Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/80f2ca1b-b9dd-3986-abcf-067a659cb5ca.roa
File:                     80f2ca1b-b9dd-3986-abcf-067a659cb5ca.roa (raw, json)
Hash identifier:          vBm0qHDzKHYsODtHLjNnmC9wuuoXm99X+fZOlBcP4rs=
Subject key identifier:   9E:0F:69:DE:6F:EA:AC:F3:6F:55:32:B8:67:3D:A0:39:1B:D0:05:86
Certificate issuer:       /CN=aab30367-68c3-4c5c-b455-f82d7f7bfc72
Certificate serial:       010D0C9F4328584BA93256445B0933272EE2D280
Authority key identifier: 31:87:8D:A0:BB:03:F2:0D:E0:52:2A:93:1E:B8:60:02:8A:1F:1B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/80f2ca1b-b9dd-3986-abcf-067a659cb5ca.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     401308
IP address blocks:        172.110.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/aab30367-68c3-4c5c-b455-f82d7f7bfc72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/aab30367-68c3-4c5c-b455-f82d7f7bfc72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:56:44:5b:09:33:27:2e:e2:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab30367-68c3-4c5c-b455-f82d7f7bfc72
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=dcdd37b8-8b26-494b-97d7-3883db5745cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:d7:4f:19:a5:8d:ff:56:58:52:25:82:92:
                    f2:08:06:80:fb:cf:94:fc:bc:b3:f3:a5:02:20:05:
                    3a:f4:c7:77:b8:e3:6c:8e:35:06:76:15:1c:32:1e:
                    03:ad:14:5b:f4:47:4b:ca:e9:68:96:a7:35:3c:53:
                    2b:95:f7:07:cd:90:2b:56:40:7d:3a:09:f8:0b:2c:
                    6b:89:7a:89:e6:5f:57:15:c8:2b:a7:00:a3:74:d9:
                    db:70:2c:35:67:04:96:64:ba:9f:1c:21:3a:cf:3c:
                    96:6c:4d:d1:91:5f:36:bc:1f:6b:01:20:13:6a:b5:
                    68:03:81:40:aa:50:7e:1d:e5:f7:13:90:21:2f:f9:
                    a9:f8:09:25:31:3c:33:2a:f0:5c:74:62:06:b2:f0:
                    09:81:9e:08:75:34:93:29:c9:0e:5d:59:69:27:a5:
                    34:79:1e:8f:33:81:b4:4d:61:18:50:24:35:c6:03:
                    bf:a4:fe:87:28:b9:ce:c6:b0:9c:a9:db:e8:3f:92:
                    76:42:cd:5d:88:60:4a:5d:47:57:f2:cb:4c:22:03:
                    a4:75:10:c2:6d:42:af:53:85:43:d9:29:08:af:97:
                    b2:1f:9d:f5:96:ee:08:cc:71:59:1d:8e:1d:ec:dd:
                    d2:90:8f:d9:cd:e3:0a:8c:64:13:4a:18:f4:12:7d:
                    4e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0F:69:DE:6F:EA:AC:F3:6F:55:32:B8:67:3D:A0:39:1B:D0:05:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/80f2ca1b-b9dd-3986-abcf-067a659cb5ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/aab30367-68c3-4c5c-b455-f82d7f7bfc72.crl

            X509v3 Authority Key Identifier:
