Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/2ae97fa8-6695-31fa-adbc-b60a670834d8.roa
File:                     2ae97fa8-6695-31fa-adbc-b60a670834d8.roa (raw, json)
Hash identifier:          RmVbRZdaUdlfdFGo4brXt3ZH3V4bXWynsnJFRdyQb4k=
Subject key identifier:   3B:AE:E6:82:D1:CC:05:4D:27:E5:77:72:E6:9A:BC:1B:DD:90:E7:96
Certificate issuer:       /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial:       010D0C9F4328584AE5C674720B64A16B58B4A780
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/2ae97fa8-6695-31fa-adbc-b60a670834d8.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     19318
IP address blocks:        162.245.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:74:72:0b:64:a1:6b:58:b4:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=baec5e01-d39b-4972-8776-9cb8cb493416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:eb:e3:06:9b:b0:c1:28:9a:66:f2:13:f0:d2:
                    85:4a:e1:61:15:d2:b2:f1:16:a2:a4:36:8c:09:f9:
                    1b:0c:40:cc:e0:60:2a:c7:17:a7:3b:b3:32:b1:d8:
                    19:1a:0d:a6:6e:86:5e:4f:5a:b5:1b:b8:ca:a6:a4:
                    da:f5:67:12:99:7a:94:6c:08:40:05:70:ce:58:ef:
                    b3:d4:f8:c6:69:16:f9:0f:29:e4:32:ee:ee:42:7f:
                    fc:2e:80:f9:12:89:0a:a5:5c:38:af:fc:83:dc:78:
                    78:51:77:ef:04:ba:d4:01:dc:eb:c3:2d:99:ea:bd:
                    cc:05:fe:4b:22:c9:84:7c:b2:c1:56:1d:4f:d9:60:
                    dd:ad:b5:40:6a:7f:9a:47:4b:28:59:ec:5e:87:97:
                    3e:d3:8f:9b:d7:b0:3d:a8:f7:5f:dc:01:ca:a9:89:
                    15:1f:bf:f6:3e:e2:7a:0d:58:78:de:c1:fa:22:a1:
                    e0:d6:e8:d1:20:57:7c:13:e3:b9:4c:83:1e:ae:57:
                    8f:63:c1:0a:63:81:ad:f4:7e:e7:bc:54:dd:a5:dc:
                    04:b5:ee:46:7e:a3:c5:bc:6c:0a:11:a8:89:c5:50:
                    ba:18:82:72:47:94:95:7d:33:49:2a:4d:6c:f4:5b:
                    01:8d:5e:38:27:45:2e:b8:26:e9:ad:e5:52:59:69:
                    00:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AE:E6:82:D1:CC:05:4D:27:E5:77:72:E6:9A:BC:1B:DD:90:E7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/2ae97fa8-6695-31fa-adbc-b60a670834d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl

            X509v3 Authority Key Identifier:
                keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:cc:ae:3f:c7:3f:d2:12:ee:95:43:72:5c:06:5e:41:dd:86:
         9c:02:62:6d:b2:cd:be:11:21:09:0b:97:8b:7a:d3:6f:df:43:
         5c:6d:4a:f5:d0:00:37:3b:8b:12:db:40:de:3b:5a:24:0e:4a:
         85:f2:27:83:6f:71:86:31:2b:09:81:d5:04:6a:02:3f:1b:1c:
         77:9a:48:b2:bf:37:f3:2a:da:db:23:50:ca:fb:b7:c9:57:21:
         40:b9:ca:aa:6b:96:57:18:1e:d6:ec:02:c3:e7:05:d0:5b:10:
         91:5e:08:56:77:e1:7a:cc:ac:2a:95:b8:9c:84:37:d8:8d:19:
         c1:67:5e:f3:dd:90:f0:53:58:cc:c1:97:37:ce:a0:54:b2:73:
         59:b6:5b:37:74:17:5d:86:d6:6c:d9:dd:d2:2d:92:f3:8b:49:
         73:40:c5:77:6f:d4:88:cd:27:4d:28:8d:fc:f8:2c:d9:81:f4:
         da:c9:bd:1e:02:06:ad:77:01:7d:e7:e3:fb:43:fa:9f:cd:15:
         5e:b4:19:a8:fc:aa:0c:3e:01:e6:59:0b:8f:68:0b:19:1e:4c:
         4c:d5:1d:c3:9b:10:62:97:1d:ff:7d:73:0f:fb:68:e7:c9:83:
         eb:b0:3a:85:4e:78:1c:a9:df:a3:cf:ca:12:62:71:31:e2:c1:
         51:46:3d:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnRyC2Sha1i0p4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2
NTlhMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk
YmFlYzVlMDEtZDM5Yi00OTcyLTg3NzYtOWNiOGNiNDkzNDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuvjBpuwwSiaZvIT8NKFSuFhFdKy8RaipDaM
CfkbDEDM4GAqxxenO7MysdgZGg2mboZeT1q1G7jKpqTa9WcSmXqUbAhABXDOWO+z
1PjGaRb5DynkMu7uQn/8LoD5EokKpVw4r/yD3Hh4UXfvBLrUAdzrwy2Z6r3MBf5L
IsmEfLLBVh1P2WDdrbVAan+aR0soWexeh5c+04+b17A9qPdf3AHKqYkVH7/2PuJ6
DVh43sH6IqHg1ujRIFd8E+O5TIMerlePY8EKY4Gt9H7nvFTdpdwEte5GfqPFvGwK
EaiJxVC6GIJyR5SVfTNJKk1s9FsBjV44J0UuuCbpreVSWWkAOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDuu5oLRzAVNJ+V3cuaavBvdkOeWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3
Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvMmFlOTdmYTgtNjY5NS0z
MWZhLWFkYmMtYjYwYTY3MDgzNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw
YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz
NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi
M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovW5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3Mrj/HP9IS7pVDclwGXkHdhpwCYm2yzb4RIQkLl4t602/fQ1xtSvXQ
ADc7ixLbQN47WiQOSoXyJ4NvcYYxKwmB1QRqAj8bHHeaSLK/N/Mq2tsjUMr7t8lX
IUC5yqprllcYHtbsAsPnBdBbEJFeCFZ34XrMrCqVuJyEN9iNGcFnXvPdkPBTWMzB
lzfOoFSyc1m2Wzd0F12G1mzZ3dItkvOLSXNAxXdv1IjNJ00ojfz4LNmB9NrJvR4C
Bq13AX3n4/tD+p/NFV60Gaj8qgw+AeZZC49oCxkeTEzVHcObEGKXHf99cw/7aOfJ
g+uwOoVOeByp36PPyhJicTHiwVFGPfQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:04:56 2025 by rpki-client