Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa
File:                     211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa (raw, json)
Hash identifier:          /VQ6Xi+UEP52IXCtfd06JCE3qoAhm7C9tyf0C0HdcYU=
Subject key identifier:   9E:4C:9B:16:BC:EE:F4:C9:8B:EC:A4:C3:94:FE:8F:90:99:04:16:5D
Certificate issuer:       /CN=e659e35d-faf2-4685-b322-e54fbe3a41e9
Certificate serial:       010D0C9F4328584B5B07489DBFED1B4713AC0C08
Authority key identifier: 0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     23265
IP address blocks:        64.185.96.0/19 maxlen: 24
                          72.10.0.0/19 maxlen: 24
                          206.126.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:48:9d:bf:ed:1b:47:13:ac:0c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e659e35d-faf2-4685-b322-e54fbe3a41e9
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=b5aa2846-795b-4941-a447-300ecd1fd8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fa:96:f5:34:16:d9:8b:ad:fc:be:ca:ca:e7:
                    39:88:bb:02:64:10:8d:9f:cc:32:ba:51:cd:53:8d:
                    4e:c7:e7:70:c0:5a:7d:75:53:08:b3:78:cc:b0:35:
                    58:2f:35:82:9b:8c:64:3d:b4:1c:6f:e2:48:a4:4b:
                    66:1b:e4:35:d0:7d:58:f6:07:96:4c:01:ce:44:24:
                    1a:0b:a8:f1:f2:92:f8:ea:80:24:d7:28:5e:0f:4a:
                    0f:4e:7e:b1:e0:e6:cb:b1:d8:be:48:69:6a:4f:93:
                    66:80:b8:b9:dc:8f:48:e9:3c:35:75:ef:8f:de:50:
                    8b:7d:9f:42:07:d9:55:21:ff:8f:da:ae:3b:37:92:
                    6f:72:34:e9:f6:18:72:02:0c:60:4a:e8:29:6f:e6:
                    7d:e0:77:f2:0d:04:3a:e1:f6:45:1f:df:13:f0:1e:
                    f8:2e:67:fe:93:7c:fe:04:8c:61:fa:76:e8:cf:a9:
                    0a:68:13:b9:4a:7e:9d:00:c6:58:3f:55:68:f9:cb:
                    bd:6e:19:5f:ac:c9:44:31:79:21:f2:1a:db:9a:cc:
                    e6:68:02:99:34:72:67:3c:36:10:62:8d:d5:b7:e6:
                    54:48:f8:cd:87:f9:6a:c3:cc:ec:ba:51:6a:7c:db:
                    f3:36:62:08:1a:96:cd:14:54:d1:1c:30:37:47:16:
                    7f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4C:9B:16:BC:EE:F4:C9:8B:EC:A4:C3:94:FE:8F:90:99:04:16:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.185.96.0/19
                  72.10.0.0/19
                  206.126.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f8:b6:7d:b6:11:ca:18:d1:7e:fe:5b:db:66:cc:84:83:4e:
         a1:d5:cb:45:1d:84:e1:b4:05:0d:28:6f:29:1e:0f:ef:46:15:
         44:71:fa:82:1f:01:05:b9:cd:0e:82:87:ba:3e:28:56:6a:9f:
         1a:fa:d1:8c:b8:d8:dc:c2:83:08:09:6b:4b:ef:8c:9b:c3:7a:
         29:cd:97:2b:c8:07:1a:13:e1:a0:b8:7c:0e:97:d4:fd:ff:4c:
         f4:79:d5:2c:ef:cb:20:55:fe:91:c0:df:31:ae:d2:74:f5:57:
         70:53:9c:6d:2a:4d:4e:93:0f:06:ef:ee:6b:a0:4f:13:8d:42:
         3a:54:5f:df:c1:d7:4d:2d:31:47:e5:a4:d6:18:e4:e1:69:79:
         18:9d:5c:5b:29:0b:46:e2:35:ca:cc:05:60:9b:ba:60:8b:e5:
         9e:06:c4:5e:0a:03:48:e5:fc:b8:b7:f6:d4:c4:41:b2:d5:73:
         ab:41:d6:52:81:10:ee:24:99:4d:47:63:26:a6:2d:bc:3d:db:
         86:d7:45:f4:13:de:69:5d:10:fe:a5:90:db:06:69:7b:60:9c:
         25:5a:8d:98:f1:4b:55:23:28:f5:4e:bb:95:84:b3:13:5f:91:
         9b:b7:9b:f0:4b:2b:0b:13:e1:ec:6d:d9:e4:39:db:3b:dc:87:
         30:ad:3a:9e
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtbB0idv+0bRxOsDAgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTY1OWUzNWQtZmFmMi00Njg1LWIzMjItZTU0ZmJlM2E0
MWU5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
YjVhYTI4NDYtNzk1Yi00OTQxLWE0NDctMzAwZWNkMWZkOGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfqW9TQW2Yut/L7Kyuc5iLsCZBCNn8wyulHN
U41Ox+dwwFp9dVMIs3jMsDVYLzWCm4xkPbQcb+JIpEtmG+Q10H1Y9geWTAHORCQa
C6jx8pL46oAk1yheD0oPTn6x4ObLsdi+SGlqT5NmgLi53I9I6Tw1de+P3lCLfZ9C
B9lVIf+P2q47N5JvcjTp9hhyAgxgSugpb+Z94HfyDQQ64fZFH98T8B74Lmf+k3z+
BIxh+nboz6kKaBO5Sn6dAMZYP1Vo+cu9bhlfrMlEMXkh8hrbmszmaAKZNHJnPDYQ
Yo3Vt+ZUSPjNh/lqw8zsulFqfNvzNmIIGpbNFFTRHDA3RxZ/UQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFJ5Mmxa87vTJi+ykw5T+j5CZBBZdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5
ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRmYmUzYTQxZTkvMjExYTBjNTQtZjRjZS0z
YjliLWE3YTQtMmQ5ZTc4NDYxZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTY1OWUzNWQtZmFmMi00Njg1LWIz
MjItZTU0ZmJlM2E0MWU5L2U2NTllMzVkLWZhZjItNDY4NS1iMzIyLWU1NGZiZTNh
NDFlOS5jcmwwHwYDVR0jBBgwFoAUDiKaS+tez7Fmq6j15YghKTUSWvswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRm
YmUzYTQxZTkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFQLlgAwQF
SAoAAwQEzn4QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAIT4tn22EcoY0X7+W9tmzISDTqHVy0UdhOG0BQ0o
bykeD+9GFURx+oIfAQW5zQ6Ch7o+KFZqnxr60Yy42NzCgwgJa0vvjJvDeinNlyvI
BxoT4aC4fA6X1P3/TPR51SzvyyBV/pHA3zGu0nT1V3BTnG0qTU6TDwbv7mugTxON
QjpUX9/B100tMUflpNYY5OFpeRidXFspC0biNcrMBWCbumCL5Z4GxF4KA0jl/Li3
9tTEQbLVc6tB1lKBEO4kmU1HYyamLbw924bXRfQT3mldEP6lkNsGaXtgnCVajZjx
S1UjKPVOu5WEsxNfkZu3m/BLKwsT4ext2eQ52zvchzCtOp4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:09 2025 by rpki-client