Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8607bc85-1be6-37a0-a416-be42e04ef958.roa
File:                     8607bc85-1be6-37a0-a416-be42e04ef958.roa (raw, json)
Hash identifier:          6BGMdynul3D7GxjgV/7KIy4o+xz9Ra/36AxCY+ccFD0=
Subject key identifier:   2A:EA:EA:A0:6C:5A:D7:11:A5:40:D6:85:C4:C3:28:C2:17:C4:8D:46
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC2E100D88A95F4DC8F039840
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8607bc85-1be6-37a0-a416-be42e04ef958.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     6461
IP address blocks:        216.200.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:00:d8:8a:95:f4:dc:8f:03:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=1a66f672-d518-46cd-ac1f-dbb20f0eab9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:a0:30:13:af:06:a5:92:c7:e4:6f:fb:0b:
                    bf:dd:f5:6b:4d:b7:16:84:e1:f7:0e:8e:c5:23:07:
                    18:a4:2d:b3:50:21:62:28:24:58:d1:ba:97:bd:87:
                    45:ce:32:5b:f8:c1:5a:34:64:4e:5c:03:d2:86:f1:
                    34:74:20:2b:90:5b:02:d7:d0:45:69:e1:72:93:6b:
                    6f:3d:df:28:02:16:4c:00:2c:e8:a9:0f:b8:08:20:
                    f9:ac:f3:80:c0:91:41:d8:95:4a:9e:a3:25:27:a5:
                    80:d0:04:84:46:5a:2b:1b:d0:ec:2b:4a:85:83:8b:
                    35:08:1e:32:41:36:04:c7:ed:b5:36:0e:e7:11:51:
                    df:2f:95:40:05:8d:16:88:72:1d:d9:40:83:5e:ec:
                    70:ab:b8:09:49:2b:f3:41:26:2a:23:e7:29:9b:eb:
                    19:8a:05:93:f6:61:53:48:7e:4c:58:48:c8:d9:8c:
                    68:c0:41:7e:c6:8c:5b:d5:d4:7d:41:62:20:f6:9c:
                    77:79:33:d7:dd:f3:2a:da:34:ab:dd:c9:71:e9:80:
                    f5:7f:4e:88:7e:f6:28:dd:af:af:5d:56:cb:bc:fd:
                    0f:01:7c:c3:02:2a:b7:57:3a:f9:e5:b5:81:c1:46:
                    52:80:9c:37:91:b7:60:ec:04:cd:3e:40:55:5e:7d:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EA:EA:A0:6C:5A:D7:11:A5:40:D6:85:C4:C3:28:C2:17:C4:8D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8607bc85-1be6-37a0-a416-be42e04ef958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.200.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e0:78:58:7e:d0:f1:3b:e8:c8:72:92:d0:77:cb:7e:21:cb:
         a3:c3:7c:69:f7:ef:24:5b:5d:48:03:fb:86:29:6d:2c:0a:ec:
         a2:87:63:4e:fb:b4:da:42:c9:9d:ca:26:bc:0e:d6:e0:07:5b:
         50:25:30:b4:cf:e6:3b:5f:c6:05:4c:c4:52:b6:58:cf:3d:a1:
         a0:a3:42:5d:7a:8e:8f:25:e0:90:15:1f:f0:89:e5:17:8c:4b:
         d1:fd:4d:53:c4:c2:d5:b7:bf:c3:f4:82:12:de:fe:33:1c:89:
         44:a9:32:f3:5b:89:7f:1a:26:49:08:9e:0d:3e:dd:18:e1:5d:
         08:ea:49:fc:2d:67:c9:7b:4d:07:e2:7d:e6:7b:67:05:de:57:
         e3:8e:78:73:3f:e3:89:4c:ac:e7:83:ac:e0:2e:a8:4f:71:2e:
         d2:e1:fc:f8:60:a1:79:fb:e1:37:bd:2f:fc:33:c4:aa:69:58:
         eb:1c:4f:6d:e6:f4:65:eb:04:0f:0a:ce:3d:39:3f:6b:58:c8:
         db:8d:1f:7c:46:8e:de:5a:be:35:b9:51:ca:30:22:d7:61:b1:
         9e:0e:1d:61:66:19:ae:81:2d:42:24:ed:6f:70:f5:21:d1:ea:
         0d:13:dc:93:37:94:28:97:04:13:ca:b9:15:92:4b:33:30:3c:
         32:16:d6:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4QDYipX03I8DmEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
MWE2NmY2NzItZDUxOC00NmNkLWFjMWYtZGJiMjBmMGVhYjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIigMBOvBqWSx+Rv+wu/3fVrTbcWhOH3Do7F
IwcYpC2zUCFiKCRY0bqXvYdFzjJb+MFaNGROXAPShvE0dCArkFsC19BFaeFyk2tv
Pd8oAhZMACzoqQ+4CCD5rPOAwJFB2JVKnqMlJ6WA0ASERlorG9DsK0qFg4s1CB4y
QTYEx+21Ng7nEVHfL5VABY0WiHId2UCDXuxwq7gJSSvzQSYqI+cpm+sZigWT9mFT
SH5MWEjI2YxowEF+xoxb1dR9QWIg9px3eTPX3fMq2jSr3clx6YD1f06IfvYo3a+v
XVbLvP0PAXzDAiq3Vzr55bWBwUZSgJw3kbdg7ATNPkBVXn1BVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrq6qBsWtcRpUDWhcTDKMIXxI1GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvODYwN2JjODUtMWJlNi0z
N2EwLWE0MTYtYmU0MmUwNGVmOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2MjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIfgeFh+0PE76MhyktB3y34hy6PDfGn37yRbXUgD+4YpbSwK7KKHY077
tNpCyZ3KJrwO1uAHW1AlMLTP5jtfxgVMxFK2WM89oaCjQl16jo8l4JAVH/CJ5ReM
S9H9TVPEwtW3v8P0ghLe/jMciUSpMvNbiX8aJkkIng0+3RjhXQjqSfwtZ8l7TQfi
feZ7ZwXeV+OOeHM/44lMrOeDrOAuqE9xLtLh/PhgoXn74Te9L/wzxKppWOscT23m
9GXrBA8Kzj05P2tYyNuNH3xGjt5avjW5UcowItdhsZ4OHWFmGa6BLUIk7W9w9SHR
6g0T3JM3lCiXBBPKuRWSSzMwPDIW1iM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:25 2025 by rpki-client