Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/235d68de-cd5f-3a66-99ff-9956a7b764d2.roa
File:                     235d68de-cd5f-3a66-99ff-9956a7b764d2.roa (raw, json)
Hash identifier:          uZ7LoHXN48QSKxJL8S+C1z/HW+MplvncJ3faHWYUMhE=
Subject key identifier:   0E:4D:98:00:C2:8E:0D:8A:CB:80:09:FE:8B:80:93:E8:71:1D:05:61
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F43285849F87A81E9CDBDD0BE4D7E7580
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/235d68de-cd5f-3a66-99ff-9956a7b764d2.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     20205
IP address blocks:        137.83.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:81:e9:cd:bd:d0:be:4d:7e:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=f2b9601c-7bf1-42fe-9993-3627aebf600e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:66:1d:45:2e:d1:c5:fa:57:44:03:f8:9c:
                    99:f1:80:3c:00:8d:ae:2e:76:61:4f:69:34:5d:04:
                    ce:64:74:3c:09:01:f0:5f:4f:94:47:b1:2f:48:9e:
                    a0:48:d8:98:79:50:84:1e:c1:77:0d:f6:34:94:86:
                    25:8f:94:45:08:a7:2c:74:8f:c9:09:23:7a:1a:04:
                    88:2a:f9:84:22:3c:27:2a:6b:fe:67:9b:fa:67:76:
                    d7:f4:f4:9f:ab:72:62:ae:da:7b:db:d1:8b:24:f8:
                    ab:20:b8:78:9b:78:6b:52:6a:03:ea:d8:06:fc:d7:
                    0c:b9:f4:aa:52:d2:26:0d:ec:39:5a:27:e1:71:e9:
                    a4:f0:78:ac:a8:96:78:55:37:10:10:84:8c:cb:bf:
                    bf:0b:8f:5c:9e:0f:40:86:4b:f4:38:ec:fa:38:a1:
                    13:17:8f:e4:c7:2d:2c:6f:8a:f5:c0:46:7e:d7:15:
                    0c:6e:40:aa:b1:54:be:08:85:a3:8d:c0:f7:13:85:
                    7a:c3:28:0e:65:9f:c4:a4:fc:15:65:13:47:1f:1b:
                    47:ad:e3:84:12:a2:91:63:d6:5b:c1:9a:1d:b1:55:
                    72:10:d6:b9:94:1a:d0:ec:ec:49:c0:4f:12:79:c2:
                    07:78:4f:6e:90:3e:8a:0b:ae:ad:a8:fe:8c:1b:fe:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4D:98:00:C2:8E:0D:8A:CB:80:09:FE:8B:80:93:E8:71:1D:05:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/235d68de-cd5f-3a66-99ff-9956a7b764d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:56:c3:8d:28:50:86:da:5c:f9:f9:51:af:f1:e2:6c:b6:5b:
         1c:56:f0:71:0f:5a:d5:6b:c0:7e:9c:76:b7:ed:dd:68:47:0e:
         f5:02:d8:ec:ba:53:8a:f8:cb:5e:bf:cb:14:b7:f4:cb:5d:75:
         9b:60:3f:b9:1f:a7:1d:48:fc:c8:a7:59:b7:5b:21:9b:6e:43:
         1a:a6:cf:9a:af:1c:cc:05:10:61:e3:53:19:35:e1:4a:e2:b8:
         b1:0c:c5:d1:0a:ba:9c:11:cc:f7:ce:21:07:27:0f:ac:28:51:
         e1:e9:13:c0:5a:45:39:48:97:81:2a:a7:50:89:e1:57:a2:d8:
         a3:81:90:3d:63:2f:be:50:19:6d:81:d9:4d:74:ca:5e:c1:50:
         0c:57:55:db:0c:9b:57:af:8a:00:4d:d0:79:a9:0a:42:7c:72:
         71:dd:ac:7b:2e:d6:63:c1:ec:ff:47:92:2c:b7:c4:5a:c9:b1:
         fe:10:cb:57:00:a9:e9:21:2f:ff:9e:fc:a1:d3:da:cf:71:43:
         ef:c7:19:fd:42:00:e1:51:54:84:dc:f8:b1:aa:13:aa:27:d1:
         c4:83:f7:c8:f7:af:1a:e9:f8:9d:20:c7:f1:4b:bc:e7:f7:2d:
         f6:ec:7b:30:29:fe:e3:87:05:40:e8:d3:37:2a:46:cc:09:2f:
         2f:fe:5e:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eoHpzb3Qvk1+dYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNDVlOTctOTBjMi00ODNkLWE2OGItMmRkMmM4MzI2
NmEyMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk
ZjJiOTYwMWMtN2JmMS00MmZlLTk5OTMtMzYyN2FlYmY2MDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVtmHUUu0cX6V0QD+JyZ8YA8AI2uLnZhT2k0
XQTOZHQ8CQHwX0+UR7EvSJ6gSNiYeVCEHsF3DfY0lIYlj5RFCKcsdI/JCSN6GgSI
KvmEIjwnKmv+Z5v6Z3bX9PSfq3Jirtp729GLJPirILh4m3hrUmoD6tgG/NcMufSq
UtImDew5Wifhcemk8HisqJZ4VTcQEISMy7+/C49cng9Ahkv0OOz6OKETF4/kxy0s
b4r1wEZ+1xUMbkCqsVS+CIWjjcD3E4V6wygOZZ/EpPwVZRNHHxtHreOEEqKRY9Zb
wZodsVVyENa5lBrQ7OxJwE8SecIHeE9ukD6KC66tqP6MG/454QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5NmADCjg2Ky4AJ/ouAk+hxHQVhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0
NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgzMjY2YTIvMjM1ZDY4ZGUtY2Q1Zi0z
YTY2LTk5ZmYtOTk1NmE3Yjc2NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWVkNDVlOTctOTBjMi00ODNkLWE2
OGItMmRkMmM4MzI2NmEyLzllZDQ1ZTk3LTkwYzItNDgzZC1hNjhiLTJkZDJjODMy
NjZhMi5jcmwwHwYDVR0jBBgwFoAU2Na/N7W2TtQdeVXNk36mXgCJn/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQy
YzgzMjY2YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiVNUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJWw40oUIbaXPn5Ua/x4my2WxxW8HEPWtVrwH6cdrft3WhHDvUC2Oy6
U4r4y16/yxS39MtddZtgP7kfpx1I/MinWbdbIZtuQxqmz5qvHMwFEGHjUxk14Uri
uLEMxdEKupwRzPfOIQcnD6woUeHpE8BaRTlIl4Eqp1CJ4Vei2KOBkD1jL75QGW2B
2U10yl7BUAxXVdsMm1evigBN0HmpCkJ8cnHdrHsu1mPB7P9Hkiy3xFrJsf4Qy1cA
qekhL/+e/KHT2s9xQ+/HGf1CAOFRVITc+LGqE6on0cSD98j3rxrp+J0gx/FLvOf3
LfbsezAp/uOHBUDo0zcqRswJLy/+Xrg=
-----END CERTIFICATE-----
Generated at Sun Jun 29 18:58:48 2025 by rpki-client