Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/043f9908-f694-3fea-93b7-6192d18a96c0.roa
File:                     043f9908-f694-3fea-93b7-6192d18a96c0.roa (raw, json)
Hash identifier:          XJqRShLFeJwEZe3mlUS2rVqdCAEaPgDJx5k6OU7+Sis=
Subject key identifier:   5F:93:8F:45:66:C7:4C:35:96:39:D6:1E:63:29:E3:39:F1:66:0A:A0
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F4328584B75FD6520CB765489D7B0CF80
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/043f9908-f694-3fea-93b7-6192d18a96c0.roa
Signing time:             Thu 09 Oct 2025 04:47:50 +0000
ROA not before:           Thu 09 Oct 2025 04:47:50 +0000
ROA not after:            Wed 07 Jan 2026 05:47:50 +0000
asID:                     13335
IP address blocks:        198.135.185.0/24 maxlen: 24
                          2602:2d1::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:fd:65:20:cb:76:54:89:d7:b0:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: Oct  9 04:47:50 2025 GMT
            Not After : Jan  7 05:47:50 2026 GMT
        Subject: CN=9d385274-bb79-4384-b767-f573c70cf257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:61:8c:a2:ef:f2:be:67:34:10:59:36:07:
                    5d:fc:97:71:98:7f:ef:6e:23:2c:c2:cc:15:13:2a:
                    0e:93:25:57:62:f0:13:3c:a4:c1:b4:00:03:1e:4d:
                    16:5f:0a:a6:94:54:ba:c0:3b:f9:cb:2d:8e:18:4b:
                    d8:95:73:94:4f:e7:08:5e:e5:de:b5:89:d5:21:18:
                    22:57:37:8e:0a:27:9a:b8:e2:c9:c6:c2:11:75:d0:
                    8d:b2:7f:42:21:47:ff:2c:1b:88:b3:f8:78:82:00:
                    f3:f8:1b:23:34:da:26:b4:7a:12:b2:12:8a:36:b6:
                    53:96:ab:c0:b2:19:21:b9:85:89:77:9f:ff:ee:d0:
                    34:24:d5:18:f3:07:9b:31:a4:da:b5:61:ad:86:b2:
                    2a:94:72:1d:11:47:1d:a6:61:c4:32:0f:b4:30:9b:
                    c9:57:53:80:e0:3c:13:b5:ce:3d:00:a3:b2:fc:9f:
                    75:b1:0b:a6:24:fa:e7:ce:bf:f8:f2:6c:e9:31:08:
                    2e:4f:50:ae:d1:db:4b:79:ba:0f:f1:24:59:57:5f:
                    c5:8d:c6:66:ec:f3:ac:aa:2f:fd:61:5e:32:53:76:
                    c4:12:3f:81:b1:8c:c2:57:82:a3:f8:a2:48:e3:a8:
                    7b:b4:fb:15:7a:73:2d:d3:c0:2d:34:5e:24:5e:fb:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:8F:45:66:C7:4C:35:96:39:D6:1E:63:29:E3:39:F1:66:0A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/043f9908-f694-3fea-93b7-6192d18a96c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.185.0/24
                IPv6:
                  2602:2d1::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:4e:45:79:0f:6f:ac:78:b3:e1:90:f5:ff:2e:23:3e:df:0c:
