Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c5be566b-40eb-34c7-8037-9389199b4913.roa
File:                     c5be566b-40eb-34c7-8037-9389199b4913.roa (raw, json)
Hash identifier:          fPwvjV6fKXycQrq5BALKY+Y1FnUGaPyekMtR8ywRbMY=
Subject key identifier:   16:A4:AC:F8:0F:37:D0:69:90:3E:69:6C:68:37:91:A4:E5:73:A0:45
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849D85FA5ABC6C144C2EAF82BA0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c5be566b-40eb-34c7-8037-9389199b4913.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     11804
IP address blocks:        208.184.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a5:ab:c6:c1:44:c2:ea:f8:2b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=7977705e-e512-457f-8552-1363be8d3349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:75:48:fd:88:0b:ae:b6:5b:db:e5:9b:d4:
                    bf:d4:97:f5:5d:29:89:f7:17:7c:29:4f:bf:5a:07:
                    49:83:d5:03:cd:65:45:f2:58:41:4f:3d:10:db:29:
                    c7:68:90:37:b1:3b:5f:d9:9c:fe:47:2a:55:44:01:
                    1f:b9:a6:2c:73:10:2a:3a:fa:85:be:29:87:3d:e9:
                    2c:f6:b6:8c:e1:5a:95:6f:b2:6e:0b:0a:8f:f9:12:
                    34:95:84:86:bf:4e:2f:34:14:c0:06:89:dd:be:bf:
                    fc:b9:b8:63:09:6a:c8:09:f4:5a:98:b7:36:73:49:
                    20:72:14:ce:0e:80:17:19:5e:1a:c6:ae:ca:a7:11:
                    ad:d7:d8:a0:e0:04:f6:d5:c8:8d:af:2e:2e:9b:ff:
                    be:58:bc:7f:59:c1:f9:87:99:f5:a2:7d:07:9b:74:
                    94:05:e4:31:e1:aa:cf:7f:71:29:a7:11:75:ca:8e:
                    2b:79:de:67:d8:84:86:17:51:28:b4:d0:ba:ea:23:
                    65:c7:14:2b:98:c1:d7:36:42:e3:bc:17:4f:e6:e4:
                    1f:71:d8:28:79:a1:d3:fc:59:ba:b5:7f:9d:8a:64:
                    8c:66:d8:50:dd:75:91:95:2f:7d:1b:14:b5:4d:d1:
                    9a:66:5d:2e:89:51:6c:02:8d:fd:b1:fd:ad:d1:ba:
                    67:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A4:AC:F8:0F:37:D0:69:90:3E:69:6C:68:37:91:A4:E5:73:A0:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c5be566b-40eb-34c7-8037-9389199b4913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ae:6e:8b:a3:46:1f:6a:99:e6:87:04:58:fb:3d:90:fd:5d:
         e2:8e:8d:ba:71:28:24:4a:9b:35:17:8e:b4:2f:ae:08:f5:ff:
         02:b1:96:dd:00:09:8b:0c:0c:f2:0c:b6:41:18:0a:37:40:ea:
         58:b5:0b:88:74:c3:66:73:ef:4b:cf:82:89:d5:da:41:f4:90:
         39:eb:e5:6b:82:3d:67:d6:bf:23:7f:59:ea:f4:0e:87:f2:f8:
         99:54:cc:07:e7:5c:bc:c1:b0:a9:61:c0:3a:1a:4e:9a:f9:b5:
         99:22:f9:95:fd:bd:ff:b3:c5:71:43:8f:a5:b7:85:15:fd:34:
         32:15:52:0f:0a:aa:71:30:33:9e:2e:16:79:b3:a5:70:e7:6b:
         d1:3c:a1:aa:ee:f4:b8:5d:03:14:ee:05:1a:28:6e:52:36:c7:
         90:9d:eb:33:af:43:8d:f5:7d:71:5d:f5:c8:bc:18:80:82:94:
         21:65:bf:7e:9a:18:ca:3f:1a:6f:10:56:67:56:e3:8e:63:c7:
         62:84:70:9f:77:c1:fa:64:fd:36:16:2a:43:fe:26:03:c9:42:
         a0:a5:16:dd:ba:9e:8e:92:46:09:30:50:b6:95:d1:b0:50:0f:
         7d:6e:61:63:1e:2f:83:85:53:8e:c2:05:ca:4e:9e:66:be:65:
         65:17:c1:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6WrxsFEwur4K6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
Nzk3NzcwNWUtZTUxMi00NTdmLTg1NTItMTM2M2JlOGQzMzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJh1SP2IC662W9vlm9S/1Jf1XSmJ9xd8KU+/
WgdJg9UDzWVF8lhBTz0Q2ynHaJA3sTtf2Zz+RypVRAEfuaYscxAqOvqFvimHPeks
9raM4VqVb7JuCwqP+RI0lYSGv04vNBTABondvr/8ubhjCWrICfRamLc2c0kgchTO
DoAXGV4axq7KpxGt19ig4AT21ciNry4um/++WLx/WcH5h5n1on0Hm3SUBeQx4arP
f3EppxF1yo4red5n2ISGF1EotNC66iNlxxQrmMHXNkLjvBdP5uQfcdgoeaHT/Fm6
tX+dimSMZthQ3XWRlS99GxS1TdGaZl0uiVFsAo39sf2t0bpnwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBakrPgPN9BpkD5pbGg3kaTlc6BFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYzViZTU2NmItNDBlYi0z
NGM3LTgwMzctOTM4OTE5OWI0OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LhBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuuboujRh9qmeaHBFj7PZD9XeKOjbpxKCRKmzUXjrQvrgj1/wKxlt0A
CYsMDPIMtkEYCjdA6li1C4h0w2Zz70vPgonV2kH0kDnr5WuCPWfWvyN/Wer0Dofy
+JlUzAfnXLzBsKlhwDoaTpr5tZki+ZX9vf+zxXFDj6W3hRX9NDIVUg8KqnEwM54u
FnmzpXDna9E8oaru9LhdAxTuBRooblI2x5Cd6zOvQ431fXFd9ci8GICClCFlv36a
GMo/Gm8QVmdW445jx2KEcJ93wfpk/TYWKkP+JgPJQqClFt26no6SRgkwULaV0bBQ
D31uYWMeL4OFU47CBcpOnma+ZWUXwfs=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:48:24 2025 by rpki-client