Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa
File:                     cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa (raw, json)
Hash identifier:          vj9FhsAXv235ZN+94PnJcqpWqupB7cLr+gkrJxRzx7M=
Subject key identifier:   52:84:BA:74:E9:37:3F:3F:9C:4C:99:E4:E2:6A:A2:CE:67:3C:C8:B6
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AD9365408FA08882232FED800
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     22110
IP address blocks:        64.184.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:54:08:fa:08:88:22:32:fe:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=96022db9-bdf1-4f7c-9fba-c496abb7bb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:43:9b:ca:f8:85:a9:57:ef:8b:8c:19:d4:
                    ac:b0:8b:0b:db:27:0b:37:67:d0:56:dc:26:0a:75:
                    49:43:38:6e:e2:66:30:fe:24:99:6a:45:9d:b7:1b:
                    f9:e1:dc:9b:2e:01:47:c7:72:10:22:bb:dc:53:3c:
                    96:dc:1f:bc:c9:6a:be:a8:0c:e4:68:d2:64:86:1d:
                    2d:14:f1:fb:3e:69:88:3f:93:9f:e9:1a:4b:ce:7a:
                    ea:f1:29:5a:d4:ce:a6:c0:28:6d:a4:76:ba:70:da:
                    f9:2b:ca:93:e9:92:f1:db:1c:7d:cf:ae:7e:90:dd:
                    96:eb:81:77:0e:ad:79:75:c5:9e:cd:92:f0:e1:a3:
                    3f:50:e7:b3:81:3f:f6:8e:40:15:b8:ca:ab:55:7c:
                    b2:42:df:3a:55:9c:97:4a:09:14:48:2a:00:5f:e2:
                    f4:22:e7:9b:fa:df:a3:fe:14:88:ac:68:1c:f8:b9:
                    8b:53:70:9f:23:bf:2f:ff:6a:99:c5:83:b7:b7:8e:
                    f6:0d:a5:23:b6:f8:9b:e3:75:3a:ef:e0:6d:30:d0:
                    39:fa:57:2c:53:66:5b:a8:1a:b2:71:b3:b0:6d:be:
                    97:93:8e:8e:17:c4:71:48:22:9c:eb:9c:56:ed:30:
                    6e:fa:c6:3e:cf:2c:d0:4e:bc:00:5b:ad:6d:e1:49:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:84:BA:74:E9:37:3F:3F:9C:4C:99:E4:E2:6A:A2:CE:67:3C:C8:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d7:03:f9:79:08:94:34:46:2f:69:e3:fd:39:45:66:45:09:
         b8:38:e4:bf:22:71:ce:76:e8:60:14:e6:2e:80:b9:ec:03:3d:
         37:a8:16:b5:07:da:01:8b:3c:dc:7b:72:47:b6:70:aa:6b:a9:
         68:85:93:aa:06:4e:4b:00:70:58:bd:bb:78:fe:d8:c0:17:94:
         07:d3:d3:50:c0:0b:5c:fa:93:9d:73:1d:9f:0a:89:ce:dc:57:
         d5:7c:40:b3:b8:3a:29:9b:5b:c3:57:f7:09:e6:62:42:30:17:
         e9:87:2d:c8:10:9f:e1:e7:d1:31:8d:f7:4a:cb:39:97:8b:1c:
         89:8e:c8:bd:e7:57:39:05:5f:6f:39:1e:46:ff:d8:11:bb:9b:
         c2:88:07:c4:7c:dd:18:0a:56:02:6d:da:1d:05:e2:6c:85:3f:
         57:74:2b:1f:c1:16:a4:8d:84:7d:73:4d:18:ed:bd:fe:6d:ca:
         69:ff:84:b6:51:8b:44:87:e9:45:a5:83:12:46:9a:1b:a9:c5:
         11:02:2b:be:82:9e:ac:6c:5c:06:48:45:40:a8:eb:89:20:29:
         e8:6f:3a:7f:87:b1:8c:4b:03:fc:06:cd:e5:81:91:26:d9:1d:
         93:08:40:89:1b:93:84:23:03:8d:76:61:8f:55:73:cc:54:66:
         7a:ba:8b:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNlQI+giIIjL+2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk
OTYwMjJkYjktYmRmMS00ZjdjLTlmYmEtYzQ5NmFiYjdiYjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBFDm8r4halX74uMGdSssIsL2ycLN2fQVtwm
CnVJQzhu4mYw/iSZakWdtxv54dybLgFHx3IQIrvcUzyW3B+8yWq+qAzkaNJkhh0t
FPH7PmmIP5Of6RpLznrq8Sla1M6mwChtpHa6cNr5K8qT6ZLx2xx9z65+kN2W64F3
Dq15dcWezZLw4aM/UOezgT/2jkAVuMqrVXyyQt86VZyXSgkUSCoAX+L0Iueb+t+j
/hSIrGgc+LmLU3CfI78v/2qZxYO3t472DaUjtvib43U67+BtMNA5+lcsU2ZbqBqy
cbOwbb6Xk46OF8RxSCKc65xW7TBu+sY+zyzQTrwAW61t4UnBXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKEunTpNz8/nEyZ5OJqos5nPMi2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvY2JmOTRlNGMtYmY4NS0z
Y2ZlLTgxMTItZmEzNzJkZjFhZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHXA/l5CJQ0Ri9p4/05RWZFCbg45L8icc526GAU5i6AuewDPTeoFrUH
2gGLPNx7cke2cKprqWiFk6oGTksAcFi9u3j+2MAXlAfT01DAC1z6k51zHZ8Kic7c
V9V8QLO4OimbW8NX9wnmYkIwF+mHLcgQn+Hn0TGN90rLOZeLHImOyL3nVzkFX285
Hkb/2BG7m8KIB8R83RgKVgJt2h0F4myFP1d0Kx/BFqSNhH1zTRjtvf5tymn/hLZR
i0SH6UWlgxJGmhupxRECK76CnqxsXAZIRUCo64kgKehvOn+HsYxLA/wGzeWBkSbZ
HZMIQIkbk4QjA412YY9Vc8xUZnq6i7s=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:06 2025 by rpki-client