Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9c16d76e-128f-35aa-bf54-a9444ddb5a09.roa
File:                     9c16d76e-128f-35aa-bf54-a9444ddb5a09.roa (raw, json)
Hash identifier:          UsGqbC6oqU5uEBukKDeMSrwTtSdMM+ymU5m563oRpKU=
Subject key identifier:   0B:AD:30:28:04:A1:24:3B:DE:F2:30:DA:D9:02:73:A4:C0:8C:3A:3B
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584AD29B841CE29F1F88D1D00780
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9c16d76e-128f-35aa-bf54-a9444ddb5a09.roa
Signing time:             Mon 11 Aug 2025 16:13:52 +0000
ROA not before:           Mon 11 Aug 2025 16:13:52 +0000
ROA not after:            Sun 09 Nov 2025 17:13:52 +0000
asID:                     30687
IP address blocks:        216.38.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:9b:84:1c:e2:9f:1f:88:d1:d0:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Aug 11 16:13:52 2025 GMT
            Not After : Nov  9 17:13:52 2025 GMT
        Subject: CN=26bafee7-dce6-45aa-845a-95ab33d146a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3a:dc:09:d4:f7:4a:64:4d:48:76:62:cd:8c:
                    e0:ff:70:8e:7e:1b:bb:ae:bc:16:c9:f5:ab:58:a3:
                    f1:3d:79:1e:67:f1:38:49:7d:aa:5b:57:27:df:16:
                    96:b0:79:ba:47:a0:0b:61:e5:70:0b:d1:33:ab:4b:
                    65:55:cf:bf:65:ad:99:38:7e:c2:ab:e1:0e:1b:18:
                    dc:ba:7c:76:b2:fd:a3:06:2d:94:72:24:68:65:b0:
                    14:30:ad:c7:ce:aa:af:be:27:0d:5f:a6:9c:95:72:
                    aa:c3:56:9b:b9:32:78:52:63:a9:41:62:66:87:c1:
                    6a:70:dc:14:ba:02:be:c6:43:41:ac:96:d9:50:5a:
                    b4:e9:e0:2c:9f:99:3b:02:bc:a5:7e:c2:9c:af:c9:
                    9e:98:6c:db:ce:02:0f:77:87:31:8f:78:69:48:69:
                    40:86:57:b8:82:76:66:d4:d3:db:1c:44:1c:bd:70:
                    a3:45:37:50:f4:a7:51:6f:5e:33:2e:38:c0:87:00:
                    56:f4:c3:68:ab:a8:18:40:41:ef:f6:a8:92:79:a4:
                    7d:ac:05:df:63:cc:48:e2:ed:5e:63:37:21:2f:a5:
                    a3:4c:e5:12:46:03:05:24:c2:c6:c9:6c:81:fe:5e:
                    f5:f6:9b:54:c2:9c:3d:3d:40:97:74:51:4f:ba:e5:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AD:30:28:04:A1:24:3B:DE:F2:30:DA:D9:02:73:A4:C0:8C:3A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9c16d76e-128f-35aa-bf54-a9444ddb5a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d0:47:5b:a4:4a:cc:94:db:94:69:b6:55:ea:8b:33:ad:37:
         5f:f8:7c:4e:08:6e:04:1f:59:ca:57:8c:11:2f:f0:c4:66:67:
         b9:eb:98:f5:f5:eb:13:8a:2a:f6:f3:6a:a8:fb:76:ee:ce:42:
         81:80:e0:d2:fc:4d:ad:6a:55:12:04:08:1b:32:17:9d:7e:e5:
         d3:c8:e4:26:1b:41:9c:f3:78:16:dd:7b:20:e3:d1:69:7d:3b:
         ad:be:0f:02:57:e7:bf:a9:5e:ed:1d:c4:b3:d5:bc:b7:c4:dc:
         96:4c:32:6e:d4:4d:46:86:c7:67:61:74:2c:31:0b:09:9e:03:
         cc:fc:0b:f6:b5:6b:6f:24:28:f8:c5:4f:39:af:f3:64:ed:ab:
         98:bb:86:38:25:ff:d4:d0:f4:25:35:e0:cf:b9:6e:32:0b:f5:
         81:36:75:4d:86:ed:16:2d:6d:1c:08:2e:8b:d0:ca:76:d5:1e:
         c3:32:2c:83:43:e9:8e:98:38:2d:17:cd:08:a2:3c:4a:bc:0e:
         0f:eb:91:74:22:6f:36:d3:c6:c6:e5:6d:93:68:ec:52:ce:70:
         9c:78:7e:5b:dd:5d:32:f0:75:4a:7b:5d:27:2a:62:63:52:bd:
         db:19:64:6e:3e:2e:5d:86:df:18:79:e2:b2:91:f0:c6:aa:55:
         ba:9e:1a:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSm4Qc4p8fiNHQB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjgyODFhMGEtMDBmMi00YWFjLWIzMTEtZTk2MWE3Y2Nl
ZGZiMB4XDTI1MDgxMTE2MTM1MloXDTI1MTEwOTE3MTM1MlowLzEtMCsGA1UEAxMk
MjZiYWZlZTctZGNlNi00NWFhLTg0NWEtOTVhYjMzZDE0NmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TrcCdT3SmRNSHZizYzg/3COfhu7rrwWyfWr
WKPxPXkeZ/E4SX2qW1cn3xaWsHm6R6ALYeVwC9Ezq0tlVc+/Za2ZOH7Cq+EOGxjc
unx2sv2jBi2UciRoZbAUMK3HzqqvvicNX6aclXKqw1abuTJ4UmOpQWJmh8FqcNwU
ugK+xkNBrJbZUFq06eAsn5k7ArylfsKcr8memGzbzgIPd4cxj3hpSGlAhle4gnZm
1NPbHEQcvXCjRTdQ9KdRb14zLjjAhwBW9MNoq6gYQEHv9qiSeaR9rAXfY8xI4u1e
YzchL6WjTOUSRgMFJMLGyWyB/l719ptUwpw9PUCXdFFPuuXpSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAutMCgEoSQ73vIw2tkCc6TAjDo7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4
MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYxYTdjY2VkZmIvOWMxNmQ3NmUtMTI4Zi0z
NWFhLWJmNTQtYTk0NDRkZGI1YTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjgyODFhMGEtMDBmMi00YWFjLWIz
MTEtZTk2MWE3Y2NlZGZiL2I4MjgxYTBhLTAwZjItNGFhYy1iMzExLWU5NjFhN2Nj
ZWRmYi5jcmwwHwYDVR0jBBgwFoAUNfABs7MMIwjruQt82C4ceWMKjxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYx
YTdjY2VkZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDQR1ukSsyU25RptlXqizOtN1/4fE4IbgQfWcpXjBEv8MRmZ7nrmPX1
6xOKKvbzaqj7du7OQoGA4NL8Ta1qVRIECBsyF51+5dPI5CYbQZzzeBbdeyDj0Wl9
O62+DwJX57+pXu0dxLPVvLfE3JZMMm7UTUaGx2dhdCwxCwmeA8z8C/a1a28kKPjF
Tzmv82Ttq5i7hjgl/9TQ9CU14M+5bjIL9YE2dU2G7RYtbRwILovQynbVHsMyLIND
6Y6YOC0XzQiiPEq8Dg/rkXQibzbTxsblbZNo7FLOcJx4flvdXTLwdUp7XScqYmNS
vdsZZG4+Ll2G3xh54rKR8MaqVbqeGmg=
-----END CERTIFICATE-----
Generated at Mon Aug 25 06:16:38 2025 by rpki-client