Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa
File:                     8a80ef84-72eb-37af-86ea-3e37d2bac157.roa (raw, json)
Hash identifier:          vSrsc871vo8R1mKk13fGgjQM43Zosop6gNPzDedgQXQ=
Subject key identifier:   FD:72:7B:7C:EC:83:0C:A1:77:81:C8:62:34:76:FA:35:74:DD:68:B1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B3821A195C350B1AEEF2F1600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     834
IP address blocks:        43.255.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:a1:95:c3:50:b1:ae:ef:2f:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=1a3f3298-7fcf-44d8-82e4-ed1c3d41d2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:83:df:ec:f2:59:37:38:47:09:b8:46:ab:
                    40:cd:2c:17:1b:59:d6:d4:65:60:35:29:b1:87:a0:
                    8d:e4:44:0f:ad:d8:f3:bb:0c:be:11:a3:01:10:3f:
                    73:02:9c:30:12:e7:b9:23:30:6b:4e:e9:60:b3:2a:
                    72:e5:96:4d:44:28:b6:70:2b:96:b9:03:9d:44:cc:
                    12:ba:51:37:3d:a6:64:d1:4a:3b:68:5b:00:58:0c:
                    27:82:a6:5c:85:ea:77:db:4e:86:9b:ab:d9:a0:ac:
                    b5:39:7d:fc:50:7e:06:59:ce:a6:c8:8d:b0:95:7b:
                    50:bc:f2:01:6e:df:f9:20:d9:91:f7:d1:21:d1:96:
                    fe:a1:18:9d:97:8e:1d:73:9f:c3:c0:64:74:f2:03:
                    f8:52:69:1a:0d:d9:cc:c8:b6:3e:8e:b5:ca:cb:d9:
                    11:e2:ad:bf:c6:a6:55:03:52:54:27:8f:02:04:ed:
                    a8:7c:27:e5:a6:fb:83:eb:aa:b3:14:7a:4f:e4:fc:
                    0a:8d:e6:62:31:27:e0:41:64:f1:c3:17:78:9a:88:
                    02:3a:eb:ae:ae:60:4a:68:25:a0:78:dd:b0:b1:fa:
                    5d:b5:43:65:da:50:0b:27:22:5f:30:de:f5:b4:88:
                    8f:a9:14:bc:c0:e8:30:3e:a8:29:79:a6:46:26:9e:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:72:7B:7C:EC:83:0C:A1:77:81:C8:62:34:76:FA:35:74:DD:68:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4a:37:3f:9a:2d:06:09:5e:a7:43:89:d8:e0:df:2d:94:5f:
         e7:c8:b6:46:cd:b8:5a:60:3b:02:08:04:75:4a:60:07:f3:35:
         6b:ca:8f:9f:64:c8:f9:58:3c:ba:79:69:67:2c:84:6d:f7:bf:
         1f:cc:66:d7:b2:79:65:57:a9:02:b1:6f:bb:9d:c6:c6:3a:95:
         05:ad:4f:37:92:d5:7a:dc:99:ad:aa:de:4e:a0:9a:2d:da:13:
         1d:74:42:62:af:8a:0f:5b:08:53:53:e2:df:22:63:bb:8b:23:
         33:eb:de:ed:fb:e3:dc:e1:f1:87:5b:c5:cf:ee:4d:21:7b:b2:
         70:e8:ff:54:cc:07:f4:b7:80:f7:8b:9e:67:08:0d:97:7c:c7:
         eb:be:d3:c4:3e:db:bb:e9:9d:82:65:0e:cd:ff:1d:ea:62:26:
         fc:c4:9e:02:8c:c2:b8:6f:00:94:51:51:4e:5e:e3:84:fd:45:
         03:94:eb:f7:60:f3:3f:87:75:e9:3a:87:6b:4a:f7:ed:dd:ef:
         f3:2b:7f:5d:5e:46:0c:7a:c5:2b:2a:e2:5d:76:4e:5e:ce:35:
         67:9b:23:02:a4:ac:90:3e:e8:67:35:74:19:19:a2:65:29:6d:
         58:4d:f3:bf:f6:29:e9:d3:74:f3:24:d9:36:2a:d4:2e:89:5b:
         0e:82:a7:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IaGVw1Cxru8vFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk
MWEzZjMyOTgtN2ZjZi00NGQ4LTgyZTQtZWQxYzNkNDFkMmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlCD3+zyWTc4Rwm4RqtAzSwXG1nW1GVgNSmx
h6CN5EQPrdjzuwy+EaMBED9zApwwEue5IzBrTulgsypy5ZZNRCi2cCuWuQOdRMwS
ulE3PaZk0Uo7aFsAWAwngqZchep3206Gm6vZoKy1OX38UH4GWc6myI2wlXtQvPIB
bt/5INmR99Eh0Zb+oRidl44dc5/DwGR08gP4UmkaDdnMyLY+jrXKy9kR4q2/xqZV
A1JUJ48CBO2ofCflpvuD66qzFHpP5PwKjeZiMSfgQWTxwxd4mogCOuuurmBKaCWg
eN2wsfpdtUNl2lALJyJfMN71tIiPqRS8wOgwPqgpeaZGJp4OYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1ye3zsgwyhd4HIYjR2+jV03WixMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOGE4MGVmODQtNzJlYi0z
N2FmLTg2ZWEtM2UzN2QyYmFjMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/+/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItKNz+aLQYJXqdDidjg3y2UX+fItkbNuFpgOwIIBHVKYAfzNWvKj59k
yPlYPLp5aWcshG33vx/MZteyeWVXqQKxb7udxsY6lQWtTzeS1Xrcma2q3k6gmi3a
Ex10QmKvig9bCFNT4t8iY7uLIzPr3u3749zh8Ydbxc/uTSF7snDo/1TMB/S3gPeL
nmcIDZd8x+u+08Q+27vpnYJlDs3/HepiJvzEngKMwrhvAJRRUU5e44T9RQOU6/dg
8z+Hdek6h2tK9+3d7/Mrf11eRgx6xSsq4l12Tl7ONWebIwKkrJA+6Gc1dBkZomUp
bVhN87/2KenTdPMk2TYq1C6JWw6Cp+I=
-----END CERTIFICATE-----
Generated at Sun Oct 19 14:46:12 2025 by rpki-client