Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c6a3f879-07bb-3edd-b1a9-c16239cc5141.roa
File:                     c6a3f879-07bb-3edd-b1a9-c16239cc5141.roa (raw, json)
Hash identifier:          5LTEnb/hjw+k7Rz+1uwBE5p/BEqx8XSzIRv5JnIRVIA=
Subject key identifier:   AB:FB:C0:90:10:05:E1:05:FE:1D:CA:DF:5B:72:9B:0A:60:81:A4:37
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584AF521713ABB30BC9800357FF0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c6a3f879-07bb-3edd-b1a9-c16239cc5141.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     54538
IP address blocks:        144.125.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Sep 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:71:3a:bb:30:bc:98:00:35:7f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=08863541-d86d-48b3-99fe-d482d09ad20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:5a:15:62:26:09:9e:57:76:f4:b5:2e:e6:
                    7e:27:4c:ce:c9:45:1c:6d:e0:b6:58:b4:8e:28:c9:
                    2e:e9:8b:d8:1b:7f:a0:ff:5c:c8:05:77:d1:48:dd:
                    bd:dd:fe:59:ff:71:8a:e0:36:31:77:60:cb:48:4c:
                    8f:e1:f8:45:7e:96:bf:65:3a:48:f8:b2:28:d3:2c:
                    70:94:a8:1a:2c:68:16:17:f6:79:9b:9a:47:99:26:
                    18:4a:fa:d1:51:21:5f:2e:0a:97:a3:99:aa:a4:8a:
                    e8:50:5e:a5:0e:88:78:c3:df:bb:ea:5a:a5:e6:44:
                    62:63:be:40:4e:a9:8a:c8:94:04:6e:78:eb:63:0b:
                    b5:d3:89:26:52:7e:cb:cd:7e:a6:a9:70:54:70:f9:
                    cf:ab:d2:1e:4a:ed:d9:47:28:29:96:1e:bd:e1:3f:
                    57:80:ea:f3:bc:3b:f8:73:f7:7c:38:1c:7e:5f:b8:
                    c0:f2:2f:07:25:ad:78:47:84:b0:06:c9:60:c2:95:
                    96:fb:72:48:8d:07:fe:45:64:18:a2:cb:be:e8:d9:
                    d2:e2:87:32:81:6b:fd:27:c6:45:6c:40:ca:56:b0:
                    41:d2:b9:3e:0d:70:cd:16:9b:68:37:ea:22:b1:b0:
                    91:e2:ea:6b:a3:95:11:94:5f:6a:39:c2:19:e9:7d:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FB:C0:90:10:05:E1:05:FE:1D:CA:DF:5B:72:9B:0A:60:81:A4:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c6a3f879-07bb-3edd-b1a9-c16239cc5141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:d9:72:0c:39:35:e5:1e:61:4b:75:47:48:62:90:8c:39:de:
         b3:0b:11:68:84:59:c0:17:84:42:70:9a:90:5d:2f:8c:5a:85:
         74:f0:d8:77:3c:f8:8f:71:a6:c0:b0:14:a8:fd:37:a9:22:d0:
         ed:b4:2c:a7:5d:4b:ba:dc:3c:04:54:81:dd:05:9d:dd:b2:50:
         df:f7:be:2f:5c:9b:1c:5c:7a:40:f5:02:15:42:59:cd:e3:c1:
         b0:81:24:e2:bc:53:db:94:ee:e5:48:ac:6a:ef:a8:68:ac:a9:
         b1:d5:ed:bd:e4:27:45:a1:96:09:5a:30:2c:a8:8d:45:42:0a:
         f2:c6:ac:03:a7:3a:7f:a2:74:2e:66:3b:75:9f:d5:5b:d0:eb:
         bc:a2:a4:90:63:52:60:fe:ee:53:21:43:2f:3b:3f:ca:c3:d2:
         f3:f8:3a:0a:ed:8f:65:08:81:3d:ad:80:cc:39:81:54:e2:80:
         89:ce:da:dd:60:02:05:8f:fb:de:e2:29:af:fe:da:57:b1:57:
         46:cc:5b:bb:57:c9:24:72:fc:1b:6f:a5:6c:fb:1b:e6:83:d9:
         42:c1:64:2c:bb:8e:fd:64:6c:94:6b:98:9a:08:73:32:e7:13:
         f6:93:ec:36:37:2d:31:d5:33:d6:c0:61:47:f5:6c:22:f9:73:
         19:a3:0b:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IXE6uzC8mAA1f/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
MDg4NjM1NDEtZDg2ZC00OGIzLTk5ZmUtZDQ4MmQwOWFkMjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdBaFWImCZ5XdvS1LuZ+J0zOyUUcbeC2WLSO
KMku6YvYG3+g/1zIBXfRSN293f5Z/3GK4DYxd2DLSEyP4fhFfpa/ZTpI+LIo0yxw
lKgaLGgWF/Z5m5pHmSYYSvrRUSFfLgqXo5mqpIroUF6lDoh4w9+76lql5kRiY75A
TqmKyJQEbnjrYwu104kmUn7LzX6mqXBUcPnPq9IeSu3ZRygplh694T9XgOrzvDv4
c/d8OBx+X7jA8i8HJa14R4SwBslgwpWW+3JIjQf+RWQYosu+6NnS4ocygWv9J8ZF
bEDKVrBB0rk+DXDNFptoN+oisbCR4upro5URlF9qOcIZ6X2nvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKv7wJAQBeEF/h3K31tymwpggaQ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYzZhM2Y4NzktMDdiYi0z
ZWRkLWIxYTktYzE2MjM5Y2M1MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkH1oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALjZcgw5NeUeYUt1R0hikIw53rMLEWiEWcAXhEJwmpBdL4xahXTw2Hc8
+I9xpsCwFKj9N6ki0O20LKddS7rcPARUgd0Fnd2yUN/3vi9cmxxcekD1AhVCWc3j
wbCBJOK8U9uU7uVIrGrvqGisqbHV7b3kJ0WhlglaMCyojUVCCvLGrAOnOn+idC5m
O3Wf1VvQ67yipJBjUmD+7lMhQy87P8rD0vP4Ogrtj2UIgT2tgMw5gVTigInO2t1g
AgWP+97iKa/+2lexV0bMW7tXySRy/BtvpWz7G+aD2ULBZCy7jv1kbJRrmJoIczLn
E/aT7DY3LTHVM9bAYUf1bCL5cxmjC1M=
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:49:21 2025 by rpki-client