Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/ae571bab-f5a5-3146-8b89-14e2380725a7.roa
File:                     ae571bab-f5a5-3146-8b89-14e2380725a7.roa (raw, json)
Hash identifier:          HcqAZPaqIxbGASqyCdKRCJa1r6b3HXnH+Dt/H2KpZsg=
Subject key identifier:   11:8C:43:5E:8A:29:6D:74:2F:9D:56:C7:7A:56:FA:6A:40:30:22:DC
Certificate issuer:       /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
Certificate serial:       010D0C9F4328584B3F1C5F19FB0411CFD44E1280
Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/ae571bab-f5a5-3146-8b89-14e2380725a7.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     8075
IP address blocks:        165.125.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:5f:19:fb:04:11:cf:d4:4e:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=5cd7af32-1d92-4476-b6f8-aae62ae7c01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:6c:37:1f:0b:1f:b5:ef:6d:f1:0f:d4:1b:
                    2c:ba:1b:23:3f:e3:d0:b5:f6:de:e5:32:ff:d8:00:
                    58:22:64:b9:ea:2c:52:49:0c:11:bd:a9:cc:cb:15:
                    49:7a:fb:0c:c0:23:0e:ee:16:9b:02:15:7e:f8:97:
                    38:ca:35:51:83:77:08:8b:fa:b9:01:71:e0:d8:f8:
                    ae:29:43:91:bd:4a:3b:a0:b8:82:60:e2:4c:6c:05:
                    43:c8:02:bb:a7:e5:f7:67:05:aa:d9:b4:7e:fd:c8:
                    15:a8:57:60:bd:2f:de:cb:99:42:ab:5b:7c:21:ab:
                    33:22:6b:34:b4:0d:91:c9:9e:62:ad:4d:9d:92:da:
                    3d:c7:17:14:86:95:da:d8:eb:f0:dc:22:cf:a4:d0:
                    e1:f2:c8:ab:36:fd:71:c7:f6:59:00:6e:ca:93:c3:
                    a6:2f:9a:89:f5:0e:57:2e:89:39:b8:49:b7:b2:24:
                    17:a1:d3:7f:a5:f4:d9:95:54:43:40:fc:3b:ad:d4:
                    cd:02:b9:8f:b8:25:e7:31:c6:91:c8:1a:7e:74:62:
                    8f:e7:96:49:4a:bb:27:56:71:e1:fd:07:51:e0:d1:
                    63:62:59:4b:43:dc:d2:ee:4c:f7:37:24:86:4d:8c:
                    23:64:9d:dd:74:db:33:cf:5e:c8:b0:b0:b4:6c:bd:
                    4a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8C:43:5E:8A:29:6D:74:2F:9D:56:C7:7A:56:FA:6A:40:30:22:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/ae571bab-f5a5-3146-8b89-14e2380725a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.125.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9c:c0:4b:28:80:59:39:86:37:4b:7a:cf:77:b8:77:db:93:
         7c:fb:1e:c5:b8:82:1e:dd:2e:0f:8b:41:62:fb:e0:8d:84:54:
         4d:d0:86:dd:97:32:e1:c6:86:0d:b6:66:be:50:2e:3b:7a:ae:
         d9:f5:33:d6:93:b6:77:dc:e5:69:72:91:d6:8d:46:26:6d:01:
         86:58:18:35:27:60:24:8a:4b:1b:50:36:0e:df:64:d3:76:69:
         13:81:3a:27:20:82:59:db:eb:0f:b6:57:d7:76:56:e1:70:f1:
         27:a1:c9:16:27:2a:5e:8c:c9:6b:f3:43:35:e5:ec:b0:1c:02:
         92:69:b6:f6:d5:96:22:d9:1b:56:e5:24:07:c9:d6:34:d3:c8:
         a1:82:3d:73:55:f7:7f:28:88:1b:58:d0:6a:86:e9:cf:25:e3:
         c2:4b:e1:5e:aa:29:e2:1e:90:34:11:5d:9f:b3:ef:56:e7:8a:
         0d:cb:be:f7:e1:e9:45:03:52:ee:61:0a:ea:3b:f8:19:fd:e8:
         24:10:40:d0:53:db:90:e9:44:e7:5e:85:23:eb:c2:79:ab:d9:
         6d:18:24:a8:ba:5d:10:d0:7d:68:f4:88:ef:8e:c8:76:80:2f:
         75:8b:95:34:26:eb:1f:0d:9d:ac:a0:21:24:96:83:ca:35:9d:
         28:a1:31:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HF8Z+wQRz9ROEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4
YjliMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk
NWNkN2FmMzItMWQ5Mi00NDc2LWI2ZjgtYWFlNjJhZTdjMDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC9sNx8LH7XvbfEP1BssuhsjP+PQtfbe5TL/
2ABYImS56ixSSQwRvanMyxVJevsMwCMO7habAhV++Jc4yjVRg3cIi/q5AXHg2Piu
KUORvUo7oLiCYOJMbAVDyAK7p+X3ZwWq2bR+/cgVqFdgvS/ey5lCq1t8IaszIms0
tA2RyZ5irU2dkto9xxcUhpXa2Ovw3CLPpNDh8sirNv1xx/ZZAG7Kk8OmL5qJ9Q5X
Lok5uEm3siQXodN/pfTZlVRDQPw7rdTNArmPuCXnMcaRyBp+dGKP55ZJSrsnVnHh
/QdR4NFjYllLQ9zS7kz3NySGTYwjZJ3ddNszz17IsLC0bL1KVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGMQ16KKW10L51Wx3pW+mpAMCLcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wODU4
YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvYWU1NzFiYWItZjVhNS0z
MTQ2LThiODktMTRlMjM4MDcyNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDg1OGIwN2YtNzc1ZS00YzA1LWFl
NDgtZDQzYjVkOTM4YjliLzA4NThiMDdmLTc3NWUtNGMwNS1hZTQ4LWQ0M2I1ZDkz
OGI5Yi5jcmwwHwYDVR0jBBgwFoAUzm+k9LgBLNbG78YySi2NeLwdDYswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNi
NWQ5MzhiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApX0yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWcwEsogFk5hjdLes93uHfbk3z7HsW4gh7dLg+LQWL74I2EVE3Qht2X
MuHGhg22Zr5QLjt6rtn1M9aTtnfc5WlykdaNRiZtAYZYGDUnYCSKSxtQNg7fZNN2
aROBOicgglnb6w+2V9d2VuFw8SehyRYnKl6MyWvzQzXl7LAcApJptvbVliLZG1bl
JAfJ1jTTyKGCPXNV938oiBtY0GqG6c8l48JL4V6qKeIekDQRXZ+z71bnig3Lvvfh
6UUDUu5hCuo7+Bn96CQQQNBT25DpROdehSPrwnmr2W0YJKi6XRDQfWj0iO+OyHaA
L3WLlTQm6x8NnaygISSWg8o1nSihMVg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:56 2025 by rpki-client