Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8f726dde-cdcd-31ff-8465-23292613418c.roa
File:                     8f726dde-cdcd-31ff-8465-23292613418c.roa (raw, json)
Hash identifier:          PVezTtRlpCC4qRunssaMw7Gi6l8TTQBFUxQ94Ezr5QU=
Subject key identifier:   F8:6C:54:2A:60:CB:09:90:6D:27:17:17:CB:C7:A0:F1:50:3C:C6:41
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA103C4D292475C5E0AD35C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8f726dde-cdcd-31ff-8465-23292613418c.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     19112
IP address blocks:        64.184.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:3c:4d:29:24:75:c5:e0:ad:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=71e618b8-9758-461a-bde0-fc96d5781261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:f4:ea:f3:35:9c:af:88:dc:14:5f:a1:f8:
                    a0:68:aa:af:59:5d:4c:5a:c3:80:1a:2f:52:3c:c3:
                    d8:bd:f1:42:8c:98:38:03:a9:9b:4a:2c:a3:6a:fb:
                    04:38:41:ef:08:cf:2d:e5:a2:06:30:f5:60:a0:85:
                    11:15:48:b3:6e:8f:5f:3f:88:78:0d:a3:cb:d6:09:
                    2a:5c:03:aa:ff:e3:06:ee:7a:00:28:e3:66:37:11:
                    f0:76:61:b3:cf:74:22:63:75:63:ca:6b:14:db:96:
                    12:4c:db:04:50:8d:7e:3d:0e:f6:44:14:4b:55:60:
                    42:f8:16:ec:bd:83:b5:aa:2f:8d:ff:9e:69:c7:6e:
                    f0:44:49:c2:23:55:8b:60:3b:1b:51:ac:5d:11:34:
                    ec:05:73:18:2a:5c:76:63:3e:80:cf:81:c0:33:e4:
                    01:e8:3a:f8:15:28:6f:42:9c:f5:d6:32:c9:3d:0f:
                    8a:7f:a2:2e:03:fb:3b:ae:e7:27:b3:4d:e9:07:37:
                    20:ca:82:06:5d:fc:13:b5:a7:dd:3d:56:55:d6:df:
                    14:96:31:97:48:f5:48:7a:21:bf:91:b7:cb:99:0d:
                    50:5f:6d:94:21:53:99:71:72:57:64:eb:2c:a8:a9:
                    07:3c:28:c2:63:87:9d:81:20:ce:13:93:8a:73:e7:
                    18:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6C:54:2A:60:CB:09:90:6D:27:17:17:CB:C7:A0:F1:50:3C:C6:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8f726dde-cdcd-31ff-8465-23292613418c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e2:1a:27:07:5a:21:cc:bf:29:42:89:6d:97:27:df:8f:34:
         c8:a2:46:7b:d5:32:31:51:e3:2d:93:21:d7:86:fa:0d:e4:7f:
         0a:e3:b2:cf:d2:d7:10:02:a8:65:af:fe:f3:e9:1c:11:8c:56:
         e5:70:58:52:2e:c0:81:6b:6d:54:8f:f1:2d:e4:d4:4a:75:ea:
         4d:e5:90:23:49:78:1e:cd:83:ba:2e:a8:97:08:d0:f2:e6:f3:
         58:16:58:fb:4d:12:9d:fc:86:b0:36:5d:e2:58:68:1b:3a:3a:
         0e:f9:4a:0b:32:ac:d3:01:25:50:cb:e4:61:07:87:3c:e6:98:
         6c:72:8c:3b:2f:89:6b:82:ef:e6:14:0d:42:ac:1a:58:99:8f:
         2e:9c:f4:d1:26:fb:e5:19:5a:24:8b:73:a3:49:1c:ac:72:80:
         77:ab:7c:7d:7c:d2:c8:d8:78:f5:12:41:37:2d:42:e6:5f:16:
         7b:51:74:01:3f:fa:25:c6:5b:b6:bc:12:ee:1c:9f:37:57:99:
         e3:16:1b:e0:3a:6a:bf:c8:ac:74:ac:75:de:5e:d3:42:96:75:
         9c:bc:85:43:37:9e:ff:5c:86:5a:07:59:87:20:3f:79:cd:63:
         28:a5:f1:2f:ad:93:05:89:8f:1f:d1:e3:e6:4d:0f:18:03:07:
         7d:a4:19:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDxNKSR1xeCtNcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk
NzFlNjE4YjgtOTc1OC00NjFhLWJkZTAtZmM5NmQ1NzgxMjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzT06vM1nK+I3BRfofigaKqvWV1MWsOAGi9S
PMPYvfFCjJg4A6mbSiyjavsEOEHvCM8t5aIGMPVgoIURFUizbo9fP4h4DaPL1gkq
XAOq/+MG7noAKONmNxHwdmGzz3QiY3VjymsU25YSTNsEUI1+PQ72RBRLVWBC+Bbs
vYO1qi+N/55px27wREnCI1WLYDsbUaxdETTsBXMYKlx2Yz6Az4HAM+QB6Dr4FShv
Qpz11jLJPQ+Kf6IuA/s7rucns03pBzcgyoIGXfwTtafdPVZV1t8UljGXSPVIeiG/
kbfLmQ1QX22UIVOZcXJXZOssqKkHPCjCY4edgSDOE5OKc+cYzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPhsVCpgywmQbScXF8vHoPFQPMZBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOGY3MjZkZGUtY2RjZC0z
MWZmLTg0NjUtMjMyOTI2MTM0MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQLhgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfiGicHWiHMvylCiW2XJ9+PNMiiRnvVMjFR4y2TIdeG+g3kfwrjss/S
1xACqGWv/vPpHBGMVuVwWFIuwIFrbVSP8S3k1Ep16k3lkCNJeB7Ng7ouqJcI0PLm
81gWWPtNEp38hrA2XeJYaBs6Og75SgsyrNMBJVDL5GEHhzzmmGxyjDsviWuC7+YU
DUKsGliZjy6c9NEm++UZWiSLc6NJHKxygHerfH180sjYePUSQTctQuZfFntRdAE/
+iXGW7a8Eu4cnzdXmeMWG+A6ar/IrHSsdd5e00KWdZy8hUM3nv9chloHWYcgP3nN
Yyil8S+tkwWJjx/R4+ZNDxgDB32kGdc=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:03:44 2025 by rpki-client