Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2ebb08c5-703f-3407-837a-53994c506648.roa
File:                     2ebb08c5-703f-3407-837a-53994c506648.roa (raw, json)
Hash identifier:          nW1AVv1G/S6YAcaMDMrtpHgxZUgMu/Hk4yvambU1JXA=
Subject key identifier:   E2:E7:49:7D:37:87:DD:8A:B3:7F:4A:BC:9A:3F:EC:39:11:51:5D:B4
Certificate issuer:       /CN=2c17c05d-3f57-415d-ae1c-87b9e45a36cc
Certificate serial:       010D0C9F4328584B4E770BC44043E6D0C17B2E00
Authority key identifier: 9C:8C:C1:E5:F9:4E:CB:E9:9B:C3:ED:50:03:68:CD:AC:84:98:36:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2ebb08c5-703f-3407-837a-53994c506648.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     11998
IP address blocks:        142.139.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:0b:c4:40:43:e6:d0:c1:7b:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c17c05d-3f57-415d-ae1c-87b9e45a36cc
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=7ef6357b-3263-42b8-970a-af6a63c01f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:00:01:62:4b:e6:f5:b6:1c:93:c7:1f:7d:
                    90:1a:e5:e7:ba:35:d0:36:19:5a:62:89:0d:74:58:
                    13:11:a4:99:be:ce:2a:61:71:2f:c3:10:a0:84:1e:
                    13:8a:95:5f:d6:07:9a:49:86:9f:00:99:4b:58:98:
                    bd:23:48:a6:98:c0:03:5d:3a:ca:3a:c7:38:4a:34:
                    56:24:4f:46:bb:77:f8:47:3a:76:eb:96:9a:cb:02:
                    43:e4:91:b0:70:42:24:1d:96:37:e4:22:87:19:ef:
                    95:86:1f:1b:2a:01:0f:66:d8:09:cf:b9:ef:50:a9:
                    42:b1:3d:b8:ca:d8:eb:01:b9:af:a0:12:1d:a6:c9:
                    bd:50:d0:e9:7d:47:04:d0:9f:06:dc:ec:4c:1f:5e:
                    c2:55:32:77:e5:23:9e:c1:6a:de:e6:ee:cf:88:59:
                    53:57:c5:44:b0:28:e3:2e:8f:47:25:d8:f6:ac:c2:
                    92:6d:5c:e3:44:f9:07:31:38:c9:26:64:da:a5:ef:
                    84:a8:24:e4:24:c3:c7:19:0e:ff:cc:ec:8a:d5:44:
                    16:1f:08:30:8d:4e:7c:05:54:8d:3d:3e:d0:0d:f8:
                    91:12:20:63:bf:20:f7:a2:08:55:bc:f8:00:eb:f9:
                    29:a7:fe:fb:82:f7:45:2b:71:14:ea:6b:18:1d:d3:
                    b7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E7:49:7D:37:87:DD:8A:B3:7F:4A:BC:9A:3F:EC:39:11:51:5D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2ebb08c5-703f-3407-837a-53994c506648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.crl

            X509v3 Authority Key Identifier:
                keyid:9C:8C:C1:E5:F9:4E:CB:E9:9B:C3:ED:50:03:68:CD:AC:84:98:36:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.139.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:cc:ef:c5:1c:47:2a:a8:18:c8:3b:9d:9b:7c:bf:1f:31:97:
