Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/90502ebb-db85-39d3-959a-2d15ce91810f.roa
File:                     90502ebb-db85-39d3-959a-2d15ce91810f.roa (raw, json)
Hash identifier:          rXRuTK0o1uIusUYGz6HyP23f7KY3JISmA2Ibi6bBr/A=
Subject key identifier:   77:5A:99:FB:42:5B:E8:08:76:72:92:AB:E6:97:9E:3B:3A:45:53:7B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AD9365B620E5D845ED4758200
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/90502ebb-db85-39d3-959a-2d15ce91810f.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     30419
IP address blocks:        216.200.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:5b:62:0e:5d:84:5e:d4:75:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=0e44dc6a-3881-4d33-bfd5-c40dfbe2ccc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6f:31:63:58:aa:51:22:70:1b:18:20:f6:39:
                    96:32:bb:9f:7c:85:cf:9d:88:c3:d9:cf:95:d8:1f:
                    58:5a:db:e7:2a:7f:26:c4:18:d3:24:be:69:49:fc:
                    fe:e7:b7:4d:ea:10:36:2c:82:e3:f0:0e:4f:d5:e4:
                    ea:19:40:87:04:0e:20:12:1f:5c:1d:e0:dd:a9:d4:
                    4f:ae:ca:de:05:7f:6b:62:d5:72:6d:db:d0:5f:a9:
                    fd:c9:a9:79:fc:a2:cc:28:61:36:fe:9d:1a:31:24:
                    0c:49:f9:c3:a7:25:87:79:82:5c:5b:89:c4:18:02:
                    d6:37:d0:9a:58:d0:d7:ef:e6:16:01:66:0b:41:05:
                    56:eb:a2:70:81:72:1e:e2:3a:dd:6c:cd:e4:ab:50:
                    18:5c:45:c8:34:2f:6f:b0:a7:ff:33:6c:bb:95:d5:
                    bb:fb:1a:d9:67:58:c7:d5:67:72:08:66:c5:e0:8a:
                    42:94:d6:89:f5:4d:06:cf:47:24:03:fa:40:f8:da:
                    2a:ff:28:1a:71:ce:dd:73:79:43:c5:83:e8:87:fe:
                    df:05:6a:fa:a1:d1:d1:6c:8d:1a:dd:7c:be:41:9d:
                    22:da:5f:17:b9:7b:5d:06:78:ae:02:2e:7b:85:6c:
                    60:53:45:e2:fd:bf:8d:83:67:4f:8a:9c:a9:3d:d7:
                    30:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5A:99:FB:42:5B:E8:08:76:72:92:AB:E6:97:9E:3B:3A:45:53:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/90502ebb-db85-39d3-959a-2d15ce91810f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.200.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:1b:de:68:c6:4a:27:1b:fd:11:f7:bb:50:17:8f:c5:96:9e:
         c6:ff:25:d1:62:77:65:44:12:f2:20:4a:2f:c7:e0:5c:a5:d3:
         0b:ee:68:2d:88:db:3b:79:fc:af:73:84:a0:8c:8a:6f:e1:22:
         03:9d:f3:d3:d8:f4:1c:7a:ef:ac:54:7e:16:93:86:29:ad:88:
         d4:d0:15:49:3d:0f:c5:61:30:b4:53:d3:39:d6:16:89:31:56:
         89:dd:c2:d3:ad:85:93:67:a5:86:9c:d5:07:bc:51:0c:51:50:
         2a:7c:7e:13:d6:58:27:3c:f7:ac:ed:59:3a:b6:7c:c4:b6:70:
         54:64:92:a9:57:27:93:27:fc:d4:cd:4f:d6:4f:f8:ca:aa:4f:
         ef:4c:e5:f2:12:c4:c9:10:b5:04:61:a4:15:48:42:d8:1a:cf:
         62:8c:7f:73:89:38:f9:10:bc:62:69:76:51:64:53:17:bd:89:
         d1:a3:6d:18:c5:80:b0:a5:40:de:96:64:82:1f:af:ca:ea:f6:
         f9:75:e4:d7:7a:e0:b7:c6:38:58:21:0b:af:a8:02:1d:4e:de:
         37:62:86:c5:0a:af:8f:53:d9:6f:fa:ac:5f:3c:71:fd:e2:aa:
         c9:f7:62:db:30:00:82:72:ea:73:14:e3:e6:1b:e0:72:e7:1b:
         27:84:3d:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNltiDl2EXtR1ggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk
MGU0NGRjNmEtMzg4MS00ZDMzLWJmZDUtYzQwZGZiZTJjY2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi28xY1iqUSJwGxgg9jmWMruffIXPnYjD2c+V
2B9YWtvnKn8mxBjTJL5pSfz+57dN6hA2LILj8A5P1eTqGUCHBA4gEh9cHeDdqdRP
rsreBX9rYtVybdvQX6n9yal5/KLMKGE2/p0aMSQMSfnDpyWHeYJcW4nEGALWN9Ca
WNDX7+YWAWYLQQVW66JwgXIe4jrdbM3kq1AYXEXINC9vsKf/M2y7ldW7+xrZZ1jH
1WdyCGbF4IpClNaJ9U0Gz0ckA/pA+Noq/ygacc7dc3lDxYPoh/7fBWr6odHRbI0a
3Xy+QZ0i2l8XuXtdBniuAi57hWxgU0Xi/b+Ng2dPipypPdcwDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdamftCW+gIdnKSq+aXnjs6RVN7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOTA1MDJlYmItZGI4NS0z
OWQzLTk1OWEtMmQxNWNlOTE4MTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MjoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQb3mjGSicb/RH3u1AXj8WWnsb/JdFid2VEEvIgSi/H4Fyl0wvuaC2I
2zt5/K9zhKCMim/hIgOd89PY9Bx676xUfhaThimtiNTQFUk9D8VhMLRT0znWFokx
VondwtOthZNnpYac1Qe8UQxRUCp8fhPWWCc896ztWTq2fMS2cFRkkqlXJ5Mn/NTN
T9ZP+MqqT+9M5fISxMkQtQRhpBVIQtgaz2KMf3OJOPkQvGJpdlFkUxe9idGjbRjF
gLClQN6WZIIfr8rq9vl15Nd64LfGOFghC6+oAh1O3jdihsUKr49T2W/6rF88cf3i
qsn3YtswAIJy6nMU4+Yb4HLnGyeEPYM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:50 2025 by rpki-client