Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa
File:                     8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa (raw, json)
Hash identifier:          89W33z+91IsLMZw6JLSQOi5mGrySZZRt08hUscXcXx8=
Subject key identifier:   95:AD:1A:78:28:93:16:E9:D5:2C:A2:15:BC:03:EE:28:68:C2:81:DD
Certificate issuer:       /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial:       010D0C9F4328584AB91B88CF4A090EDAC2DE7B00
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     31898
IP address blocks:        162.253.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:88:cf:4a:09:0e:da:c2:de:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=45b78822-9bfd-41f8-aff9-3989b2967c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:27:a4:99:76:06:6e:5d:ab:0c:19:aa:76:
                    9e:e9:64:1b:7c:04:57:17:5c:e1:66:f4:cf:11:77:
                    88:a1:78:36:09:54:f2:62:4b:75:ed:22:1d:64:25:
                    b8:a6:c7:22:d8:c3:ea:cb:a6:39:61:f1:74:34:04:
                    d8:83:88:0d:7a:64:48:e6:8c:50:6a:77:27:ef:3a:
                    44:bb:9d:77:5c:79:b0:58:6a:e4:e4:34:d4:10:ac:
                    e6:52:ad:2c:37:7a:6e:40:62:19:af:91:8e:fe:33:
                    37:29:50:31:46:18:63:6d:51:a9:a7:1e:bc:72:eb:
                    d6:72:6e:92:eb:b1:e5:71:4e:da:47:df:da:27:49:
                    38:ae:03:85:4b:3f:7f:c3:4c:f5:89:ab:1a:4e:3d:
                    9a:6e:68:c2:a2:22:4c:f0:9f:34:88:15:f5:cb:c7:
                    13:29:4c:7c:3e:30:94:87:9b:86:a3:d1:32:d7:e0:
                    9f:43:71:a2:ea:ef:74:e4:72:f1:9b:e1:b4:9a:4f:
                    6f:f0:40:78:28:e0:fc:0a:8b:b0:f1:dd:a4:1b:a8:
                    69:ab:56:58:4f:07:b8:6e:b0:f1:c2:df:52:5b:b6:
                    ac:f3:7c:c7:c9:f1:aa:ef:a0:6d:7b:66:2e:42:85:
                    f4:b8:f4:ef:77:6c:ab:06:ef:c1:4a:76:b2:ae:70:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AD:1A:78:28:93:16:E9:D5:2C:A2:15:BC:03:EE:28:68:C2:81:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:fd:89:30:9d:69:8a:78:c2:b7:ba:5b:d8:64:fc:e7:62:
         3d:65:8d:d4:c7:43:ac:48:25:2a:27:5d:a4:0d:4f:93:9a:ee:
         2c:af:f3:30:5b:0f:05:7a:b3:aa:ac:58:c1:22:19:52:62:73:
         85:4f:be:c6:2d:9e:0c:98:a8:88:bd:a4:56:1d:c1:f6:8a:52:
         ee:34:4b:97:2f:f5:d1:5b:d9:cb:59:6e:c4:71:6e:b0:02:47:
         7a:b1:1c:b4:50:dd:34:8c:30:5d:73:59:54:d1:da:08:ff:c7:
         21:80:08:dc:3d:2a:e3:67:6b:a8:bb:99:27:89:e4:90:da:47:
         22:84:6a:59:62:60:ad:2d:34:00:1d:28:82:92:5a:cf:f7:5d:
         37:f4:52:85:c9:10:8e:85:c1:07:f8:bf:07:e2:a6:c4:92:b5:
         e2:8a:d9:b2:d2:0c:b8:87:69:02:ec:72:b6:06:90:dc:bb:3b:
         c2:6d:fa:5f:15:1e:e3:90:ca:32:85:7e:cb:86:a3:d9:06:25:
         72:ae:c0:c5:3f:02:05:56:62:8f:12:7b:ad:a2:bd:39:ac:d0:
         15:cc:3e:da:20:9e:ed:ee:95:6d:0c:86:b9:c7:2c:00:bf:60:
         b3:df:0b:49:6d:92:bc:22:b1:16:9b:ba:c8:67:4f:b1:71:cd:
         9e:47:7a:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4jPSgkO2sLeewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzhjMzAxYWItN2QyMi00NmMzLTgyMTEtZjYzNzNlYzgy
ZDVhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
NDViNzg4MjItOWJmZC00MWY4LWFmZjktMzk4OWIyOTY3YzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkYnpJl2Bm5dqwwZqnae6WQbfARXF1zhZvTP
EXeIoXg2CVTyYkt17SIdZCW4psci2MPqy6Y5YfF0NATYg4gNemRI5oxQancn7zpE
u513XHmwWGrk5DTUEKzmUq0sN3puQGIZr5GO/jM3KVAxRhhjbVGppx68cuvWcm6S
67HlcU7aR9/aJ0k4rgOFSz9/w0z1iasaTj2abmjCoiJM8J80iBX1y8cTKUx8PjCU
h5uGo9Ey1+CfQ3Gi6u905HLxm+G0mk9v8EB4KOD8Couw8d2kG6hpq1ZYTwe4brDx
wt9SW7as83zHyfGq76Bte2YuQoX0uPTvd2yrBu/BSnayrnBEgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWtGngokxbp1SyiFbwD7ihowoHdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMz
MDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2VjODJkNWEvODc5NGI3YTQtMGE2ZC0z
MThmLWFjOWUtNDQxMDgxYzZmMDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzhjMzAxYWItN2QyMi00NmMzLTgy
MTEtZjYzNzNlYzgyZDVhL2M4YzMwMWFiLTdkMjItNDZjMy04MjExLWY2MzczZWM4
MmQ1YS5jcmwwHwYDVR0jBBgwFoAUGxP8yGiVO1Oo/Oi5S4sEI5dKUtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3
M2VjODJkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov1UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAD7/YkwnWmKeMK3ulvYZPznYj1ljdTHQ6xIJSonXaQNT5Oa7iyv8zBb
DwV6s6qsWMEiGVJic4VPvsYtngyYqIi9pFYdwfaKUu40S5cv9dFb2ctZbsRxbrAC
R3qxHLRQ3TSMMF1zWVTR2gj/xyGACNw9KuNna6i7mSeJ5JDaRyKEalliYK0tNAAd
KIKSWs/3XTf0UoXJEI6FwQf4vwfipsSSteKK2bLSDLiHaQLscrYGkNy7O8Jt+l8V
HuOQyjKFfsuGo9kGJXKuwMU/AgVWYo8Se62ivTms0BXMPtognu3ulW0MhrnHLAC/
YLPfC0ltkrwisRabushnT7FxzZ5HelQ=
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:44:39 2025 by rpki-client