Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/11553b05-d09e-393e-bdd4-408cc33e6d8d.roa
File:                     11553b05-d09e-393e-bdd4-408cc33e6d8d.roa (raw, json)
Hash identifier:          PyJgvBtpB1nlIcZAfQofl5Yoq4rOmgTFxTPISMjJ6Fc=
Subject key identifier:   BE:06:A4:03:6F:46:A3:04:91:0F:2D:2B:8B:D0:AD:0E:0B:6B:BF:E7
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584B7B22071DFAB8858FB01D9280
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/11553b05-d09e-393e-bdd4-408cc33e6d8d.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     401307
IP address blocks:        204.25.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:22:07:1d:fa:b8:85:8f:b0:1d:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=1ac211a7-c012-4154-bd7c-7e35047b45b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:00:b3:12:c9:bc:f9:45:10:68:c5:06:f3:
                    69:11:71:e8:c9:83:65:97:83:f7:24:4a:74:b4:5c:
                    00:94:d1:27:45:6c:ec:f3:06:12:97:7f:bf:2f:14:
                    99:7c:7b:ad:b2:9c:3b:e4:da:b4:bb:d5:1b:10:7f:
                    a1:8f:53:36:14:85:c9:47:5d:ba:a4:4e:84:f7:ed:
                    c8:ec:8d:e5:20:b2:ee:9f:fb:2a:58:3c:d5:a6:1d:
                    73:d8:0f:7e:e4:7d:59:27:d7:81:92:45:11:46:c7:
                    6d:07:9f:b7:32:c2:6b:ed:1c:e5:59:8e:85:69:9b:
                    99:a9:8b:5e:21:4e:5f:df:5c:87:2c:cb:97:59:bf:
                    68:14:4b:a2:05:20:75:ff:15:4a:77:04:2d:f0:f9:
                    d6:5e:b5:30:06:d9:e3:32:3a:88:58:a7:01:37:9a:
                    2f:8c:1c:7b:14:62:6b:37:11:84:93:91:f4:b2:26:
                    3d:59:ca:3b:b4:b5:54:44:79:ce:64:a9:27:d1:47:
                    e1:80:e4:bd:86:a9:f6:96:92:19:b5:6a:ca:09:4c:
                    3e:68:fe:a3:bd:5f:a3:8d:fc:aa:c0:7f:5a:64:88:
                    0c:a5:4b:55:d9:dd:52:ff:f7:fc:7e:ac:92:22:33:
                    43:54:87:a8:b9:92:36:3e:47:a9:87:90:c6:b5:2e:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:A4:03:6F:46:A3:04:91:0F:2D:2B:8B:D0:AD:0E:0B:6B:BF:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/11553b05-d09e-393e-bdd4-408cc33e6d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d0:87:e4:02:a9:80:02:16:70:fc:f3:46:60:4d:3a:cf:16:
         4d:72:aa:91:6f:ac:70:7e:c7:52:0d:96:d0:08:f5:27:e4:2f:
         2e:23:6d:05:14:18:c6:cd:da:66:a3:c6:97:a8:ec:8d:8e:ac:
         bf:ad:c6:ef:3a:f4:f5:36:0f:83:1e:f9:34:46:09:9f:a2:03:
         bc:fb:7a:26:16:06:93:10:56:6a:26:68:29:30:ad:ed:cc:2b:
         2b:8f:85:78:4a:a9:dc:ef:a2:81:0a:2c:6d:b5:06:12:e0:07:
         46:02:30:6a:fd:01:08:da:a0:2e:17:cf:66:e2:e0:4b:d6:82:
         32:b7:ec:ec:e8:c6:fb:09:ba:28:95:9b:5a:a4:e7:fb:82:f4:
         5c:68:ef:79:68:81:62:61:79:de:ed:50:7c:d3:89:1d:1f:15:
         18:6e:3d:79:6d:32:0e:50:11:8b:7e:ff:dc:81:80:ad:d2:c1:
         ab:0a:77:9d:fb:7c:4c:a6:4a:e0:36:72:31:e4:3e:14:73:33:
         f7:6f:3e:8e:47:56:d1:fc:53:fb:1d:7a:98:87:9e:64:8b:9c:
         80:da:37:11:06:d4:b6:97:e6:1d:b4:69:b7:da:b0:3d:43:20:
         94:2f:96:e2:a0:43:91:bc:9d:11:df:b9:28:00:e0:1a:8e:36:
         25:cb:b1:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7Igcd+riFj7AdkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl
NDIyMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk
MWFjMjExYTctYzAxMi00MTU0LWJkN2MtN2UzNTA0N2I0NWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr0AsxLJvPlFEGjFBvNpEXHoyYNll4P3JEp0
tFwAlNEnRWzs8wYSl3+/LxSZfHutspw75Nq0u9UbEH+hj1M2FIXJR126pE6E9+3I
7I3lILLun/sqWDzVph1z2A9+5H1ZJ9eBkkURRsdtB5+3MsJr7RzlWY6FaZuZqYte
IU5f31yHLMuXWb9oFEuiBSB1/xVKdwQt8PnWXrUwBtnjMjqIWKcBN5ovjBx7FGJr
NxGEk5H0siY9Wco7tLVURHnOZKkn0UfhgOS9hqn2lpIZtWrKCUw+aP6jvV+jjfyq
wH9aZIgMpUtV2d1S//f8fqySIjNDVIeouZI2Pkeph5DGtS7u5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL4GpANvRqMEkQ8tK4vQrQ4La7/nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz
ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvMTE1NTNiMDUtZDA5ZS0z
OTNlLWJkZDQtNDA4Y2MzM2U2ZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw
ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk
ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi
YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBnkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvQh+QCqYACFnD880ZgTTrPFk1yqpFvrHB+x1INltAI9SfkLy4jbQUU
GMbN2majxpeo7I2OrL+txu869PU2D4Me+TRGCZ+iA7z7eiYWBpMQVmomaCkwre3M
KyuPhXhKqdzvooEKLG21BhLgB0YCMGr9AQjaoC4Xz2bi4EvWgjK37OzoxvsJuiiV
m1qk5/uC9Fxo73logWJhed7tUHzTiR0fFRhuPXltMg5QEYt+/9yBgK3SwasKd537
fEymSuA2cjHkPhRzM/dvPo5HVtH8U/sdepiHnmSLnIDaNxEG1LaX5h20abfasD1D
IJQvluKgQ5G8nRHfuSgA4BqONiXLsTU=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:26 2025 by rpki-client