Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/04ff827f-7df6-3286-9386-4d91998c20d7.roa
File:                     04ff827f-7df6-3286-9386-4d91998c20d7.roa (raw, json)
Hash identifier:          z4+WmA6JYbARDsHwjQ8L6wpZ8j9ZY0Pjcix5e6FZ2g0=
Subject key identifier:   60:08:A4:A6:0B:57:BD:E2:10:58:68:FA:B1:4F:1D:EE:AE:21:38:D6
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BA7CCF4E1844EABE5A7FE34B0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/04ff827f-7df6-3286-9386-4d91998c20d7.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     19955
IP address blocks:        216.119.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:f4:e1:84:4e:ab:e5:a7:fe:34:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=60e8ec17-f4e2-4c70-b253-37dca1cf7785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:6c:6a:c2:b1:04:8b:c2:b7:66:aa:56:17:
                    93:f6:a5:0a:c5:0c:6b:32:38:f9:78:af:85:5e:1d:
                    53:e3:e4:6c:0f:e1:e8:63:bd:95:67:e7:a5:c8:0e:
                    97:69:80:26:ef:26:1e:5f:eb:51:97:f9:57:09:5b:
                    08:e3:e9:dc:5c:2c:54:7b:ea:d3:44:b4:d1:81:26:
                    48:56:bb:7e:84:60:bf:0d:21:4b:15:9e:d6:dc:a2:
                    8d:35:5d:31:42:de:b3:bc:bc:b7:ad:4e:08:c0:f6:
                    c5:e5:b4:94:db:c9:fa:03:c1:dc:f1:6c:b0:b3:30:
                    bd:6f:8a:2c:4b:7d:e2:7d:26:86:d4:da:6c:87:fb:
                    8a:9a:bb:dd:3e:4e:91:71:24:ca:81:ec:d1:12:33:
                    49:81:42:e6:ba:12:0d:59:0f:93:62:13:26:d1:c2:
                    bd:1b:b1:e7:6f:26:9d:70:52:ba:89:de:0b:01:d9:
                    56:d7:de:a5:cf:b5:65:cb:4a:23:75:cb:de:c4:5e:
                    4b:5a:17:62:66:0c:6a:91:03:99:c3:bf:25:1d:bf:
                    54:6e:33:48:7f:84:f6:ca:0c:f1:e8:60:6b:01:3f:
                    1a:17:d2:2a:21:76:04:0b:ca:75:6f:7a:10:29:e9:
                    dc:f9:4b:36:38:eb:31:e7:eb:4e:5b:6d:8c:bd:a9:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:08:A4:A6:0B:57:BD:E2:10:58:68:FA:B1:4F:1D:EE:AE:21:38:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/04ff827f-7df6-3286-9386-4d91998c20d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:16:d2:b2:9d:c2:01:03:e4:5d:d9:96:7c:b6:d9:27:75:fd:
         fe:f1:61:90:e6:4a:d2:ba:ad:14:a2:ac:8c:a9:69:98:cc:8c:
         5c:ea:40:99:8b:67:07:03:ac:26:86:8a:40:62:0e:a0:ba:fe:
         f2:77:21:2e:c0:4a:9c:40:33:2c:96:b5:cb:f0:cb:42:6c:c0:
         19:e1:ad:c2:c4:c3:38:66:f3:65:bc:90:f1:f8:d9:fd:04:03:
         c6:97:70:6b:ca:13:43:46:15:39:de:a6:8c:d3:c1:24:b2:0b:
         07:38:14:d4:c8:c1:d4:03:9a:c7:64:fb:61:c2:de:3b:a1:5e:
         75:1c:06:74:61:3f:7b:bc:c5:00:66:05:80:76:92:9e:69:89:
         92:d9:c2:65:b8:1e:73:34:38:c0:99:cb:67:5a:7a:69:01:fd:
         18:0d:c9:5a:75:2a:4c:c3:cd:ee:be:41:21:3e:d8:11:5c:5b:
         16:4d:ae:a5:dd:4d:3e:bd:e6:24:4f:fd:03:a2:97:aa:bf:0c:
         c2:f1:6a:c7:df:28:eb:af:b3:f8:ae:e9:a7:28:db:f0:d5:d8:
         f1:b6:24:69:73:26:e4:fb:48:bb:b2:10:6d:ee:f8:d1:bd:3c:
         8a:9a:6e:06:1b:48:f0:0a:36:d0:38:c2:73:90:f6:7d:32:ad:
         10:85:44:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPThhE6r5af+NLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
NjBlOGVjMTctZjRlMi00YzcwLWIyNTMtMzdkY2ExY2Y3Nzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHxsasKxBIvCt2aqVheT9qUKxQxrMjj5eK+F
Xh1T4+RsD+HoY72VZ+elyA6XaYAm7yYeX+tRl/lXCVsI4+ncXCxUe+rTRLTRgSZI
Vrt+hGC/DSFLFZ7W3KKNNV0xQt6zvLy3rU4IwPbF5bSU28n6A8Hc8WywszC9b4os
S33ifSaG1Npsh/uKmrvdPk6RcSTKgezREjNJgULmuhINWQ+TYhMm0cK9G7Hnbyad
cFK6id4LAdlW196lz7Vly0ojdcvexF5LWhdiZgxqkQOZw78lHb9UbjNIf4T2ygzx
6GBrAT8aF9IqIXYEC8p1b3oQKenc+Us2OOsx5+tOW22MvalSxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGAIpKYLV73iEFho+rFPHe6uITjWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMDRmZjgyN2YtN2RmNi0z
Mjg2LTkzODYtNGQ5MTk5OGMyMGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Hc3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcW0rKdwgED5F3Zlny22Sd1/f7xYZDmStK6rRSirIypaZjMjFzqQJmL
ZwcDrCaGikBiDqC6/vJ3IS7ASpxAMyyWtcvwy0JswBnhrcLEwzhm82W8kPH42f0E
A8aXcGvKE0NGFTnepozTwSSyCwc4FNTIwdQDmsdk+2HC3juhXnUcBnRhP3u8xQBm
BYB2kp5piZLZwmW4HnM0OMCZy2daemkB/RgNyVp1KkzDze6+QSE+2BFcWxZNrqXd
TT695iRP/QOil6q/DMLxasffKOuvs/iu6aco2/DV2PG2JGlzJuT7SLuyEG3u+NG9
PIqabgYbSPAKNtA4wnOQ9n0yrRCFRI0=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:01:22 2025 by rpki-client