Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/eeb6ad16-31a0-3fa9-9f91-3a6e71fbc02e.roa
File:                     eeb6ad16-31a0-3fa9-9f91-3a6e71fbc02e.roa (raw, json)
Hash identifier:          XsYPvc8fPrsgukpZEeALpsJ/kyOT+9mvgyEmaHdskKw=
Subject key identifier:   0A:64:FB:4E:94:C0:39:46:22:E3:45:53:80:13:98:4B:C3:09:12:EE
Certificate issuer:       /CN=dc3a2d18-b171-46fa-8693-0080d77f0579
Certificate serial:       010D0C9F4328584B665F0A15882303E268833B80
Authority key identifier: D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/eeb6ad16-31a0-3fa9-9f91-3a6e71fbc02e.roa
Signing time:             Fri 03 Oct 2025 14:31:39 +0000
ROA not before:           Fri 03 Oct 2025 14:31:39 +0000
ROA not after:            Thu 01 Jan 2026 15:31:39 +0000
asID:                     8075
IP address blocks:        142.132.52.0/24 maxlen: 24
                          142.132.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:5f:0a:15:88:23:03:e2:68:83:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3a2d18-b171-46fa-8693-0080d77f0579
        Validity
            Not Before: Oct  3 14:31:39 2025 GMT
            Not After : Jan  1 15:31:39 2026 GMT
        Subject: CN=3b720cbd-5f81-4819-a25e-191cca496bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:57:4a:12:cd:74:80:63:14:25:3f:51:16:71:
                    7a:05:1e:46:50:84:f5:21:c7:8c:b3:80:05:23:2a:
                    c5:cc:46:e4:9c:36:b4:f2:2d:a2:e1:6e:dc:13:3b:
                    84:ff:df:7a:f8:42:f4:de:f7:cf:39:89:62:91:9b:
                    12:5d:8f:9b:27:a9:39:f4:2c:ad:af:55:ca:a7:46:
                    e4:81:23:5e:2d:ce:5c:2c:63:33:86:74:bf:b0:ef:
                    0d:fd:f7:30:6a:4f:59:f5:e4:64:4a:74:66:aa:df:
                    b8:e1:13:81:a7:3c:ad:05:98:57:a9:e3:33:1d:07:
                    9b:83:ef:f1:d6:98:9b:a0:3c:72:d7:87:83:37:3a:
                    a1:57:3d:c0:ff:1e:6c:db:2e:f4:39:5d:b0:4c:1b:
                    1a:bf:3c:04:d0:b9:ac:f7:9a:17:db:44:e4:b3:f9:
                    50:fb:26:eb:be:3c:39:3b:b1:15:a5:28:9b:80:84:
                    bd:67:43:69:7b:c9:98:98:c3:77:48:a8:1d:23:c4:
                    48:f7:c0:21:0f:84:3d:a6:ec:96:49:4e:92:60:26:
                    36:f6:5d:dd:18:0f:d6:d3:41:a8:7b:c7:fa:71:c2:
                    cd:c5:e1:d3:04:6b:64:61:16:bc:2f:f6:c7:20:f0:
                    29:db:ff:2c:56:8b:e9:d9:7a:3d:49:d2:cf:ab:9a:
                    8a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:64:FB:4E:94:C0:39:46:22:E3:45:53:80:13:98:4B:C3:09:12:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/eeb6ad16-31a0-3fa9-9f91-3a6e71fbc02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.crl

            X509v3 Authority Key Identifier:
