Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/c7c3204e-e7d4-3aed-a808-92e98691f9de.roa
File:                     c7c3204e-e7d4-3aed-a808-92e98691f9de.roa (raw, json)
Hash identifier:          omTAL7dvwkA0Hm6yt0w/dmy8asCKQKXnRtJwrG3IMj0=
Subject key identifier:   B3:A5:BC:F1:1B:CE:F7:91:16:0C:0D:C2:0C:C2:35:50:CF:50:76:6C
Certificate issuer:       /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
Certificate serial:       010D0C9F4328584BAA97A6AEC11708F0670418A0
Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/c7c3204e-e7d4-3aed-a808-92e98691f9de.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     396982
IP address blocks:        168.235.225.0/24 maxlen: 24
                          168.235.226.0/24 maxlen: 24
                          168.235.227.0/24 maxlen: 24
                          168.235.228.0/24 maxlen: 24
                          168.235.229.0/24 maxlen: 24
                          168.235.230.0/24 maxlen: 24
                          168.235.231.0/24 maxlen: 24
                          168.235.232.0/24 maxlen: 24
                          168.235.233.0/24 maxlen: 24
                          168.235.235.0/24 maxlen: 24
                          168.235.236.0/24 maxlen: 24
                          168.235.237.0/24 maxlen: 24
                          168.235.238.0/24 maxlen: 24
                          168.235.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:a6:ae:c1:17:08:f0:67:04:18:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=e92ce8e6-a748-4eed-b9b7-3967e8043995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:97:72:58:87:20:75:60:57:5c:1f:35:00:
                    9c:83:c7:90:7f:53:9b:ed:fe:29:67:c3:f4:66:32:
                    67:8d:82:ca:5f:52:f8:18:c4:56:9c:05:86:54:57:
                    e3:46:50:a1:bd:7e:b7:1f:8b:73:aa:52:be:ba:77:
                    40:eb:b1:90:6a:d9:4f:d1:ad:1b:4a:c4:e7:32:db:
                    f8:25:db:19:f3:20:76:95:99:32:18:e1:a7:fa:06:
                    6a:47:5c:ac:f1:bf:eb:c5:13:20:4a:e6:9a:89:75:
                    b3:49:dc:2a:a5:fb:76:0b:59:6e:61:c5:51:54:b0:
                    ac:05:a5:b8:42:30:2d:c1:f5:12:30:8c:05:07:fb:
                    d7:ac:08:83:c4:19:17:2e:54:4a:22:7b:11:53:ec:
                    bd:27:a8:bb:ea:0a:2d:cf:06:09:3d:bd:4e:22:eb:
                    41:0f:98:5c:87:89:b7:93:61:61:2c:50:41:07:c2:
                    f6:c8:b6:d1:fd:76:2d:b5:b2:14:f1:53:14:e6:b7:
                    75:49:15:d0:a4:25:a3:e7:a4:a3:e8:2f:04:01:48:
                    bb:a0:1f:e7:fc:3e:fb:a1:79:90:ee:bf:5f:b9:40:
                    6a:d8:a0:20:67:00:c1:c6:45:72:3e:d7:25:47:e6:
                    c5:28:76:49:66:ef:02:f5:aa:88:b3:51:7b:d0:6b:
                    28:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A5:BC:F1:1B:CE:F7:91:16:0C:0D:C2:0C:C2:35:50:CF:50:76:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/c7c3204e-e7d4-3aed-a808-92e98691f9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl

