Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/837d1d37-54c4-3bba-aeb5-5a1e5cd7f998.roa
File:                     837d1d37-54c4-3bba-aeb5-5a1e5cd7f998.roa (raw, json)
Hash identifier:          SShTWA6ufp4RPyJSDuEbqU8N0Wq02sOwFybB0E/6Eco=
Subject key identifier:   CB:B2:0E:0C:55:BE:22:B8:28:6B:9E:BA:60:CC:48:3F:3D:68:8D:8B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B80B76EA579AE35064B9FB2C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/837d1d37-54c4-3bba-aeb5-5a1e5cd7f998.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     64267
IP address blocks:        141.164.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:6e:a5:79:ae:35:06:4b:9f:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=c8d06b09-4df8-4096-bc05-29c1577eb74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e8:43:9e:1b:04:31:fd:f9:2a:37:38:d5:27:
                    cd:bb:bf:0f:29:c9:d1:71:6e:b5:b7:e0:33:b6:74:
                    d5:b4:08:6f:cc:c4:28:c7:9e:2f:03:f1:de:e5:87:
                    6e:f4:bc:4b:ed:87:2b:4b:bb:2e:e8:c3:09:5f:39:
                    e3:7f:0b:8c:dc:19:bd:a7:90:8a:00:6f:60:d5:4e:
                    04:63:37:91:6f:7b:79:ec:a9:e1:e4:c5:07:9d:60:
                    d3:2f:51:c9:b9:3e:47:ff:08:7a:cc:2b:15:92:a5:
                    ee:cf:27:54:6a:c9:dc:44:d6:b7:37:ef:55:ac:79:
                    1c:45:18:b2:d7:d4:df:ad:e3:c0:dc:04:f5:a2:d1:
                    dd:08:55:a5:7a:87:b9:3f:2e:72:54:93:07:74:b7:
                    f1:61:b6:a5:09:78:65:7a:e1:ef:52:bb:68:bc:8c:
                    d1:e7:4e:01:63:ae:dc:19:9c:af:a7:31:77:53:1a:
                    87:01:64:08:75:19:44:bd:75:09:92:61:29:37:a0:
                    ee:b0:c6:08:5c:35:fb:a7:f6:c4:70:72:33:32:07:
                    ec:e2:65:8e:4d:84:7c:f4:01:67:66:b3:57:84:da:
                    b6:8b:0d:f0:46:86:bd:66:09:66:63:e0:72:d1:87:
                    25:6e:c5:d2:cd:26:78:70:e1:2f:a5:63:c7:62:b8:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:0E:0C:55:BE:22:B8:28:6B:9E:BA:60:CC:48:3F:3D:68:8D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/837d1d37-54c4-3bba-aeb5-5a1e5cd7f998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:08:28:c6:87:ea:c5:8e:49:ae:9a:9b:92:35:11:00:63:5e:
         86:25:05:95:ab:d8:b4:7e:7b:14:9a:ee:9e:11:90:53:46:81:
         2e:fb:a8:b9:8d:6a:10:52:78:1a:41:c3:fd:83:f2:ab:bd:90:
         1a:93:ec:69:8f:36:59:b0:b5:28:3b:45:4e:dd:c6:a9:0a:21:
         93:0f:c2:dc:3a:e4:41:28:1a:4d:38:d2:eb:f8:59:51:d0:30:
         19:7d:b1:50:47:c0:91:6a:72:6d:26:2e:3a:c8:b1:49:a9:9c:
         b4:e9:f8:a4:68:09:d5:c5:d8:93:02:b0:71:7e:ff:fd:f5:ee:
         e3:38:30:e1:d9:8d:1c:82:4a:a0:e2:fc:a8:09:6d:49:9b:86:
         d1:0e:69:27:0e:6a:ca:74:30:bf:17:a3:b0:93:54:2e:29:91:
         1f:df:35:4b:30:2e:86:ee:b6:c3:f0:38:ab:41:7c:74:73:fb:
         5c:4e:2b:dc:a6:af:e7:3e:75:84:73:71:cf:1c:e4:2e:92:8a:
         7c:b7:d8:bd:5b:41:a0:79:b2:8d:51:6e:fe:77:e2:a8:2f:45:
         1c:34:96:f1:ff:14:87:d4:cf:76:14:44:9d:d9:ce:e7:69:e9:
         5c:b0:81:6a:2f:7f:89:84:01:4c:34:3a:ed:83:36:ff:53:f9:
         fc:1b:66:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt26lea41BkufssAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
YzhkMDZiMDktNGRmOC00MDk2LWJjMDUtMjljMTU3N2ViNzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOhDnhsEMf35Kjc41SfNu78PKcnRcW61t+Az
tnTVtAhvzMQox54vA/He5Ydu9LxL7YcrS7su6MMJXznjfwuM3Bm9p5CKAG9g1U4E
YzeRb3t57Knh5MUHnWDTL1HJuT5H/wh6zCsVkqXuzydUasncRNa3N+9VrHkcRRiy
19TfrePA3AT1otHdCFWleoe5Py5yVJMHdLfxYbalCXhleuHvUrtovIzR504BY67c
GZyvpzF3UxqHAWQIdRlEvXUJkmEpN6DusMYIXDX7p/bEcHIzMgfs4mWOTYR89AFn
ZrNXhNq2iw3wRoa9ZglmY+By0YclbsXSzSZ4cOEvpWPHYri67wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMuyDgxVviK4KGueumDMSD89aI2LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvODM3ZDFkMzctNTRjNC0z
YmJhLWFlYjUtNWExZTVjZDdmOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjaRcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJgIKMaH6sWOSa6am5I1EQBjXoYlBZWr2LR+exSa7p4RkFNGgS77qLmN
ahBSeBpBw/2D8qu9kBqT7GmPNlmwtSg7RU7dxqkKIZMPwtw65EEoGk040uv4WVHQ
MBl9sVBHwJFqcm0mLjrIsUmpnLTp+KRoCdXF2JMCsHF+//317uM4MOHZjRyCSqDi
/KgJbUmbhtEOaScOasp0ML8Xo7CTVC4pkR/fNUswLobutsPwOKtBfHRz+1xOK9ym
r+c+dYRzcc8c5C6Siny32L1bQaB5so1Rbv534qgvRRw0lvH/FIfUz3YURJ3Zzudp
6VywgWovf4mEAUw0Ou2DNv9T+fwbZvI=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:57 2025 by rpki-client