Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa
File:                     2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa (raw, json)
Hash identifier:          jPe5T23o8nihOqjKYqUA8W3qODB764CMT8IVzfuUNTU=
Subject key identifier:   4B:82:A2:A4:4C:C4:D5:BF:C6:11:EE:C5:B4:D3:C8:1E:69:CD:62:AA
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F4328584A9D30E710E044EED4D24C9280
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     14977
IP address blocks:        137.85.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e7:10:e0:44:ee:d4:d2:4c:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=c2ecd3ea-9067-4935-a941-44d98ad157bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:83:dd:dd:9e:02:92:66:ce:d2:3d:07:7b:a2:
                    5d:84:cf:fa:19:21:21:6c:6e:a7:2c:53:33:35:ab:
                    51:67:4d:fb:7f:44:5a:38:7d:b6:83:b0:a2:6d:eb:
                    0b:14:79:46:36:13:88:4c:41:91:a8:99:a0:d7:df:
                    cc:19:0e:ee:ae:e8:13:b7:68:56:40:8f:ed:c9:54:
                    cc:14:64:69:fa:22:d8:ad:a2:dd:be:20:41:b3:83:
                    f3:46:e2:ef:d3:8b:8c:5b:ce:be:de:5c:e9:04:ed:
                    74:d4:56:35:57:ee:7d:42:4d:95:8e:4d:88:03:a1:
                    56:c7:99:d1:b1:8f:ae:a4:8d:a7:e0:78:bd:db:7b:
                    f5:4d:4b:81:be:6f:3e:37:c4:1d:7a:2b:6b:86:44:
                    9a:2d:22:08:ba:7a:07:d4:6c:30:e5:43:b1:11:17:
                    07:c0:b1:f8:61:67:4d:4c:f7:4d:28:7d:27:1b:18:
                    b5:0b:8b:a3:61:3d:0e:40:9f:d1:3b:42:50:fb:24:
                    fe:1f:3b:ab:3c:6f:00:31:e3:17:3d:b6:79:c2:d3:
                    e3:3a:d3:f0:5d:5f:da:1c:3d:1c:2f:df:4d:78:2f:
                    a5:cb:e9:6a:f4:5c:db:12:08:97:10:3c:e8:ee:f8:
                    64:d9:74:44:0d:4c:01:eb:15:b7:96:34:08:61:46:
                    b1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:82:A2:A4:4C:C4:D5:BF:C6:11:EE:C5:B4:D3:C8:1E:69:CD:62:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2e6ae133-653d-3aca-9053-8f38ea48ed7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a3:f1:d6:91:59:04:fc:cd:8d:86:48:d1:87:37:93:00:25:
         51:fd:73:73:66:8b:5b:00:ad:07:82:a1:a1:77:2d:0d:1b:33:
         4f:5c:89:61:d7:8e:5e:50:c5:1b:2f:4e:36:30:89:b3:40:29:
         f6:4e:d6:7f:ce:14:f0:07:d2:b1:9a:37:f1:af:db:8e:fd:f9:
         bd:79:c9:82:13:d6:80:78:f2:6f:5c:75:36:ab:c0:bb:81:69:
         61:18:3e:1e:7f:8f:49:f7:8c:85:f7:d9:48:8a:63:9e:ca:9d:
         57:e8:60:03:b1:37:d2:65:7f:0c:a9:b3:68:6a:b9:29:21:aa:
         3c:45:06:27:88:f4:6c:63:23:30:f3:0d:01:c6:90:69:8f:3d:
         b8:bd:65:26:80:81:fc:8e:d6:c3:91:d2:ef:2b:60:ef:b9:76:
         d6:dc:1e:e1:60:a1:82:47:2b:df:13:af:ec:6e:fd:a6:11:27:
         03:22:4c:53:a8:92:b5:1c:77:fe:c1:7d:b0:27:dd:87:d8:36:
         b1:a9:c2:6d:d9:c4:b8:dc:ac:8b:77:89:ac:bf:07:99:45:40:
         37:9d:dd:89:53:11:79:3c:f6:18:d7:0b:75:b3:24:07:ed:6d:
         30:67:b6:12:bc:d6:68:96:96:d6:83:e8:60:11:20:50:d7:ab:
         74:51:28:f5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqdMOcQ4ETu1NJMkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm
ZDhmMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk
YzJlY2QzZWEtOTA2Ny00OTM1LWE5NDEtNDRkOThhZDE1N2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIPd3Z4CkmbO0j0He6JdhM/6GSEhbG6nLFMz
NatRZ037f0RaOH22g7CibesLFHlGNhOITEGRqJmg19/MGQ7urugTt2hWQI/tyVTM
FGRp+iLYraLdviBBs4PzRuLv04uMW86+3lzpBO101FY1V+59Qk2Vjk2IA6FWx5nR
sY+upI2n4Hi923v1TUuBvm8+N8QdeitrhkSaLSIIunoH1Gww5UOxERcHwLH4YWdN
TPdNKH0nGxi1C4ujYT0OQJ/RO0JQ+yT+HzurPG8AMeMXPbZ5wtPjOtPwXV/aHD0c
L99NeC+ly+lq9FzbEgiXEDzo7vhk2XREDUwB6xW3ljQIYUaxGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEuCoqRMxNW/xhHuxbTTyB5pzWKqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5
MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvMmU2YWUxMzMtNjUzZC0z
YWNhLTkwNTMtOGYzOGVhNDhlZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx
MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz
ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz
MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYKPx1pFZBPzNjYZI0Yc3kwAlUf1zc2aLWwCtB4KhoXctDRszT1yJYdeO
XlDFGy9ONjCJs0Ap9k7Wf84U8AfSsZo38a/bjv35vXnJghPWgHjyb1x1NqvAu4Fp
YRg+Hn+PSfeMhffZSIpjnsqdV+hgA7E30mV/DKmzaGq5KSGqPEUGJ4j0bGMjMPMN
AcaQaY89uL1lJoCB/I7Ww5HS7ytg77l21twe4WChgkcr3xOv7G79phEnAyJMU6iS
tRx3/sF9sCfdh9g2sanCbdnEuNysi3eJrL8HmUVAN53diVMReTz2GNcLdbMkB+1t
MGe2ErzWaJaW1oPoYBEgUNerdFEo9Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:41 2025 by rpki-client