Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e8528204-a3c2-3176-ac99-05dfd193aaa1.roa
File:                     e8528204-a3c2-3176-ac99-05dfd193aaa1.roa (raw, json)
Hash identifier:          VV7yNPANJHJYrMMrU+Yc4EKnryyzIxXdNsgi8wdh+TA=
Subject key identifier:   C5:9E:69:40:26:5A:B5:B2:F6:42:7F:14:6E:8A:D5:94:12:CB:16:99
Certificate issuer:       /CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3
Certificate serial:       010D0C9F4328584B05E144252C3D4F01CB77DEC0
Authority key identifier: 85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e8528204-a3c2-3176-ac99-05dfd193aaa1.roa
Signing time:             Sat 30 Aug 2025 01:00:34 +0000
ROA not before:           Sat 30 Aug 2025 01:00:34 +0000
ROA not after:            Fri 28 Nov 2025 02:00:34 +0000
asID:                     14618
IP address blocks:        207.241.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:05:e1:44:25:2c:3d:4f:01:cb:77:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3
        Validity
            Not Before: Aug 30 01:00:34 2025 GMT
            Not After : Nov 28 02:00:34 2025 GMT
        Subject: CN=08d1f458-9f09-4e0b-8618-26efca31635f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:19:9b:82:6d:60:1d:d6:34:ba:f1:61:b8:
                    8b:32:40:ae:91:c1:21:28:87:ab:d2:9f:1a:3f:cf:
                    ba:f5:b0:49:41:87:4c:ba:fe:19:96:4f:de:b2:cb:
                    b6:a1:10:77:37:67:6a:8b:fb:87:3a:9b:15:28:b4:
                    71:a4:ef:c6:34:cb:e7:7d:d2:8b:2d:4a:0c:af:63:
                    29:72:e9:43:b4:10:98:79:79:7e:eb:7b:91:09:e9:
                    c5:2f:a7:2b:62:65:a8:ec:69:52:b4:cf:89:62:3e:
                    49:f1:dd:9a:ff:fa:4f:2a:9f:ba:49:53:83:82:99:
                    be:0b:c9:2b:5a:19:3f:4c:b5:a5:a6:93:41:c1:da:
                    81:73:71:0a:ef:19:61:ad:34:15:71:0f:1a:31:62:
                    b3:f1:93:3a:04:9f:34:83:b2:90:44:1c:57:e6:6e:
                    11:93:f0:90:31:0a:be:77:2c:88:6d:a6:45:f5:a2:
                    ce:25:70:46:cd:3e:80:ee:2a:62:3f:2e:c8:d4:d7:
                    c3:22:44:23:ed:d2:35:6e:c2:89:6a:78:e5:2f:59:
                    2b:be:3a:9c:46:8e:21:79:82:22:c4:e4:af:78:9a:
                    07:f8:8e:cd:a3:6f:8a:d5:e5:84:6c:51:b1:8a:03:
                    e3:8b:55:30:06:a5:ea:10:5b:87:c1:99:d8:1c:54:
                    16:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9E:69:40:26:5A:B5:B2:F6:42:7F:14:6E:8A:D5:94:12:CB:16:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e8528204-a3c2-3176-ac99-05dfd193aaa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl

            X509v3 Authority Key Identifier:
                keyid:85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a5:1a:8a:e0:c0:31:87:53:8d:23:a5:6a:14:09:4f:cd:a2:
