Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7641414c-2f55-313d-91c0-04270abe65f7.roa
File:                     7641414c-2f55-313d-91c0-04270abe65f7.roa (raw, json)
Hash identifier:          D7iFJ28H17F+2Pjpk4PuWlUHyydXzn3LAnn+nn2IuLg=
Subject key identifier:   78:A8:5C:8C:C9:15:74:87:10:AB:0C:EA:4F:96:49:7D:73:51:DD:25
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B609C3E2F9B1C063A5AEBBB80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7641414c-2f55-313d-91c0-04270abe65f7.roa
Signing time:             Wed 01 Oct 2025 13:00:07 +0000
ROA not before:           Wed 01 Oct 2025 13:00:07 +0000
ROA not after:            Tue 30 Dec 2025 14:00:07 +0000
asID:                     396982
IP address blocks:        144.125.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:3e:2f:9b:1c:06:3a:5a:eb:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct  1 13:00:07 2025 GMT
            Not After : Dec 30 14:00:07 2025 GMT
        Subject: CN=d081fc14-e75c-4f44-a882-10791cfae507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:88:74:07:2a:ec:c4:1e:3c:2b:24:c2:77:c7:
                    19:63:1b:2e:74:30:2d:7d:46:54:64:ca:87:2a:5d:
                    21:aa:5b:e4:03:fb:8c:e0:a8:15:bd:80:9c:60:10:
                    46:75:ef:37:80:9e:1d:4f:18:c6:2e:0b:03:9c:d6:
                    96:19:73:42:f5:73:33:4b:32:3c:c6:a1:0b:56:41:
                    95:59:ec:e7:df:96:08:a8:97:07:b9:a4:8a:61:b7:
                    a3:68:60:5f:a5:ee:b2:cc:57:71:6a:4c:f6:23:62:
                    d8:76:ab:8e:5a:75:5a:2a:3b:f8:93:fc:a6:84:b9:
                    eb:0f:a5:7d:85:36:0f:2c:f7:9b:ae:64:1b:01:74:
                    ba:0f:49:83:b4:53:32:6b:22:cd:e1:fb:0b:12:5a:
                    3a:cc:01:22:10:6b:b7:eb:48:95:68:4c:7b:0e:8d:
                    51:76:6e:49:14:7b:d3:5d:42:2a:5c:4b:7c:16:c6:
                    26:c5:8c:1d:2f:34:e7:35:28:85:78:20:20:fe:8e:
                    49:a4:8d:9f:7a:54:cb:33:f6:72:d0:d7:03:1a:d8:
                    fb:2a:be:0f:48:0a:49:da:07:b1:bf:7c:fe:db:b0:
                    6d:d5:30:b6:ec:67:f4:6e:7e:c7:d9:da:e5:67:79:
                    e6:ab:dd:a9:90:10:84:86:6f:ad:f3:3d:8b:7a:6f:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A8:5C:8C:C9:15:74:87:10:AB:0C:EA:4F:96:49:7D:73:51:DD:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7641414c-2f55-313d-91c0-04270abe65f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.125.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:8a:dd:f5:25:56:80:a6:33:93:e9:83:32:20:a3:04:b3:66:
         ff:a3:ca:ca:32:23:5b:da:3f:e3:85:5a:42:bb:24:3a:8b:ab:
         92:6c:e9:14:4d:ae:21:fa:80:37:1c:4d:0f:ef:a1:48:27:47:
         bd:c2:01:40:14:15:a2:b1:2e:e2:fd:a6:cd:5b:43:98:e2:88:
         74:ad:39:c9:77:0d:80:85:84:81:11:6b:69:a5:ee:26:56:02:
         86:2d:00:3b:11:37:0a:aa:5c:09:50:ee:2c:32:ba:d0:d6:f8:
         d1:a8:3a:de:79:ca:07:cd:d3:2f:88:ce:63:cd:6e:db:ce:ea:
         5a:b4:c8:72:4e:06:32:97:f3:4a:fc:28:b9:13:a0:98:25:48:
         3c:3e:89:46:53:03:bc:3e:21:e8:43:d0:7c:bb:9a:42:14:7e:
         f2:c9:2f:b1:de:00:90:5a:30:c7:01:de:99:a2:df:f1:2d:ca:
         ef:e3:4a:54:40:10:0a:d7:3f:45:ef:08:f7:f7:6d:1d:0c:0c:
         19:f4:16:39:1d:95:c2:d0:e4:90:ec:72:90:76:19:43:ea:02:
         30:38:9b:52:57:09:76:5e:8d:de:5e:f1:2e:9b:da:a2:ed:e9:
         35:37:50:37:ff:c5:8f:16:a3:2e:d9:47:2f:0f:e5:a3:79:41:
         6b:c7:23:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnD4vmxwGOlrru4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MTAwMTEzMDAwN1oXDTI1MTIzMDE0MDAwN1owLzEtMCsGA1UEAxMk
ZDA4MWZjMTQtZTc1Yy00ZjQ0LWE4ODItMTA3OTFjZmFlNTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIh0ByrsxB48KyTCd8cZYxsudDAtfUZUZMqH
Kl0hqlvkA/uM4KgVvYCcYBBGde83gJ4dTxjGLgsDnNaWGXNC9XMzSzI8xqELVkGV
Wezn35YIqJcHuaSKYbejaGBfpe6yzFdxakz2I2LYdquOWnVaKjv4k/ymhLnrD6V9
hTYPLPebrmQbAXS6D0mDtFMyayLN4fsLElo6zAEiEGu360iVaEx7Do1Rdm5JFHvT
XUIqXEt8FsYmxYwdLzTnNSiFeCAg/o5JpI2felTLM/Zy0NcDGtj7Kr4PSApJ2gex
v3z+27Bt1TC27Gf0bn7H2drlZ3nmq92pkBCEhm+t8z2Lem91QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHioXIzJFXSHEKsM6k+WSX1zUd0lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNzY0MTQxNGMtMmY1NS0z
MTNkLTkxYzAtMDQyNzBhYmU2NWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkH2wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWK3fUlVoCmM5PpgzIgowSzZv+jysoyI1vaP+OFWkK7JDqLq5Js6RRN
riH6gDccTQ/voUgnR73CAUAUFaKxLuL9ps1bQ5jiiHStOcl3DYCFhIERa2ml7iZW
AoYtADsRNwqqXAlQ7iwyutDW+NGoOt55ygfN0y+IzmPNbtvO6lq0yHJOBjKX80r8
KLkToJglSDw+iUZTA7w+IehD0Hy7mkIUfvLJL7HeAJBaMMcB3pmi3/Etyu/jSlRA
EArXP0XvCPf3bR0MDBn0FjkdlcLQ5JDscpB2GUPqAjA4m1JXCXZejd5e8S6b2qLt
6TU3UDf/xY8Woy7ZRy8P5aN5QWvHIzI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:27 2025 by rpki-client