Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa
File:                     8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa (raw, json)
Hash identifier:          gRBVeLJoUQ+pV3AOZn9aLqYVOFfq7CRnCoyPEPx+C6c=
Subject key identifier:   C6:D9:26:17:12:D3:AE:78:59:C1:C3:94:3A:11:5E:D1:33:C6:94:BE
Certificate issuer:       /CN=8637a780-1944-4d75-b623-0c10c96f56eb
Certificate serial:       010D0C9F4328584AD7D11D905E4D4ADE67048600
Authority key identifier: 97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     401133
IP address blocks:        168.100.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:1d:90:5e:4d:4a:de:67:04:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8637a780-1944-4d75-b623-0c10c96f56eb
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=60edc16b-8181-408b-ae0b-9c81aaee5ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:08:8c:05:e2:ba:7c:cb:31:0c:9a:99:c2:3c:
                    8c:ac:1a:45:09:6e:42:b1:cc:a6:5b:da:2e:91:c6:
                    fc:f5:4a:85:96:29:ee:9e:0c:c8:bd:30:74:50:2d:
                    36:4e:a3:f9:20:c3:a1:1b:54:16:4b:6c:98:f4:6d:
                    f0:82:65:e1:c9:91:80:ff:d4:a0:97:c7:02:3f:a7:
                    60:de:b5:08:0c:0b:3d:27:4b:e6:27:d9:69:d9:d2:
                    f9:b4:d2:64:84:cf:65:89:c3:fa:59:a4:3d:77:a1:
                    72:54:8c:73:2e:bf:20:62:d2:aa:c4:c3:be:ed:d4:
                    89:b4:2c:85:e1:92:55:17:82:78:aa:7e:18:bd:55:
                    d0:f7:74:3c:55:33:79:45:54:2f:de:f5:91:a5:3c:
                    37:0b:9d:17:32:06:bc:69:9c:99:a6:cf:ec:57:08:
                    ef:f7:a2:19:52:63:58:9d:c7:7c:04:3f:f0:17:91:
                    8b:a5:5f:bd:1f:52:cf:d8:50:e8:06:65:0f:a2:c8:
                    f8:39:1b:b6:47:4b:51:2c:dc:1f:78:47:cd:fb:dd:
                    21:f5:e0:70:db:73:3c:d3:da:f8:50:f0:e2:1c:79:
                    c7:1f:50:4a:78:f9:26:46:19:5c:59:cf:6a:d3:a0:
                    a1:3e:a9:a8:93:37:bd:cd:e4:f8:be:b8:6a:cd:3b:
                    60:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D9:26:17:12:D3:AE:78:59:C1:C3:94:3A:11:5E:D1:33:C6:94:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl

            X509v3 Authority Key Identifier:
                keyid:97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:00:b8:70:26:2f:21:11:40:89:99:91:55:38:14:0a:a7:ff:
         78:fa:f7:60:e4:63:5b:42:dd:86:85:70:c2:a0:37:51:81:2f:
         6d:a1:7e:6d:7e:4c:a6:36:c6:ec:94:f9:ae:85:30:ae:20:12:
         99:72:d9:57:dc:9a:f3:a2:b3:22:c4:6c:a3:05:c8:ce:fa:5c:
         e2:0d:7a:c0:77:c3:61:84:3c:8d:66:40:1a:d0:9f:34:e3:3b:
         14:b0:f5:7c:14:f7:c3:4d:7c:83:dd:9d:a6:24:19:91:be:45:
         fe:a4:31:5d:46:f2:58:89:3c:4f:1b:26:f8:72:bb:59:e7:e5:
         97:1d:3f:4f:8a:fe:54:39:5a:4b:12:ba:71:2e:bf:dc:68:1b:
         53:d9:c6:41:24:20:29:fb:ab:92:48:fe:19:38:7d:33:e2:38:
         04:28:f3:82:bf:7a:b0:b1:d6:d6:e2:bf:01:04:56:0a:ab:35:
         09:8e:9e:b1:32:3e:b7:16:7a:24:1b:44:14:f7:8a:33:fe:83:
         51:b3:7a:6a:23:cd:1b:cd:31:9a:f1:91:bf:98:31:53:aa:d5:
         73:bb:7d:c5:d9:16:49:37:b2:a1:13:fb:ff:df:bf:0f:25:79:
         da:71:61:81:d6:67:85:a5:19:9c:e2:e3:df:41:b3:86:6f:48:
         ac:29:ad:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0R2QXk1K3mcEhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODYzN2E3ODAtMTk0NC00ZDc1LWI2MjMtMGMxMGM5NmY1
NmViMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
NjBlZGMxNmItODE4MS00MDhiLWFlMGItOWM4MWFhZWU1ZWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAiMBeK6fMsxDJqZwjyMrBpFCW5CscymW9ou
kcb89UqFlinungzIvTB0UC02TqP5IMOhG1QWS2yY9G3wgmXhyZGA/9Sgl8cCP6dg
3rUIDAs9J0vmJ9lp2dL5tNJkhM9licP6WaQ9d6FyVIxzLr8gYtKqxMO+7dSJtCyF
4ZJVF4J4qn4YvVXQ93Q8VTN5RVQv3vWRpTw3C50XMga8aZyZps/sVwjv96IZUmNY
ncd8BD/wF5GLpV+9H1LP2FDoBmUPosj4ORu2R0tRLNwfeEfN+90h9eBw23M809r4
UPDiHHnHH1BKePkmRhlcWc9q06ChPqmokze9zeT4vrhqzTtgiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMbZJhcS0654WcHDlDoRXtEzxpS+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NjM3
YTc4MC0xOTQ0LTRkNzUtYjYyMy0wYzEwYzk2ZjU2ZWIvOGZmMmM1Y2UtZTQxZC0z
YWI2LWIyMmEtYjI3ZTYwMmY0OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODYzN2E3ODAtMTk0NC00ZDc1LWI2
MjMtMGMxMGM5NmY1NmViLzg2MzdhNzgwLTE5NDQtNGQ3NS1iNjIzLTBjMTBjOTZm
NTZlYi5jcmwwHwYDVR0jBBgwFoAUl2nepdrGIH9CzH2G2Ces4TYE9pcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NjM3YTc4MC0xOTQ0LTRkNzUtYjYyMy0wYzEw
Yzk2ZjU2ZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGQPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIAuHAmLyERQImZkVU4FAqn/3j692DkY1tC3YaFcMKgN1GBL22hfm1+
TKY2xuyU+a6FMK4gEply2VfcmvOisyLEbKMFyM76XOINesB3w2GEPI1mQBrQnzTj
OxSw9XwU98NNfIPdnaYkGZG+Rf6kMV1G8liJPE8bJvhyu1nn5ZcdP0+K/lQ5WksS
unEuv9xoG1PZxkEkICn7q5JI/hk4fTPiOAQo84K/erCx1tbivwEEVgqrNQmOnrEy
PrcWeiQbRBT3ijP+g1GzemojzRvNMZrxkb+YMVOq1XO7fcXZFkk3sqET+//fvw8l
edpxYYHWZ4WlGZzi499Bs4ZvSKwprRc=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:11:16 2025 by rpki-client