Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa
File:                     499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa (raw, json)
Hash identifier:          peUSmmoikozjuhWzytLIObTdOwYjwK437lEralpG264=
Subject key identifier:   AB:8C:00:D0:D0:74:B4:9F:22:0D:E6:57:FC:6B:32:FE:22:7F:94:FE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584BB2F82D1617987D54E3E5E500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     401152
IP address blocks:        168.93.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:2d:16:17:98:7d:54:e3:e5:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=7e61928d-39f9-43b6-80c0-677b3229f9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:6d:e4:0c:56:26:8c:47:ab:b0:b4:5a:d7:
                    5c:e7:53:9d:2a:95:67:4b:22:2a:1d:20:71:a4:48:
                    02:2d:e6:34:07:af:f2:e3:f6:8e:51:40:ee:82:69:
                    94:98:dd:2f:ac:b4:19:91:94:3d:07:f3:38:64:28:
                    73:22:a3:65:f1:a7:53:d8:2c:88:e9:a2:be:43:d4:
                    74:54:13:98:92:2b:75:1f:e9:de:36:11:fd:3d:25:
                    18:db:10:6a:ec:80:45:1d:1f:7b:20:26:ca:0d:2b:
                    7b:a5:15:2e:5a:74:8a:ab:32:0c:a6:f6:f3:01:df:
                    3e:ec:34:29:ce:c8:53:0a:f1:ce:17:24:57:1e:ea:
                    ff:94:16:b4:b9:38:f0:06:7c:32:c3:46:ac:24:cd:
                    66:39:ac:3a:0e:8e:a0:3c:ee:56:24:ec:43:fc:80:
                    55:72:0c:dd:10:01:54:ca:a7:26:5d:16:23:8a:ab:
                    b1:53:79:8f:2a:af:de:56:9b:ea:d2:9b:82:67:52:
                    53:f7:09:81:ca:50:64:06:81:36:1c:50:1d:26:f7:
                    f8:24:6e:c5:03:f1:89:7a:f2:85:50:ec:92:f3:82:
                    ea:f8:92:57:28:3f:84:55:46:0a:4a:57:8a:c4:77:
                    b4:7e:23:fd:59:bf:2b:70:b3:35:e4:cf:80:90:43:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8C:00:D0:D0:74:B4:9F:22:0D:E6:57:FC:6B:32:FE:22:7F:94:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/499089bd-aa5f-3a83-bcb5-9bb09bd1fff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:46:82:68:fb:27:f8:d4:a0:b2:2a:60:2b:31:7c:07:d4:df:
         2b:f6:0d:d3:5b:2d:c3:28:3d:4b:25:36:44:02:3d:c6:09:33:
         97:67:b4:42:17:a7:62:8c:74:8e:94:d3:38:87:42:98:16:bf:
         80:8a:c1:95:f3:d5:48:52:cd:2f:f6:6b:0b:32:df:93:a6:ce:
         cb:be:d4:f3:6b:15:23:c0:b2:29:7b:e0:44:b5:80:63:35:00:
         8d:b1:81:33:2b:6a:a5:d8:76:a8:d2:a1:4f:34:97:bb:e6:3f:
         6f:a1:44:40:88:94:52:0b:64:72:a5:fe:44:76:55:16:9d:05:
         b6:68:7f:f2:bd:98:32:2d:44:25:8a:1f:c6:b6:b1:0b:68:ba:
         f8:e6:7e:01:78:2b:be:e7:b6:fb:d5:72:df:1f:5c:86:83:dc:
         98:2b:0c:78:41:44:d7:df:73:09:7f:f5:c2:f6:87:1f:fe:47:
         ab:5d:af:47:e1:da:5b:38:2e:08:7b:d7:7b:12:de:99:d6:4e:
         8c:ea:75:12:f6:9f:59:5c:08:a5:01:4c:cd:97:de:1d:bd:d1:
         41:1e:3f:79:a3:c6:f0:cf:30:6f:c4:a2:6e:55:8c:54:5b:af:
         de:3b:0f:2b:21:fc:c2:13:1d:e9:0f:bb:81:fc:2f:26:c6:a3:
         2b:e5:c4:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+C0WF5h9VOPl5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
N2U2MTkyOGQtMzlmOS00M2I2LTgwYzAtNjc3YjMyMjlmOWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmBt5AxWJoxHq7C0Wtdc51OdKpVnSyIqHSBx
pEgCLeY0B6/y4/aOUUDugmmUmN0vrLQZkZQ9B/M4ZChzIqNl8adT2CyI6aK+Q9R0
VBOYkit1H+neNhH9PSUY2xBq7IBFHR97ICbKDSt7pRUuWnSKqzIMpvbzAd8+7DQp
zshTCvHOFyRXHur/lBa0uTjwBnwyw0asJM1mOaw6Do6gPO5WJOxD/IBVcgzdEAFU
yqcmXRYjiquxU3mPKq/eVpvq0puCZ1JT9wmBylBkBoE2HFAdJvf4JG7FA/GJevKF
UOyS84Lq+JJXKD+EVUYKSleKxHe0fiP9Wb8rcLM15M+AkEOUZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKuMANDQdLSfIg3mV/xrMv4if5T+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDk5MDg5YmQtYWE1Zi0z
YTgzLWJjYjUtOWJiMDliZDFmZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFGgmj7J/jUoLIqYCsxfAfU3yv2DdNbLcMoPUslNkQCPcYJM5dntEIX
p2KMdI6U0ziHQpgWv4CKwZXz1UhSzS/2awsy35Omzsu+1PNrFSPAsil74ES1gGM1
AI2xgTMraqXYdqjSoU80l7vmP2+hRECIlFILZHKl/kR2VRadBbZof/K9mDItRCWK
H8a2sQtouvjmfgF4K77ntvvVct8fXIaD3JgrDHhBRNffcwl/9cL2hx/+R6tdr0fh
2ls4Lgh713sS3pnWTozqdRL2n1lcCKUBTM2X3h290UEeP3mjxvDPMG/Eom5VjFRb
r947Dysh/MITHekPu4H8LybGoyvlxNw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:13:49 2025 by rpki-client