Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c5be566b-40eb-34c7-8037-9389199b4913.roa
File:                     c5be566b-40eb-34c7-8037-9389199b4913.roa (raw, json)
Hash identifier:          zXrdJwz1H/j+3NEY1Qaj0zB1JA1nEA9rXEIuJ7hFAUY=
Subject key identifier:   46:BD:A6:26:07:A6:8A:8C:F3:B0:26:14:DE:56:51:A5:32:4C:39:CF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B99D7A8E3E823925D08CA0700
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c5be566b-40eb-34c7-8037-9389199b4913.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     11804
IP address blocks:        208.184.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:a8:e3:e8:23:92:5d:08:ca:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=c98c90b3-82be-4721-b248-cac2c0d3a908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:83:90:91:e8:52:44:ca:b9:b7:ee:6c:55:
                    05:51:b2:19:93:aa:12:e3:2e:ea:dc:9b:a9:f6:d3:
                    bc:4d:61:1e:c0:0a:12:09:df:be:7d:c4:0f:c0:b3:
                    64:b4:7c:a3:0c:c6:5a:56:ae:e4:5c:7b:54:1c:d7:
                    df:a9:b7:a3:b4:56:b7:0c:f2:9f:5b:80:4a:ee:1e:
                    3f:21:cf:d4:ea:ec:52:ac:c6:4f:64:17:d7:0f:03:
                    49:ec:cf:12:72:1d:8d:79:19:3c:94:1b:0b:4f:a2:
                    bb:40:b7:99:fa:da:c7:b9:0f:4b:1a:70:a6:77:60:
                    ba:eb:4b:ff:2b:93:ac:e4:f9:35:d9:bd:2e:cf:67:
                    41:9a:27:bd:3d:64:17:7a:e4:92:11:33:05:cb:4b:
                    00:56:63:cb:0d:ee:73:9d:8f:cc:6e:b7:12:41:4f:
                    74:f4:b6:45:20:a1:22:3a:6c:4f:c1:e9:21:14:9c:
                    3f:04:1a:53:16:00:d9:b5:38:73:34:86:d8:8a:03:
                    13:26:04:4e:cd:b3:b5:49:03:a0:f8:02:61:70:0a:
                    9d:b1:5b:02:13:9e:67:cf:d2:c6:62:88:df:71:ad:
                    a5:93:34:cc:c0:19:fa:ae:54:c1:0b:14:c0:92:0a:
                    8a:2d:ba:f6:50:e0:22:4a:70:e5:60:97:b1:38:d0:
                    4b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BD:A6:26:07:A6:8A:8C:F3:B0:26:14:DE:56:51:A5:32:4C:39:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c5be566b-40eb-34c7-8037-9389199b4913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:fb:9c:bd:3a:f8:4c:de:47:a2:c6:15:3b:c5:3d:1d:4c:42:
         f0:ff:6b:41:14:ec:e5:ab:20:98:55:d1:cc:80:ef:0b:ef:bf:
         e7:e8:e4:d4:01:c8:c4:57:72:d4:5e:67:87:77:77:79:27:04:
         59:36:6c:2b:1d:e4:7a:9d:3b:d1:99:06:53:16:2d:e8:3e:d3:
         11:56:77:67:a9:ca:df:e3:4c:37:f1:a1:6a:1f:fd:02:00:4c:
         0a:50:82:9c:98:62:38:3d:16:12:49:44:8a:0e:a7:0f:13:4c:
         ee:ca:16:c6:63:1a:bf:36:1e:ae:23:f5:89:b1:53:0f:2a:bc:
         45:48:da:8c:30:9a:5c:13:63:89:a6:56:b4:8a:43:3f:03:c5:
         08:a0:b3:61:71:9c:e8:22:01:67:0b:74:fc:51:b9:93:2b:3a:
         9f:dd:ed:6c:07:c8:e9:78:44:fc:45:57:36:98:49:e1:fd:1f:
         5c:38:fc:c1:8c:3a:09:fa:83:39:df:4d:8f:cf:f7:e8:81:e1:
         32:8a:0b:a9:31:b9:cd:3f:a0:aa:d1:28:1c:80:30:0f:6d:ca:
         ea:31:aa:78:fd:1f:0a:d0:af:9a:a1:8f:a2:8f:86:eb:96:ce:
         a5:ef:8c:3a:ee:78:d7:99:e7:47:ad:7c:46:f2:86:2c:13:6b:
         24:ff:f5:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16jj6COSXQjKBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
Yzk4YzkwYjMtODJiZS00NzIxLWIyNDgtY2FjMmMwZDNhOTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqGDkJHoUkTKubfubFUFUbIZk6oS4y7q3Jup
9tO8TWEewAoSCd++fcQPwLNktHyjDMZaVq7kXHtUHNffqbejtFa3DPKfW4BK7h4/
Ic/U6uxSrMZPZBfXDwNJ7M8Sch2NeRk8lBsLT6K7QLeZ+trHuQ9LGnCmd2C660v/
K5Os5Pk12b0uz2dBmie9PWQXeuSSETMFy0sAVmPLDe5znY/MbrcSQU909LZFIKEi
OmxPwekhFJw/BBpTFgDZtThzNIbYigMTJgROzbO1SQOg+AJhcAqdsVsCE55nz9LG
Yojfca2lkzTMwBn6rlTBCxTAkgqKLbr2UOAiSnDlYJexONBLpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEa9piYHpoqM87AmFN5WUaUyTDnPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYzViZTU2NmItNDBlYi0z
NGM3LTgwMzctOTM4OTE5OWI0OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LhBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALH7nL06+EzeR6LGFTvFPR1MQvD/a0EU7OWrIJhV0cyA7wvvv+fo5NQB
yMRXctReZ4d3d3knBFk2bCsd5HqdO9GZBlMWLeg+0xFWd2epyt/jTDfxoWof/QIA
TApQgpyYYjg9FhJJRIoOpw8TTO7KFsZjGr82Hq4j9YmxUw8qvEVI2owwmlwTY4mm
VrSKQz8DxQigs2FxnOgiAWcLdPxRuZMrOp/d7WwHyOl4RPxFVzaYSeH9H1w4/MGM
Ogn6gznfTY/P9+iB4TKKC6kxuc0/oKrRKByAMA9tyuoxqnj9HwrQr5qhj6KPhuuW
zqXvjDrueNeZ50etfEbyhiwTayT/9aI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:19:01 2025 by rpki-client