Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/09c7645e-f4c3-3106-8958-9a9fc6429bef.roa
File:                     09c7645e-f4c3-3106-8958-9a9fc6429bef.roa (raw, json)
Hash identifier:          HQOUDb6FF2HsR639XZfpVSnse+Xca4asZ5qRMnhs3vY=
Subject key identifier:   65:4D:4E:D2:21:78:23:00:AF:B2:81:19:5F:A0:99:7A:42:F6:15:FB
Certificate issuer:       /CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c
Certificate serial:       010D0C9F4328584AC9DBA755FD6F5C81DEFA6200
Authority key identifier: 8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/09c7645e-f4c3-3106-8958-9a9fc6429bef.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     8075
IP address blocks:        216.152.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a7:55:fd:6f:5c:81:de:fa:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=cf737b23-bf59-493b-bfe9-b582e95e8489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:4e:55:e0:c4:a0:0b:47:61:93:92:20:7e:
                    13:98:bf:2d:62:08:db:ad:9d:60:9b:a7:c5:b8:08:
                    6d:2a:02:80:36:7f:31:61:de:e5:ae:c7:29:39:13:
                    ca:77:14:ff:bf:34:c9:1c:9d:79:cb:c9:b7:ec:e8:
                    5e:77:12:08:cd:4d:c6:e6:ce:d3:3b:0b:fa:8d:b9:
                    71:f5:fd:38:d5:7e:23:bd:26:83:cc:32:aa:0f:6d:
                    09:ee:2a:81:d5:8a:3e:7c:54:cd:95:da:25:46:eb:
                    9f:41:fa:94:fc:ab:6b:08:dd:13:c4:ed:ce:4e:b5:
                    c4:b5:bb:a9:e5:29:8f:85:ab:cf:5c:52:df:f5:fa:
                    bd:f6:b9:cd:8b:fc:8c:38:0f:af:f3:8c:ba:2a:68:
                    cd:3b:5e:1b:c7:6e:df:85:ee:8f:1c:82:d2:ba:2e:
                    22:49:31:08:c0:f6:97:0e:e8:43:ed:a6:2f:e7:81:
                    5a:fa:72:d9:f7:2f:f2:69:62:f2:30:d1:58:45:0c:
                    76:64:3d:1e:ba:5a:c0:cd:b3:a5:9b:58:65:fa:54:
                    a8:0c:7b:29:ba:8c:54:29:4c:10:8c:3e:bc:e0:8b:
                    2c:72:c8:4f:32:68:51:4b:98:8e:70:af:97:b8:2c:
                    9b:af:af:bb:12:0e:00:f7:cc:af:a0:22:78:ac:59:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4D:4E:D2:21:78:23:00:AF:B2:81:19:5F:A0:99:7A:42:F6:15:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/09c7645e-f4c3-3106-8958-9a9fc6429bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.crl

            X509v3 Authority Key Identifier:
                keyid:8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a2:6d:69:c8:e2:99:bd:10:8d:31:1f:21:20:36:f3:fc:6a:
         df:cf:e1:d5:10:64:fc:1e:1b:30:c5:7c:61:3b:f8:30:55:04:
         81:8f:9d:1d:fc:6a:c9:48:8a:12:e4:5f:cc:dd:cb:62:a9:c3:
         89:da:ef:f2:2f:f2:f5:8d:07:0b:cc:cb:9b:6b:61:f8:a1:78:
         41:77:3a:54:32:d4:b0:f8:3a:be:a7:d2:b7:0d:0e:b4:fe:79:
         26:61:4e:a7:3e:f0:af:b4:b8:14:ec:65:91:c0:a9:58:b3:89:
         31:c4:11:b4:b0:f4:0d:74:40:36:ec:22:1d:1a:b5:04:2e:26:
         70:db:c1:38:96:ac:36:d3:1f:7d:32:2c:50:5b:8c:b5:b9:9c:
         50:34:db:b9:dd:f1:34:ae:5d:9d:45:a1:88:86:a3:ca:2a:29:
         72:6c:df:36:ce:92:ae:1e:6b:8c:d8:dc:c1:03:8b:7a:17:22:
         5d:de:0c:14:36:64:7e:e1:9d:50:c7:86:57:39:51:76:0f:73:
         7e:0d:b3:d0:6b:ec:bf:48:b5:ca:51:9c:e1:7c:0b:f1:1a:a9:
         4f:83:ed:02:59:b3:24:e9:70:71:20:03:8c:4b:1e:13:3e:7c:
         0f:b2:c9:e0:a4:9b:df:ed:b6:ae:c0:3e:fb:89:ef:05:90:f5:
         7b:45:06:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26dV/W9cgd76YgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTNlNWY4ZjgtN2Q2Zi00ZDQzLWExY2EtNDc3ZWM5MGE1
YTNjMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
Y2Y3MzdiMjMtYmY1OS00OTNiLWJmZTktYjU4MmU5NWU4NDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+ZOVeDEoAtHYZOSIH4TmL8tYgjbrZ1gm6fF
uAhtKgKANn8xYd7lrscpORPKdxT/vzTJHJ15y8m37OhedxIIzU3G5s7TOwv6jblx
9f041X4jvSaDzDKqD20J7iqB1Yo+fFTNldolRuufQfqU/KtrCN0TxO3OTrXEtbup
5SmPhavPXFLf9fq99rnNi/yMOA+v84y6KmjNO14bx27fhe6PHILSui4iSTEIwPaX
DuhD7aYv54Fa+nLZ9y/yaWLyMNFYRQx2ZD0eulrAzbOlm1hl+lSoDHspuoxUKUwQ
jD684IsscshPMmhRS5iOcK+XuCybr6+7Eg4A98yvoCJ4rFlqvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVNTtIheCMAr7KBGV+gmXpC9hX7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1
ZjhmOC03ZDZmLTRkNDMtYTFjYS00NzdlYzkwYTVhM2MvMDljNzY0NWUtZjRjMy0z
MTA2LTg5NTgtOWE5ZmM2NDI5YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNlNWY4ZjgtN2Q2Zi00ZDQzLWEx
Y2EtNDc3ZWM5MGE1YTNjL2UzZTVmOGY4LTdkNmYtNGQ0My1hMWNhLTQ3N2VjOTBh
NWEzYy5jcmwwHwYDVR0jBBgwFoAUjjXzWJ01FAK9y0jrYzm4j/XCZ8swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2U1ZjhmOC03ZDZmLTRkNDMtYTFjYS00Nzdl
YzkwYTVhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JhzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2ibWnI4pm9EI0xHyEgNvP8at/P4dUQZPweGzDFfGE7+DBVBIGPnR38
aslIihLkX8zdy2Kpw4na7/Iv8vWNBwvMy5trYfiheEF3OlQy1LD4Or6n0rcNDrT+
eSZhTqc+8K+0uBTsZZHAqViziTHEEbSw9A10QDbsIh0atQQuJnDbwTiWrDbTH30y
LFBbjLW5nFA027nd8TSuXZ1FoYiGo8oqKXJs3zbOkq4ea4zY3MEDi3oXIl3eDBQ2
ZH7hnVDHhlc5UXYPc34Ns9Br7L9ItcpRnOF8C/EaqU+D7QJZsyTpcHEgA4xLHhM+
fA+yyeCkm9/ttq7APvuJ7wWQ9XtFBls=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:59 2025 by rpki-client