Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/98afa4d9-9004-31e9-aa10-d87fa81744a3.roa
File:                     98afa4d9-9004-31e9-aa10-d87fa81744a3.roa (raw, json)
Hash identifier:          uQ+OUhfOhv01fN8QhTCCqycoRnIC+XEFxiWm83JZAkw=
Subject key identifier:   26:83:87:09:3A:BE:1C:09:B2:F1:32:86:4E:90:F0:99:84:DA:78:08
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AE5C67C2EE13BD51A34104B80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/98afa4d9-9004-31e9-aa10-d87fa81744a3.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     131833
IP address blocks:        64.124.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:7c:2e:e1:3b:d5:1a:34:10:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=edf26b23-510c-43f2-8647-d92c4427b665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:23:6d:2e:68:68:0f:8b:2a:95:24:ee:ce:0c:
                    99:d4:ea:34:7b:90:10:3a:d6:9f:bc:1e:af:77:68:
                    5f:7d:54:ba:5a:d1:90:37:ea:e5:7b:0d:49:e2:97:
                    09:d1:7e:61:b7:07:83:6e:49:9b:36:17:4a:1d:c2:
                    2b:56:93:76:20:c6:e7:e0:d8:50:d0:94:98:1f:b1:
                    7d:c7:79:3c:bf:e2:5d:ef:f9:92:30:bb:f8:57:fd:
                    04:85:ad:20:bf:f4:9e:04:22:26:d1:dd:6d:9d:68:
                    5a:93:35:95:bb:f7:bf:b2:85:88:cd:a4:f5:5a:ab:
                    17:82:f0:34:db:93:b0:32:6e:03:fb:05:97:49:85:
                    d3:d3:75:9a:99:cb:4e:09:4e:82:e0:68:96:94:72:
                    0c:4c:70:19:e2:4e:5b:99:7c:34:e0:ca:d2:80:25:
                    d0:fc:cb:4d:c0:13:1c:50:85:b4:3f:4a:b3:97:c0:
                    03:55:25:e2:43:12:4b:ff:60:5a:3e:3b:d9:11:fc:
                    cd:a8:fe:89:b3:ed:24:e1:44:1b:c4:d8:ae:d7:49:
                    20:36:ae:75:76:9d:d8:70:9a:62:75:23:5c:ac:5d:
                    64:24:e5:5d:b2:eb:09:06:18:4e:f1:39:26:16:ce:
                    8d:7d:0e:6b:23:81:a4:ba:72:d4:fb:11:ec:81:16:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:83:87:09:3A:BE:1C:09:B2:F1:32:86:4E:90:F0:99:84:DA:78:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/98afa4d9-9004-31e9-aa10-d87fa81744a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f8:b7:75:55:ea:59:56:0e:ef:6e:31:a7:9f:13:b6:13:ba:
         0c:85:7d:3c:f1:1e:18:de:1f:f1:9e:d8:50:a7:09:a6:b6:c6:
         f8:de:4b:be:0e:bb:45:36:81:81:62:4f:87:6d:6b:a4:7a:1a:
         b5:5f:e5:ae:19:2a:e0:ce:92:75:3f:cb:2e:bf:f3:aa:73:2e:
         65:d4:07:81:b2:61:dc:75:1b:bf:15:33:4b:73:f4:65:93:76:
         14:19:7c:6f:27:fd:a1:f4:1d:83:f8:64:5e:0e:d4:4f:f5:0c:
         c9:d2:e8:ee:54:5b:85:c1:dd:48:db:85:35:2a:95:9b:e3:3c:
         f2:35:5e:03:a3:01:98:78:a8:1f:ae:7d:06:d6:3f:a6:04:45:
         93:55:4b:b7:df:a5:b4:47:dd:95:e9:2e:86:5c:4b:13:39:39:
         07:bf:c3:72:53:b0:a7:ed:3f:67:bd:72:14:c7:81:62:cf:51:
         dd:1c:79:e2:ef:84:82:98:90:d7:91:f1:87:c6:b6:f0:e1:9b:
         91:91:c9:06:5a:f3:52:52:5a:fe:0b:77:81:03:9b:87:6d:09:
         80:0e:b4:71:80:ae:50:14:01:c5:24:7a:bd:46:18:68:5b:a7:
         9e:1f:09:36:77:19:d7:40:35:7e:a2:31:5b:d1:86:90:96:e7:
         16:d7:28:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnwu4TvVGjQQS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZWRmMjZiMjMtNTEwYy00M2YyLTg2NDctZDkyYzQ0MjdiNjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CNtLmhoD4sqlSTuzgyZ1Oo0e5AQOtafvB6v
d2hffVS6WtGQN+rlew1J4pcJ0X5htweDbkmbNhdKHcIrVpN2IMbn4NhQ0JSYH7F9
x3k8v+Jd7/mSMLv4V/0Eha0gv/SeBCIm0d1tnWhakzWVu/e/soWIzaT1WqsXgvA0
25OwMm4D+wWXSYXT03WamctOCU6C4GiWlHIMTHAZ4k5bmXw04MrSgCXQ/MtNwBMc
UIW0P0qzl8ADVSXiQxJL/2BaPjvZEfzNqP6Js+0k4UQbxNiu10kgNq51dp3YcJpi
dSNcrF1kJOVdsusJBhhO8TkmFs6NfQ5rI4GkunLU+xHsgRYTsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCaDhwk6vhwJsvEyhk6Q8JmE2ngIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOThhZmE0ZDktOTAwNC0z
MWU5LWFhMTAtZDg3ZmE4MTc0NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABD4t3VV6llWDu9uMaefE7YTugyFfTzxHhjeH/Ge2FCnCaa2xvjeS74O
u0U2gYFiT4dta6R6GrVf5a4ZKuDOknU/yy6/86pzLmXUB4GyYdx1G78VM0tz9GWT
dhQZfG8n/aH0HYP4ZF4O1E/1DMnS6O5UW4XB3UjbhTUqlZvjPPI1XgOjAZh4qB+u
fQbWP6YERZNVS7ffpbRH3ZXpLoZcSxM5OQe/w3JTsKftP2e9chTHgWLPUd0ceeLv
hIKYkNeR8YfGtvDhm5GRyQZa81JSWv4Ld4EDm4dtCYAOtHGArlAUAcUker1GGGhb
p54fCTZ3GddANX6iMVvRhpCW5xbXKMI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:19 2025 by rpki-client