Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e7994de-8cfc-3dcd-90fe-22b800906ad6.roa
File:                     4e7994de-8cfc-3dcd-90fe-22b800906ad6.roa (raw, json)
Hash identifier:          USkSZRpjQlOpceiHetz7SYpTpbUJKvqQtAxFPpaBvcg=
Subject key identifier:   02:3F:12:65:73:A9:9D:CA:7C:F2:12:AB:EF:CB:65:C3:73:1B:98:B9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE196A0983BDB913FE53E6C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e7994de-8cfc-3dcd-90fe-22b800906ad6.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     16625
IP address blocks:        184.31.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:a0:98:3b:db:91:3f:e5:3e:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=0ffbef8c-a81b-41f1-8244-1db579e9e152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9f:5b:99:a5:bf:08:47:2b:b8:c2:0b:8b:c8:
                    1d:92:80:ae:0c:69:21:6b:43:38:99:75:55:17:8b:
                    13:16:5a:31:e7:4b:64:e8:80:63:ea:31:e4:d3:70:
                    ae:37:1f:42:2f:4c:42:f3:d5:92:76:7e:f4:40:5e:
                    a7:dc:6e:3e:37:c8:75:0e:85:d8:21:55:75:5d:b8:
                    99:ce:46:42:32:e9:b3:e9:29:43:5e:3f:bf:40:74:
                    f8:ae:70:5c:7c:65:fc:be:6e:87:a1:c0:59:3e:50:
                    63:bf:8d:87:a7:ba:6a:7b:f2:f7:18:64:a6:14:10:
                    d9:92:e1:eb:a2:dd:92:33:26:6f:89:33:7e:0f:c6:
                    97:f4:eb:64:89:fe:83:d2:e3:1c:5f:43:18:66:7c:
                    c5:22:90:6b:a0:35:a6:45:3e:5a:cc:fa:9f:91:fc:
                    2c:f8:a8:a1:dd:d6:a4:b4:bf:46:8a:06:a9:ef:af:
                    12:dc:23:4c:15:04:cf:bb:bc:06:aa:1e:24:0c:db:
                    97:02:77:17:ce:04:86:0c:6e:f3:62:d0:ed:b4:59:
                    1b:8b:1e:af:78:74:2d:3c:12:54:7c:76:57:3b:57:
                    02:23:0c:b3:2c:5a:4a:6a:af:0e:34:d0:8b:ac:82:
                    82:98:bc:ba:5c:40:ba:11:f6:43:cc:ec:4f:58:cf:
                    1c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3F:12:65:73:A9:9D:CA:7C:F2:12:AB:EF:CB:65:C3:73:1B:98:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e7994de-8cfc-3dcd-90fe-22b800906ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.31.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:cc:f5:5c:e9:2b:11:1c:0e:68:6b:9d:14:b1:37:df:07:19:
         c5:db:e3:55:fb:e9:23:47:31:98:3e:f4:ca:21:0e:d2:b6:a5:
         52:8a:03:ae:ac:b9:0c:b2:4d:3e:a9:9b:b1:18:b0:fb:a1:12:
         8c:00:23:90:c3:b2:6d:2b:c6:cb:53:5e:4f:a0:54:c6:12:ed:
         96:fd:c0:03:ae:46:5f:08:ae:42:a0:2e:b5:88:00:b4:7f:ca:
         8f:79:96:44:86:92:79:87:e0:63:7b:c1:73:ef:ba:31:77:d0:
         58:95:07:af:4b:d9:fc:b8:81:06:dc:1c:cb:fa:54:08:41:1e:
         8f:24:5a:7e:fa:8a:48:ea:94:ea:52:ab:01:75:4d:e9:92:b6:
         e7:d5:69:3d:5d:00:e1:f5:4c:d3:58:50:e9:f0:58:69:17:39:
         db:a3:4c:08:a7:1b:98:6b:d9:13:0a:3f:b5:f5:df:f0:fb:46:
         e7:1e:ab:67:87:00:cc:87:61:f1:8c:83:65:bd:da:98:77:c3:
         62:6f:df:c9:c0:8f:b5:8d:71:4d:8e:85:20:ff:4e:0d:67:5d:
         c1:0c:19:bd:16:5e:d6:93:c5:95:15:67:31:be:52:0d:c3:14:
         14:ca:e0:e6:cd:e0:bc:e9:15:1e:73:15:e6:28:63:df:31:1a:
         76:c2:a6:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlqCYO9uRP+U+bIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
MGZmYmVmOGMtYTgxYi00MWYxLTgyNDQtMWRiNTc5ZTllMTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7p9bmaW/CEcruMILi8gdkoCuDGkha0M4mXVV
F4sTFlox50tk6IBj6jHk03CuNx9CL0xC89WSdn70QF6n3G4+N8h1DoXYIVV1XbiZ
zkZCMumz6SlDXj+/QHT4rnBcfGX8vm6HocBZPlBjv42Hp7pqe/L3GGSmFBDZkuHr
ot2SMyZviTN+D8aX9Otkif6D0uMcX0MYZnzFIpBroDWmRT5azPqfkfws+Kih3dak
tL9Gigap768S3CNMFQTPu7wGqh4kDNuXAncXzgSGDG7zYtDttFkbix6veHQtPBJU
fHZXO1cCIwyzLFpKaq8ONNCLrIKCmLy6XEC6EfZDzOxPWM8cTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAI/EmVzqZ3KfPISq+/LZcNzG5i5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGU3OTk0ZGUtOGNmYy0z
ZGNkLTkwZmUtMjJiODAwOTA2YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuB8gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjM9VzpKxEcDmhrnRSxN98HGcXb41X76SNHMZg+9MohDtK2pVKKA66s
uQyyTT6pm7EYsPuhEowAI5DDsm0rxstTXk+gVMYS7Zb9wAOuRl8IrkKgLrWIALR/
yo95lkSGknmH4GN7wXPvujF30FiVB69L2fy4gQbcHMv6VAhBHo8kWn76ikjqlOpS
qwF1TemStufVaT1dAOH1TNNYUOnwWGkXOdujTAinG5hr2RMKP7X13/D7Ruceq2eH
AMyHYfGMg2W92ph3w2Jv38nAj7WNcU2OhSD/Tg1nXcEMGb0WXtaTxZUVZzG+Ug3D
FBTK4ObN4LzpFR5zFeYoY98xGnbCpr4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:54:12 2025 by rpki-client