            X509v3 Authority Key Identifier:
                keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.235.225.0-168.235.233.255
                  168.235.235.0-168.235.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:9e:c9:05:5e:08:a8:dd:fe:36:19:96:3e:9b:d0:80:5d:
         c3:6a:69:76:c8:12:e5:cd:62:68:b6:01:0d:de:5b:16:08:4e:
         59:d6:0a:8b:56:45:20:d2:97:12:0e:bd:bf:b2:5c:08:cf:e3:
         77:d1:42:6c:83:41:28:48:68:8c:24:c7:22:cc:b2:cd:a2:79:
         e1:7b:59:3e:6e:0e:dd:fe:b2:b2:7f:8d:51:40:d3:f9:cf:34:
         b5:e9:a2:da:ad:f1:e8:3e:b7:74:20:80:7a:5d:af:12:84:a3:
         5a:3b:75:82:f3:b4:6c:b9:2e:1b:a9:d7:1f:bb:0e:20:2c:8a:
         28:41:f0:18:61:dd:5f:cf:6f:d0:df:31:15:56:09:10:cf:09:
         ff:e3:2d:23:ce:68:55:b2:c9:5f:a3:23:58:10:ce:af:a1:4a:
         bf:72:fc:06:b4:c0:11:3a:5b:b1:c4:f7:95:16:6f:e6:b8:f9:
         ea:b8:29:cb:a6:e0:da:24:87:17:d5:b2:e0:b6:50:37:33:68:
         3f:9d:d5:5d:8a:5b:c7:68:0c:82:0f:41:00:cf:12:43:1b:0f:
         91:11:30:54:2c:b7:3c:03:75:68:62:99:90:a4:3a:cb:16:2b:
         d7:27:84:2d:33:8f:09:42:7d:b9:97:c6:57:36:ed:dd:65:64:
         03:56:5a:c3
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEuql6auwRcI8GcEGKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQwN2M4ZmQtYjgwOC00MWQxLWFmNWUtYTg4ZDJkZDU1
NmY5MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk
ZTkyY2U4ZTYtYTc0OC00ZWVkLWI5YjctMzk2N2U4MDQzOTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL2XcliHIHVgV1wfNQCcg8eQf1Ob7f4pZ8P0
ZjJnjYLKX1L4GMRWnAWGVFfjRlChvX63H4tzqlK+undA67GQatlP0a0bSsTnMtv4
JdsZ8yB2lZkyGOGn+gZqR1ys8b/rxRMgSuaaiXWzSdwqpft2C1luYcVRVLCsBaW4
QjAtwfUSMIwFB/vXrAiDxBkXLlRKInsRU+y9J6i76gotzwYJPb1OIutBD5hch4m3
k2FhLFBBB8L2yLbR/XYttbIU8VMU5rd1SRXQpCWj56Sj6C8EAUi7oB/n/D77oXmQ
7r9fuUBq2KAgZwDBxkVyPtclR+bFKHZJZu8C9aqIs1F70Gso6wIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFLOlvPEbzveRFgwNwgzCNVDPUHZsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3
YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRkNTU2ZjkvYzdjMzIwNGUtZTdkNC0z
YWVkLWE4MDgtOTJlOTg2OTFmOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTQwN2M4ZmQtYjgwOC00MWQxLWFm
NWUtYTg4ZDJkZDU1NmY5L2U0MDdjOGZkLWI4MDgtNDFkMS1hZjVlLWE4OGQyZGQ1
NTZmOS5jcmwwHwYDVR0jBBgwFoAUOYhWE1EoATU3AroVdiYKUgOYPgIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhk
MmRkNTU2ZjkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACo6+ED
BAGo6+gwDAMEAKjr6wMEBKjr4DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdnZ7JBV4IqN3+NhmWPpvQgF3D
aml2yBLlzWJotgEN3lsWCE5Z1gqLVkUg0pcSDr2/slwIz+N30UJsg0EoSGiMJMci
zLLNonnhe1k+bg7d/rKyf41RQNP5zzS16aLarfHoPrd0IIB6Xa8ShKNaO3WC87Rs
uS4bqdcfuw4gLIooQfAYYd1fz2/Q3zEVVgkQzwn/4y0jzmhVsslfoyNYEM6voUq/
cvwGtMAROluxxPeVFm/muPnquCnLpuDaJIcX1bLgtlA3M2g/ndVdilvHaAyCD0EA
zxJDGw+RETBULLc8A3VoYpmQpDrLFivXJ4QtM48JQn25l8ZXNu3dZWQDVlrD
-----END CERTIFICATE-----
Generated at Mon Nov 3 21:52:13 2025 by rpki-client