Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4db2f9a7-e666-3a8c-b702-0f73bf97b127.roa
File:                     4db2f9a7-e666-3a8c-b702-0f73bf97b127.roa (raw, json)
Hash identifier:          +8pWQQvenBd1qIhW/v97gfLFUxAHowLDIwlXGLJCJ5o=
Subject key identifier:   EB:A8:36:E5:68:C5:05:6A:5B:5F:B0:01:CD:82:D8:32:0D:99:49:C0
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584B1806E3AEF02DCD183AC80F30
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4db2f9a7-e666-3a8c-b702-0f73bf97b127.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        136.245.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e3:ae:f0:2d:cd:18:3a:c8:0f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=9590b0c5-ba40-4341-af93-c9963536fe50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:bb:51:76:be:f5:bf:9b:0c:11:ce:a3:fa:
                    d0:d0:29:ac:81:23:50:96:f2:70:6a:19:d9:b7:6c:
                    7a:6f:06:dc:18:91:fe:3f:cc:01:47:5d:b9:ae:4b:
                    7a:b0:92:92:7b:cd:52:a3:2f:b4:3a:66:36:62:ac:
                    06:0a:f0:6a:ad:5f:0e:89:52:e4:90:00:39:77:60:
                    02:b4:eb:d0:84:b4:a3:c1:63:26:a4:b5:9c:99:24:
                    31:58:44:7c:1a:4a:6c:1e:2e:8f:e6:fd:31:22:35:
                    87:f4:31:b9:f9:b6:a3:43:6d:ad:df:5a:57:fc:ea:
                    e7:8a:5d:1f:8c:c0:c0:3b:c7:b3:be:7f:4b:9b:7b:
                    54:66:8f:a2:44:92:0d:7f:85:4e:a2:7a:3b:e5:f4:
                    6a:91:ed:26:88:ae:28:d0:38:d6:53:f2:36:aa:0f:
                    fa:0e:52:94:a3:6b:81:f8:51:66:6f:a2:18:23:2b:
                    05:56:bd:44:ba:54:d8:e9:4c:d1:26:2a:61:39:a5:
                    8c:16:b0:d0:ce:eb:28:fb:82:67:b3:37:1a:88:50:
                    55:b7:21:ed:96:12:7a:2b:ea:c3:dd:d8:d4:0c:eb:
                    8a:89:0f:f5:14:3b:62:51:52:6b:e0:06:4e:db:9c:
                    f7:67:a9:b5:d0:f1:a9:88:bb:7a:a8:ca:0c:f8:64:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A8:36:E5:68:C5:05:6A:5B:5F:B0:01:CD:82:D8:32:0D:99:49:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/4db2f9a7-e666-3a8c-b702-0f73bf97b127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:17:8f:c9:68:81:7a:04:3c:bc:8a:20:0c:cd:40:30:1f:e6:
         56:55:e1:c8:09:1b:a1:ee:85:6b:09:6c:7a:10:11:0b:e2:05:
         fe:37:0b:06:e9:44:78:8c:18:b0:3c:1a:d7:b5:5e:be:5f:67:
         34:17:c2:a3:5b:9f:1a:46:83:bc:c4:ef:ba:e3:64:b6:72:ff:
         91:1f:31:c0:a7:1b:ca:3a:40:a4:5e:50:90:66:37:ae:a7:f8:
         1f:e3:36:c4:57:fe:0e:a2:87:1a:60:ce:2b:e0:fc:fb:3e:1f:
         37:a5:84:3a:77:c0:d5:af:c5:60:bf:cd:34:a5:b7:aa:96:ff:
         37:06:cb:07:8c:8a:e2:b5:66:76:98:d3:8e:82:dd:a0:e0:76:
         44:fa:f9:f6:26:06:48:da:bb:5f:fb:4e:ab:b1:06:81:30:f7:
         91:51:fa:08:23:37:15:20:0d:d9:d5:df:06:82:d0:d9:74:72:
         09:af:a9:ab:ac:d0:91:b7:5e:b8:29:c4:21:cb:aa:2f:d4:c7:
         40:a9:75:7b:a1:92:74:05:05:32:a9:f8:c8:80:7e:63:2b:35:
         56:54:ae:2d:bd:c5:b1:8c:7a:a2:12:65:3a:6c:8b:be:00:34:
         3c:0c:ed:2b:aa:83:5a:08:8d:15:8f:ce:80:70:28:d4:c9:4a:
         82:b7:7f:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuOu8C3NGDrIDzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
OTU5MGIwYzUtYmE0MC00MzQxLWFmOTMtYzk5NjM1MzZmZTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkC7UXa+9b+bDBHOo/rQ0CmsgSNQlvJwahnZ
t2x6bwbcGJH+P8wBR125rkt6sJKSe81Soy+0OmY2YqwGCvBqrV8OiVLkkAA5d2AC
tOvQhLSjwWMmpLWcmSQxWER8GkpsHi6P5v0xIjWH9DG5+bajQ22t31pX/Ornil0f
jMDAO8ezvn9Lm3tUZo+iRJINf4VOono75fRqke0miK4o0DjWU/I2qg/6DlKUo2uB
+FFmb6IYIysFVr1EulTY6UzRJiphOaWMFrDQzuso+4JnszcaiFBVtyHtlhJ6K+rD
3djUDOuKiQ/1FDtiUVJr4AZO25z3Z6m10PGpiLt6qMoM+GQBoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuoNuVoxQVqW1+wAc2C2DINmUnAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvNGRiMmY5YTctZTY2Ni0z
YThjLWI3MDItMGY3M2JmOTdiMTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiPV9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkXj8logXoEPLyKIAzNQDAf5lZV4cgJG6HuhWsJbHoQEQviBf43Cwbp
RHiMGLA8Gte1Xr5fZzQXwqNbnxpGg7zE77rjZLZy/5EfMcCnG8o6QKReUJBmN66n
+B/jNsRX/g6ihxpgzivg/Ps+HzelhDp3wNWvxWC/zTSlt6qW/zcGyweMiuK1ZnaY
046C3aDgdkT6+fYmBkjau1/7TquxBoEw95FR+ggjNxUgDdnV3waC0Nl0cgmvqaus
0JG3XrgpxCHLqi/Ux0CpdXuhknQFBTKp+MiAfmMrNVZUri29xbGMeqISZTpsi74A
NDwM7Suqg1oIjRWPzoBwKNTJSoK3f2A=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:48:33 2025 by rpki-client