         5d:35:7e:3e:e4:f2:4d:bf:79:00:30:bb:6b:6c:d1:e0:99:d1:
         86:8c:8a:2b:1f:71:5c:61:93:6d:e5:ca:45:73:28:79:8e:19:
         6c:ec:7f:67:30:ca:8b:b5:ba:01:f9:72:84:8f:5d:f1:6d:f5:
         2d:d9:1e:4a:d9:19:6d:ea:4b:f5:8c:84:b8:c4:c0:ef:82:6f:
         ca:64:b3:68:00:de:16:9d:55:62:81:22:34:cc:ea:8b:8e:60:
         5c:84:71:40:fd:e9:9e:09:c1:e1:b5:bf:49:ae:28:68:05:f9:
         81:5d:ec:1a:5a:f2:ca:37:54:25:b7:e7:70:7c:ed:18:c6:1e:
         03:5f:10:84:35:83:00:c9:24:bd:0a:96:4b:c5:e9:84:f6:fa:
         12:4c:29:51:77:ef:bc:1a:5c:93:5e:50:da:1f:b5:54:4c:22:
         52:9c:3c:f1:67:04:43:5a:a5:93:57:83:00:9d:83:60:b6:bf:
         d7:87:d4:2c:dd:d7:d5:db:52:fd:e4:27:b2:d1:98:47:28:9a:
         d8:9a:23:8a:a0:fa:ee:b8:7d:6c:d6:fb:62:1f:59:0c:8e:b9:
         55:2f:1b:a7:b3:47:94:5d:e2:fb:04:c9:e5:9c:90:30:35:0c:
         5a:8e:f2:c4
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEt1/WUgy3ZUidewz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODEzYWFkMjUtMjVmYS00YjVjLWJiODQtMTVmYWJlYTIz
Zjg3MB4XDTI1MTAwOTA0NDc1MFoXDTI2MDEwNzA1NDc1MFowLzEtMCsGA1UEAxMk
OWQzODUyNzQtYmI3OS00Mzg0LWI3NjctZjU3M2M3MGNmMjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRdhjKLv8r5nNBBZNgdd/JdxmH/vbiMswswV
EyoOkyVXYvATPKTBtAADHk0WXwqmlFS6wDv5yy2OGEvYlXOUT+cIXuXetYnVIRgi
VzeOCieauOLJxsIRddCNsn9CIUf/LBuIs/h4ggDz+BsjNNomtHoSshKKNrZTlqvA
shkhuYWJd5//7tA0JNUY8webMaTatWGthrIqlHIdEUcdpmHEMg+0MJvJV1OA4DwT
tc49AKOy/J91sQumJPrnzr/48mzpMQguT1Cu0dtLeboP8SRZV1/FjcZm7POsqi/9
YV4yU3bEEj+BsYzCV4Kj+KJI46h7tPsVenMt08AtNF4kXvueSQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFF+Tj0Vmx0w1ljnWHmMp4znxZgqgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MTNh
YWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZhYmVhMjNmODcvMDQzZjk5MDgtZjY5NC0z
ZmVhLTkzYjctNjE5MmQxOGE5NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODEzYWFkMjUtMjVmYS00YjVjLWJi
ODQtMTVmYWJlYTIzZjg3LzgxM2FhZDI1LTI1ZmEtNGI1Yy1iYjg0LTE1ZmFiZWEy
M2Y4Ny5jcmwwHwYDVR0jBBgwFoAUXpchGUSonO1Hizk768c2nDMBy4owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MTNhYWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZh
YmVhMjNmODcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxoe5MA4E
AgACMAgDBgImAgLRADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWTkV5D2+seLPhkPX/LiM+3wxdNX4+5PJN
v3kAMLtrbNHgmdGGjIorH3FcYZNt5cpFcyh5jhls7H9nMMqLtboB+XKEj13xbfUt
2R5K2Rlt6kv1jIS4xMDvgm/KZLNoAN4WnVVigSI0zOqLjmBchHFA/emeCcHhtb9J
rihoBfmBXewaWvLKN1Qlt+dwfO0Yxh4DXxCENYMAySS9CpZLxemE9voSTClRd++8
GlyTXlDaH7VUTCJSnDzxZwRDWqWTV4MAnYNgtr/Xh9Qs3dfV21L95Cey0ZhHKJrY
miOKoPruuH1s1vtiH1kMjrlVLxuns0eUXeL7BMnlnJAwNQxajvLE
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:02:59 2025 by rpki-client