Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/39ec9af8-8fa7-38c0-9d93-ae0c1c1350f4.roa
File:                     39ec9af8-8fa7-38c0-9d93-ae0c1c1350f4.roa (raw, json)
Hash identifier:          YovKF5myQJIdkNlqYSgR8SWHfeMujE779dHAu5kKQyI=
Subject key identifier:   88:88:5E:95:E6:05:F9:82:54:96:6C:0B:B0:95:12:8C:20:AB:70:BC
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584BAD628AA9186FEBADCDD55F40
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/39ec9af8-8fa7-38c0-9d93-ae0c1c1350f4.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        137.184.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:8a:a9:18:6f:eb:ad:cd:d5:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=e2b679b2-bd2b-487e-9a14-fc843c394136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:94:72:6f:f5:a6:b9:52:6e:fc:93:49:49:9c:
                    88:b3:e7:5d:87:18:76:b3:d6:fd:62:82:6d:9b:e9:
                    f1:64:f8:aa:aa:42:3b:15:ec:f7:84:6a:5e:61:c3:
                    3c:31:14:0a:83:66:92:dc:66:e4:85:a0:7a:c6:8e:
                    02:91:13:85:6f:b1:92:df:90:99:d3:d6:c0:70:a2:
                    9f:4d:1f:65:3f:da:12:3c:46:74:b3:08:e9:f9:5a:
                    8a:0c:fe:e7:5c:21:55:c5:c9:3e:c5:61:b1:88:05:
                    f7:a8:d2:5b:74:57:d0:d0:d3:56:02:47:01:3f:14:
                    7b:bc:7b:41:18:ea:3c:b3:70:96:6b:0a:20:4d:eb:
                    49:6f:22:f5:7c:05:eb:a7:06:a6:5f:c1:b8:6c:82:
                    b5:90:5f:51:0b:51:1f:d7:6c:64:9a:0f:e2:a5:72:
                    2b:21:93:12:d3:2a:58:d7:13:84:46:9c:97:55:2b:
                    50:66:a8:63:ee:4f:18:4d:2c:d0:55:18:ba:27:a4:
                    a3:42:f6:6c:2b:83:60:ec:a9:62:0a:33:f4:31:25:
                    dc:19:81:ed:73:8f:36:2e:74:5b:e9:4e:d9:6a:5f:
                    3f:43:d8:d6:9e:ab:8d:4d:fa:29:d2:14:97:69:42:
                    44:ad:e9:c0:ca:64:cc:15:9d:29:c9:70:33:06:79:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:88:5E:95:E6:05:F9:82:54:96:6C:0B:B0:95:12:8C:20:AB:70:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/39ec9af8-8fa7-38c0-9d93-ae0c1c1350f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.184.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:9a:e3:1d:de:25:0e:42:bf:64:93:7b:14:9c:9d:90:7f:30:
         8b:5e:5a:97:6e:77:be:e6:40:74:7e:61:29:44:d8:e1:a6:76:
         2c:83:89:b0:03:0d:66:1b:58:3a:35:c1:99:b3:34:7a:88:29:
         9e:d0:c6:52:44:dd:9f:0c:e2:cc:4c:f1:c1:5a:5b:3a:88:91:
         14:58:0f:bc:6b:3f:da:ba:46:34:fd:c1:e4:eb:66:75:b1:62:
         30:04:96:b6:6e:b2:d0:2f:52:b3:c2:7f:79:1b:68:05:44:b7:
         96:4d:53:f5:e9:ab:49:e7:5b:25:9e:43:6d:72:57:b0:98:40:
         57:15:16:54:51:bc:43:bc:05:f1:f1:e5:ac:35:b4:01:ac:c5:
         91:64:2a:e0:5f:b7:fd:4f:86:4f:48:c1:51:9a:33:88:cc:b2:
         ba:5a:e1:75:26:fe:2f:24:25:16:0b:89:82:31:ac:49:57:5b:
         ba:79:62:1f:27:51:07:8a:f7:d6:8e:ac:76:68:5a:50:26:1e:
         69:87:7a:52:20:25:ba:a1:82:8a:c5:1c:91:be:b6:d5:e8:31:
         a5:52:dd:c2:a5:17:65:62:38:77:94:76:99:17:10:69:ed:a9:
         46:37:18:7c:d3:ef:8e:52:57:10:99:89:35:1a:45:95:95:d0:
         46:de:a7:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYoqpGG/rrc3VX0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZTJiNjc5YjItYmQyYi00ODdlLTlhMTQtZmM4NDNjMzk0MTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5Ryb/WmuVJu/JNJSZyIs+ddhxh2s9b9YoJt
m+nxZPiqqkI7Fez3hGpeYcM8MRQKg2aS3GbkhaB6xo4CkROFb7GS35CZ09bAcKKf
TR9lP9oSPEZ0swjp+VqKDP7nXCFVxck+xWGxiAX3qNJbdFfQ0NNWAkcBPxR7vHtB
GOo8s3CWawogTetJbyL1fAXrpwamX8G4bIK1kF9RC1Ef12xkmg/ipXIrIZMS0ypY
1xOERpyXVStQZqhj7k8YTSzQVRi6J6SjQvZsK4Ng7KliCjP0MSXcGYHtc482LnRb
6U7Zal8/Q9jWnquNTfop0hSXaUJErenAymTMFZ0pyXAzBnn+3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIiIXpXmBfmCVJZsC7CVEowgq3C8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMzllYzlhZjgtOGZhNy0z
OGMwLTlkOTMtYWUwYzFjMTM1MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAibj9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2a4x3eJQ5Cv2STexScnZB/MIteWpdud77mQHR+YSlE2OGmdiyDibAD
DWYbWDo1wZmzNHqIKZ7QxlJE3Z8M4sxM8cFaWzqIkRRYD7xrP9q6RjT9weTrZnWx
YjAElrZustAvUrPCf3kbaAVEt5ZNU/Xpq0nnWyWeQ21yV7CYQFcVFlRRvEO8BfHx
5aw1tAGsxZFkKuBft/1Phk9IwVGaM4jMsrpa4XUm/i8kJRYLiYIxrElXW7p5Yh8n
UQeK99aOrHZoWlAmHmmHelIgJbqhgorFHJG+ttXoMaVS3cKlF2ViOHeUdpkXEGnt
qUY3GHzT745SVxCZiTUaRZWV0Ebep9o=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:13 2025 by rpki-client