Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa
File:                     1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa (raw, json)
Hash identifier:          +e25P2Iw03iikCc/bzt+dRwgUOkrFeTMHgMtDTqmcAc=
Subject key identifier:   6C:79:33:6A:76:D5:89:D1:F2:FB:2B:F1:93:C4:A3:7D:9C:16:96:C5
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584B64CD5627EF7C1E7F8C9A0F40
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        209.107.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:56:27:ef:7c:1e:7f:8c:9a:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=915606dc-2465-4d75-a67f-267c8b2cc0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:37:56:ae:29:36:c5:37:86:10:f6:67:93:
                    08:7a:ee:24:ac:d0:2e:43:6d:32:c7:7d:bb:67:8b:
                    11:37:e3:19:83:bc:70:6c:ef:d2:19:d7:82:fb:e6:
                    3b:ae:fc:ff:51:e7:89:ba:16:db:bb:49:c9:7e:7a:
                    88:f7:b0:75:f7:7b:62:67:9e:1c:ea:3e:87:0f:22:
                    74:62:9b:c1:61:ce:99:c0:c5:e9:29:2a:c5:54:ad:
                    30:0b:e8:e1:b0:6f:69:8f:be:54:35:e9:70:b5:99:
                    b8:12:5f:39:85:b4:28:5a:aa:b9:14:16:49:c7:b6:
                    6c:8a:4b:64:86:18:5c:90:90:13:7b:1e:0b:c3:23:
                    bf:d1:a0:21:2d:9d:3c:4a:72:0e:39:63:8d:78:0f:
                    a5:c4:81:b6:18:4c:c2:be:10:9e:e4:90:8d:81:5c:
                    74:5b:06:1f:27:9f:08:b0:74:37:28:b0:0e:84:2f:
                    76:03:00:43:a2:ba:b5:ae:a5:b0:65:a3:03:eb:b0:
                    8a:b3:99:64:f0:0c:0b:74:bd:85:4e:be:e7:63:53:
                    4c:72:79:b9:3a:31:23:80:0c:89:9c:09:d6:87:ad:
                    51:52:9c:45:26:30:32:03:44:39:75:db:9e:fe:9c:
                    25:de:69:3f:91:00:e3:d9:fa:4b:9a:47:6a:bc:25:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:79:33:6A:76:D5:89:D1:F2:FB:2B:F1:93:C4:A3:7D:9C:16:96:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1a5007d9-83b7-3c50-97e0-99e5db525a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:95:2b:d9:46:32:8c:f0:c6:ef:55:70:45:73:4e:92:1b:77:
         a4:96:17:fb:14:7c:21:d5:78:ad:ac:d8:db:9b:eb:a8:49:d3:
         00:e3:07:9f:4d:9f:24:42:ee:7b:d9:6d:8a:1a:7d:c9:f3:7e:
         11:ce:9b:53:18:8b:bb:1e:68:e4:28:4c:a3:c8:cf:3a:e2:b9:
         97:d4:13:41:9b:c8:8e:08:e2:9a:9e:ff:e2:4e:c3:dd:3a:ff:
         e8:a1:2c:9f:76:5c:1f:ac:12:36:ca:43:08:a2:6d:97:f6:13:
         bd:53:da:07:32:44:6a:10:d9:61:47:51:da:cf:66:6f:f4:7f:
         57:6a:f6:e0:ed:20:64:33:f4:81:fe:7f:85:9a:5d:2e:1a:b0:
         5d:27:2c:b7:84:b9:53:d7:af:05:55:f6:45:7d:8c:8b:d6:6f:
         ba:c8:0f:82:f0:a2:38:ee:cf:fe:69:ea:69:b7:df:b6:fb:5e:
         15:10:64:39:43:14:bb:44:b5:13:60:66:a5:11:65:18:bf:5b:
         e3:bd:fa:fb:c9:a2:cf:ea:fb:8f:72:70:d2:a6:76:49:2c:c9:
         b4:b1:ad:cd:db:8c:e9:a4:ab:27:fc:e7:fe:13:57:19:0c:b6:
         92:36:af:ea:c1:be:af:f0:b1:27:4b:89:3a:d5:30:ff:77:c4:
         04:6a:98:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVYn73wef4yaD0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
OTE1NjA2ZGMtMjQ2NS00ZDc1LWE2N2YtMjY3YzhiMmNjMGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Y3Vq4pNsU3hhD2Z5MIeu4krNAuQ20yx327
Z4sRN+MZg7xwbO/SGdeC++Y7rvz/UeeJuhbbu0nJfnqI97B193tiZ54c6j6HDyJ0
YpvBYc6ZwMXpKSrFVK0wC+jhsG9pj75UNelwtZm4El85hbQoWqq5FBZJx7Zsiktk
hhhckJATex4LwyO/0aAhLZ08SnIOOWONeA+lxIG2GEzCvhCe5JCNgVx0WwYfJ58I
sHQ3KLAOhC92AwBDorq1rqWwZaMD67CKs5lk8AwLdL2FTr7nY1NMcnm5OjEjgAyJ
nAnWh61RUpxFJjAyA0Q5ddue/pwl3mk/kQDj2fpLmkdqvCWMKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGx5M2p21YnR8vsr8ZPEo32cFpbFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMWE1MDA3ZDktODNiNy0z
YzUwLTk3ZTAtOTllNWRiNTI1YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WuyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuVK9lGMozwxu9VcEVzTpIbd6SWF/sUfCHVeK2s2Nub66hJ0wDjB59N
nyRC7nvZbYoafcnzfhHOm1MYi7seaOQoTKPIzzriuZfUE0GbyI4I4pqe/+JOw906
/+ihLJ92XB+sEjbKQwiibZf2E71T2gcyRGoQ2WFHUdrPZm/0f1dq9uDtIGQz9IH+
f4WaXS4asF0nLLeEuVPXrwVV9kV9jIvWb7rID4Lwojjuz/5p6mm337b7XhUQZDlD
FLtEtRNgZqURZRi/W+O9+vvJos/q+49ycNKmdkksybSxrc3bjOmkqyf85/4TVxkM
tpI2r+rBvq/wsSdLiTrVMP93xARqmPA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:12:35 2025 by rpki-client