Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/2810cea8-af00-3ec6-aed4-18557ed3f8fe.roa
File:                     2810cea8-af00-3ec6-aed4-18557ed3f8fe.roa (raw, json)
Hash identifier:          q4cqXH0kGc8P2wXPiAp/pJBHGiu0ROb9wFI85HPGOdc=
Subject key identifier:   24:93:17:2D:56:C2:12:67:A6:31:D3:56:44:A5:82:46:6A:FD:F9:77
Certificate issuer:       /CN=e76368c6-7013-4f98-819f-c6329c83d1c8
Certificate serial:       010D0C9F4328584AEF4495A4754968712D775F40
Authority key identifier: 54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/2810cea8-af00-3ec6-aed4-18557ed3f8fe.roa
Signing time:             Thu 21 Aug 2025 22:37:09 +0000
ROA not before:           Thu 21 Aug 2025 22:37:09 +0000
ROA not after:            Wed 19 Nov 2025 23:37:09 +0000
asID:                     16509
IP address blocks:        148.105.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:44:95:a4:75:49:68:71:2d:77:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76368c6-7013-4f98-819f-c6329c83d1c8
        Validity
            Not Before: Aug 21 22:37:09 2025 GMT
            Not After : Nov 19 23:37:09 2025 GMT
        Subject: CN=8574c83b-1f69-41ff-ad08-bb92e28a5bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:1e:82:c6:eb:b9:7f:fc:b2:a7:53:c7:4d:
                    69:27:47:90:31:9c:55:7f:95:6c:61:9f:9a:75:4f:
                    95:28:9a:f7:65:29:6a:a1:61:fd:4e:11:c4:43:0e:
                    38:b8:18:14:b1:10:3d:8c:d2:67:cf:7b:df:0d:d8:
                    91:4f:47:89:73:45:2b:d7:23:b0:52:e6:fc:19:f7:
                    97:6f:98:9d:56:ab:ea:9c:74:7a:6b:d9:de:52:8a:
                    76:11:92:b4:e0:2f:bf:87:e7:5d:6a:d5:64:c0:bd:
                    ec:86:41:df:6d:db:61:ca:e1:07:da:99:ad:e9:a2:
                    94:ed:70:0b:9a:29:e3:b9:ff:f6:00:82:81:fc:cf:
                    fd:1d:87:1e:f5:86:8d:19:58:c0:c8:88:56:93:23:
                    7c:c2:9f:d1:00:97:ee:30:24:ac:c6:33:6d:6f:97:
                    7f:3c:20:b9:56:cd:4b:21:2f:6f:ec:57:89:ae:64:
                    2d:96:f8:60:e1:a6:1f:3e:b4:18:ee:23:04:e4:84:
                    aa:6e:8b:5f:b4:f2:1f:04:75:5f:ca:73:8a:84:25:
                    a7:ac:ed:e7:c8:8e:5a:3e:90:26:fe:37:0e:91:f4:
                    ea:b8:e5:bc:7f:3b:e4:21:b2:dc:10:9d:bc:3d:54:
                    3c:e7:2d:78:ba:2f:39:65:6e:bc:5c:69:4f:a7:fc:
                    92:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:93:17:2D:56:C2:12:67:A6:31:D3:56:44:A5:82:46:6A:FD:F9:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/2810cea8-af00-3ec6-aed4-18557ed3f8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl

            X509v3 Authority Key Identifier:
                keyid:54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.105.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:48:64:ef:8e:67:70:1b:fe:60:fa:75:0d:6a:51:17:b5:ac:
         93:11:f2:94:a3:00:2a:2f:1a:2e:89:5f:73:0e:ee:57:a9:ed:
         a8:98:80:bd:12:dc:48:12:cd:8b:23:57:87:b8:7f:f4:5f:dc:
         eb:1b:c2:2a:eb:75:9d:11:f1:ea:2e:27:08:51:22:6d:00:2d:
         dc:51:ec:ab:58:48:d4:81:e4:cb:e7:52:93:0a:08:b5:3d:26:
         29:bb:56:0f:36:fd:7d:ea:b6:81:7f:13:08:97:56:8b:7c:da:
         bb:1f:55:db:71:e3:59:7f:29:92:04:7e:18:f0:28:ca:e9:0b:
         1b:a5:ba:74:f4:2b:64:d3:14:54:d3:52:77:0c:7b:c6:a8:ab:
         46:75:b4:7f:ae:ab:f1:e6:74:f7:1e:83:36:46:f1:c3:49:7e:
         69:3f:bc:e7:7d:2c:85:34:65:bb:8c:6a:f5:02:77:46:df:ec:
         f3:6d:5a:76:8d:5e:87:11:5a:4e:98:c0:c7:a3:14:e7:c6:51:
         6c:6f:b5:f6:31:e7:78:59:63:4a:e7:4d:dd:ca:c8:c1:19:4b:
         43:fe:8d:b2:5d:78:bb:26:df:1a:39:54:6b:bb:cc:e3:b8:04:
         ae:7c:2e:44:4c:5a:b3:7f:66:7f:55:51:35:2a:bd:0e:6b:1f:
         33:4f:33:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvRJWkdUlocS13X0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTc2MzY4YzYtNzAxMy00Zjk4LTgxOWYtYzYzMjljODNk
MWM4MB4XDTI1MDgyMTIyMzcwOVoXDTI1MTExOTIzMzcwOVowLzEtMCsGA1UEAxMk
ODU3NGM4M2ItMWY2OS00MWZmLWFkMDgtYmI5MmUyOGE1YmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqwegsbruX/8sqdTx01pJ0eQMZxVf5VsYZ+a
dU+VKJr3ZSlqoWH9ThHEQw44uBgUsRA9jNJnz3vfDdiRT0eJc0Ur1yOwUub8GfeX
b5idVqvqnHR6a9neUop2EZK04C+/h+ddatVkwL3shkHfbdthyuEH2pmt6aKU7XAL
minjuf/2AIKB/M/9HYce9YaNGVjAyIhWkyN8wp/RAJfuMCSsxjNtb5d/PCC5Vs1L
IS9v7FeJrmQtlvhg4aYfPrQY7iME5ISqbotftPIfBHVfynOKhCWnrO3nyI5aPpAm
/jcOkfTquOW8fzvkIbLcEJ28PVQ85y14ui85ZW68XGlPp/ySHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSTFy1WwhJnpjHTVkSlgkZq/fl3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lNzYz
NjhjNi03MDEzLTRmOTgtODE5Zi1jNjMyOWM4M2QxYzgvMjgxMGNlYTgtYWYwMC0z
ZWM2LWFlZDQtMTg1NTdlZDNmOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTc2MzY4YzYtNzAxMy00Zjk4LTgx
OWYtYzYzMjljODNkMWM4L2U3NjM2OGM2LTcwMTMtNGY5OC04MTlmLWM2MzI5Yzgz
ZDFjOC5jcmwwHwYDVR0jBBgwFoAUVNO70yKU7AEphvhnVuR4we4XHz4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9lNzYzNjhjNi03MDEzLTRmOTgtODE5Zi1jNjMy
OWM4M2QxYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlGkEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhIZO+OZ3Ab/mD6dQ1qURe1rJMR8pSjACovGi6JX3MO7lep7aiYgL0S
3EgSzYsjV4e4f/Rf3OsbwirrdZ0R8eouJwhRIm0ALdxR7KtYSNSB5MvnUpMKCLU9
Jim7Vg82/X3qtoF/EwiXVot82rsfVdtx41l/KZIEfhjwKMrpCxulunT0K2TTFFTT
UncMe8aoq0Z1tH+uq/HmdPcegzZG8cNJfmk/vOd9LIU0ZbuMavUCd0bf7PNtWnaN
XocRWk6YwMejFOfGUWxvtfYx53hZY0rnTd3KyMEZS0P+jbJdeLsm3xo5VGu7zOO4
BK58LkRMWrN/Zn9VUTUqvQ5rHzNPM9A=
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:47:17 2025 by rpki-client