         1f:15:00:60:ff:78:7a:cf:8b:3b:09:77:8f:aa:27:94:d8:76:
         9e:5d:6a:0d:a9:9b:c6:89:5b:36:14:1e:01:45:b5:79:b2:2f:
         41:b1:b8:78:79:31:f7:b2:c2:5a:d0:9a:58:c7:cd:33:92:84:
         0c:cd:d0:cd:19:42:f3:9a:8a:aa:b1:41:d6:9d:59:a5:4a:3e:
         95:35:a1:76:6e:c5:a2:52:9e:0e:0d:50:20:dc:88:92:e5:bc:
         e1:d5:b8:f7:25:d1:44:47:91:fd:ef:f7:c2:52:99:66:da:d2:
         f2:98:cc:98:b9:23:09:49:3a:31:d1:af:1b:38:ce:37:98:b6:
         6f:28:71:f8:9c:84:34:af:f1:7f:fc:4f:48:cd:0c:2e:2e:f6:
         29:4b:77:79:bd:c2:e1:49:8a:ae:38:57:d4:46:4c:2d:4f:a1:
         a1:98:8b:4e:98:85:ae:9d:e1:30:c9:72:e9:a9:1a:a3:df:b1:
         3b:d8:5a:9f:90:85:ba:70:48:57:9e:fd:01:7b:65:48:83:82:
         61:3c:b5:2b:18:9c:e2:46:33:15:8d:42:ea:f6:1e:8f:61:2c:
         f4:2c:99:0a:f9:96:6d:60:f1:ae:54:27:1e:e6:fd:f4:0c:e6:
         bb:64:2d:ac
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtOdwvEQEPm0MF7LgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmMxN2MwNWQtM2Y1Ny00MTVkLWFlMWMtODdiOWU0NWEz
NmNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
N2VmNjM1N2ItMzI2My00MmI4LTk3MGEtYWY2YTYzYzAxZjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAAAAWJL5vW2HJPHH32QGuXnujXQNhlaYokN
dFgTEaSZvs4qYXEvwxCghB4TipVf1geaSYafAJlLWJi9I0immMADXTrKOsc4SjRW
JE9Gu3f4Rzp265aaywJD5JGwcEIkHZY35CKHGe+Vhh8bKgEPZtgJz7nvUKlCsT24
ytjrAbmvoBIdpsm9UNDpfUcE0J8G3OxMH17CVTJ35SOewWre5u7PiFlTV8VEsCjj
Lo9HJdj2rMKSbVzjRPkHMTjJJmTape+EqCTkJMPHGQ7/zOyK1UQWHwgwjU58BVSN
PT7QDfiREiBjvyD3oghVvPgA6/kpp/77gvdFK3EU6msYHdO3DwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOLnSX03h92Ks39KvJo/7DkRUV20MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yYzE3
YzA1ZC0zZjU3LTQxNWQtYWUxYy04N2I5ZTQ1YTM2Y2MvMmViYjA4YzUtNzAzZi0z
NDA3LTgzN2EtNTM5OTRjNTA2NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmMxN2MwNWQtM2Y1Ny00MTVkLWFl
MWMtODdiOWU0NWEzNmNjLzJjMTdjMDVkLTNmNTctNDE1ZC1hZTFjLTg3YjllNDVh
MzZjYy5jcmwwHwYDVR0jBBgwFoAUnIzB5flOy+mbw+1QA2jNrISYNgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yYzE3YzA1ZC0zZjU3LTQxNWQtYWUxYy04N2I5
ZTQ1YTM2Y2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjoswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZMzvxRxHKqgYyDudm3y/HzGXHxUAYP94es+LOwl3j6onlNh2nl1qDamb
xolbNhQeAUW1ebIvQbG4eHkx97LCWtCaWMfNM5KEDM3QzRlC85qKqrFB1p1ZpUo+
lTWhdm7FolKeDg1QINyIkuW84dW49yXRREeR/e/3wlKZZtrS8pjMmLkjCUk6MdGv
GzjON5i2byhx+JyENK/xf/xPSM0MLi72KUt3eb3C4UmKrjhX1EZMLU+hoZiLTpiF
rp3hMMly6akao9+xO9han5CFunBIV579AXtlSIOCYTy1Kxic4kYzFY1C6vYej2Es
9CyZCvmWbWDxrlQnHub99Azmu2QtrA==
-----END CERTIFICATE-----
Generated at Sat Oct 11 10:35:52 2025 by rpki-client