Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/30430383-4faa-3ae4-a96e-1a242a352e90.roa
File:                     30430383-4faa-3ae4-a96e-1a242a352e90.roa (raw, json)
Hash identifier:          vmMbT9YTVagkn/8L/fsHq6YD4kHG+RXp0OqI0jhz3V0=
Subject key identifier:   B0:B4:DC:BA:28:0C:DA:89:F7:01:84:72:04:1C:7A:FC:30:92:D9:B9
Certificate issuer:       /CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
Certificate serial:       010D0C9F4328584BA39D053DBD5369BD7FA24EC0
Authority key identifier: E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/30430383-4faa-3ae4-a96e-1a242a352e90.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        161.129.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:05:3d:bd:53:69:bd:7f:a2:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=97d95f0a-7fd9-4bd0-a1e3-8b62d1bdbdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7a:00:7f:31:cc:ad:d7:90:8c:44:6a:ac:06:
                    4e:99:8f:7a:94:f4:ee:21:27:80:a9:8e:6a:82:4e:
                    07:a0:1c:77:f5:9a:8e:c2:ad:56:e3:15:64:25:59:
                    d0:48:51:08:6c:e8:6d:08:7c:94:e8:4e:3a:64:0a:
                    52:d0:90:1f:57:d2:4c:9b:0a:93:9e:dd:e5:45:6c:
                    5d:0c:5f:10:c4:28:c4:4e:5f:59:0e:49:c9:31:0d:
                    c2:46:5c:bd:b8:a8:76:ad:1f:5b:fc:92:35:92:ec:
                    83:13:27:d0:9f:ae:60:6d:c0:06:65:9e:e8:0c:91:
                    87:ac:b3:16:d1:a4:c9:0b:af:99:48:70:37:b3:ae:
                    ba:75:18:dd:74:36:8e:53:18:b7:cc:61:30:0b:52:
                    a9:f8:3a:66:6e:1d:d1:0e:a4:fe:56:c6:36:cc:06:
                    11:f5:47:91:d3:b0:57:21:7b:28:96:64:7a:fd:69:
                    7d:0b:f1:04:0a:60:41:44:64:af:e1:2c:89:47:5c:
                    0e:50:2f:70:6d:31:b7:1b:5f:28:35:5b:1a:1a:32:
                    02:9e:63:1f:2a:99:f5:97:c2:d2:d9:7b:84:75:8b:
                    67:05:fc:ff:52:c0:10:b3:43:b3:2e:75:76:d5:23:
                    b7:62:cf:12:38:63:f1:84:21:43:79:21:70:31:fc:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B4:DC:BA:28:0C:DA:89:F7:01:84:72:04:1C:7A:FC:30:92:D9:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/30430383-4faa-3ae4-a96e-1a242a352e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl

            X509v3 Authority Key Identifier:
                keyid:E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a7:b0:ae:e5:49:df:f9:c4:cd:c7:9b:7c:2c:1d:bf:4d:39:
         13:58:6c:2e:bc:d8:a4:fb:a1:db:87:76:79:80:1a:7e:35:52:
         71:28:c3:ab:34:76:7b:1a:85:af:27:b6:60:b1:49:c2:dc:87:
         de:98:2f:b4:1f:61:02:d9:98:b1:a2:bd:61:db:36:09:b0:c6:
         cf:8a:97:1a:4a:40:79:2a:ec:30:76:4e:c1:e4:d9:aa:15:b6:
         7e:dc:da:82:11:cc:3b:7f:3d:15:d6:ed:02:67:59:fc:51:9a:
         6f:76:fd:44:04:60:2c:8b:e5:90:9f:fb:a5:fe:51:bb:25:34:
         16:b1:c7:da:a5:b2:d2:76:68:81:43:bb:e3:a3:44:21:f7:63:
         39:91:51:47:49:13:12:fc:c1:1e:80:01:57:b4:92:9b:45:3d:
         8c:00:1c:06:4e:34:74:ec:a9:6f:0c:3f:a0:5f:4d:91:3a:2a:
         17:61:e3:19:64:57:88:43:ea:da:3b:b3:be:60:60:48:d8:12:
         3a:fc:ea:63:84:55:c6:04:d2:fd:c7:46:81:66:47:3e:3d:60:
         b1:d2:84:a3:93:de:7f:3b:bb:96:fa:89:67:e1:05:fb:fd:d1:
         24:89:5f:ad:24:8a:0b:dc:92:30:c5:77:ee:ac:5d:27:dd:2f:
         1a:94:2e:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQU9vVNpvX+iTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUzNzlkZWUtNTU1Ni00MmI0LThiOGQtNjNkYmZhZjRm
MGVkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
OTdkOTVmMGEtN2ZkOS00YmQwLWExZTMtOGI2MmQxYmRiZGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinoAfzHMrdeQjERqrAZOmY96lPTuISeAqY5q
gk4HoBx39ZqOwq1W4xVkJVnQSFEIbOhtCHyU6E46ZApS0JAfV9JMmwqTnt3lRWxd
DF8QxCjETl9ZDknJMQ3CRly9uKh2rR9b/JI1kuyDEyfQn65gbcAGZZ7oDJGHrLMW
0aTJC6+ZSHA3s666dRjddDaOUxi3zGEwC1Kp+Dpmbh3RDqT+VsY2zAYR9UeR07BX
IXsolmR6/Wl9C/EECmBBRGSv4SyJR1wOUC9wbTG3G18oNVsaGjICnmMfKpn1l8LS
2XuEdYtnBfz/UsAQs0OzLnV21SO3Ys8SOGPxhCFDeSFwMfzf6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLC03LooDNqJ9wGEcgQcevwwktm5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTM3
OWRlZS01NTU2LTQyYjQtOGI4ZC02M2RiZmFmNGYwZWQvMzA0MzAzODMtNGZhYS0z
YWU0LWE5NmUtMWEyNDJhMzUyZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmUzNzlkZWUtNTU1Ni00MmI0LThi
OGQtNjNkYmZhZjRmMGVkLzZlMzc5ZGVlLTU1NTYtNDJiNC04YjhkLTYzZGJmYWY0
ZjBlZC5jcmwwHwYDVR0jBBgwFoAU6ZuIwn9yDKts61oS7GF5pd5ThCIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTM3OWRlZS01NTU2LTQyYjQtOGI4ZC02M2Ri
ZmFmNGYwZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYG4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAunsK7lSd/5xM3Hm3wsHb9NORNYbC682KT7oduHdnmAGn41UnEow6s0
dnsaha8ntmCxScLch96YL7QfYQLZmLGivWHbNgmwxs+KlxpKQHkq7DB2TsHk2aoV
tn7c2oIRzDt/PRXW7QJnWfxRmm92/UQEYCyL5ZCf+6X+UbslNBaxx9qlstJ2aIFD
u+OjRCH3YzmRUUdJExL8wR6AAVe0kptFPYwAHAZONHTsqW8MP6BfTZE6Khdh4xlk
V4hD6to7s75gYEjYEjr86mOEVcYE0v3HRoFmRz49YLHShKOT3n87u5b6iWfhBfv9
0SSJX60kigvckjDFd+6sXSfdLxqULoY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:20:46 2025 by rpki-client