Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa
File:                     2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa (raw, json)
Hash identifier:          4cNk4x5bGUnas8rP+E7d0CfB9tdz8n25BwC0ak2w2N0=
Subject key identifier:   FA:34:F8:19:C4:E6:6E:3A:09:C7:6A:C8:05:04:F7:79:84:38:33:45
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584B8BE213A897251C5D39393200
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     11317
IP address blocks:        164.113.255.128/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:13:a8:97:25:1c:5d:39:39:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=ffd18754-2528-4dab-8236-3d943fc83d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:62:32:0c:7b:27:51:6e:8d:cc:98:00:ee:15:
                    d8:e0:6c:b0:08:77:e6:8f:2f:97:a8:32:9a:30:6d:
                    df:86:8b:18:b4:8d:e3:71:67:86:e0:d9:bc:4e:9a:
                    52:00:60:62:dc:32:73:7a:4a:be:dc:9d:3d:49:ab:
                    2c:ba:00:12:3d:32:a2:b6:34:3c:f2:12:28:ca:7f:
                    c8:7b:7b:b0:dd:86:47:6b:7b:b6:0c:4a:e8:d2:17:
                    32:00:95:78:0b:a7:d1:4b:77:7b:88:96:99:cf:8f:
                    d0:e0:a6:80:17:ab:55:b9:9d:cd:5a:e7:0b:e2:7c:
                    1e:47:3c:92:96:74:ce:7a:3c:6a:a5:3d:3a:79:92:
                    f5:38:5e:3f:d2:40:c1:cf:b5:60:5f:78:44:da:ee:
                    17:09:18:fc:bc:c6:12:86:7e:f3:1e:f2:5a:ec:59:
                    a3:d2:84:2c:b7:cc:c6:a8:17:fb:c1:34:28:b5:3c:
                    2f:44:d7:28:ee:da:29:70:2f:86:7c:01:78:7f:02:
                    26:47:0c:a9:6d:f0:89:75:c0:5f:94:e5:b1:97:c5:
                    0e:96:c9:42:eb:11:bd:8e:d8:a3:8e:d9:89:6a:bf:
                    2a:00:74:8a:61:c7:85:25:42:19:ab:a8:6e:66:41:
                    43:74:6b:fc:ec:ec:02:75:12:9e:35:0a:58:a6:7f:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:34:F8:19:C4:E6:6E:3A:09:C7:6A:C8:05:04:F7:79:84:38:33:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.113.255.128/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:0c:6e:9e:9a:9d:f1:e0:0f:11:58:97:b7:c4:44:6d:62:bf:
         11:6d:20:f7:30:dc:7a:65:d7:9e:ec:b1:e0:d8:8d:43:2d:cd:
         44:af:6a:8f:62:85:77:82:c8:45:f1:2f:87:88:88:e7:3f:83:
         db:66:ee:e2:bc:4b:b2:97:3e:3e:9d:ce:31:ab:e8:ef:cc:3f:
         cb:c9:3e:ab:88:c2:4a:c1:b0:95:2c:c3:de:0c:52:c8:0f:65:
         4c:77:6d:52:26:13:88:5c:dd:b5:c4:b6:47:20:ba:8a:1f:a1:
         9d:b9:0f:b1:5b:56:7b:c9:5b:7f:e2:a5:3a:d3:02:d5:42:0d:
         7f:ba:b7:c0:6c:7c:9e:ba:7c:1e:80:cc:37:82:05:0a:82:8c:
         f6:eb:90:ef:0f:6b:8f:04:dc:11:6d:8e:0e:b1:95:8c:40:ae:
         87:dd:dc:0d:a6:bc:69:37:0b:11:ff:76:44:6f:d9:76:50:f7:
         e0:56:d7:6a:62:87:a7:8f:b0:f0:9e:6a:51:16:cb:ca:72:28:
         2d:6e:d3:3c:64:63:b1:a5:1b:18:d2:61:f8:94:33:e4:64:e6:
         1b:fa:e7:1d:b6:87:4f:41:09:d1:33:f9:88:a4:48:56:47:b6:
         07:d0:cf:b9:01:c5:f5:5f:dd:63:fa:0b:7c:b2:d1:d3:e3:09:
         03:e2:70:ae
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuL4hOolyUcXTk5MgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
ZmZkMTg3NTQtMjUyOC00ZGFiLTgyMzYtM2Q5NDNmYzgzZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGIyDHsnUW6NzJgA7hXY4GywCHfmjy+XqDKa
MG3fhosYtI3jcWeG4Nm8TppSAGBi3DJzekq+3J09SassugASPTKitjQ88hIoyn/I
e3uw3YZHa3u2DEro0hcyAJV4C6fRS3d7iJaZz4/Q4KaAF6tVuZ3NWucL4nweRzyS
lnTOejxqpT06eZL1OF4/0kDBz7VgX3hE2u4XCRj8vMYShn7zHvJa7Fmj0oQst8zG
qBf7wTQotTwvRNco7topcC+GfAF4fwImRwypbfCJdcBflOWxl8UOlslC6xG9jtij
jtmJar8qAHSKYceFJUIZq6huZkFDdGv87OwCdRKeNQpYpn8ocQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPo0+BnE5m46CcdqyAUE93mEODNFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvMmU2ZTU3NzYtOWU5Ni0z
Y2M0LTg0YzAtOTk0MDI5NzFmYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFpHH/gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAtDG6emp3x4A8RWJe3xERtYr8RbSD3MNx6Zdee7LHg2I1DLc1Er2qP
YoV3gshF8S+HiIjnP4PbZu7ivEuylz4+nc4xq+jvzD/LyT6riMJKwbCVLMPeDFLI
D2VMd21SJhOIXN21xLZHILqKH6GduQ+xW1Z7yVt/4qU60wLVQg1/urfAbHyeunwe
gMw3ggUKgoz265DvD2uPBNwRbY4OsZWMQK6H3dwNprxpNwsR/3ZEb9l2UPfgVtdq
Yoenj7DwnmpRFsvKcigtbtM8ZGOxpRsY0mH4lDPkZOYb+ucdtodPQQnRM/mIpEhW
R7YH0M+5AcX1X91j+gt8stHT4wkD4nCu
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:47 2025 by rpki-client