Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de8c12f4-44e0-3913-b654-112fb042ac9c.roa
File:                     de8c12f4-44e0-3913-b654-112fb042ac9c.roa (raw, json)
Hash identifier:          ik3snt0OAJ3jz4+Y2Ng9dI8aBQ/THQicTHcRYbsVY3A=
Subject key identifier:   1E:59:9F:9F:DC:BF:66:F6:AD:4D:C3:A4:00:DC:04:73:69:0C:52:FF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B6A62043811B859575F5CEF40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de8c12f4-44e0-3913-b654-112fb042ac9c.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     51765
IP address blocks:        144.225.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:04:38:11:b8:59:57:5f:5c:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=820cf29d-4a5f-48d6-a58b-93fa63d6916c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:79:a6:50:0a:89:0e:62:e5:85:dc:8b:c5:cf:
                    a4:c1:00:15:8c:90:a5:63:4e:95:9c:ac:dd:a2:67:
                    40:0f:4c:44:3b:3c:3e:05:b9:c7:77:4b:bc:a6:83:
                    09:94:35:7f:d3:92:e8:b7:66:12:48:3d:35:b1:b3:
                    e8:15:f2:c3:d1:11:a1:71:1c:b7:af:80:40:14:03:
                    53:8f:39:e7:b5:1d:40:d4:d7:67:27:42:cd:95:c9:
                    71:dd:a5:e6:89:7f:15:b2:9c:67:20:32:8f:25:ea:
                    15:8e:c7:f8:91:4e:45:75:8e:85:3a:26:e9:30:6b:
                    54:6d:43:ad:a1:ab:ec:c0:7b:60:64:39:32:be:01:
                    c2:6b:bf:1c:93:8e:2c:dc:a4:03:ec:a7:2d:76:44:
                    c0:bf:95:ad:b1:4b:7c:21:79:11:1c:a7:34:b0:53:
                    80:32:57:a0:e6:f4:86:12:7f:1f:42:3e:4f:a4:46:
                    fd:b4:0a:90:e8:7e:9d:10:bf:fd:d7:e3:11:6c:33:
                    98:c4:9c:6b:f4:78:8e:11:f9:32:dd:ad:16:a1:9a:
                    69:9e:a9:6c:d3:dc:29:95:19:9a:52:7c:bb:ce:83:
                    53:e4:60:c5:e8:ce:ba:eb:80:f3:7f:5a:a2:a2:98:
                    05:14:57:ec:76:57:2b:8c:54:6f:a1:e6:ea:db:7c:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:59:9F:9F:DC:BF:66:F6:AD:4D:C3:A4:00:DC:04:73:69:0C:52:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de8c12f4-44e0-3913-b654-112fb042ac9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:12:c3:7b:80:59:5c:59:65:85:55:65:36:eb:99:55:a0:49:
         68:9b:55:ff:9a:2d:43:f3:d7:fa:07:de:5b:00:a3:0a:ca:ba:
         6d:2f:71:c4:d4:0b:2e:8b:0e:5b:e3:fa:28:0e:3b:3c:14:2e:
         cb:0b:2d:c5:40:7f:d2:cb:b5:ed:9d:17:f5:6c:fd:21:08:59:
         ef:93:66:34:99:a4:e7:7a:19:ca:cb:80:d3:ed:87:93:b9:28:
         8a:2f:c7:49:5d:1a:73:e5:c1:c8:94:57:28:1f:6c:a9:9c:ac:
         99:62:4c:d9:0f:31:69:98:57:41:22:d5:b5:87:52:95:62:81:
         6a:06:ff:b6:b3:7c:1d:f0:ef:8c:ad:62:c1:7f:7f:e3:5a:49:
         10:ef:89:5f:a7:46:c2:81:ca:45:ec:bd:31:41:6b:a5:86:c7:
         0c:4c:fb:cf:be:72:08:78:d9:c1:fb:60:eb:25:b8:eb:e5:a8:
         4f:a8:cd:4e:f4:4f:45:d3:d8:a5:32:48:84:2e:91:3b:15:69:
         9c:4e:03:ec:e4:55:85:a8:36:4c:d2:cd:c8:eb:5b:64:66:a0:
         f7:5c:0c:07:fa:6e:f1:0f:17:1e:6c:76:c5:46:81:3c:66:50:
         f7:8d:67:b9:bc:5a:7f:09:e0:86:e1:05:3e:99:29:1a:b3:2e:
         7b:ec:c9:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYgQ4EbhZV19c70AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
ODIwY2YyOWQtNGE1Zi00OGQ2LWE1OGItOTNmYTYzZDY5MTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHmmUAqJDmLlhdyLxc+kwQAVjJClY06VnKzd
omdAD0xEOzw+BbnHd0u8poMJlDV/05Lot2YSSD01sbPoFfLD0RGhcRy3r4BAFANT
jznntR1A1NdnJ0LNlclx3aXmiX8VspxnIDKPJeoVjsf4kU5FdY6FOibpMGtUbUOt
oavswHtgZDkyvgHCa78ck44s3KQD7KctdkTAv5WtsUt8IXkRHKc0sFOAMleg5vSG
En8fQj5PpEb9tAqQ6H6dEL/91+MRbDOYxJxr9HiOEfky3a0WoZppnqls09wplRma
Uny7zoNT5GDF6M6664Dzf1qiopgFFFfsdlcrjFRvoebq23yMDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB5Zn5/cv2b2rU3DpADcBHNpDFL/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGU4YzEyZjQtNDRlMC0z
OTEzLWI2NTQtMTEyZmIwNDJhYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkOFkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMSw3uAWVxZZYVVZTbrmVWgSWibVf+aLUPz1/oH3lsAowrKum0vccTU
Cy6LDlvj+igOOzwULssLLcVAf9LLte2dF/Vs/SEIWe+TZjSZpOd6GcrLgNPth5O5
KIovx0ldGnPlwciUVygfbKmcrJliTNkPMWmYV0Ei1bWHUpVigWoG/7azfB3w74yt
YsF/f+NaSRDviV+nRsKBykXsvTFBa6WGxwxM+8++cgh42cH7YOsluOvlqE+ozU70
T0XT2KUySIQukTsVaZxOA+zkVYWoNkzSzcjrW2RmoPdcDAf6bvEPFx5sdsVGgTxm
UPeNZ7m8Wn8J4IbhBT6ZKRqzLnvsyWI=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:46:51 2025 by rpki-client