Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/cea4c25b-3421-3835-8474-141b9b04957b.roa
File:                     cea4c25b-3421-3835-8474-141b9b04957b.roa (raw, json)
Hash identifier:          SpWLn+eX+KuwB0CXVxjTQMTuDP2ssnxED+F85WhLBhg=
Subject key identifier:   37:C2:E3:2C:B9:EC:C3:CB:36:E3:AD:97:08:D8:16:DD:F5:75:0E:23
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F4328584AFC1C11012F4E761938BE3800
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/cea4c25b-3421-3835-8474-141b9b04957b.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     13576
IP address blocks:        75.102.160.0/19 maxlen: 19
                          75.102.160.0/24 maxlen: 24
                          75.102.161.0/24 maxlen: 24
                          75.102.162.0/24 maxlen: 24
                          75.102.163.0/24 maxlen: 24
                          75.102.164.0/24 maxlen: 24
                          75.102.165.0/24 maxlen: 24
                          75.102.166.0/24 maxlen: 24
                          75.102.167.0/24 maxlen: 24
                          75.102.168.0/24 maxlen: 24
                          75.102.169.0/24 maxlen: 24
                          75.102.170.0/24 maxlen: 24
                          75.102.171.0/24 maxlen: 24
                          75.102.172.0/24 maxlen: 24
                          75.102.173.0/24 maxlen: 24
                          75.102.174.0/23 maxlen: 23
                          75.102.174.0/24 maxlen: 24
                          75.102.175.0/24 maxlen: 24
                          75.102.176.0/22 maxlen: 22
                          75.102.176.0/24 maxlen: 24
                          75.102.177.0/24 maxlen: 24
                          75.102.178.0/24 maxlen: 24
                          75.102.179.0/24 maxlen: 24
                          75.102.180.0/22 maxlen: 22
                          75.102.180.0/24 maxlen: 24
                          75.102.181.0/24 maxlen: 24
                          75.102.182.0/24 maxlen: 24
                          75.102.183.0/24 maxlen: 24
                          75.102.184.0/23 maxlen: 23
                          75.102.184.0/24 maxlen: 24
                          75.102.185.0/24 maxlen: 24
                          75.102.186.0/23 maxlen: 23
                          75.102.186.0/24 maxlen: 24
                          75.102.187.0/24 maxlen: 24
                          75.102.188.0/22 maxlen: 22
                          75.102.188.0/24 maxlen: 24
                          75.102.189.0/24 maxlen: 24
                          75.102.190.0/24 maxlen: 24
                          75.102.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:11:01:2f:4e:76:19:38:be:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=71d5d3d9-168f-4ae6-9527-9f6f248cc0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:ee:36:cd:34:4a:f4:63:83:78:e7:c3:22:
                    12:59:30:09:74:98:cd:4b:da:94:07:ed:b6:28:b1:
                    0d:df:90:48:ed:7f:c3:54:78:0f:19:0b:27:0d:79:
                    36:e8:7e:19:12:6e:4a:0f:c7:b3:c7:df:b9:b2:5c:
                    1f:e7:3e:5b:c6:66:d6:9d:aa:09:fb:b8:e2:7a:68:
                    84:aa:20:aa:88:c1:1c:b6:12:46:94:dd:f2:07:ca:
                    79:f9:a3:8e:14:80:0c:c2:00:ac:1f:4b:e3:1b:03:
                    9f:8c:91:3b:d6:42:0a:19:64:ae:cf:86:be:21:d0:
                    3c:33:88:e6:27:62:4b:dc:21:93:f3:f4:7e:ec:45:
                    57:22:4d:7c:a0:10:83:6c:f9:7c:6a:e6:3b:0f:6d:
                    1b:43:77:f1:a5:e3:8b:d3:ee:ae:09:38:52:4c:85:
                    1f:1e:79:cb:ed:e7:58:08:43:c8:51:83:83:1a:02:
                    35:2e:18:6a:79:dc:4a:dc:46:3e:70:f4:89:02:2e:
                    ed:e1:05:17:c1:3f:85:ef:39:7b:85:fa:ca:b7:3a:
                    40:60:b4:ad:d7:34:0f:04:44:ea:67:c5:26:0a:41:
                    ec:7b:67:7b:5c:52:2f:7a:a4:1a:2e:bc:55:37:8c:
                    9c:27:ed:5f:43:a6:de:c1:2c:b4:d6:1f:74:5f:4d:
                    f5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C2:E3:2C:B9:EC:C3:CB:36:E3:AD:97:08:D8:16:DD:F5:75:0E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/cea4c25b-3421-3835-8474-141b9b04957b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:75:05:28:38:07:a3:84:eb:ab:08:a3:88:71:d8:cd:2a:f8:
         7c:9b:e2:e0:5d:12:d8:89:4a:f7:e7:7a:e5:7d:e3:7c:cf:f5:
         3d:82:4a:59:f1:fe:f2:9a:8e:aa:3d:ed:09:f5:00:52:a2:ae:
         07:11:7f:0f:ef:41:07:4d:31:1f:ea:2b:2c:19:21:26:7e:8d:
         b8:99:73:81:07:e9:c4:78:30:eb:83:8a:4a:ea:ea:ff:9e:c8:
         77:ad:bc:79:a7:d6:a8:d1:a1:bb:f1:99:78:aa:17:d7:f5:33:
         29:f6:cf:6b:aa:be:6a:8e:4a:31:ce:cf:ff:51:78:b7:83:b2:
         d3:4c:fd:21:e9:e1:c4:91:b9:f2:19:b3:94:c2:cb:37:e4:6b:
         66:8d:a6:61:7e:44:fd:1b:99:5a:42:8b:cd:c0:87:cd:8e:9a:
         b0:b8:ef:1c:c5:9a:fd:ac:d6:fd:f0:c9:ab:21:f0:f1:70:79:
         c4:a3:4c:d2:e0:aa:ac:f8:16:2a:4c:97:50:19:65:59:bd:2f:
         9d:78:02:8b:9f:fa:e4:ba:9a:72:1c:90:6b:46:43:64:26:28:
         21:84:67:fd:b4:32:8f:64:b5:89:3b:19:b6:37:cb:5e:32:d0:
         d8:4c:bd:1d:be:02:40:74:64:db:9d:4e:8b:20:ea:75:a5:d5:
         e6:ca:3b:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBEBL052GTi+OAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4
MDM1MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
NzFkNWQzZDktMTY4Zi00YWU2LTk1MjctOWY2ZjI0OGNjMGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PLuNs00SvRjg3jnwyISWTAJdJjNS9qUB+22
KLEN35BI7X/DVHgPGQsnDXk26H4ZEm5KD8ezx9+5slwf5z5bxmbWnaoJ+7jiemiE
qiCqiMEcthJGlN3yB8p5+aOOFIAMwgCsH0vjGwOfjJE71kIKGWSuz4a+IdA8M4jm
J2JL3CGT8/R+7EVXIk18oBCDbPl8auY7D20bQ3fxpeOL0+6uCThSTIUfHnnL7edY
CEPIUYODGgI1LhhqedxK3EY+cPSJAi7t4QUXwT+F7zl7hfrKtzpAYLSt1zQPBETq
Z8UmCkHse2d7XFIveqQaLrxVN4ycJ+1fQ6bewSy01h90X0313wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfC4yy57MPLNuOtlwjYFt31dQ4jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj
NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvY2VhNGMyNWItMzQyMS0z
ODM1LTg0NzQtMTQxYjliMDQ5NTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz
YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk
ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4
ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS2agMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACV1BSg4B6OE66sIo4hx2M0q+Hyb4uBdEtiJSvfneuV943zP9T2CSlnx
/vKajqo97Qn1AFKirgcRfw/vQQdNMR/qKywZISZ+jbiZc4EH6cR4MOuDikrq6v+e
yHetvHmn1qjRobvxmXiqF9f1Myn2z2uqvmqOSjHOz/9ReLeDstNM/SHp4cSRufIZ
s5TCyzfka2aNpmF+RP0bmVpCi83Ah82OmrC47xzFmv2s1v3wyash8PFwecSjTNLg
qqz4FipMl1AZZVm9L514Aouf+uS6mnIckGtGQ2QmKCGEZ/20Mo9ktYk7GbY3y14y
0NhMvR2+AkB0ZNudTosg6nWl1ebKO/c=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:53:18 2025 by rpki-client