         a9:7f:dd:05:59:07:19:73:43:6d:d2:ff:42:9b:61:15:0d:01:
         d6:52:da:34:15:49:cc:23:af:42:c4:a6:ae:47:fc:aa:82:dd:
         e7:c4:c1:2f:56:b9:64:cd:d9:97:2c:ff:4a:89:f4:09:8c:66:
         67:ca:14:3a:f2:bb:df:36:09:35:37:2f:8b:16:c8:7d:ba:75:
         a0:bb:43:a5:04:35:a0:a7:66:a7:1e:e0:d7:93:6d:31:54:c0:
         7d:00:f0:1a:44:44:c9:a5:eb:be:f7:3e:f8:ec:26:fc:28:1b:
         6e:02:b6:1d:b2:09:43:33:cd:45:09:a3:15:7d:d0:31:66:32:
         a2:ff:4b:7a:20:a8:0b:15:f4:73:1a:d8:f5:dc:f6:60:7c:51:
         d2:96:b1:eb:23:52:77:59:03:84:5a:26:82:9a:b2:58:c5:8a:
         6c:44:81:4d:c8:63:64:fe:ec:19:b9:03:e4:5c:a1:74:27:58:
         35:28:fe:23:9d:7f:8d:c4:03:da:55:70:a8:f1:82:39:86:84:
         aa:ca:06:44:d8:cd:a8:62:8c:7f:07:3d:65:93:04:b2:87:27:
         3a:4b:75:4b:bd:5d:50:af:07:a5:88:77:04:5a:8a:cb:0c:66:
         46:01:7e:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsF4UQlLD1PAct33sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RkNWM1NzgtMjYxMi00YjFhLThjNGEtYzEyYmM3YzNh
MWUzMB4XDTI1MDgzMDAxMDAzNFoXDTI1MTEyODAyMDAzNFowLzEtMCsGA1UEAxMk
MDhkMWY0NTgtOWYwOS00ZTBiLTg2MTgtMjZlZmNhMzE2MzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumAZm4JtYB3WNLrxYbiLMkCukcEhKIer0p8a
P8+69bBJQYdMuv4Zlk/essu2oRB3N2dqi/uHOpsVKLRxpO/GNMvnfdKLLUoMr2Mp
culDtBCYeXl+63uRCenFL6crYmWo7GlStM+JYj5J8d2a//pPKp+6SVODgpm+C8kr
Whk/TLWlppNBwdqBc3EK7xlhrTQVcQ8aMWKz8ZM6BJ80g7KQRBxX5m4Rk/CQMQq+
dyyIbaZF9aLOJXBGzT6A7ipiPy7I1NfDIkQj7dI1bsKJanjlL1krvjqcRo4heYIi
xOSveJoH+I7No2+K1eWEbFGxigPji1UwBqXqEFuHwZnYHFQWwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWeaUAmWrWy9kJ/FG6K1ZQSyxaZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jZGQ1
YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJiYzdjM2ExZTMvZTg1MjgyMDQtYTNjMi0z
MTc2LWFjOTktMDVkZmQxOTNhYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2RkNWM1NzgtMjYxMi00YjFhLThj
NGEtYzEyYmM3YzNhMWUzL2NkZDVjNTc4LTI2MTItNGIxYS04YzRhLWMxMmJjN2Mz
YTFlMy5jcmwwHwYDVR0jBBgwFoAUhextxeuP/SLDojXkGqYZ8gtvPRUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jZGQ1YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJi
YzdjM2ExZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz/GQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACelGorgwDGHU40jpWoUCU/Noql/3QVZBxlzQ23S/0KbYRUNAdZS2jQV
Scwjr0LEpq5H/KqC3efEwS9WuWTN2Zcs/0qJ9AmMZmfKFDryu982CTU3L4sWyH26
daC7Q6UENaCnZqce4NeTbTFUwH0A8BpERMml6773PvjsJvwoG24Cth2yCUMzzUUJ
oxV90DFmMqL/S3ogqAsV9HMa2PXc9mB8UdKWsesjUndZA4RaJoKasljFimxEgU3I
Y2T+7Bm5A+RcoXQnWDUo/iOdf43EA9pVcKjxgjmGhKrKBkTYzahijH8HPWWTBLKH
JzpLdUu9XVCvB6WIdwRaissMZkYBfn0=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:23:04 2025 by rpki-client