Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa
File:                     dcaafa36-cbc9-3741-b66e-6b1039749e40.roa (raw, json)
Hash identifier:          2LNXGnkb2VqDbjMbUUgOYxqzYscYaFMZJ+eWq3VKiYQ=
Subject key identifier:   54:11:0C:29:82:5B:3A:AB:1B:8E:13:9A:D5:2F:80:84:C7:95:D7:7A
Certificate issuer:       /CN=34f935ff-170a-4b14-b64c-790e52fa9534
Certificate serial:       010D0C9F4328584BA932664E34CD02945376F740
Authority key identifier: FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     8111
IP address blocks:        131.162.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:66:4e:34:cd:02:94:53:76:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f935ff-170a-4b14-b64c-790e52fa9534
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=e9d46d57-5998-44da-9e26-991b8f5fb5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:31:a2:f6:80:6f:84:ec:25:6a:fc:98:b9:
                    9c:fd:0f:69:eb:8c:08:40:ee:71:49:64:8b:e8:ae:
                    94:74:b6:93:20:b4:f2:f4:b8:16:0a:11:62:26:cb:
                    ec:ab:61:3e:80:01:f5:f4:4d:a1:c1:88:f5:9c:19:
                    49:39:f3:95:af:32:16:2b:33:df:98:aa:b6:16:f9:
                    2f:3c:8c:4c:09:56:bb:01:1d:1b:df:3e:49:51:c4:
                    91:8d:fc:fb:af:8e:75:d9:db:16:13:e8:a1:dc:13:
                    3f:c2:9f:28:ca:b5:4a:fb:f1:55:ba:c9:1a:4a:5f:
                    a7:a0:94:99:db:37:bd:bb:fd:54:8d:2c:3d:88:34:
                    db:14:d9:8c:35:77:75:6a:18:56:b3:78:86:cb:de:
                    77:91:55:37:8f:f7:b9:9b:24:ee:61:09:66:d6:ba:
                    8e:58:ee:9f:12:54:81:22:23:cf:b7:e4:e5:4b:e0:
                    d9:a1:d8:a5:5f:cb:57:d4:6b:3f:29:18:16:32:9f:
                    5b:28:be:89:ac:a0:de:3b:f6:9d:14:c9:80:05:16:
                    18:1e:c5:b3:32:5f:64:43:d2:40:cf:db:de:c6:f9:
                    24:0d:ea:01:13:3f:69:14:ed:0d:18:e0:2b:07:65:
                    9b:32:52:6b:1f:53:6a:d0:59:b5:2d:a9:78:1b:8b:
                    79:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:11:0C:29:82:5B:3A:AB:1B:8E:13:9A:D5:2F:80:84:C7:95:D7:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.crl

            X509v3 Authority Key Identifier:
                keyid:FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:ea:d0:8c:6b:0f:52:f7:75:9a:a4:89:d5:d0:39:b6:01:13:
         58:49:5c:55:86:0c:54:4e:92:b5:ea:ba:cd:33:53:d3:17:35:
         4a:df:e3:13:7d:04:29:40:44:da:c1:dc:e3:fc:25:56:dd:6e:
         89:9b:1c:04:4d:80:51:6b:08:21:ba:85:04:ac:07:de:ac:97:
         85:e8:a6:28:b0:84:2f:b3:88:65:a0:45:ef:48:fc:9a:b5:1e:
         26:a4:02:06:33:5e:b2:84:1b:48:c6:c4:36:3e:58:e4:f8:f2:
         b5:c3:ad:0a:12:9b:81:56:44:db:a1:82:a8:dc:c7:52:cc:20:
         d5:d0:27:b9:b5:92:3c:33:e1:9a:24:7b:5c:9f:c7:80:f0:90:
         f2:7e:dc:ce:b4:74:7e:ad:a6:6c:67:c1:35:df:40:9c:56:9f:
         5c:1c:68:88:c5:39:46:b9:59:46:1e:a6:20:8a:4c:93:f9:7a:
         78:d7:86:78:85:a5:c1:17:9e:09:fa:e7:97:a5:a5:b2:57:12:
         27:29:4a:c6:55:8e:04:cc:59:9c:ad:97:91:f7:8f:66:9a:56:
         6b:7f:ee:e6:b9:7c:5c:50:41:ff:6b:a7:14:ec:0b:66:f5:02:
         be:b5:5b:47:a5:38:7b:b4:73:99:9b:ad:41:6a:35:8b:a7:b3:
         70:b0:e9:26
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEupMmZONM0ClFN290AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRmOTM1ZmYtMTcwYS00YjE0LWI2NGMtNzkwZTUyZmE5
NTM0MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZTlkNDZkNTctNTk5OC00NGRhLTllMjYtOTkxYjhmNWZiNWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcIxovaAb4TsJWr8mLmc/Q9p64wIQO5xSWSL
6K6UdLaTILTy9LgWChFiJsvsq2E+gAH19E2hwYj1nBlJOfOVrzIWKzPfmKq2Fvkv
PIxMCVa7AR0b3z5JUcSRjfz7r4512dsWE+ih3BM/wp8oyrVK+/FVuskaSl+noJSZ
2ze9u/1UjSw9iDTbFNmMNXd1ahhWs3iGy953kVU3j/e5myTuYQlm1rqOWO6fElSB
IiPPt+TlS+DZodilX8tX1Gs/KRgWMp9bKL6JrKDeO/adFMmABRYYHsWzMl9kQ9JA
z9vexvkkDeoBEz9pFO0NGOArB2WbMlJrH1Nq0Fm1Lal4G4t5PQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFQRDCmCWzqrG44TmtUvgITHldd6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNGY5
MzVmZi0xNzBhLTRiMTQtYjY0Yy03OTBlNTJmYTk1MzQvZGNhYWZhMzYtY2JjOS0z
NzQxLWI2NmUtNmIxMDM5NzQ5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzRmOTM1ZmYtMTcwYS00YjE0LWI2
NGMtNzkwZTUyZmE5NTM0LzM0ZjkzNWZmLTE3MGEtNGIxNC1iNjRjLTc5MGU1MmZh
OTUzNC5jcmwwHwYDVR0jBBgwFoAU+9h6fXM7VpxZRdmviLxqIdayXY0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNGY5MzVmZi0xNzBhLTRiMTQtYjY0Yy03OTBl
NTJmYTk1MzQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg6IwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAy+rQjGsPUvd1mqSJ1dA5tgETWElcVYYMVE6Steq6zTNT0xc1St/jE30E
KUBE2sHc4/wlVt1uiZscBE2AUWsIIbqFBKwH3qyXheimKLCEL7OIZaBF70j8mrUe
JqQCBjNesoQbSMbENj5Y5PjytcOtChKbgVZE26GCqNzHUswg1dAnubWSPDPhmiR7
XJ/HgPCQ8n7czrR0fq2mbGfBNd9AnFafXBxoiMU5RrlZRh6mIIpMk/l6eNeGeIWl
wReeCfrnl6WlslcSJylKxlWOBMxZnK2XkfePZppWa3/u5rl8XFBB/2unFOwLZvUC
vrVbR6U4e7RzmZutQWo1i6ezcLDpJg==
-----END CERTIFICATE-----
Generated at Thu Nov 6 01:07:50 2025 by rpki-client