Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa
File:                     f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa (raw, json)
Hash identifier:          ySXvjQXVY8GMqKIb3ipy2LY54lpThCdMoBOn0FNpXpY=
Subject key identifier:   01:22:45:9B:3F:D3:8B:DC:69:43:ED:EE:1D:5A:48:BD:2F:CB:83:BF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710F919A27F455B89F46A80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     29833
IP address blocks:        209.249.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f9:19:a2:7f:45:5b:89:f4:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=efaab8ae-53e4-4a2e-b287-d59afb1c69f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3f:6f:4f:e7:01:bd:56:34:98:1f:e4:24:57:
                    c4:e2:fb:cc:98:59:c2:b4:37:22:27:f7:4a:e6:a5:
                    52:98:b2:0d:cf:fe:dd:d3:7e:c5:6c:6c:06:65:c6:
                    01:ea:8c:4f:41:44:cd:8d:1d:2f:95:9d:60:23:f2:
                    0b:1a:11:3a:eb:a2:73:d1:1e:22:1c:dd:e8:1e:8b:
                    80:ff:5b:dd:9b:37:a8:0d:53:f6:33:5e:4b:e5:80:
                    88:2d:42:a7:6c:d8:91:b8:17:2c:41:d9:48:a6:b4:
                    f3:05:5b:cb:0f:14:57:0a:70:c4:75:04:91:25:78:
                    d3:1a:3c:7d:0e:c2:30:45:bf:2a:7c:eb:2c:1b:6c:
                    10:95:62:cf:d5:48:f0:8a:c4:d2:fc:bb:62:40:42:
                    59:a1:06:e0:97:19:d4:ed:e6:c1:8b:fa:57:71:6d:
                    e9:57:3e:57:59:39:d8:b5:7f:a1:55:0c:6f:03:d3:
                    66:ac:40:35:6a:39:cc:04:79:64:5d:01:0a:48:9d:
                    cc:e1:2a:dd:f8:0f:ce:9a:58:56:d3:91:62:d2:21:
                    5b:e9:07:08:3e:d4:09:5c:06:81:40:b7:0d:6a:71:
                    7e:19:74:c4:2c:bf:13:d5:a0:5a:f0:d5:59:d6:22:
                    db:16:63:c2:9d:c3:d2:23:46:20:c7:f9:71:40:67:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:22:45:9B:3F:D3:8B:DC:69:43:ED:EE:1D:5A:48:BD:2F:CB:83:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f320d7b2-0cd0-3949-9ba9-93f4207360ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:39:07:10:ae:9a:d8:60:89:c0:17:a4:04:c4:5f:29:3c:df:
         6e:0c:3a:82:83:8d:e6:d4:66:4a:72:88:23:f6:4c:e4:d2:cc:
         c2:01:83:9a:25:d3:35:2a:e3:aa:86:8e:33:1f:a7:7e:05:46:
         ef:d4:d4:9e:ce:bd:f9:c9:53:1d:cb:b4:1e:02:38:cd:00:c5:
         f9:d8:15:17:74:fd:fa:2a:9e:14:9c:b4:e1:91:c9:7a:38:25:
         4c:03:3b:34:7d:f5:b6:60:f2:23:a7:c7:9c:87:d4:c5:5f:4c:
         37:15:a4:a9:52:22:eb:ae:79:9e:29:05:2f:b4:59:75:31:67:
         e0:7a:33:70:1c:a1:1f:a9:38:0e:d7:11:d4:93:3f:17:1d:df:
         27:dd:fb:66:70:4b:6c:2b:eb:6f:78:1f:d1:34:92:89:6a:6a:
         15:47:01:23:2a:4d:54:fe:12:b8:52:23:35:eb:54:7d:b9:c6:
         c8:cd:5c:0d:48:76:9d:d9:9a:12:e0:eb:c6:91:25:81:07:49:
         d2:c4:fa:30:86:a7:1e:1b:53:33:c8:43:00:94:64:65:e1:f4:
         22:b2:42:75:2b:14:03:b6:91:47:db:96:2d:1b:03:4f:bd:4a:
         a8:05:c4:cb:c8:0f:1a:33:1e:af:9d:78:c9:85:23:77:ef:34:
         da:3f:16:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEPkZon9FW4n0aoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
ZWZhYWI4YWUtNTNlNC00YTJlLWIyODctZDU5YWZiMWM2OWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz9vT+cBvVY0mB/kJFfE4vvMmFnCtDciJ/dK
5qVSmLINz/7d037FbGwGZcYB6oxPQUTNjR0vlZ1gI/ILGhE666Jz0R4iHN3oHouA
/1vdmzeoDVP2M15L5YCILUKnbNiRuBcsQdlIprTzBVvLDxRXCnDEdQSRJXjTGjx9
DsIwRb8qfOssG2wQlWLP1UjwisTS/LtiQEJZoQbglxnU7ebBi/pXcW3pVz5XWTnY
tX+hVQxvA9NmrEA1ajnMBHlkXQEKSJ3M4Srd+A/OmlhW05Fi0iFb6QcIPtQJXAaB
QLcNanF+GXTELL8T1aBa8NVZ1iLbFmPCncPSI0Ygx/lxQGfOpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAEiRZs/04vcaUPt7h1aSL0vy4O/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZjMyMGQ3YjItMGNkMC0z
OTQ5LTliYTktOTNmNDIwNzM2MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fmuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACI5BxCumthgicAXpATEXyk8324MOoKDjebUZkpyiCP2TOTSzMIBg5ol
0zUq46qGjjMfp34FRu/U1J7OvfnJUx3LtB4COM0AxfnYFRd0/foqnhSctOGRyXo4
JUwDOzR99bZg8iOnx5yH1MVfTDcVpKlSIuuueZ4pBS+0WXUxZ+B6M3AcoR+pOA7X
EdSTPxcd3yfd+2ZwS2wr6294H9E0kolqahVHASMqTVT+ErhSIzXrVH25xsjNXA1I
dp3ZmhLg68aRJYEHSdLE+jCGpx4bUzPIQwCUZGXh9CKyQnUrFAO2kUfbli0bA0+9
SqgFxMvIDxozHq+deMmFI3fvNNo/FqQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:49 2025 by rpki-client