Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/871ce348-f62b-360c-a589-f22a0f5df0d0.roa
File:                     871ce348-f62b-360c-a589-f22a0f5df0d0.roa (raw, json)
Hash identifier:          3OiI1FsNtvb8UQCBubYgLMZPgW43oJ7AUHudfPtPfWc=
Subject key identifier:   55:85:46:FB:C4:4C:B6:D9:8C:B1:55:A6:20:F0:FF:49:AD:A6:BA:A1
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584AECC11EF3CB253370C81990E0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/871ce348-f62b-360c-a589-f22a0f5df0d0.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     398116
IP address blocks:        65.51.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:1e:f3:cb:25:33:70:c8:19:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=7e8f9503-a259-45fb-9b2e-a9bd7796c088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:65:63:14:8b:c6:45:97:cd:86:2c:47:90:
                    2d:2e:05:d3:e9:93:56:b7:59:a7:0d:22:67:2c:29:
                    41:58:a2:46:c2:2c:24:66:c9:4f:43:87:b1:18:8c:
                    df:5a:46:12:43:ca:d4:63:eb:16:32:1f:d9:86:7e:
                    fa:e9:25:52:cf:88:c4:45:a7:5f:d1:e1:88:27:29:
                    3b:06:22:ea:f7:63:1e:9d:bf:dd:72:2d:04:4e:f5:
                    92:17:66:92:80:e7:c6:a6:1d:ab:47:1a:a4:00:cb:
                    f4:ed:44:a4:91:6a:94:e6:96:47:1e:79:26:1c:04:
                    be:46:bc:a5:e6:d9:be:d4:f0:11:d8:c2:22:26:fd:
                    2e:71:2a:55:82:14:13:f7:e8:85:5b:07:4a:2f:45:
                    a5:66:0e:46:bf:ab:70:b5:78:98:72:9b:e7:06:0d:
                    4c:21:81:a5:c4:26:5d:37:f6:b8:92:0a:d0:50:17:
                    37:e9:b4:d5:6b:a1:d7:92:cd:2e:0a:18:3a:96:3a:
                    57:6f:0b:f0:03:38:4d:b9:52:e4:62:42:12:23:9f:
                    8c:aa:05:f0:0a:10:57:b2:64:94:09:c2:eb:13:6e:
                    dc:b5:2d:6e:b2:18:f9:38:a6:58:e0:bd:79:54:ee:
                    c7:6a:1e:90:66:75:7f:fe:30:86:d1:27:a6:07:79:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:85:46:FB:C4:4C:B6:D9:8C:B1:55:A6:20:F0:FF:49:AD:A6:BA:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/871ce348-f62b-360c-a589-f22a0f5df0d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8e:91:c3:be:bd:c7:e0:a3:1e:48:7b:b0:07:7e:f6:c8:4f:
         c1:aa:9a:9b:6d:a6:e1:82:e2:10:b0:4f:e6:fa:8a:30:70:1a:
         b0:35:2b:4f:50:e3:dc:6c:de:a7:b9:89:d4:a0:d4:fb:f4:5d:
         88:f1:56:23:8a:43:75:7b:d0:a1:9b:a1:41:f1:88:66:d0:36:
         a8:4c:9b:10:56:2d:f6:9c:21:b5:43:d6:61:a6:50:5e:04:78:
         2a:f3:29:b0:d8:9e:05:78:28:61:aa:d0:c6:c6:bb:37:24:21:
         0e:a6:21:01:8a:9c:eb:7a:4e:e7:db:eb:f5:85:55:b8:60:1a:
         d8:28:06:cc:53:0b:f0:80:53:07:50:13:13:22:36:b4:05:22:
         b9:a4:a9:d6:29:c1:14:46:96:7c:0b:63:7b:1d:58:73:07:c6:
         45:b4:87:c1:c5:4e:77:5b:90:4e:30:d4:22:a0:0b:17:b1:6f:
         11:4f:8c:61:08:24:44:a2:82:68:c2:81:3f:f2:0e:9a:47:00:
         0c:03:ca:ea:8b:4b:eb:d1:58:a0:8d:af:0e:aa:60:b8:2f:c5:
         40:2f:b6:fb:f2:05:2c:dd:67:dc:74:ca:7e:0e:26:7e:df:54:
         21:05:23:2d:26:47:21:76:ed:df:07:0c:ed:d1:ac:c3:a5:87:
         f1:3a:9d:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswR7zyyUzcMgZkOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
N2U4Zjk1MDMtYTI1OS00NWZiLTliMmUtYTliZDc3OTZjMDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx5lYxSLxkWXzYYsR5AtLgXT6ZNWt1mnDSJn
LClBWKJGwiwkZslPQ4exGIzfWkYSQ8rUY+sWMh/Zhn766SVSz4jERadf0eGIJyk7
BiLq92Menb/dci0ETvWSF2aSgOfGph2rRxqkAMv07USkkWqU5pZHHnkmHAS+Rryl
5tm+1PAR2MIiJv0ucSpVghQT9+iFWwdKL0WlZg5Gv6twtXiYcpvnBg1MIYGlxCZd
N/a4kgrQUBc36bTVa6HXks0uChg6ljpXbwvwAzhNuVLkYkISI5+MqgXwChBXsmSU
CcLrE27ctS1ushj5OKZY4L15VO7Hah6QZnV//jCG0SemB3nQ4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFWFRvvETLbZjLFVpiDw/0mtprqhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvODcxY2UzNDgtZjYyYi0z
NjBjLWE1ODktZjIyYTBmNWRmMGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTOFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCOkcO+vcfgox5Ie7AHfvbIT8GqmpttpuGC4hCwT+b6ijBwGrA1K09Q
49xs3qe5idSg1Pv0XYjxViOKQ3V70KGboUHxiGbQNqhMmxBWLfacIbVD1mGmUF4E
eCrzKbDYngV4KGGq0MbGuzckIQ6mIQGKnOt6Tufb6/WFVbhgGtgoBsxTC/CAUwdQ
ExMiNrQFIrmkqdYpwRRGlnwLY3sdWHMHxkW0h8HFTndbkE4w1CKgCxexbxFPjGEI
JESigmjCgT/yDppHAAwDyuqLS+vRWKCNrw6qYLgvxUAvtvvyBSzdZ9x0yn4OJn7f
VCEFIy0mRyF27d8HDO3RrMOlh/E6nXU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:32 2025 by rpki-client