Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/0ec82cfd-0705-3a1e-8ad9-59ae4978c880.roa
File:                     0ec82cfd-0705-3a1e-8ad9-59ae4978c880.roa (raw, json)
Hash identifier:          xTEfjxFSkVqRuaFHpBYWsvGsKai6qHrXHpfKs56aY6k=
Subject key identifier:   80:BA:78:11:B3:23:08:43:07:5E:C5:11:B9:B6:CB:8C:27:FB:BE:37
Certificate issuer:       /CN=ce55f9da-9b86-4bde-883a-5aacddf9560b
Certificate serial:       010D0C9F4328584B76F256A02351A5EDAC2C6298
Authority key identifier: FF:C2:C2:39:B6:C6:12:D0:46:43:E4:F3:10:34:1A:14:F0:0E:D5:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/0ec82cfd-0705-3a1e-8ad9-59ae4978c880.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     54735
IP address blocks:        205.132.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/ce55f9da-9b86-4bde-883a-5aacddf9560b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/ce55f9da-9b86-4bde-883a-5aacddf9560b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:56:a0:23:51:a5:ed:ac:2c:62:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce55f9da-9b86-4bde-883a-5aacddf9560b
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=a08c9910-c952-4e1c-9d8a-3667226de777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:22:bc:88:f1:ca:d8:f9:09:e4:de:10:33:
                    5b:44:4f:93:f5:f1:d6:a5:a6:68:41:5b:c5:c2:a4:
                    09:68:eb:e6:ae:8f:49:2f:81:dd:16:cb:82:10:38:
                    75:be:39:9d:23:8b:dd:c5:86:16:7b:8e:8e:d4:06:
                    49:b1:6a:eb:23:92:a4:88:b2:78:50:b9:b8:5e:f6:
                    87:7f:3a:8c:b5:bd:10:9c:9a:a9:fb:e9:e1:03:4c:
                    77:88:a3:91:76:90:a3:c2:be:93:89:b5:a2:2f:14:
                    3a:7e:3d:aa:08:76:2d:c2:8f:49:93:41:da:15:15:
                    a8:62:d2:f4:d1:16:3d:95:17:90:1b:5a:5e:6b:11:
                    22:d3:03:35:ce:4e:1c:aa:37:5a:c4:7e:54:36:3f:
                    67:10:54:78:a2:91:e5:b5:fb:9f:93:e5:9d:ac:66:
                    b8:77:9e:c0:1f:d7:a1:bd:ef:c6:6a:42:58:67:92:
                    ec:18:43:04:84:a9:81:f7:22:96:bc:f7:60:60:4f:
                    04:0c:a8:b7:0d:5d:99:cd:43:31:a5:47:cb:5f:93:
                    26:34:08:c2:a8:33:3d:45:12:99:ff:ca:87:1c:a8:
                    0e:1d:45:e0:e4:94:be:91:94:3f:cf:65:a9:67:3d:
                    9a:ff:67:b2:eb:6c:ae:07:53:7e:95:45:3e:15:84:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BA:78:11:B3:23:08:43:07:5E:C5:11:B9:B6:CB:8C:27:FB:BE:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/0ec82cfd-0705-3a1e-8ad9-59ae4978c880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/ce55f9da-9b86-4bde-883a-5aacddf9560b.crl

            X509v3 Authority Key Identifier:
