Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/21805929-9a07-31af-847c-27d578360b35.roa
File:                     21805929-9a07-31af-847c-27d578360b35.roa (raw, json)
Hash identifier:          YI1FNZwvZAuFaLuoOS+TfDwBGOG6b44OxPFq0gEFdB4=
Subject key identifier:   A2:D1:4F:A0:B5:70:79:8C:32:7D:A9:76:01:92:9E:43:39:A1:29:EA
Certificate issuer:       /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
Certificate serial:       010D0C9F4328584B3F1C5F51C5D22FE115BE2740
Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/21805929-9a07-31af-847c-27d578360b35.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     8075
IP address blocks:        165.125.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:5f:51:c5:d2:2f:e1:15:be:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=4be63c99-0f0e-4a6f-ab0c-b716e346e9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:4d:7b:d1:e1:e1:6e:6f:61:e0:32:77:27:
                    25:2e:12:c7:63:20:b3:de:de:4f:c0:05:7f:63:5f:
                    21:20:56:69:94:eb:59:fc:7b:f9:85:37:e3:1d:35:
                    07:d2:ca:d8:d9:a8:dd:90:a3:aa:76:74:9f:59:07:
                    59:a8:f3:ed:af:ba:48:9c:8a:e7:8f:f7:16:93:6c:
                    2a:5d:fc:fc:ac:c1:c5:45:69:6b:d5:66:de:4e:fd:
                    50:cf:92:09:36:2d:7a:67:56:ef:30:9e:c6:89:7b:
                    c1:6f:6e:a3:d1:b3:28:a6:cc:1e:d5:4e:ad:ce:10:
                    e1:7a:4a:51:0a:11:ef:88:ad:37:93:18:0b:c4:3d:
                    5e:dc:9d:b8:91:ce:b8:8e:86:d5:cd:55:ce:6a:9f:
                    df:c9:32:c3:90:b0:16:c3:9e:28:8a:5b:a7:65:48:
                    df:4e:7c:2d:86:d5:9e:91:3c:de:2f:84:84:d0:dd:
                    8b:11:c1:6c:91:55:5b:2b:65:cb:8b:a3:e8:3b:04:
                    d6:2a:4e:fa:b4:ea:ae:5d:af:56:9f:95:6c:14:1d:
                    b9:aa:48:14:85:95:00:61:99:f2:5d:f2:94:ca:48:
                    6e:fc:ac:fd:ef:2b:79:16:6f:9d:10:f6:9a:6d:50:
                    1e:b7:2f:b0:af:02:53:88:2b:8e:df:c2:0f:d9:5f:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D1:4F:A0:B5:70:79:8C:32:7D:A9:76:01:92:9E:43:39:A1:29:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/21805929-9a07-31af-847c-27d578360b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.125.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:87:43:a1:e5:c5:62:21:63:9b:92:e6:16:d7:51:33:15:7b:
         ae:0f:90:ab:1c:1a:6a:68:76:da:10:1e:fa:9e:53:ab:ec:6a:
         c6:73:67:ac:c9:23:b7:47:e8:aa:fe:c8:e3:8e:14:4d:9e:ed:
         f7:96:e5:fb:73:2b:a2:ab:3d:81:79:17:53:4a:b5:34:58:4f:
         b8:15:d7:22:4d:b0:74:cd:9f:ec:eb:08:29:a5:96:4a:6c:86:
         db:74:a9:d7:e4:c5:27:18:2b:7e:51:05:0d:b0:35:c6:45:d4:
         a4:04:4e:cb:bf:76:99:05:08:42:1e:b2:5b:ee:c5:ca:b2:e6:
         02:7d:5f:98:84:04:2c:0c:41:02:a7:12:0a:1c:ba:b2:e1:03:
         bc:5e:c4:da:e8:37:f0:ce:ed:48:52:9d:6a:d4:31:7f:47:04:
         4a:9f:fe:5a:c2:38:fc:c8:14:c7:73:ad:0b:d4:2c:1b:42:26:
         c2:dc:89:7c:5a:4f:48:e1:6f:be:67:4c:f9:8f:5a:3b:66:19:
         09:16:68:5f:92:6b:3b:b5:2f:be:dc:24:a3:6e:a0:c9:48:84:
         08:38:23:11:36:48:67:10:23:37:12:13:51:3e:e4:80:75:b0:
         3f:06:83:19:a2:32:68:0d:9b:b9:48:a0:4c:8e:60:54:6a:ce:
         d5:19:97:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HF9RxdIv4RW+J0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4
YjliMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk
NGJlNjNjOTktMGYwZS00YTZmLWFiMGMtYjcxNmUzNDZlOWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNBNe9Hh4W5vYeAydyclLhLHYyCz3t5PwAV/
Y18hIFZplOtZ/Hv5hTfjHTUH0srY2ajdkKOqdnSfWQdZqPPtr7pInIrnj/cWk2wq
Xfz8rMHFRWlr1WbeTv1Qz5IJNi16Z1bvMJ7GiXvBb26j0bMopswe1U6tzhDhekpR
ChHviK03kxgLxD1e3J24kc64jobVzVXOap/fyTLDkLAWw54oilunZUjfTnwthtWe
kTzeL4SE0N2LEcFskVVbK2XLi6PoOwTWKk76tOquXa9Wn5VsFB25qkgUhZUAYZny
XfKUykhu/Kz97yt5Fm+dEPaabVAety+wrwJTiCuO38IP2V/FPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKLRT6C1cHmMMn2pdgGSnkM5oSnqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wODU4
YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvMjE4MDU5MjktOWEwNy0z
MWFmLTg0N2MtMjdkNTc4MzYwYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDg1OGIwN2YtNzc1ZS00YzA1LWFl
NDgtZDQzYjVkOTM4YjliLzA4NThiMDdmLTc3NWUtNGMwNS1hZTQ4LWQ0M2I1ZDkz
OGI5Yi5jcmwwHwYDVR0jBBgwFoAUzm+k9LgBLNbG78YySi2NeLwdDYswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNi
NWQ5MzhiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApX01MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6HQ6HlxWIhY5uS5hbXUTMVe64PkKscGmpodtoQHvqeU6vsasZzZ6zJ
I7dH6Kr+yOOOFE2e7feW5ftzK6KrPYF5F1NKtTRYT7gV1yJNsHTNn+zrCCmllkps
htt0qdfkxScYK35RBQ2wNcZF1KQETsu/dpkFCEIeslvuxcqy5gJ9X5iEBCwMQQKn
EgocurLhA7xexNroN/DO7UhSnWrUMX9HBEqf/lrCOPzIFMdzrQvULBtCJsLciXxa
T0jhb75nTPmPWjtmGQkWaF+Sazu1L77cJKNuoMlIhAg4IxE2SGcQIzcSE1E+5IB1
sD8GgxmiMmgNm7lIoEyOYFRqztUZlwE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:53 2025 by rpki-client