Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa
File:                     a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa (raw, json)
Hash identifier:          0RypSvdPQl2ZuDlfmpJ3YEKRQBxKH8VVmAvxGkynOBY=
Subject key identifier:   21:64:9A:76:F6:62:AC:42:8F:9B:D4:2E:BB:09:C2:9B:84:98:60:1B
Certificate issuer:       /CN=25200eb8-bc93-4e8b-afa9-05e635b02746
Certificate serial:       010D0C9F4328584ACF710F5CDC7E6C01D249FB10
Authority key identifier: 8C:6F:E1:DB:DA:07:93:01:A1:F1:55:59:1A:12:B3:EC:F9:BE:1D:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     395821
IP address blocks:        162.217.128.0/22 maxlen: 24
                          204.16.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:0f:5c:dc:7e:6c:01:d2:49:fb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25200eb8-bc93-4e8b-afa9-05e635b02746
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=3fa34f57-d42b-42e8-b561-d9939e0cb5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:e6:e7:49:83:a4:8d:aa:b7:45:03:d2:e7:
                    75:10:9c:bd:ef:52:a0:15:93:72:81:22:12:47:d5:
                    fb:a7:31:7b:3e:77:a5:5c:c8:29:fc:e7:cc:6d:ea:
                    9e:c4:91:3b:3a:bb:e1:1f:02:4b:63:0e:c0:b0:0d:
                    95:40:71:cf:2a:a8:25:88:68:b0:6b:2a:dd:37:08:
                    e7:1a:34:23:ab:ea:68:e7:e1:1d:11:83:b1:54:5a:
                    f4:92:0b:0e:b3:40:f7:1d:33:fa:84:db:60:a3:02:
                    c1:c0:03:e9:48:e6:03:28:1d:c0:bb:f1:5e:ff:98:
                    61:a3:4e:77:77:98:8d:9c:10:6d:ad:c3:12:3b:6f:
                    c1:a2:f9:37:e2:3c:9c:c7:54:02:04:d2:df:16:e9:
                    5a:f2:d4:29:50:12:84:ae:48:76:ae:04:c4:85:0a:
                    78:c8:56:af:38:76:21:46:3e:38:42:76:a7:72:b5:
                    eb:55:0f:61:6e:0e:c3:e1:0b:89:37:bb:7f:d1:fb:
                    f5:86:cd:1a:f4:a2:39:af:8d:27:23:d0:5a:3b:f2:
                    25:a7:9b:58:a7:dc:ed:e7:4b:ad:7a:de:51:37:de:
                    88:28:02:69:74:04:20:31:ce:b8:84:24:a3:e5:3d:
                    03:98:ee:f9:6a:d9:a3:d7:3c:97:24:6b:e5:e2:43:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:9A:76:F6:62:AC:42:8F:9B:D4:2E:BB:09:C2:9B:84:98:60:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.crl

            X509v3 Authority Key Identifier:
                keyid:8C:6F:E1:DB:DA:07:93:01:A1:F1:55:59:1A:12:B3:EC:F9:BE:1D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.128.0/22
                  204.16.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:34:2f:ac:21:cd:56:45:ae:51:b7:5d:68:51:05:c7:87:f0:
         75:93:bb:36:06:2d:fc:63:a3:d2:cb:ec:5d:c7:b0:7c:1a:d9:
         ea:69:23:3e:93:32:1c:52:b7:57:40:73:a5:b0:c4:d0:c4:b2:
         a0:53:d7:fe:eb:74:e4:28:a4:b5:41:a9:13:20:11:56:a0:2c:
         b7:65:be:e4:56:44:f5:68:22:9b:cc:11:6f:33:61:f2:23:d4:
         eb:59:2d:d2:85:8c:83:19:57:39:30:4d:10:f7:0a:d3:a2:97:
         e3:74:75:9f:98:46:2b:02:7f:db:6d:c8:66:54:46:a2:56:ec:
         05:66:d1:c1:ab:8e:7d:bb:f1:f3:f2:4b:33:a9:17:97:05:3f:
         f5:53:ea:c9:54:5a:a4:e3:9c:20:db:51:56:21:02:75:91:63:
         e3:ba:a1:96:e0:ae:b1:76:d0:30:b0:e8:f9:09:f5:56:20:49:
         c3:e2:5a:e9:54:55:54:94:f3:2c:59:26:11:c3:e1:90:c0:d6:
         a9:03:8e:9e:0b:b2:a3:f0:6a:cf:cc:fa:28:2e:6a:5f:07:63:
         b6:af:16:38:72:4d:0e:25:eb:9b:74:09:46:58:d2:c6:50:4a:
         db:81:9f:6f:2e:1d:f4:b1:66:f0:a3:55:5e:a0:98:ca:28:1a:
         8b:6a:68:80
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErPcQ9c3H5sAdJJ+xAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUyMDBlYjgtYmM5My00ZThiLWFmYTktMDVlNjM1YjAy
NzQ2MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk
M2ZhMzRmNTctZDQyYi00MmU4LWI1NjEtZDk5MzllMGNiNWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBzm50mDpI2qt0UD0ud1EJy971KgFZNygSIS
R9X7pzF7PnelXMgp/OfMbeqexJE7OrvhHwJLYw7AsA2VQHHPKqgliGiwayrdNwjn
GjQjq+po5+EdEYOxVFr0kgsOs0D3HTP6hNtgowLBwAPpSOYDKB3Au/Fe/5hho053
d5iNnBBtrcMSO2/Bovk34jycx1QCBNLfFula8tQpUBKErkh2rgTEhQp4yFavOHYh
Rj44QnancrXrVQ9hbg7D4QuJN7t/0fv1hs0a9KI5r40nI9BaO/Ilp5tYp9zt50ut
et5RN96IKAJpdAQgMc64hCSj5T0DmO75atmj1zyXJGvl4kM6QwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCFkmnb2YqxCj5vULrsJwpuEmGAbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNTIw
MGViOC1iYzkzLTRlOGItYWZhOS0wNWU2MzViMDI3NDYvYTgyZWQzY2QtYjUyNC0z
YWMzLWFmNmMtNTg1NzZjNjVjMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjUyMDBlYjgtYmM5My00ZThiLWFm
YTktMDVlNjM1YjAyNzQ2LzI1MjAwZWI4LWJjOTMtNGU4Yi1hZmE5LTA1ZTYzNWIw
Mjc0Ni5jcmwwHwYDVR0jBBgwFoAUjG/h29oHkwGh8VVZGhKz7Pm+HXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNTIwMGViOC1iYzkzLTRlOGItYWZhOS0wNWU2
MzViMDI3NDYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCotmAAwQB
zBAsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADk0L6whzVZFrlG3XWhRBceH8HWTuzYGLfxjo9LL7F3HsHwa
2eppIz6TMhxSt1dAc6WwxNDEsqBT1/7rdOQopLVBqRMgEVagLLdlvuRWRPVoIpvM
EW8zYfIj1OtZLdKFjIMZVzkwTRD3CtOil+N0dZ+YRisCf9ttyGZURqJW7AVm0cGr
jn278fPySzOpF5cFP/VT6slUWqTjnCDbUVYhAnWRY+O6oZbgrrF20DCw6PkJ9VYg
ScPiWulUVVSU8yxZJhHD4ZDA1qkDjp4LsqPwas/M+igual8HY7avFjhyTQ4l65t0
CUZY0sZQStuBn28uHfSxZvCjVV6gmMooGotqaIA=
-----END CERTIFICATE-----
Generated at Sun Aug 24 06:19:46 2025 by rpki-client