Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d6efa50-fb34-3746-bd0d-e86ca10446fc.roa
File:                     2d6efa50-fb34-3746-bd0d-e86ca10446fc.roa (raw, json)
Hash identifier:          psg3866DlJlis/bMkfLqI/25Jplykai1p6+VwSEh/8Y=
Subject key identifier:   87:B8:A8:A4:F2:D9:AC:A3:37:54:52:08:A1:8C:48:0D:A9:B3:A4:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B7C8767066D02290EC5C27000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d6efa50-fb34-3746-bd0d-e86ca10446fc.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     0
IP address blocks:        209.131.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:67:06:6d:02:29:0e:c5:c2:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=55c16b92-db53-468e-b63d-67f9c43ee3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ec:b4:e9:1c:1b:4f:2b:2c:bb:54:fb:d5:a6:
                    c1:62:71:57:e6:b0:8b:00:99:10:34:3d:09:9c:d6:
                    d2:67:86:1c:d7:e2:bd:87:94:ca:ce:2a:23:60:ae:
                    5e:0c:b5:4a:df:72:29:75:fd:cb:10:24:0f:da:7a:
                    d9:fd:0d:16:6d:39:01:95:f8:b7:73:5f:37:09:d7:
                    0e:95:66:98:0e:e5:b5:58:a2:f6:d6:02:98:e6:33:
                    e0:6b:6b:1a:c3:2e:8d:0c:0d:ff:3e:97:2b:f2:4d:
                    7f:1a:49:bd:f8:a9:89:2b:29:a4:4a:0f:38:f9:9e:
                    79:a4:f8:0e:df:e3:a7:ff:6b:1f:b3:dc:06:b7:29:
                    2b:b9:57:a8:c5:e1:4a:36:3d:13:e6:e0:9b:bd:3c:
                    2c:fc:86:61:5f:2e:8e:81:0e:c2:3c:eb:15:af:b2:
                    30:4a:aa:24:47:36:b3:76:dd:bf:73:a9:7c:12:fa:
                    b0:39:2d:cf:c4:ae:e1:65:0b:1a:cb:15:62:79:a2:
                    ff:be:d7:0d:c1:6d:e8:6b:78:c7:0e:b2:9b:b2:f3:
                    c8:38:a0:a0:80:e5:98:35:e2:59:18:b8:ff:48:10:
                    f0:ed:62:76:bb:19:e8:da:b3:f5:5d:37:bd:98:f4:
                    ef:5b:fa:30:6f:63:62:6f:2a:f4:34:c4:7b:fa:94:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B8:A8:A4:F2:D9:AC:A3:37:54:52:08:A1:8C:48:0D:A9:B3:A4:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d6efa50-fb34-3746-bd0d-e86ca10446fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:92:de:c3:1b:08:57:9e:bf:b7:ea:67:e7:73:81:c8:18:a6:
         c7:a2:59:ad:b3:84:52:11:7e:72:84:aa:41:2f:bd:2a:05:64:
         ad:7f:71:1e:41:84:26:ba:50:0e:8b:2a:9b:df:2e:f4:ed:ba:
         a0:52:cb:c1:cc:4d:5d:a4:9f:68:a6:af:24:45:54:ce:46:65:
         81:fd:0f:0b:64:1c:f0:64:86:c9:3f:01:1a:45:aa:05:f9:1e:
         8e:ca:e0:03:dc:cc:c5:2c:c6:b9:34:a9:57:1f:2b:39:e6:3f:
         cb:0d:32:7e:05:0f:cc:46:a1:5b:7b:7e:fe:35:f1:2f:06:4c:
         f3:a1:0d:5a:7d:f4:6f:70:1a:ba:64:e1:00:c9:c2:d6:83:6d:
         33:e5:5f:0d:91:98:85:66:9a:6c:95:f4:b8:ea:2d:b1:52:a8:
         d8:2a:aa:29:8c:ef:7d:61:ac:33:d4:f3:8e:4f:78:99:4f:47:
         8f:91:4c:80:7f:11:5d:67:86:89:fc:ef:12:51:a9:cc:fa:12:
         47:e2:d1:cc:0e:d3:0c:f0:f9:37:4f:77:03:41:f6:5b:13:4d:
         cd:22:ff:56:66:77:93:7e:c3:28:3a:92:a8:43:71:88:bb:80:
         47:03:06:ae:e9:81:26:f0:6e:3e:80:cf:03:7f:92:23:fd:79:
         97:f9:ea:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2cGbQIpDsXCcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk
NTVjMTZiOTItZGI1My00NjhlLWI2M2QtNjdmOWM0M2VlM2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuy06RwbTyssu1T71abBYnFX5rCLAJkQND0J
nNbSZ4Yc1+K9h5TKziojYK5eDLVK33Ipdf3LECQP2nrZ/Q0WbTkBlfi3c183CdcO
lWaYDuW1WKL21gKY5jPga2sawy6NDA3/Ppcr8k1/Gkm9+KmJKymkSg84+Z55pPgO
3+On/2sfs9wGtykruVeoxeFKNj0T5uCbvTws/IZhXy6OgQ7CPOsVr7IwSqokRzaz
dt2/c6l8EvqwOS3PxK7hZQsayxVieaL/vtcNwW3oa3jHDrKbsvPIOKCggOWYNeJZ
GLj/SBDw7WJ2uxno2rP1XTe9mPTvW/owb2Nibyr0NMR7+pTPNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIe4qKTy2ayjN1RSCKGMSA2ps6SzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmQ2ZWZhNTAtZmIzNC0z
NzQ2LWJkMGQtZTg2Y2ExMDQ0NmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqS3sMbCFeev7fqZ+dzgcgYpseiWa2zhFIRfnKEqkEvvSoFZK1/cR5B
hCa6UA6LKpvfLvTtuqBSy8HMTV2kn2imryRFVM5GZYH9DwtkHPBkhsk/ARpFqgX5
Ho7K4APczMUsxrk0qVcfKznmP8sNMn4FD8xGoVt7fv418S8GTPOhDVp99G9wGrpk
4QDJwtaDbTPlXw2RmIVmmmyV9LjqLbFSqNgqqimM731hrDPU845PeJlPR4+RTIB/
EV1nhon87xJRqcz6Ekfi0cwO0wzw+TdPdwNB9lsTTc0i/1Zmd5N+wyg6kqhDcYi7
gEcDBq7pgSbwbj6AzwN/kiP9eZf56hw=
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:13 2025 by rpki-client