Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/52ebc67e-2190-35c0-ba24-fba0a1cb3bcd.roa
File:                     52ebc67e-2190-35c0-ba24-fba0a1cb3bcd.roa (raw, json)
Hash identifier:          vfKhFtBFGGtOse2mwZoLEE2fl4bA6hKBRXVcve/tdwQ=
Subject key identifier:   E3:63:73:F2:71:09:32:A2:2B:EF:2B:21:93:B2:4E:6D:4F:60:15:7F
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584B76F22BC4955A06C5EBB1C380
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/52ebc67e-2190-35c0-ba24-fba0a1cb3bcd.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     19437
IP address blocks:        216.185.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:2b:c4:95:5a:06:c5:eb:b1:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=32a7afb0-4f80-4811-8410-7077569a2de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dd:e0:4a:1e:22:fc:17:ea:3e:cb:7d:17:d6:
                    c0:a1:48:e0:bd:df:18:e5:69:b8:a2:b1:3d:71:06:
                    ea:72:15:f7:8b:80:70:63:91:b6:43:6e:8f:9c:70:
                    9e:50:f8:2b:c4:4e:a6:6f:db:97:5a:5c:70:9b:14:
                    0e:dc:a0:14:66:8d:ce:80:14:bc:69:93:c0:bf:42:
                    35:c3:35:5a:30:9b:a9:b7:10:8c:fd:70:fb:2a:26:
                    5d:e7:35:d7:a4:b2:96:c7:af:ac:71:38:00:37:8c:
                    16:12:b0:1f:b3:82:02:2e:65:ad:b9:f5:08:de:cb:
                    0f:a1:d4:b6:3c:f2:ab:1c:cb:55:9c:c3:52:0d:b1:
                    57:5a:92:7f:39:56:8a:25:ff:c1:b4:d4:be:2b:77:
                    1e:82:52:fc:ad:31:4a:ce:3c:d8:4c:ed:f4:41:3b:
                    b1:56:9b:93:96:a2:9c:7f:5c:66:36:53:d6:aa:27:
                    cc:4a:19:5f:d5:e1:4e:57:fb:ea:5a:ff:eb:56:b5:
                    89:cf:79:e2:b3:21:d8:23:a0:ac:38:fd:84:01:d5:
                    3b:63:28:f4:91:6b:bf:48:37:9a:cb:54:39:3f:de:
                    c4:04:fa:82:9c:4e:85:59:58:3c:b7:ac:a8:c6:6c:
                    79:3a:78:5c:95:91:6b:43:9f:12:1e:2a:20:f8:f7:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:63:73:F2:71:09:32:A2:2B:EF:2B:21:93:B2:4E:6D:4F:60:15:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/52ebc67e-2190-35c0-ba24-fba0a1cb3bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:84:e0:13:ab:c6:d5:dc:0a:4b:6c:95:77:54:2d:7b:6f:fc:
         ed:c0:9e:40:96:d6:13:c3:c7:8f:7b:0a:6b:f5:69:8c:94:dd:
         84:62:be:e4:4c:08:2b:56:e7:b7:d5:f6:20:22:e5:21:05:e9:
         c2:e8:bd:21:0b:8f:43:84:24:b1:fe:3c:a7:1f:a5:29:40:66:
         8a:46:40:97:11:40:75:44:cc:58:07:cd:92:40:d5:8d:b1:87:
         1a:fa:3e:b2:4d:3b:31:5a:8f:e7:53:7b:d9:5a:39:00:69:15:
         7b:32:b7:a0:fc:b6:c7:22:2f:f4:49:c0:d1:67:00:31:f8:07:
         62:64:d8:3c:76:3d:9e:f7:a3:8e:9b:f3:41:59:2f:e3:20:f7:
         75:a6:a6:cc:1f:5e:5a:af:05:1b:40:4c:4f:6e:62:db:d0:36:
         d9:12:8b:fd:19:96:8a:7e:d8:d1:1b:d6:55:39:ee:12:e8:4b:
         7f:ba:5b:1d:ba:46:50:63:46:ee:1a:f1:7f:53:16:99:36:dc:
         5f:75:0e:be:18:a7:ef:70:17:0a:fa:0a:b9:d6:f3:7d:e2:30:
         1b:c3:45:76:60:00:08:5c:19:a8:56:d1:d3:3f:f0:fd:d9:d9:
         6e:1f:0f:85:2b:df:11:84:2d:3a:14:ec:63:28:77:d5:37:37:
         59:9d:d7:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ivElVoGxeuxw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
MzJhN2FmYjAtNGY4MC00ODExLTg0MTAtNzA3NzU2OWEyZGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA293gSh4i/BfqPst9F9bAoUjgvd8Y5Wm4orE9
cQbqchX3i4BwY5G2Q26PnHCeUPgrxE6mb9uXWlxwmxQO3KAUZo3OgBS8aZPAv0I1
wzVaMJuptxCM/XD7KiZd5zXXpLKWx6+scTgAN4wWErAfs4ICLmWtufUI3ssPodS2
PPKrHMtVnMNSDbFXWpJ/OVaKJf/BtNS+K3ceglL8rTFKzjzYTO30QTuxVpuTlqKc
f1xmNlPWqifMShlf1eFOV/vqWv/rVrWJz3nisyHYI6CsOP2EAdU7Yyj0kWu/SDea
y1Q5P97EBPqCnE6FWVg8t6yoxmx5OnhclZFrQ58SHiog+Pf6QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFONjc/JxCTKiK+8rIZOyTm1PYBV/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvNTJlYmM2N2UtMjE5MC0z
NWMwLWJhMjQtZmJhMGExY2IzYmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LklMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmE4BOrxtXcCktslXdULXtv/O3AnkCW1hPDx497Cmv1aYyU3YRivuRM
CCtW57fV9iAi5SEF6cLovSELj0OEJLH+PKcfpSlAZopGQJcRQHVEzFgHzZJA1Y2x
hxr6PrJNOzFaj+dTe9laOQBpFXsyt6D8tsciL/RJwNFnADH4B2Jk2Dx2PZ73o46b
80FZL+Mg93WmpswfXlqvBRtATE9uYtvQNtkSi/0Zlop+2NEb1lU57hLoS3+6Wx26
RlBjRu4a8X9TFpk23F91Dr4Yp+9wFwr6CrnW833iMBvDRXZgAAhcGahW0dM/8P3Z
2W4fD4Ur3xGELToU7GMod9U3N1md12A=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:22:10 2025 by rpki-client