Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/480c00b3-5d59-3bed-b898-2c031081b71b.roa
File:                     480c00b3-5d59-3bed-b898-2c031081b71b.roa (raw, json)
Hash identifier:          Pi7Th9xF5nYFj6znRLmZMbPvbULxyQvFxAQAD9h1Qbo=
Subject key identifier:   49:7C:C8:7A:99:B1:94:15:B9:73:A4:13:99:BD:E6:B5:29:E8:08:0B
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584AB6FAB69BF2DF3492DD982E80
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/480c00b3-5d59-3bed-b898-2c031081b71b.roa
Signing time:             Fri 01 Aug 2025 18:43:02 +0000
ROA not before:           Fri 01 Aug 2025 18:43:02 +0000
ROA not after:            Thu 30 Oct 2025 18:43:02 +0000
asID:                     31898
IP address blocks:        108.167.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:fa:b6:9b:f2:df:34:92:dd:98:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Aug  1 18:43:02 2025 GMT
            Not After : Oct 30 18:43:02 2025 GMT
        Subject: CN=ec72f450-6f0d-4f44-a2b3-50677c8c3953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:4b:45:7b:a2:6e:da:20:33:75:28:45:cf:
                    2b:9b:a5:9e:6f:0a:0b:6d:75:60:c7:5f:b3:d1:3a:
                    84:8c:96:cc:e7:9e:34:19:fd:ae:e1:08:af:a8:fb:
                    29:22:a9:c4:3e:b3:bc:6d:b0:5e:d2:c9:8a:ec:94:
                    1a:6e:e7:14:2c:12:e7:52:d8:5a:4e:0e:78:d2:ba:
                    ae:18:1f:bd:60:d1:f8:ef:45:e0:84:c4:1d:1a:be:
                    fa:a1:2a:69:31:be:9b:5a:0f:13:2b:b6:ee:ce:1e:
                    43:17:9a:d4:e5:48:c0:03:41:57:a3:cc:f1:84:98:
                    85:58:95:1e:5d:7d:a6:bd:6e:dd:87:7b:82:ef:75:
                    da:aa:5e:9c:31:14:9e:eb:96:49:32:c7:c6:73:77:
                    cf:a9:8e:46:ff:11:d7:27:5d:3b:3b:e5:ab:4f:5e:
                    27:7f:cf:46:19:db:9a:be:b5:35:d6:c9:df:2c:1e:
                    16:e3:59:f0:f9:b5:a0:c6:51:b7:d2:5c:67:c4:1c:
                    63:2d:de:0d:56:55:05:40:e1:a7:a1:3a:9d:e3:0c:
                    6c:ed:55:43:b2:6d:82:22:32:c4:53:6c:7e:bb:1b:
                    35:ac:5f:bb:a5:19:6e:f1:15:d5:e5:68:10:51:92:
                    47:42:2f:c4:46:54:69:ff:92:b4:c3:1f:60:fd:fc:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7C:C8:7A:99:B1:94:15:B9:73:A4:13:99:BD:E6:B5:29:E8:08:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/480c00b3-5d59-3bed-b898-2c031081b71b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.167.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:e4:eb:fe:08:fe:2d:8b:d2:c4:cd:52:76:e6:ce:cf:5c:
         8b:08:97:d1:32:fc:bb:36:7c:a3:1b:4d:30:4c:38:7b:db:53:
         b4:c6:5a:0e:28:b4:d9:ee:a4:50:36:63:3a:e7:ee:bf:5a:f3:
         c4:86:09:30:56:43:51:fc:ff:6a:c4:26:f2:47:99:0b:82:e3:
         e7:19:d4:f5:b1:54:ce:05:c9:4b:c3:3d:11:b3:dd:28:8b:cd:
         bc:53:04:3c:d9:5b:e9:f8:0b:47:62:1f:18:95:42:f2:6d:91:
         a2:fa:3b:0f:5f:21:5b:7a:b5:5d:52:ad:48:6b:c6:8b:ad:a6:
         0d:88:4a:89:bf:3b:a3:b5:21:5a:5e:1e:f3:3d:00:20:71:b0:
         76:c8:f8:99:7c:22:67:22:84:24:8a:f6:b4:1e:f0:69:2b:88:
         42:5d:11:50:12:01:b3:28:d0:b0:13:62:68:86:d8:f2:18:7d:
         85:1f:bd:aa:20:18:e8:72:a9:76:e1:d5:c0:49:28:75:74:c9:
         a7:1a:88:1e:77:8e:43:90:fa:a3:9f:dc:bf:31:3c:de:d5:be:
         dc:b2:8b:74:02:66:e5:30:12:40:f5:b3:d7:db:31:ba:e4:2a:
         04:f3:c7:d2:aa:8a:aa:2f:51:ae:2b:5c:02:28:70:23:b6:a4:
         8c:03:38:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2+rab8t80kt2YLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI1MDgwMTE4NDMwMloXDTI1MTAzMDE4NDMwMlowLzEtMCsGA1UEAxMk
ZWM3MmY0NTAtNmYwZC00ZjQ0LWEyYjMtNTA2NzdjOGMzOTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3RLRXuibtogM3UoRc8rm6WebwoLbXVgx1+z
0TqEjJbM5540Gf2u4QivqPspIqnEPrO8bbBe0smK7JQabucULBLnUthaTg540rqu
GB+9YNH470XghMQdGr76oSppMb6bWg8TK7buzh5DF5rU5UjAA0FXo8zxhJiFWJUe
XX2mvW7dh3uC73Xaql6cMRSe65ZJMsfGc3fPqY5G/xHXJ107O+WrT14nf89GGdua
vrU11snfLB4W41nw+bWgxlG30lxnxBxjLd4NVlUFQOGnoTqd4wxs7VVDsm2CIjLE
U2x+uxs1rF+7pRlu8RXV5WgQUZJHQi/ERlRp/5K0wx9g/fzVSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEl8yHqZsZQVuXOkE5m95rUp6AgLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvNDgwYzAwYjMtNWQ1OS0z
YmVkLWI4OTgtMmMwMzEwODFiNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbKeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPN5Ov+CP4ti9LEzVJ25s7PXIsIl9Ey/Ls2fKMbTTBMOHvbU7TGWg4o
tNnupFA2Yzrn7r9a88SGCTBWQ1H8/2rEJvJHmQuC4+cZ1PWxVM4FyUvDPRGz3SiL
zbxTBDzZW+n4C0diHxiVQvJtkaL6Ow9fIVt6tV1SrUhrxoutpg2ISom/O6O1IVpe
HvM9ACBxsHbI+Jl8ImcihCSK9rQe8GkriEJdEVASAbMo0LATYmiG2PIYfYUfvaog
GOhyqXbh1cBJKHV0yacaiB53jkOQ+qOf3L8xPN7Vvtyyi3QCZuUwEkD1s9fbMbrk
KgTzx9KqiqovUa4rXAIocCO2pIwDODE=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:07:09 2025 by rpki-client