Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0e62a5ec-6384-371b-aaea-44fd0649d91d.roa
File:                     0e62a5ec-6384-371b-aaea-44fd0649d91d.roa (raw, json)
Hash identifier:          mXnH1DOPlpCC/Yw5Jx7kKRSTCKu2Y8ySk/X5+QaoHW8=
Subject key identifier:   8D:6D:99:17:1E:EB:62:AB:7F:62:1F:B2:1D:08:F6:BF:53:67:DA:E0
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B0B76A1D845190721862AAD80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0e62a5ec-6384-371b-aaea-44fd0649d91d.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     62610
IP address blocks:        128.1.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:a1:d8:45:19:07:21:86:2a:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=a7291c2f-4328-4326-92db-3b714068ebf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:76:e8:d6:c3:36:25:20:49:43:e4:4e:75:a1:
                    09:57:7e:ec:36:9e:bb:1d:e4:a9:07:e6:57:f9:98:
                    45:be:b7:36:5e:90:ca:c8:27:3c:48:5a:cc:73:2c:
                    c7:e3:a4:9f:40:f6:5a:1b:ce:88:9b:59:11:bd:ef:
                    e7:5b:7e:21:69:b9:c7:c6:23:3f:d9:60:df:ec:c9:
                    c2:12:db:ea:63:9b:2f:f4:a9:cb:7f:b7:ca:b1:70:
                    9d:75:ef:a7:f4:aa:90:94:84:a4:e9:a5:83:a1:f8:
                    fd:32:6c:33:e1:13:ff:a7:db:76:84:48:97:9e:be:
                    37:c9:ff:f5:40:16:cd:23:1d:56:16:f4:b5:ae:bb:
                    cc:9a:32:69:17:fa:f3:42:20:49:28:ad:99:93:57:
                    62:f8:53:9f:64:74:82:5b:0b:27:d5:9e:2b:1c:21:
                    6d:75:75:15:26:2b:05:82:40:a8:a9:c8:b4:9c:39:
                    95:98:02:bd:95:90:5e:f7:54:69:36:8a:ba:99:ee:
                    bf:e3:19:d1:83:cf:29:1c:03:5b:e5:4d:13:83:f6:
                    7f:cb:bc:a8:12:e7:45:e7:d6:d8:7a:a3:e3:e2:59:
                    e9:99:37:8d:40:8e:ef:08:7e:eb:d3:10:6c:a4:5d:
                    2b:d2:fc:11:da:8f:dd:d4:11:46:bf:8d:22:70:45:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6D:99:17:1E:EB:62:AB:7F:62:1F:B2:1D:08:F6:BF:53:67:DA:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0e62a5ec-6384-371b-aaea-44fd0649d91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:48:51:2e:85:83:4c:e7:eb:9b:29:86:2c:bc:a1:8f:f6:a8:
         b6:51:fd:07:19:40:ad:27:7d:4c:11:ab:fb:52:6c:72:07:b2:
         54:5d:89:30:60:14:36:58:7a:2a:b6:73:28:8b:92:47:61:4e:
         20:01:cc:3d:3e:d4:3d:4f:d8:b7:63:6b:d1:2e:95:0a:d8:be:
         5a:09:fd:17:f8:b9:05:f8:2b:68:3f:43:de:3a:8a:e2:5a:12:
         1e:38:cf:f1:a9:cf:1e:24:5e:a5:c4:09:31:d7:80:e9:0b:69:
         7c:e1:a3:91:87:28:c4:14:a0:8a:2b:b8:1e:aa:31:e2:7f:2c:
         9d:fd:71:04:3b:ee:1e:de:b3:e0:6e:22:64:2f:b8:4f:82:e2:
         60:91:cb:0c:ae:a9:d7:07:04:ba:ab:cf:7c:d7:33:df:c2:ef:
         36:98:e7:9e:9a:6a:a8:7b:e8:da:1d:02:5d:b7:2a:8c:bd:44:
         30:df:90:c9:63:fc:3c:b5:7b:34:e4:b7:17:7a:7a:38:fb:92:
         0a:9a:86:60:43:67:81:9a:6f:16:17:fc:36:a5:bf:a5:a6:f6:
         1b:e9:cf:8f:b1:ea:4f:88:6b:6b:f0:30:7b:ae:6b:2d:e5:65:
         de:c0:a2:a2:39:2b:d9:4b:ad:8e:91:7a:d2:49:14:06:f7:44:
         2d:ff:7a:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqHYRRkHIYYqrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk
YTcyOTFjMmYtNDMyOC00MzI2LTkyZGItM2I3MTQwNjhlYmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXbo1sM2JSBJQ+ROdaEJV37sNp67HeSpB+ZX
+ZhFvrc2XpDKyCc8SFrMcyzH46SfQPZaG86Im1kRve/nW34habnHxiM/2WDf7MnC
EtvqY5sv9KnLf7fKsXCdde+n9KqQlISk6aWDofj9Mmwz4RP/p9t2hEiXnr43yf/1
QBbNIx1WFvS1rrvMmjJpF/rzQiBJKK2Zk1di+FOfZHSCWwsn1Z4rHCFtdXUVJisF
gkCoqci0nDmVmAK9lZBe91RpNoq6me6/4xnRg88pHANb5U0Tg/Z/y7yoEudF59bY
eqPj4lnpmTeNQI7vCH7r0xBspF0r0vwR2o/d1BFGv40icEXYiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1tmRce62Krf2Ifsh0I9r9TZ9rgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMGU2MmE1ZWMtNjM4NC0z
NzFiLWFhZWEtNDRmZDA2NDlkOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAH6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1IUS6Fg0zn65sphiy8oY/2qLZR/QcZQK0nfUwRq/tSbHIHslRdiTBg
FDZYeiq2cyiLkkdhTiABzD0+1D1P2Ldja9EulQrYvloJ/Rf4uQX4K2g/Q946iuJa
Eh44z/Gpzx4kXqXECTHXgOkLaXzho5GHKMQUoIoruB6qMeJ/LJ39cQQ77h7es+Bu
ImQvuE+C4mCRywyuqdcHBLqrz3zXM9/C7zaY556aaqh76NodAl23Koy9RDDfkMlj
/Dy1ezTktxd6ejj7kgqahmBDZ4GabxYX/Dalv6Wm9hvpz4+x6k+Ia2vwMHuuay3l
Zd7AoqI5K9lLrY6RetJJFAb3RC3/eso=
-----END CERTIFICATE-----
Generated at Sun Sep 7 01:57:49 2025 by rpki-client