Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38c5d61f-9f53-3deb-854b-a47884294cbf.roa
File:                     38c5d61f-9f53-3deb-854b-a47884294cbf.roa (raw, json)
Hash identifier:          jwvqqLygSNUGtIuEZqJClJBMNTTNyQSnC3Hl3uvXUAk=
Subject key identifier:   CE:2A:08:1A:75:C1:D5:01:11:37:E9:17:F9:52:E8:26:C3:B2:7D:6D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE196B35069E94265D69A0C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38c5d61f-9f53-3deb-854b-a47884294cbf.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     16625
IP address blocks:        184.28.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:b3:50:69:e9:42:65:d6:9a:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=131eb83d-6f94-4368-84a1-a7e06131803b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:d1:2b:73:cd:2a:dc:6f:42:6b:bd:ab:0f:
                    07:aa:7c:1b:d3:ab:80:fc:29:d1:46:b7:3c:66:2d:
                    e1:7b:6f:9c:4c:5d:ad:fc:7b:a1:ab:4a:94:bf:0f:
                    c7:6a:43:a9:1f:7f:2f:75:0e:cd:88:c0:9f:36:d3:
                    8a:d4:44:53:a6:eb:09:73:75:1a:44:cd:0f:6e:53:
                    5b:29:78:0b:be:da:2d:8e:d4:76:65:95:a3:1a:37:
                    35:4b:3a:8f:00:e0:56:db:b6:52:8d:4b:a9:07:2c:
                    b4:b3:35:41:10:db:df:ed:a5:bf:e7:1d:d9:e4:f9:
                    e1:ed:bd:ab:01:e2:67:e6:79:4e:05:c4:73:5b:16:
                    89:50:4c:dd:82:aa:4b:b7:56:73:49:e5:1f:1b:3c:
                    67:34:9c:00:9a:e8:fa:19:c6:fd:93:ed:e8:37:f6:
                    c5:88:93:61:85:0c:43:e9:42:9f:db:3e:4d:d3:d9:
                    72:65:8d:8f:6c:ae:89:a5:0f:ca:08:b6:f9:65:af:
                    66:30:1f:fe:cc:d9:94:fd:bb:4d:1e:5e:03:93:de:
                    aa:fc:90:b3:fe:ae:c4:fd:a7:bd:d2:7b:ba:36:6b:
                    87:cb:f3:ad:98:82:e0:77:58:31:6e:79:22:eb:bd:
                    db:ff:7e:70:9d:cc:99:13:59:cc:83:c1:0a:a4:ca:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2A:08:1A:75:C1:D5:01:11:37:E9:17:F9:52:E8:26:C3:B2:7D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38c5d61f-9f53-3deb-854b-a47884294cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:2d:5c:b8:e1:94:00:76:a0:1a:44:d8:b3:68:61:81:72:46:
         62:c5:f9:08:ed:d6:ad:a3:ad:56:13:cb:a2:91:4c:63:53:20:
         fb:28:3b:ee:31:37:7e:fc:09:1a:f3:a5:7b:07:cf:29:ec:8a:
         67:af:d3:05:a0:c6:e3:b2:35:93:c5:06:5c:49:3d:4f:0e:85:
         04:d9:75:a6:9a:6c:e1:79:a2:59:3b:39:71:4c:53:05:cd:33:
         74:e7:9b:ba:46:dc:2a:9c:7b:9a:37:96:f1:3e:19:b1:00:e9:
         59:be:e0:eb:7c:3c:2d:50:6f:e5:2b:de:2a:6f:f3:0b:bf:da:
         42:97:8a:1c:35:fa:7b:39:bb:9c:dc:17:d9:aa:49:50:7f:a7:
         59:1c:35:df:5b:fb:6a:6c:ae:6c:80:ad:01:d2:11:ca:07:fd:
         e2:0e:8e:f3:f8:00:1c:70:a0:60:67:90:53:2e:9d:86:9c:de:
         ca:d8:5c:09:d1:70:cb:c3:39:d2:43:fe:c4:12:3e:e1:ca:f9:
         ae:10:48:ed:6a:5b:6a:2e:cd:d7:d8:b7:e6:f4:7f:7b:df:54:
         9b:9b:7d:ab:1b:35:52:71:b3:d8:08:7f:36:52:a6:f9:74:5f:
         6a:82:37:4c:cc:f5:a4:31:d2:1a:18:cd:06:0e:7f:52:2f:87:
         05:51:69:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlrNQaelCZdaaDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
MTMxZWI4M2QtNmY5NC00MzY4LTg0YTEtYTdlMDYxMzE4MDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzPRK3PNKtxvQmu9qw8Hqnwb06uA/CnRRrc8
Zi3he2+cTF2t/Huhq0qUvw/HakOpH38vdQ7NiMCfNtOK1ERTpusJc3UaRM0PblNb
KXgLvtotjtR2ZZWjGjc1SzqPAOBW27ZSjUupByy0szVBENvf7aW/5x3Z5Pnh7b2r
AeJn5nlOBcRzWxaJUEzdgqpLt1ZzSeUfGzxnNJwAmuj6Gcb9k+3oN/bFiJNhhQxD
6UKf2z5N09lyZY2PbK6JpQ/KCLb5Za9mMB/+zNmU/btNHl4Dk96q/JCz/q7E/ae9
0nu6NmuHy/OtmILgd1gxbnki673b/35wncyZE1nMg8EKpMrPSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4qCBp1wdUBETfpF/lS6CbDsn1tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzhjNWQ2MWYtOWY1My0z
ZGViLTg1NGItYTQ3ODg0Mjk0Y2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBwwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4tXLjhlAB2oBpE2LNoYYFyRmLF+Qjt1q2jrVYTy6KRTGNTIPsoO+4x
N378CRrzpXsHzynsimev0wWgxuOyNZPFBlxJPU8OhQTZdaaabOF5olk7OXFMUwXN
M3Tnm7pG3Cqce5o3lvE+GbEA6Vm+4Ot8PC1Qb+Ur3ipv8wu/2kKXihw1+ns5u5zc
F9mqSVB/p1kcNd9b+2psrmyArQHSEcoH/eIOjvP4ABxwoGBnkFMunYac3srYXAnR
cMvDOdJD/sQSPuHK+a4QSO1qW2ouzdfYt+b0f3vfVJubfasbNVJxs9gIfzZSpvl0
X2qCN0zM9aQx0hoYzQYOf1IvhwVRaV4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:55:28 2025 by rpki-client