Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/634e5323-bf96-33d3-b593-b6e98739fb85.roa
File:                     634e5323-bf96-33d3-b593-b6e98739fb85.roa (raw, json)
Hash identifier:          bwWUe/x6n2QS169+outsvuQAQFV1eiNq1yXNHipGyYs=
Subject key identifier:   4C:59:B3:AC:04:48:DA:E9:A9:67:63:BA:D5:DF:C5:48:40:8B:96:4A
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584A82AB4AFF7BA344D1F76FEE80
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/634e5323-bf96-33d3-b593-b6e98739fb85.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     2152
IP address blocks:        137.164.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:4a:ff:7b:a3:44:d1:f7:6f:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=c939f830-9d0d-4692-b379-28e896a82a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:06:e2:80:71:8b:56:9e:ef:c2:11:0d:ea:
                    4d:05:60:8b:d0:f9:d2:2c:83:7d:9b:10:e6:19:85:
                    79:ba:5b:10:5f:5c:76:bb:87:5b:e9:dd:ac:ab:33:
                    a1:9d:b7:cf:6d:c8:83:f2:81:13:48:ae:6d:bf:7d:
                    33:65:79:ba:d4:ae:06:df:3a:93:70:63:a8:40:35:
                    1d:31:bc:ff:08:9e:6b:cd:80:7e:13:84:b9:5e:e3:
                    05:5b:60:ef:45:2f:a5:fa:20:10:14:6f:28:e6:ea:
                    3f:ea:4e:3c:71:b6:d5:64:8a:9e:32:fb:57:dd:36:
                    8a:7f:1a:11:59:84:b4:d1:77:2e:48:bd:0c:49:9b:
                    26:1f:0a:ef:53:9b:1e:58:6d:a0:64:36:f8:f4:5d:
                    b8:2c:1f:51:2c:e8:8e:64:dc:f0:0d:22:7b:bd:d1:
                    d7:8c:90:ef:ed:90:23:ba:33:59:51:cd:72:8a:84:
                    26:56:46:8e:d2:ae:6f:a5:84:30:0e:cb:1d:73:ae:
                    01:1d:12:b5:f8:dc:8a:13:c9:87:4f:c3:be:0a:21:
                    52:3d:6c:eb:92:51:b8:40:a6:04:76:05:cc:66:fc:
                    09:14:0f:3c:17:48:45:df:61:fc:51:a3:f3:20:1a:
                    3c:2a:7a:10:b5:61:62:7e:ac:df:84:8b:4a:d9:ed:
                    ee:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:59:B3:AC:04:48:DA:E9:A9:67:63:BA:D5:DF:C5:48:40:8B:96:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/634e5323-bf96-33d3-b593-b6e98739fb85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:2f:a8:7e:d4:da:d4:72:e4:a4:7d:7a:00:84:e8:2e:58:7c:
         98:04:38:de:67:c6:8e:49:0c:0d:ea:4b:0f:ad:27:49:1b:fd:
         09:4d:20:24:6d:10:1b:6d:51:81:1d:82:55:2c:a8:4c:e0:3a:
         5d:ed:39:fd:5e:b3:43:78:44:e2:42:89:12:8e:03:d8:51:c2:
         1c:17:05:e1:bd:68:53:e3:05:8f:d4:6b:50:dc:04:8f:02:00:
         27:f9:50:d0:59:f6:82:6f:4d:4a:77:9d:90:ad:a8:fc:18:d3:
         6b:89:b2:e4:a9:87:b8:b2:5a:32:4f:30:d8:fd:af:ba:84:39:
         c3:e9:74:32:3c:71:88:ca:4c:14:53:9d:f0:5b:62:bf:e3:0c:
         d1:07:01:7f:d6:37:74:6b:fd:a0:04:3e:1d:b2:0a:c1:3c:9e:
         af:92:27:9c:dc:c0:0e:21:4e:88:66:e8:ae:48:fc:a9:37:78:
         ad:b1:64:c4:4f:70:e8:6d:9a:41:aa:60:25:19:90:08:33:fd:
         43:4f:bc:ea:4e:fb:2e:30:42:57:86:6e:f3:c3:17:4e:25:95:
         9a:81:1a:23:0c:2b:b6:08:c7:fb:2d:83:4f:7a:5a:81:d6:35:
         61:c1:a6:c0:1f:ba:08:fc:72:38:42:b6:b1:0c:e5:80:d6:e3:
         ed:e4:c8:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0r/e6NE0fdv7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk
YzkzOWY4MzAtOWQwZC00NjkyLWIzNzktMjhlODk2YTgyYTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfgG4oBxi1ae78IRDepNBWCL0PnSLIN9mxDm
GYV5ulsQX1x2u4db6d2sqzOhnbfPbciD8oETSK5tv30zZXm61K4G3zqTcGOoQDUd
Mbz/CJ5rzYB+E4S5XuMFW2DvRS+l+iAQFG8o5uo/6k48cbbVZIqeMvtX3TaKfxoR
WYS00XcuSL0MSZsmHwrvU5seWG2gZDb49F24LB9RLOiOZNzwDSJ7vdHXjJDv7ZAj
ujNZUc1yioQmVkaO0q5vpYQwDssdc64BHRK1+NyKE8mHT8O+CiFSPWzrklG4QKYE
dgXMZvwJFA88F0hF32H8UaPzIBo8KnoQtWFifqzfhItK2e3ufwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExZs6wESNrpqWdjutXfxUhAi5ZKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvNjM0ZTUzMjMtYmY5Ni0z
M2QzLWI1OTMtYjZlOTg3MzlmYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0vqH7U2tRy5KR9egCE6C5YfJgEON5nxo5JDA3qSw+tJ0kb/QlNICRt
EBttUYEdglUsqEzgOl3tOf1es0N4ROJCiRKOA9hRwhwXBeG9aFPjBY/Ua1DcBI8C
ACf5UNBZ9oJvTUp3nZCtqPwY02uJsuSph7iyWjJPMNj9r7qEOcPpdDI8cYjKTBRT
nfBbYr/jDNEHAX/WN3Rr/aAEPh2yCsE8nq+SJ5zcwA4hTohm6K5I/Kk3eK2xZMRP
cOhtmkGqYCUZkAgz/UNPvOpO+y4wQleGbvPDF04llZqBGiMMK7YIx/stg096WoHW
NWHBpsAfugj8cjhCtrEM5YDW4+3kyJc=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:15:02 2025 by rpki-client