Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a086db20-cecc-3588-b15a-42b6851f1b47.roa
File:                     a086db20-cecc-3588-b15a-42b6851f1b47.roa (raw, json)
Hash identifier:          wOuJdU5N4cJrl4hhthPJaVkF5qfMDYBLf8dOEKwtrd8=
Subject key identifier:   57:EC:05:45:BE:32:BD:DA:DC:33:FB:57:18:58:F2:EA:36:75:DA:D7
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710F6E7FCA47504F6D145B0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a086db20-cecc-3588-b15a-42b6851f1b47.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     17025
IP address blocks:        209.133.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f6:e7:fc:a4:75:04:f6:d1:45:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=81137b58-90ce-41c2-ae2f-9cfed88cc31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6d:fc:a8:63:52:23:87:10:52:ef:68:61:db:
                    e8:82:3f:b1:a3:5d:a4:89:0f:68:f6:fe:54:79:5b:
                    9e:ed:0e:b1:ea:90:38:66:6c:63:dd:6b:c7:97:3a:
                    9c:03:c1:51:a1:c8:6e:85:28:28:4e:5f:c6:bf:15:
                    2e:e6:b9:f6:30:08:db:18:d3:ee:1c:61:f7:b8:96:
                    c2:79:64:f1:37:be:eb:da:48:5c:16:b6:88:ab:d3:
                    db:84:04:02:5a:75:0e:32:c7:a5:63:0e:64:56:ee:
                    27:f9:3c:33:a4:45:b4:4b:36:d3:b8:b2:b0:79:0f:
                    0a:6a:65:9a:98:6d:b2:82:5f:ac:b5:79:85:00:4b:
                    7d:b3:2b:13:db:ba:71:c5:cf:07:84:cb:23:58:01:
                    9d:2b:49:16:80:b9:18:36:2a:e7:5c:b3:9a:4d:36:
                    54:91:ad:5a:4b:a0:2d:e4:77:93:04:38:bb:9b:0b:
                    3c:96:a1:38:2a:f0:ee:b9:5d:fb:55:12:06:48:dc:
                    6f:e1:ab:ac:89:81:5d:d3:35:84:5a:66:2b:9f:b3:
                    5a:17:52:80:67:fa:b8:d5:7b:46:50:8c:3c:73:1a:
                    5b:32:6e:c2:cd:16:24:19:25:c8:7d:c7:11:6d:9c:
                    2f:ec:59:17:0a:ed:c4:c1:7a:6e:f9:d3:46:3f:d2:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EC:05:45:BE:32:BD:DA:DC:33:FB:57:18:58:F2:EA:36:75:DA:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a086db20-cecc-3588-b15a-42b6851f1b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.133.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:58:d9:7e:9c:ff:a1:a3:32:52:27:bf:3d:77:c3:4a:15:6a:
         d9:72:7c:2e:1e:d1:e6:db:ea:f9:f8:db:38:59:fd:82:20:4c:
         de:fc:f2:a0:63:9b:77:98:4b:dc:81:d7:1f:84:68:03:98:47:
         8b:07:a2:34:ed:59:23:bf:6c:40:3f:6a:b1:8a:98:83:b9:15:
         81:54:65:81:3e:3d:cc:20:36:3c:29:93:89:e6:6f:c5:bf:d5:
         7e:ae:e4:3c:c6:11:69:06:ca:10:67:bd:81:1c:df:90:c0:f4:
         64:11:9f:d4:75:f7:37:0d:f3:0d:2c:9f:26:1e:a8:97:ae:0f:
         95:da:cf:29:5c:5f:93:ba:9c:5d:d2:94:86:6a:83:02:ed:a0:
         c1:c0:75:05:db:93:d2:44:1a:5e:3e:fa:bb:83:37:b3:77:84:
         0d:3d:20:41:89:26:8c:3a:64:19:42:2a:4c:a3:d9:4a:0d:32:
         12:79:c9:41:c5:a3:f0:33:09:62:9c:0d:91:83:28:82:0f:fc:
         73:ed:84:6f:33:d9:76:09:12:6d:1f:0e:8d:a9:b2:77:54:25:
         f1:83:0f:24:5b:bb:b9:9a:03:06:9a:2b:0c:cc:9f:a6:31:c8:
         94:62:3c:0d:19:a6:f0:12:cc:ba:64:00:96:32:c8:c8:87:b5:
         33:40:e8:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEPbn/KR1BPbRRbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
ODExMzdiNTgtOTBjZS00MWMyLWFlMmYtOWNmZWQ4OGNjMzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2238qGNSI4cQUu9oYdvogj+xo12kiQ9o9v5U
eVue7Q6x6pA4Zmxj3WvHlzqcA8FRochuhSgoTl/GvxUu5rn2MAjbGNPuHGH3uJbC
eWTxN77r2khcFraIq9PbhAQCWnUOMselYw5kVu4n+TwzpEW0SzbTuLKweQ8KamWa
mG2ygl+stXmFAEt9sysT27pxxc8HhMsjWAGdK0kWgLkYNirnXLOaTTZUka1aS6At
5HeTBDi7mws8lqE4KvDuuV37VRIGSNxv4ausiYFd0zWEWmYrn7NaF1KAZ/q41XtG
UIw8cxpbMm7CzRYkGSXIfccRbZwv7FkXCu3EwXpu+dNGP9K6NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfsBUW+Mr3a3DP7VxhY8uo2ddrXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYTA4NmRiMjAtY2VjYy0z
NTg4LWIxNWEtNDJiNjg1MWYxYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YVkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMdY2X6c/6GjMlInvz13w0oVatlyfC4e0ebb6vn42zhZ/YIgTN788qBj
m3eYS9yB1x+EaAOYR4sHojTtWSO/bEA/arGKmIO5FYFUZYE+PcwgNjwpk4nmb8W/
1X6u5DzGEWkGyhBnvYEc35DA9GQRn9R19zcN8w0snyYeqJeuD5XazylcX5O6nF3S
lIZqgwLtoMHAdQXbk9JEGl4++ruDN7N3hA09IEGJJow6ZBlCKkyj2UoNMhJ5yUHF
o/AzCWKcDZGDKIIP/HPthG8z2XYJEm0fDo2psndUJfGDDyRbu7maAwaaKwzMn6Yx
yJRiPA0ZpvASzLpkAJYyyMiHtTNA6Lg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:02 2025 by rpki-client