                keyid:FF:C2:C2:39:B6:C6:12:D0:46:43:E4:F3:10:34:1A:14:F0:0E:D5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.132.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:3f:84:80:bf:3d:d4:a8:98:99:e5:ab:d2:e6:2c:77:1d:38:
         bd:76:a7:a8:b5:98:13:7a:8a:77:50:75:4d:96:91:ea:3c:1b:
         06:79:58:4b:5f:36:73:c2:d0:8c:47:34:01:b1:df:53:0d:ea:
         32:61:6c:89:0d:15:52:cd:fb:18:da:d2:c5:d5:5b:8b:81:69:
         17:d9:ae:13:0a:51:35:24:05:06:8c:ce:d1:67:17:a5:04:8e:
         7c:01:c0:b5:0b:88:ac:b7:66:8f:7b:87:0f:6a:a8:b3:15:7d:
         96:da:77:d3:d8:0c:45:0f:27:d2:11:9d:f5:45:de:a4:92:09:
         64:6e:e3:ea:e4:ea:44:40:99:7e:d5:f0:0d:58:89:b3:ed:66:
         91:a3:bc:8f:cd:37:c3:b4:bd:af:3a:43:fb:4d:8a:29:54:ac:
         bc:02:24:36:d1:bd:60:4f:f3:28:15:d8:6e:5c:63:dd:c1:76:
         3a:88:f5:15:46:a2:0e:b4:f4:31:b1:cb:8a:8b:10:50:1b:6d:
         fb:67:35:c5:c2:d2:9b:f1:9c:a4:c3:8e:1b:9d:02:0b:5a:7a:
         de:dc:86:9e:a0:e9:5d:5a:28:16:14:32:77:aa:51:e4:84:c0:
         84:a5:17:2c:31:63:21:5e:fb:a9:b3:90:62:84:f8:e5:1a:08:
         6d:b0:71:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lagI1Gl7awsYpgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U1NWY5ZGEtOWI4Ni00YmRlLTg4M2EtNWFhY2RkZjk1
NjBiMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
YTA4Yzk5MTAtYzk1Mi00ZTFjLTlkOGEtMzY2NzIyNmRlNzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucIivIjxytj5CeTeEDNbRE+T9fHWpaZoQVvF
wqQJaOvmro9JL4HdFsuCEDh1vjmdI4vdxYYWe46O1AZJsWrrI5KkiLJ4ULm4XvaH
fzqMtb0QnJqp++nhA0x3iKORdpCjwr6TibWiLxQ6fj2qCHYtwo9Jk0HaFRWoYtL0
0RY9lReQG1peaxEi0wM1zk4cqjdaxH5UNj9nEFR4opHltfufk+WdrGa4d57AH9eh
ve/GakJYZ5LsGEMEhKmB9yKWvPdgYE8EDKi3DV2ZzUMxpUfLX5MmNAjCqDM9RRKZ
/8qHHKgOHUXg5JS+kZQ/z2WpZz2a/2ey62yuB1N+lUU+FYTyRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIC6eBGzIwhDB17FEbm2y4wn+743MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jZTU1
ZjlkYS05Yjg2LTRiZGUtODgzYS01YWFjZGRmOTU2MGIvMGVjODJjZmQtMDcwNS0z
YTFlLThhZDktNTlhZTQ5NzhjODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2U1NWY5ZGEtOWI4Ni00YmRlLTg4
M2EtNWFhY2RkZjk1NjBiL2NlNTVmOWRhLTliODYtNGJkZS04ODNhLTVhYWNkZGY5
NTYwYi5jcmwwHwYDVR0jBBgwFoAU/8LCObbGEtBGQ+TzEDQaFPAO1eIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jZTU1ZjlkYS05Yjg2LTRiZGUtODgzYS01YWFj
ZGRmOTU2MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzYQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADM/hIC/PdSomJnlq9LmLHcdOL12p6i1mBN6indQdU2Wkeo8GwZ5WEtf
NnPC0IxHNAGx31MN6jJhbIkNFVLN+xja0sXVW4uBaRfZrhMKUTUkBQaMztFnF6UE
jnwBwLULiKy3Zo97hw9qqLMVfZbad9PYDEUPJ9IRnfVF3qSSCWRu4+rk6kRAmX7V
8A1YibPtZpGjvI/NN8O0va86Q/tNiilUrLwCJDbRvWBP8ygV2G5cY93BdjqI9RVG
og609DGxy4qLEFAbbftnNcXC0pvxnKTDjhudAgtaet7chp6g6V1aKBYUMneqUeSE
wISlFywxYyFe+6mzkGKE+OUaCG2wcaI=
-----END CERTIFICATE-----
Generated at Fri Oct 10 09:55:36 2025 by rpki-client