Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/816f3d64-a839-3a2e-94e8-83076b835afe.roa
File:                     816f3d64-a839-3a2e-94e8-83076b835afe.roa (raw, json)
Hash identifier:          256L/0o9hAPkpbBusoefTJk8MUK+R2ELqXiN159ae/o=
Subject key identifier:   BA:B0:1E:3F:C4:12:FF:9C:65:CA:95:82:18:2F:0C:7C:F7:59:95:06
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE196B4DF6AE0E634A6F0A380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/816f3d64-a839-3a2e-94e8-83076b835afe.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        184.28.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:b4:df:6a:e0:e6:34:a6:f0:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=88daf592-0fe3-4df2-8416-9e79b9e2155c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:ba:78:3b:49:46:0b:58:8e:fe:29:01:2d:
                    b1:03:f3:bb:5a:db:f6:c6:2c:43:6b:2c:54:88:9b:
                    77:34:5b:62:41:fe:db:99:d5:2c:90:4a:be:36:b2:
                    99:80:f9:b1:c8:21:46:98:b8:bc:28:af:2a:0a:c4:
                    e0:e9:6e:07:0a:51:72:56:b6:a0:0e:7f:54:e7:dc:
                    a8:d9:ba:63:c7:12:8f:03:a1:9c:bc:05:90:b9:7c:
                    19:88:b3:a2:77:78:ca:5d:d8:cf:ee:af:0e:bc:43:
                    0c:fa:cc:43:56:9d:28:5f:56:4e:0b:bb:3c:87:44:
                    b2:aa:92:f7:f9:4d:95:8b:94:58:94:36:50:1c:4c:
                    18:a9:72:ba:0c:99:0c:41:53:4a:1d:cb:1b:ff:3d:
                    01:33:62:81:0c:36:35:02:f3:96:02:a1:58:bb:b7:
                    81:4f:9e:84:60:f0:52:65:91:fc:34:82:f1:4a:f3:
                    e1:54:28:29:fb:ce:e2:ac:1c:33:94:d1:93:59:36:
                    2d:1a:c5:7a:df:aa:b8:b5:7b:72:06:33:b0:a5:6b:
                    d4:78:5b:8a:9d:bf:a0:82:54:1c:64:c9:cb:25:8d:
                    37:71:13:49:0d:f6:c1:85:4c:ec:76:98:2f:27:81:
                    01:a5:65:32:35:14:b0:92:de:62:a7:29:fd:8d:9a:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B0:1E:3F:C4:12:FF:9C:65:CA:95:82:18:2F:0C:7C:F7:59:95:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/816f3d64-a839-3a2e-94e8-83076b835afe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5f:83:cd:38:47:f8:a8:3c:b1:d3:47:ec:6a:f8:2a:6c:17:
         d0:a4:0e:d9:5a:cf:3d:b0:55:20:2c:03:af:b7:f3:76:ce:bb:
         4d:2b:1f:38:c6:dc:f4:b2:1d:83:b5:06:29:b7:b4:65:b5:19:
         fb:3b:b4:8f:3d:3e:1e:d3:1b:d9:d2:9b:d4:e4:f6:68:d6:33:
         88:35:39:96:e6:8d:ad:fe:d2:ce:84:64:b4:71:c1:82:0f:16:
         a1:90:eb:96:f1:b4:36:01:67:6b:a6:4e:44:e3:66:77:19:b5:
         5e:9e:f1:35:e5:cc:66:16:ff:7c:aa:c6:25:a1:db:8e:8e:85:
         be:97:75:fa:8b:73:bc:b8:ac:0c:0e:01:0c:43:36:6d:2f:4f:
         42:d5:d3:14:95:3d:46:db:03:6e:15:1d:91:e9:33:c9:32:b0:
         09:33:53:cd:c3:d9:c9:f8:66:28:53:a7:9a:f7:cf:03:7d:e2:
         a2:53:38:f8:87:04:d1:7f:4c:79:98:53:f3:ee:70:09:d4:0d:
         21:cd:07:e5:89:c4:8c:79:ca:79:b1:0a:77:8a:27:bd:12:cf:
         ed:90:5e:38:d7:51:79:37:31:ff:68:1e:c6:ee:e1:54:cb:c8:
         79:45:00:d2:a2:c3:38:02:8f:b4:cd:02:b8:8f:b9:ae:14:25:
         31:5f:8e:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlrTfauDmNKbwo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ODhkYWY1OTItMGZlMy00ZGYyLTg0MTYtOWU3OWI5ZTIxNTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm26eDtJRgtYjv4pAS2xA/O7Wtv2xixDayxU
iJt3NFtiQf7bmdUskEq+NrKZgPmxyCFGmLi8KK8qCsTg6W4HClFyVragDn9U59yo
2bpjxxKPA6GcvAWQuXwZiLOid3jKXdjP7q8OvEMM+sxDVp0oX1ZOC7s8h0SyqpL3
+U2Vi5RYlDZQHEwYqXK6DJkMQVNKHcsb/z0BM2KBDDY1AvOWAqFYu7eBT56EYPBS
ZZH8NILxSvPhVCgp+87irBwzlNGTWTYtGsV636q4tXtyBjOwpWvUeFuKnb+gglQc
ZMnLJY03cRNJDfbBhUzsdpgvJ4EBpWUyNRSwkt5ipyn9jZoZQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqwHj/EEv+cZcqVghgvDHz3WZUGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODE2ZjNkNjQtYTgzOS0z
YTJlLTk0ZTgtODMwNzZiODM1YWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBywMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZfg804R/ioPLHTR+xq+CpsF9CkDtlazz2wVSAsA6+383bOu00rHzjG
3PSyHYO1Bim3tGW1Gfs7tI89Ph7TG9nSm9Tk9mjWM4g1OZbmja3+0s6EZLRxwYIP
FqGQ65bxtDYBZ2umTkTjZncZtV6e8TXlzGYW/3yqxiWh246Ohb6XdfqLc7y4rAwO
AQxDNm0vT0LV0xSVPUbbA24VHZHpM8kysAkzU83D2cn4ZihTp5r3zwN94qJTOPiH
BNF/THmYU/PucAnUDSHNB+WJxIx5ynmxCneKJ70Sz+2QXjjXUXk3Mf9oHsbu4VTL
yHlFANKiwzgCj7TNAriPua4UJTFfjtM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:40 2025 by rpki-client