e0:73:14:20:9c:e7:f8:2c:5f:a8:88:f8:f2:86:
                    d8:9a:df:50:28:7a:9b:77:73:fd:41:6d:10:f8:77:
                    38:ed:ad:99:b3:3d:9e:4f:19:4c:97:b2:fa:8c:ac:
                    c1:60:c4:29:95:a3:e8:20:73:96:84:5d:e0:83:06:
                    01:eb:6e:14:4a:7a:14:5a:fd:05:30:69:56:af:9b:
                    a0:84:83:7c:c9:f9:a8:c6:d9:af:b1:97:2b:51:3d:
                    23:85:ff:c5:dc:90:35:c0:f0:ba:8e:c3:dd:23:a1:
                    8e:52:08:79:ff:ba:7b:0b:ab:86:0f:17:bf:71:81:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E7:1B:3E:20:E2:3D:9C:AA:E2:A3:D7:75:D5:B4:A3:BF:3A:FA:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/685cac4a-415d-3ec6-af42-26b9656bff5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:d0:88:6b:72:6c:6d:42:d0:12:56:33:69:49:32:fb:79:
         e1:15:dc:76:80:78:f5:1b:1e:96:1b:7c:63:93:4f:98:17:13:
         a5:6e:9a:ee:8d:f6:db:a3:0c:ac:9d:a8:51:60:dc:17:02:0f:
         73:bd:ab:f3:2c:1e:0a:0e:03:8b:07:5b:c2:38:55:c4:93:4d:
         32:2f:87:dc:92:fe:54:2c:03:c4:64:55:2c:a0:38:83:bf:bd:
         97:a1:64:de:dd:77:ac:02:00:f2:8c:26:b1:ee:fd:42:8a:f5:
         f3:92:bc:30:47:97:28:35:66:b6:4c:d7:cc:ad:36:84:a1:04:
         55:09:89:b0:bd:97:28:3a:e2:ff:d7:29:da:e1:d1:61:20:e4:
         fa:2a:41:c9:dc:2c:30:5c:9a:2d:7c:39:8f:14:29:0a:51:fc:
         86:c4:0c:82:cb:56:02:13:40:55:2b:ea:e2:8c:dc:c2:64:34:
         7e:98:dd:73:ff:53:46:65:fa:c5:a6:3d:6a:1d:98:a3:85:f3:
         95:cf:8c:e2:ea:47:98:9d:5b:ee:18:55:13:e8:4a:da:01:da:
         02:17:1c:ab:07:d1:76:08:8c:f9:f8:3b:84:38:53:cf:a4:7c:
         1b:e3:db:95:ce:c7:3b:90:6f:cd:fc:b8:c7:29:bd:a4:c3:23:
         04:d9:8e:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKjZjla5Gxqh+6+5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDYyMzIyMzU1M1oXDTI1MDkyMTIyMzU1M1owLzEtMCsGA1UEAxMk
MGVkYWE5NmMtZTk2Zi00YjUzLWI3NWUtNjg0MGNhNzU5MTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIbdX/VUccHE0N2Vz2ZilkGqp+nHXm0pGjqU
kxe8Uo1hcnadFj9TZXMj0NLWqXGts5s3/orPCgT09+iLCFV+HPfAm09JE43vrtgB
CojQr8zi9DR1di4p44rRWHQP8o4pcAhz0TR/CKlGJ0GVpYO0+Z3KuzjhbQq2Lhqv
TuQ2sBARbAURTnKw4HMUIJzn+CxfqIj48obYmt9QKHqbd3P9QW0Q+Hc47a2Zsz2e
TxlMl7L6jKzBYMQplaPoIHOWhF3ggwYB624USnoUWv0FMGlWr5ughIN8yfmoxtmv
sZcrUT0jhf/F3JA1wPC6jsPdI6GOUgh5/7p7C6uGDxe/cYHtvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPTnGz4g4j2cquKj13XVtKO/OvqMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNjg1Y2FjNGEtNDE1ZC0z
ZWM2LWFmNDItMjZiOTY1NmJmZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnxIVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0H0IhrcmxtQtASVjNpSTL7eeEV3HaAePUbHpYbfGOTT5gXE6Vumu6N
9tujDKydqFFg3BcCD3O9q/MsHgoOA4sHW8I4VcSTTTIvh9yS/lQsA8RkVSygOIO/
vZehZN7dd6wCAPKMJrHu/UKK9fOSvDBHlyg1ZrZM18ytNoShBFUJibC9lyg64v/X
Kdrh0WEg5PoqQcncLDBcmi18OY8UKQpR/IbEDILLVgITQFUr6uKM3MJkNH6Y3XP/
U0Zl+sWmPWodmKOF85XPjOLqR5idW+4YVRPoStoB2gIXHKsH0XYIjPn4O4Q4U8+k
fBvj25XOxzuQb838uMcpvaTDIwTZjis=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:47:57 2025 by rpki-client