Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa
File:                     a89150dd-4153-345d-91e8-d43ba9e5edde.roa (raw, json)
Hash identifier:          ALxO9SJG2+4ojNT3LUACkbeniJktPgrAUtHSJcJLEoE=
Subject key identifier:   85:F0:2E:9B:40:46:3A:F8:5C:A8:55:93:ED:EC:E6:DE:3D:83:23:29
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584B48E1B8C8C3149B04CD4BB080
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     3549
IP address blocks:        208.54.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b8:c8:c3:14:9b:04:cd:4b:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=e317bffb-7730-47fd-b6b4-766463cc7f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:3f:03:95:f0:6c:65:7b:c7:1e:8c:18:30:
                    1d:6a:91:ab:82:cd:5c:45:74:50:63:a2:6f:62:42:
                    ce:d1:ae:02:ef:74:e2:97:ed:ed:eb:b3:00:ed:45:
                    b3:75:7a:bd:02:df:23:2b:96:9d:0d:7d:63:9e:da:
                    e5:1c:78:f7:ee:35:17:b3:a4:15:23:fc:cd:a6:a7:
                    d4:ce:d3:23:b5:fe:14:2b:aa:a0:f4:54:36:d0:61:
                    11:b3:3f:16:91:5f:19:da:89:5f:e9:fb:32:fe:d9:
                    98:88:83:20:de:4f:4f:ce:c4:5c:6e:ac:88:59:d6:
                    58:9d:70:b5:8c:1e:58:93:1a:ff:39:c2:9a:fd:3c:
                    76:e8:e9:35:39:78:e1:86:f2:70:ea:91:53:2d:1c:
                    50:22:38:56:ce:00:a3:02:6e:92:19:a2:94:04:c1:
                    da:52:d2:6c:32:e1:ba:13:43:a5:55:c3:4c:a6:f6:
                    16:3b:1d:44:c4:d3:07:33:c7:24:3b:79:14:f7:66:
                    57:30:a8:a1:6d:ed:91:53:27:61:41:9c:b0:44:37:
                    96:f3:20:a4:44:f9:e9:a1:f7:be:d7:15:aa:48:cd:
                    18:fb:a0:47:14:40:ab:bb:27:da:88:65:95:01:49:
                    9a:76:85:7e:98:d6:7b:27:ed:9e:07:e9:ec:c8:1f:
                    7c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F0:2E:9B:40:46:3A:F8:5C:A8:55:93:ED:EC:E6:DE:3D:83:23:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.54.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:8f:96:b9:32:fb:9f:94:b4:32:38:44:b7:0a:5e:3e:f7:a6:
         8e:76:6a:62:38:87:da:65:e0:88:0c:8e:d6:00:60:7d:5d:3a:
         a5:43:2f:1b:37:f7:cd:e9:84:cc:fa:b9:7d:8d:c9:b8:bd:53:
         46:cc:12:8a:d9:d1:9a:4e:91:1d:9e:2f:ad:f7:3a:2d:1a:d4:
         2c:1e:8a:6f:37:b0:0a:c2:07:fb:4b:4b:6f:c5:e8:33:9e:72:
         d7:2f:d7:d0:4f:1c:d4:d6:a8:07:f5:89:4e:1a:96:ab:8b:0d:
         ff:e7:3b:f0:82:bf:ba:e4:7f:54:24:de:75:15:15:a9:24:ba:
         c1:6e:08:a4:4a:93:2f:cd:fb:94:a6:aa:1a:10:11:37:b4:54:
         85:ae:26:aa:17:07:49:3d:d8:32:9a:2a:fb:37:fb:20:da:11:
         da:08:4c:e3:0a:a1:58:48:35:d1:c8:34:25:85:f9:d4:0b:a0:
         6c:98:67:4c:a7:ad:3f:e0:7e:a8:f3:33:db:75:16:c6:ae:e2:
         cd:82:15:e7:7c:e5:d1:cc:f8:a3:a3:0c:13:dd:43:eb:ae:9e:
         36:58:88:79:22:ad:45:af:14:36:8c:e2:36:65:37:ce:19:b4:
         15:61:89:50:ad:ff:f5:f0:21:27:44:59:8a:34:e5:8e:af:81:
         42:53:24:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bjIwxSbBM1LsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZTMxN2JmZmItNzczMC00N2ZkLWI2YjQtNzY2NDYzY2M3ZjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3I/A5XwbGV7xx6MGDAdapGrgs1cRXRQY6Jv
YkLO0a4C73Til+3t67MA7UWzdXq9At8jK5adDX1jntrlHHj37jUXs6QVI/zNpqfU
ztMjtf4UK6qg9FQ20GERsz8WkV8Z2olf6fsy/tmYiIMg3k9PzsRcbqyIWdZYnXC1
jB5Ykxr/OcKa/Tx26Ok1OXjhhvJw6pFTLRxQIjhWzgCjAm6SGaKUBMHaUtJsMuG6
E0OlVcNMpvYWOx1ExNMHM8ckO3kU92ZXMKihbe2RUydhQZywRDeW8yCkRPnpofe+
1xWqSM0Y+6BHFECruyfaiGWVAUmadoV+mNZ7J+2eB+nsyB98IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXwLptARjr4XKhVk+3s5t49gyMpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvYTg5MTUwZGQtNDE1My0z
NDVkLTkxZTgtZDQzYmE5ZTVlZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DYBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiPlrky+5+UtDI4RLcKXj73po52amI4h9pl4IgMjtYAYH1dOqVDLxs3
983phMz6uX2Nybi9U0bMEorZ0ZpOkR2eL633Oi0a1Cweim83sArCB/tLS2/F6DOe
ctcv19BPHNTWqAf1iU4alquLDf/nO/CCv7rkf1Qk3nUVFakkusFuCKRKky/N+5Sm
qhoQETe0VIWuJqoXB0k92DKaKvs3+yDaEdoITOMKoVhINdHINCWF+dQLoGyYZ0yn
rT/gfqjzM9t1Fsau4s2CFed85dHM+KOjDBPdQ+uunjZYiHkirUWvFDaM4jZlN84Z
tBVhiVCt//XwISdEWYo05Y6vgUJTJIM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:37 2025 by rpki-client