Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/6cf615a1-9f3b-35cb-9955-9a5984f89a59.roa
File:                     6cf615a1-9f3b-35cb-9955-9a5984f89a59.roa (raw, json)
Hash identifier:          gAATUQV4lfweG1PAe3j8Jnvy9gQWbXzdfP57ffKqNDA=
Subject key identifier:   EE:55:2D:D4:E9:0D:49:9E:0F:9C:E9:9D:1D:97:30:0C:18:44:22:03
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F4328584B715CB2BA6F7959D770968A00
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/6cf615a1-9f3b-35cb-9955-9a5984f89a59.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     27370
IP address blocks:        140.241.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b2:ba:6f:79:59:d7:70:96:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=b70f5539-b93c-4398-b917-af6df4d23817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:47:cd:f7:16:d7:81:92:de:8c:d9:69:40:e4:
                    e9:d2:2e:8b:a7:2a:2a:76:4e:18:87:12:03:58:c4:
                    2b:88:88:e8:d1:30:fd:75:df:7b:84:e0:d2:12:51:
                    0b:45:56:3b:db:8a:4d:2b:a6:39:4b:09:a2:19:d3:
                    4e:ec:31:89:8d:e9:98:2c:3c:64:b8:39:73:32:01:
                    88:7a:45:70:07:a2:ca:fc:46:59:0e:fd:e5:50:b0:
                    ea:24:ca:7d:3b:59:d8:da:df:73:08:08:e0:83:62:
                    1a:13:dc:8e:6d:ba:a9:1d:ec:1b:e0:61:f7:4e:ec:
                    78:ad:c3:3a:3f:13:d6:72:1e:7a:f2:1d:3a:f9:a6:
                    36:98:e6:19:d8:c3:5e:e5:fc:b4:80:81:38:51:76:
                    8a:35:40:d2:2a:b3:ce:46:21:16:13:34:be:83:78:
                    89:a4:68:ad:ff:39:84:9e:d6:91:a0:fa:01:c1:29:
                    0e:0e:1c:67:df:c2:75:e7:29:2e:76:79:b2:69:6c:
                    6b:5e:f1:7c:db:01:ed:7b:e3:dd:e9:5d:6b:76:12:
                    05:44:bf:04:57:2b:5d:c7:29:67:c0:4c:df:63:33:
                    17:83:14:5a:c2:68:e3:50:d0:66:68:84:cd:d0:ef:
                    d0:54:0e:34:b7:81:e4:06:ac:08:2c:35:d9:bb:ef:
                    82:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:55:2D:D4:E9:0D:49:9E:0F:9C:E9:9D:1D:97:30:0C:18:44:22:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/6cf615a1-9f3b-35cb-9955-9a5984f89a59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:a1:13:9a:69:83:ea:03:83:a5:5f:f0:1c:02:b2:0a:f2:c7:
         8d:8d:8d:22:f7:6f:87:1b:ed:fa:8b:a9:5b:28:df:55:81:07:
         50:0b:71:e3:0a:17:82:60:18:f8:31:d9:44:87:9e:b0:fb:9a:
         62:55:1c:34:33:36:66:19:6d:e9:2e:2e:8f:28:91:b6:85:90:
         3d:81:dd:fa:2a:34:1a:e6:17:91:cd:4c:5c:ea:8e:17:58:27:
         04:8a:aa:d4:1b:bd:15:5f:34:c8:0c:b1:0b:13:4b:61:ef:4e:
         6f:43:2b:75:45:af:19:17:c2:ff:86:32:07:a3:19:e4:4f:36:
         f9:bd:ad:34:e0:d3:56:70:29:db:b3:7c:29:ac:ad:41:e0:36:
         c1:07:7b:f7:8d:04:fd:b4:2c:ac:f4:c6:e0:e5:73:52:c8:50:
         6d:c6:5d:87:09:4d:89:75:88:fe:0a:26:bf:90:f3:6a:65:8a:
         85:69:0d:5b:54:f7:5f:b6:33:cb:15:17:8f:8f:1a:86:79:12:
         94:04:9b:4d:d0:25:27:de:a8:f6:86:72:af:31:bd:0e:92:2a:
         9d:98:5d:f1:15:e8:29:1a:1d:0f:77:34:8a:e9:6f:c8:0d:0f:
         f1:12:08:48:5c:25:be:21:63:a6:b4:f1:01:65:ed:59:eb:eb:
         35:4d:29:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLK6b3lZ13CWigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk
Njc1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
YjcwZjU1MzktYjkzYy00Mzk4LWI5MTctYWY2ZGY0ZDIzODE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUfN9xbXgZLejNlpQOTp0i6Lpyoqdk4YhxID
WMQriIjo0TD9dd97hODSElELRVY724pNK6Y5SwmiGdNO7DGJjemYLDxkuDlzMgGI
ekVwB6LK/EZZDv3lULDqJMp9O1nY2t9zCAjgg2IaE9yObbqpHewb4GH3Tux4rcM6
PxPWch568h06+aY2mOYZ2MNe5fy0gIE4UXaKNUDSKrPORiEWEzS+g3iJpGit/zmE
ntaRoPoBwSkODhxn38J15ykudnmyaWxrXvF82wHte+Pd6V1rdhIFRL8EVytdxyln
wEzfYzMXgxRawmjjUNBmaITN0O/QVA40t4HkBqwILDXZu++CdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5VLdTpDUmeD5zpnR2XMAwYRCIDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4
NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvNmNmNjE1YTEtOWYzYi0z
NWNiLTk5NTUtOWE1OTg0Zjg5YTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk
ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5
ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi
YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPH6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALGhE5ppg+oDg6Vf8BwCsgryx42NjSL3b4cb7fqLqVso31WBB1ALceMK
F4JgGPgx2USHnrD7mmJVHDQzNmYZbekuLo8okbaFkD2B3foqNBrmF5HNTFzqjhdY
JwSKqtQbvRVfNMgMsQsTS2HvTm9DK3VFrxkXwv+GMgejGeRPNvm9rTTg01ZwKduz
fCmsrUHgNsEHe/eNBP20LKz0xuDlc1LIUG3GXYcJTYl1iP4KJr+Q82plioVpDVtU
91+2M8sVF4+PGoZ5EpQEm03QJSfeqPaGcq8xvQ6SKp2YXfEV6CkaHQ93NIrpb8gN
D/ESCEhcJb4hY6a08QFl7Vnr6zVNKRw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:49 2025 by rpki-client