                keyid:31:87:8D:A0:BB:03:F2:0D:E0:52:2A:93:1E:B8:60:02:8A:1F:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b1:22:d1:ba:4c:72:c6:2b:28:87:1d:00:d2:83:37:f0:2d:
         b4:c5:52:48:1b:d6:9e:92:cf:73:e1:d5:8e:a6:89:24:5e:47:
         c5:f5:a7:12:e8:b6:0c:7f:0a:b7:f7:12:e4:7c:5c:43:1e:7c:
         8e:ba:76:2c:00:fd:04:79:80:f9:4a:c8:84:4d:02:6f:b4:0c:
         e5:33:68:49:5b:08:ba:1d:42:a8:73:54:32:e4:39:b4:82:54:
         43:bc:f4:9c:59:07:54:a0:50:5c:67:2d:16:ce:1d:f9:39:7b:
         c9:64:52:79:60:a2:45:e8:c6:11:c1:62:d4:e9:3d:ac:70:3e:
         11:a9:79:43:4f:12:8c:ae:a8:66:72:e0:bd:cb:c9:e4:66:17:
         c2:7e:e9:14:75:89:03:67:15:24:29:ff:51:9f:e0:c5:d6:38:
         51:82:52:4a:84:c3:69:fe:f9:97:3a:9a:33:8b:79:bd:a8:71:
         ce:8d:e2:f1:3c:13:44:28:fd:4b:c5:b7:5c:36:c1:65:47:7b:
         88:82:b8:31:41:cb:76:e6:39:ad:3e:6c:10:9a:ce:6e:9b:db:
         0c:ac:10:94:e7:8b:87:79:9e:77:8b:b6:63:ca:10:70:b9:2e:
         bc:f8:e5:5a:09:68:c0:d6:60:99:c9:d1:93:34:6d:3d:3a:e8:
         ca:15:54:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlZEWwkzJy7i0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFiMzAzNjctNjhjMy00YzVjLWI0NTUtZjgyZDdmN2Jm
YzcyMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZGNkZDM3YjgtOGIyNi00OTRiLTk3ZDctMzg4M2RiNTc0NWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkefXTxmljf9WWFIlgpLyCAaA+8+U/Lyz86UC
IAU69Md3uONsjjUGdhUcMh4DrRRb9EdLyulolqc1PFMrlfcHzZArVkB9Ogn4Cyxr
iXqJ5l9XFcgrpwCjdNnbcCw1ZwSWZLqfHCE6zzyWbE3RkV82vB9rASATarVoA4FA
qlB+HeX3E5AhL/mp+AklMTwzKvBcdGIGsvAJgZ4IdTSTKckOXVlpJ6U0eR6PM4G0
TWEYUCQ1xgO/pP6HKLnOxrCcqdvoP5J2Qs1diGBKXUdX8stMIgOkdRDCbUKvU4VD
2SkIr5eyH531lu4IzHFZHY4d7N3SkI/ZzeMKjGQTShj0En1OJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ4Pad5v6qzzb1UyuGc9oDkb0AWGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWIz
MDM2Ny02OGMzLTRjNWMtYjQ1NS1mODJkN2Y3YmZjNzIvODBmMmNhMWItYjlkZC0z
OTg2LWFiY2YtMDY3YTY1OWNiNWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFiMzAzNjctNjhjMy00YzVjLWI0
NTUtZjgyZDdmN2JmYzcyL2FhYjMwMzY3LTY4YzMtNGM1Yy1iNDU1LWY4MmQ3Zjdi
ZmM3Mi5jcmwwHwYDVR0jBBgwFoAUMYeNoLsD8g3gUiqTHrhgAoofG2swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWIzMDM2Ny02OGMzLTRjNWMtYjQ1NS1mODJk
N2Y3YmZjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG64MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqxItG6THLGKyiHHQDSgzfwLbTFUkgb1p6Sz3Ph1Y6miSReR8X1pxLo
tgx/Crf3EuR8XEMefI66diwA/QR5gPlKyIRNAm+0DOUzaElbCLodQqhzVDLkObSC
VEO89JxZB1SgUFxnLRbOHfk5e8lkUnlgokXoxhHBYtTpPaxwPhGpeUNPEoyuqGZy
4L3LyeRmF8J+6RR1iQNnFSQp/1Gf4MXWOFGCUkqEw2n++Zc6mjOLeb2occ6N4vE8
E0Qo/UvFt1w2wWVHe4iCuDFBy3bmOa0+bBCazm6b2wysEJTni4d5nneLtmPKEHC5
Lrz45VoJaMDWYJnJ0ZM0bT066MoVVF4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:24:26 2025 by rpki-client