Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/375554e1-96a3-34bb-a4be-a49984d1a07a.roa
File:                     375554e1-96a3-34bb-a4be-a49984d1a07a.roa (raw, json)
Hash identifier:          rTRu7O+uu1j2Re84q4VtA3LF+/hll37cZ+1sqKUN/xM=
Subject key identifier:   F2:44:CF:46:CB:C9:27:42:02:A6:51:A6:4F:C3:18:1A:85:30:4B:92
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AD5066664E2448CD1ABDDE240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/375554e1-96a3-34bb-a4be-a49984d1a07a.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     9829
IP address blocks:        184.84.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:66:64:e2:44:8c:d1:ab:dd:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=8b44ed6f-5d27-4b51-9971-21e7a623a532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:f6:a5:42:ed:89:b0:66:f2:eb:72:d9:f0:
                    bb:dd:f5:fd:41:b6:00:83:18:85:c1:7b:bb:31:5f:
                    1d:d9:df:bf:dd:04:1d:83:56:5b:18:ce:90:b6:69:
                    ab:79:a4:1b:00:fb:79:63:87:15:cf:48:37:93:d7:
                    48:17:92:0f:01:12:f6:4e:a8:10:bc:62:ae:dc:87:
                    f4:98:c5:f4:68:12:7c:c5:37:ac:1e:1c:64:22:b1:
                    fe:a2:8f:53:52:8d:e9:57:43:b9:4f:cf:2b:4c:98:
                    a5:a2:19:5d:ba:c8:fa:53:d1:f9:f8:68:53:25:09:
                    7c:7c:55:b4:3b:70:80:0d:bf:70:c7:58:db:eb:cf:
                    51:15:95:64:b0:d7:33:aa:78:9a:9a:30:ab:8f:2e:
                    b9:e1:0e:81:1c:92:67:9b:eb:c7:99:b6:56:95:2e:
                    b1:2e:fd:f4:0a:8c:8b:8f:61:8c:b3:05:aa:b9:17:
                    ca:73:15:b6:bf:07:10:0c:47:a4:e1:d6:a9:f9:28:
                    7d:d8:46:f9:ec:3f:b4:97:b0:60:87:a0:72:33:44:
                    bf:21:40:24:50:30:9d:19:9a:eb:d4:66:71:bf:37:
                    8e:60:bf:4a:8d:35:de:28:2d:37:d8:40:71:50:68:
                    f7:55:3a:17:2e:1f:fc:c6:ce:5a:25:2f:b4:95:2c:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:44:CF:46:CB:C9:27:42:02:A6:51:A6:4F:C3:18:1A:85:30:4B:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/375554e1-96a3-34bb-a4be-a49984d1a07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.84.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7b:1d:bd:17:9d:3b:6a:2d:54:cc:d7:7f:b8:e9:fa:51:f6:
         38:73:c7:5e:53:19:14:28:5f:25:66:c9:81:15:55:6f:23:11:
         e7:73:4a:d8:5c:51:8d:74:90:e2:30:8b:71:b6:93:88:e4:6d:
         c2:26:dd:5b:5c:99:65:7f:33:e5:aa:29:28:7f:0f:ad:76:87:
         cb:f2:b8:5b:77:f2:32:11:9a:b2:45:48:65:8d:4b:32:d5:cf:
         ad:df:e4:79:63:0c:91:c4:da:f7:a0:b9:f8:00:ce:5f:25:0e:
         85:6b:bb:3b:25:2e:55:fb:75:49:fd:a0:e4:3e:86:7e:85:b7:
         53:23:94:a4:52:0e:82:65:47:ff:f9:1e:33:8e:3d:fa:01:2d:
         d3:af:41:77:c1:ea:e6:63:c0:b4:aa:36:9c:88:73:61:1e:7d:
         c8:93:ef:fc:86:ba:ae:58:bf:83:7f:13:f5:19:74:99:ad:c9:
         84:1d:19:21:ef:3c:ec:44:6d:5f:5b:3d:44:0d:23:ce:c9:68:
         13:13:a4:ca:95:d0:a2:0f:44:2e:9f:30:9e:c4:a9:2e:18:1a:
         e2:c5:4c:c4:91:b7:d8:0b:da:16:fd:cc:8f:eb:f9:e3:f7:44:
         08:a8:30:7b:38:d9:f8:e6:1e:0a:3a:3d:3d:6a:01:8d:96:fe:
         62:70:4f:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmZk4kSM0avd4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk
OGI0NGVkNmYtNWQyNy00YjUxLTk5NzEtMjFlN2E2MjNhNTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSH2pULtibBm8uty2fC73fX9QbYAgxiFwXu7
MV8d2d+/3QQdg1ZbGM6QtmmreaQbAPt5Y4cVz0g3k9dIF5IPARL2TqgQvGKu3If0
mMX0aBJ8xTesHhxkIrH+oo9TUo3pV0O5T88rTJilohldusj6U9H5+GhTJQl8fFW0
O3CADb9wx1jb689RFZVksNczqniamjCrjy654Q6BHJJnm+vHmbZWlS6xLv30CoyL
j2GMswWquRfKcxW2vwcQDEek4dap+Sh92Eb57D+0l7Bgh6ByM0S/IUAkUDCdGZrr
1GZxvzeOYL9KjTXeKC032EBxUGj3VToXLh/8xs5aJS+0lSxCdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJEz0bLySdCAqZRpk/DGBqFMEuSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzc1NTU0ZTEtOTZhMy0z
NGJiLWE0YmUtYTQ5OTg0ZDFhMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuFSnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABB7Hb0XnTtqLVTM13+46fpR9jhzx15TGRQoXyVmyYEVVW8jEedzSthc
UY10kOIwi3G2k4jkbcIm3VtcmWV/M+WqKSh/D612h8vyuFt38jIRmrJFSGWNSzLV
z63f5HljDJHE2vegufgAzl8lDoVruzslLlX7dUn9oOQ+hn6Ft1MjlKRSDoJlR//5
HjOOPfoBLdOvQXfB6uZjwLSqNpyIc2EefciT7/yGuq5Yv4N/E/UZdJmtyYQdGSHv
POxEbV9bPUQNI87JaBMTpMqV0KIPRC6fMJ7EqS4YGuLFTMSRt9gL2hb9zI/r+eP3
RAioMHs42fjmHgo6PT1qAY2W/mJwTyI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:05:14 2025 by rpki-client