Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/7f1f0ef9-56cf-3904-b5f4-94782c33bc85.roa
File:                     7f1f0ef9-56cf-3904-b5f4-94782c33bc85.roa (raw, json)
Hash identifier:          TzodC0aoj1wyHRe+nwlVipViKdLfMO7c56Ru56SfDwM=
Subject key identifier:   12:47:B5:4E:C4:A8:23:9E:91:30:A7:24:B9:C7:88:D7:CF:5C:B3:13
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F4328584DAC456F658E2336A956DCCD80
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/7f1f0ef9-56cf-3904-b5f4-94782c33bc85.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     394893
IP address blocks:        199.250.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:6f:65:8e:23:36:a9:56:dc:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=ddfec100-221a-4d81-8a38-504e06b5d511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:c2:af:a9:52:bf:ff:06:88:0f:c4:87:f9:
                    43:45:0e:eb:42:04:d0:c8:44:86:32:70:45:9d:91:
                    a7:36:d6:be:a0:b6:2d:56:62:08:22:8a:b3:7b:4e:
                    95:72:fe:a0:e2:4c:17:8b:1b:66:74:c7:98:c6:2f:
                    03:45:06:46:39:5a:ce:1c:ec:17:6a:af:fa:ca:a5:
                    20:47:19:43:35:2e:91:29:5e:f3:b1:4f:05:0a:dd:
                    58:b2:ee:e0:7b:14:92:a1:c9:10:49:82:18:44:60:
                    66:11:c7:14:73:d7:8d:47:c4:75:88:06:c6:9a:d4:
                    30:31:f2:57:1c:42:cd:50:bd:a0:fb:16:74:95:94:
                    70:34:51:9d:b7:c3:5f:1f:4e:f8:95:d5:40:b9:d6:
                    af:39:81:93:2e:7b:6e:04:c1:22:ab:a3:37:90:99:
                    f6:ec:f3:4b:1b:d7:86:45:4d:1e:b3:2b:a4:26:fd:
                    f9:9e:5b:16:c8:6f:3d:3d:ea:b0:86:b4:55:a5:2e:
                    af:7c:1a:73:4b:06:d9:1d:ca:e8:e4:e1:8c:e6:d9:
                    c6:06:59:2c:d8:7f:71:45:ca:90:69:57:19:9e:89:
                    71:78:c8:1f:78:dc:23:b3:a0:40:29:d3:3c:de:6d:
                    ac:47:3d:4a:ab:c2:49:bb:70:42:f2:32:92:b3:95:
                    c0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:47:B5:4E:C4:A8:23:9E:91:30:A7:24:B9:C7:88:D7:CF:5C:B3:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/7f1f0ef9-56cf-3904-b5f4-94782c33bc85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:c8:33:ac:d1:66:d1:bd:59:90:08:c9:6f:52:af:8a:5d:b5:
         09:dc:e9:18:68:53:8e:db:31:b1:09:44:5b:98:e4:d9:c6:61:
         35:67:56:5c:01:4b:0a:2e:57:d9:74:4d:63:0b:44:fa:0a:aa:
         38:c9:03:f9:eb:50:28:92:ac:8b:53:8c:09:cc:1e:92:08:3b:
         71:ee:2d:91:5a:4a:13:ef:f2:e0:7b:d0:71:93:ed:17:f3:58:
         5c:82:6b:cd:48:99:b8:16:07:67:6f:5b:fc:53:de:17:2a:6d:
         ed:78:8f:86:09:e8:31:a8:e2:e0:d7:ba:54:62:ec:7f:20:17:
         e4:6f:f9:e0:f9:71:a5:40:c3:53:4d:46:9a:f8:52:f0:ed:3c:
         8e:6c:88:a4:95:f0:1c:47:38:c8:bb:14:16:5d:02:02:bf:50:
         d6:b8:2a:e8:16:96:31:c2:48:7c:c9:bb:57:24:99:77:e9:8a:
         f8:f9:46:4d:0e:60:1a:f4:7e:d7:91:9a:c1:e0:99:64:8e:88:
         bc:84:95:b9:ae:f9:26:b2:a6:68:5b:96:3c:45:84:0a:80:3d:
         f3:af:27:85:63:2b:40:12:46:7f:5d:9c:0f:bb:98:f5:56:26:
         84:79:ae:1c:5e:45:5b:21:fb:4e:43:ca:78:2f:0f:7a:c0:39:
         1c:71:17:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRW9ljiM2qVbczYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl
ZGI0MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk
ZGRmZWMxMDAtMjIxYS00ZDgxLThhMzgtNTA0ZTA2YjVkNTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoDCr6lSv/8GiA/Eh/lDRQ7rQgTQyESGMnBF
nZGnNta+oLYtVmIIIoqze06Vcv6g4kwXixtmdMeYxi8DRQZGOVrOHOwXaq/6yqUg
RxlDNS6RKV7zsU8FCt1Ysu7gexSSockQSYIYRGBmEccUc9eNR8R1iAbGmtQwMfJX
HELNUL2g+xZ0lZRwNFGdt8NfH074ldVAudavOYGTLntuBMEiq6M3kJn27PNLG9eG
RU0esyukJv35nlsWyG89PeqwhrRVpS6vfBpzSwbZHcro5OGM5tnGBlks2H9xRcqQ
aVcZnolxeMgfeNwjs6BAKdM83m2sRz1Kq8JJu3BC8jKSs5XAnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBJHtU7EqCOekTCnJLnHiNfPXLMTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj
NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvN2YxZjBlZjktNTZjZi0z
OTA0LWI1ZjQtOTQ3ODJjMzNiYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh
MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My
ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi
MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/r6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMfIM6zRZtG9WZAIyW9Sr4pdtQnc6RhoU47bMbEJRFuY5NnGYTVnVlwB
SwouV9l0TWMLRPoKqjjJA/nrUCiSrItTjAnMHpIIO3HuLZFaShPv8uB70HGT7Rfz
WFyCa81ImbgWB2dvW/xT3hcqbe14j4YJ6DGo4uDXulRi7H8gF+Rv+eD5caVAw1NN
Rpr4UvDtPI5siKSV8BxHOMi7FBZdAgK/UNa4KugWljHCSHzJu1ckmXfpivj5Rk0O
YBr0fteRmsHgmWSOiLyElbmu+SaypmhbljxFhAqAPfOvJ4VjK0ASRn9dnA+7mPVW
JoR5rhxeRVsh+05DyngvD3rAORxxF4I=
-----END CERTIFICATE-----
Generated at Wed May 13 14:12:18 2026 by rpki-client