                keyid:D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.132.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ab:ab:5e:ad:0a:90:5f:e9:21:25:a6:90:85:fd:48:78:01:
         90:79:40:e8:6d:ae:9f:52:94:dd:43:6a:0a:bc:ac:98:35:ba:
         49:17:02:59:bb:0c:b2:1c:55:23:15:2e:96:75:66:5d:9b:8e:
         ad:da:06:c4:a4:13:54:da:3f:5a:ca:c7:c9:a6:cc:fa:bf:45:
         53:73:5a:65:c0:e2:ef:36:06:45:15:39:6f:2c:ff:1f:00:e3:
         ae:44:b3:c4:77:9f:89:c1:f6:fd:31:a2:d5:b2:6d:0c:b6:d7:
         23:a6:22:67:ca:33:97:0d:7f:0b:cb:4f:c8:e9:70:49:da:db:
         8d:78:1a:1a:9f:fd:19:0e:f5:24:b0:5d:62:a6:c4:97:98:fa:
         87:0b:3e:82:3b:f1:c8:9d:79:be:b5:d9:62:ee:fe:23:ca:fd:
         84:99:5d:ce:07:bf:52:d7:27:43:a4:70:79:89:aa:34:b2:b7:
         50:2e:26:a7:6d:28:04:a9:e2:9d:34:cb:0a:49:02:06:bb:51:
         b7:f2:a8:da:f1:f1:b1:e0:09:98:ff:09:88:79:75:be:d1:e5:
         d7:b6:63:c3:8d:ab:72:36:d4:09:dc:4b:71:79:19:c2:0a:58:
         da:77:ed:e0:69:d4:63:03:4f:9d:f0:72:0a:e8:41:51:49:60:
         e0:41:56:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmXwoViCMD4miDO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGMzYTJkMTgtYjE3MS00NmZhLTg2OTMtMDA4MGQ3N2Yw
NTc5MB4XDTI1MTAwMzE0MzEzOVoXDTI2MDEwMTE1MzEzOVowLzEtMCsGA1UEAxMk
M2I3MjBjYmQtNWY4MS00ODE5LWEyNWUtMTkxY2NhNDk2YmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAildKEs10gGMUJT9RFnF6BR5GUIT1IceMs4AF
IyrFzEbknDa08i2i4W7cEzuE/996+EL03vfPOYlikZsSXY+bJ6k59Cytr1XKp0bk
gSNeLc5cLGMzhnS/sO8N/fcwak9Z9eRkSnRmqt+44ROBpzytBZhXqeMzHQebg+/x
1piboDxy14eDNzqhVz3A/x5s2y70OV2wTBsavzwE0Lms95oX20Tks/lQ+ybrvjw5
O7EVpSibgIS9Z0Npe8mYmMN3SKgdI8RI98AhD4Q9puyWSU6SYCY29l3dGA/W00Go
e8f6ccLNxeHTBGtkYRa8L/bHIPAp2/8sVovp2Xo9SdLPq5qKkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFApk+06UwDlGIuNFU4ATmEvDCRLuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYzNh
MmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgwZDc3ZjA1NzkvZWViNmFkMTYtMzFhMC0z
ZmE5LTlmOTEtM2E2ZTcxZmJjMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGMzYTJkMTgtYjE3MS00NmZhLTg2
OTMtMDA4MGQ3N2YwNTc5L2RjM2EyZDE4LWIxNzEtNDZmYS04NjkzLTAwODBkNzdm
MDU3OS5jcmwwHwYDVR0jBBgwFoAU1IXG/bRae9Zu5TBLQpLAiaFsszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kYzNhMmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgw
ZDc3ZjA1NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjoQ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCrq16tCpBf6SElppCF/Uh4AZB5QOhtrp9SlN1Dagq8rJg1ukkXAlm7
DLIcVSMVLpZ1Zl2bjq3aBsSkE1TaP1rKx8mmzPq/RVNzWmXA4u82BkUVOW8s/x8A
465Es8R3n4nB9v0xotWybQy21yOmImfKM5cNfwvLT8jpcEna2414Ghqf/RkO9SSw
XWKmxJeY+ocLPoI78cideb612WLu/iPK/YSZXc4Hv1LXJ0OkcHmJqjSyt1AuJqdt
KASp4p00ywpJAga7UbfyqNrx8bHgCZj/CYh5db7R5de2Y8ONq3I21AncS3F5GcIK
WNp37eBp1GMDT53wcgroQVFJYOBBVhM=
-----END CERTIFICATE-----
Generated at Sat Oct 11 17:04:49 2025 by rpki-client