Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fb3b4a52-e191-3b7d-ad3f-6cd2990b2932.roa
File:                     fb3b4a52-e191-3b7d-ad3f-6cd2990b2932.roa (raw, json)
Hash identifier:          PXXGm/TyTZO45FxOPli2sLZ+yAP1/MbAPqJAWwsXKWY=
Subject key identifier:   2E:0F:B0:2C:7F:82:23:7D:00:B2:57:5A:14:DE:AA:02:C0:83:B0:41
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AE46113F5155E507504376000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fb3b4a52-e191-3b7d-ad3f-6cd2990b2932.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     33307
IP address blocks:        184.174.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:13:f5:15:5e:50:75:04:37:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=f9bf31b7-9b79-4cd7-83d7-641688a32350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:38:49:91:a6:83:e5:af:65:8f:30:23:72:
                    74:08:05:24:26:4c:69:43:02:40:fa:a8:b2:67:35:
                    32:42:36:e3:d2:31:2a:41:d3:55:43:db:06:37:d4:
                    70:f0:75:74:26:fc:f5:59:93:30:7e:f3:6e:30:fa:
                    69:2c:b2:0d:4f:e4:93:15:03:c5:b3:b1:a7:b3:30:
                    e3:37:57:ea:b8:9b:71:a0:3b:4d:90:b5:6d:bd:9c:
                    b4:0e:76:47:ec:15:ba:71:bb:c7:7c:a6:9c:68:56:
                    b3:05:0f:3a:31:c9:0f:0f:22:d7:4e:02:51:b0:ff:
                    18:80:96:e4:5d:c2:a5:34:dd:e1:0a:c7:f6:c7:19:
                    cc:1f:3d:e2:83:aa:1a:10:7e:b9:29:f7:91:0a:e1:
                    41:61:62:bf:5d:dc:7b:f8:39:32:ae:69:49:f8:e9:
                    3d:de:5f:d8:5c:12:da:3a:6d:29:82:f6:44:d1:5e:
                    ba:67:4a:8e:dc:20:5f:ea:9a:78:6c:75:9a:6d:1b:
                    7d:7a:46:b2:47:4c:cd:c9:a9:4b:c9:c3:f1:ba:21:
                    63:e9:99:a7:21:d1:57:14:cb:c9:ee:a5:14:7b:1b:
                    51:d5:5d:35:f3:59:97:c5:60:68:4a:d7:e9:06:e0:
                    ee:66:23:4e:b4:da:b9:b8:41:99:97:75:0e:c3:db:
                    53:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0F:B0:2C:7F:82:23:7D:00:B2:57:5A:14:DE:AA:02:C0:83:B0:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fb3b4a52-e191-3b7d-ad3f-6cd2990b2932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:16:a9:27:27:8f:6f:0d:a9:19:bc:71:83:dc:e8:88:08:39:
         ef:80:33:65:c3:84:de:29:ca:37:a1:a6:56:17:e4:2f:43:71:
         40:d1:87:a3:54:45:4d:35:ea:e8:f4:29:5a:34:8d:84:be:91:
         8a:11:b3:75:4c:5c:6e:ce:47:a9:e0:b4:48:d5:66:e3:2b:9b:
         8a:01:18:5d:36:7b:64:5f:c6:e3:7e:a1:8e:78:d6:9e:6a:b3:
         7a:ec:62:ce:43:db:13:e2:b1:d5:d3:0a:7e:fe:ba:1a:06:94:
         e0:3e:4f:fd:20:4d:b5:8b:83:9e:fc:d2:48:81:24:87:6d:eb:
         b9:fb:4c:d2:d7:e3:ec:a7:86:e2:37:91:43:71:59:1f:af:0a:
         3f:f8:3f:46:58:c9:24:4d:81:4b:c6:41:e0:b9:10:de:10:d8:
         ba:c8:c4:c0:f0:b8:9a:0d:29:65:f9:1f:7d:74:9f:bc:2a:57:
         ef:fa:37:3f:c7:06:11:0b:d6:ac:a2:38:ae:89:df:ee:43:fa:
         90:7f:c8:ce:ef:1e:d0:03:94:12:9c:8f:73:0e:c8:14:d5:86:
         18:2f:07:42:5f:54:5b:23:b2:f4:71:42:1b:c0:38:ae:d2:3b:
         87:e4:0b:e8:66:a0:3f:74:d3:ac:03:50:04:9f:26:95:5b:33:
         d9:a9:a4:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRP1FV5QdQQ3YAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZjliZjMxYjctOWI3OS00Y2Q3LTgzZDctNjQxNjg4YTMyMzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfM4SZGmg+WvZY8wI3J0CAUkJkxpQwJA+qiy
ZzUyQjbj0jEqQdNVQ9sGN9Rw8HV0Jvz1WZMwfvNuMPppLLINT+STFQPFs7GnszDj
N1fquJtxoDtNkLVtvZy0DnZH7BW6cbvHfKacaFazBQ86MckPDyLXTgJRsP8YgJbk
XcKlNN3hCsf2xxnMHz3ig6oaEH65KfeRCuFBYWK/Xdx7+DkyrmlJ+Ok93l/YXBLa
Om0pgvZE0V66Z0qO3CBf6pp4bHWabRt9ekayR0zNyalLycPxuiFj6ZmnIdFXFMvJ
7qUUextR1V0181mXxWBoStfpBuDuZiNOtNq5uEGZl3UOw9tTPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4PsCx/giN9ALJXWhTeqgLAg7BBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZmIzYjRhNTItZTE5MS0z
YjdkLWFkM2YtNmNkMjk5MGIyOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuK5RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcWqScnj28NqRm8cYPc6IgIOe+AM2XDhN4pyjehplYX5C9DcUDRh6NU
RU016uj0KVo0jYS+kYoRs3VMXG7OR6ngtEjVZuMrm4oBGF02e2RfxuN+oY541p5q
s3rsYs5D2xPisdXTCn7+uhoGlOA+T/0gTbWLg5780kiBJIdt67n7TNLX4+ynhuI3
kUNxWR+vCj/4P0ZYySRNgUvGQeC5EN4Q2LrIxMDwuJoNKWX5H310n7wqV+/6Nz/H
BhEL1qyiOK6J3+5D+pB/yM7vHtADlBKcj3MOyBTVhhgvB0JfVFsjsvRxQhvAOK7S
O4fkC+hmoD9006wDUASfJpVbM9mppFk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:35:29 2025 by rpki-client