Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa
File:                     ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa (raw, json)
Hash identifier:          GITPVoQEfMKZA8+t5nE68+r/xsBj2mQoor5JpztBDag=
Subject key identifier:   14:31:BA:03:7B:03:C4:DD:09:3F:9D:32:B6:9F:B7:36:60:34:8A:0F
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584AE46129F7A95A71CB6E62D280
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     19437
IP address blocks:        125.253.87.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:29:f7:a9:5a:71:cb:6e:62:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=6aff1535-5b23-404d-ad69-451162646f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cb:cf:88:31:ea:63:39:17:65:5e:76:ca:da:
                    31:8c:fb:9c:38:10:58:6f:ab:4b:34:2e:bd:fe:cb:
                    b3:9a:a2:fb:20:40:be:06:20:e5:87:4e:49:92:b6:
                    16:ca:b4:2e:b6:42:10:01:27:47:e2:e7:94:75:20:
                    f0:7a:31:cc:1d:a2:78:cd:2a:ad:6d:9e:36:94:c0:
                    aa:04:e9:c9:17:8a:df:72:e3:86:c7:cd:76:0b:ee:
                    e5:5e:e1:59:de:ab:37:e1:5c:01:29:60:22:26:ec:
                    5e:16:85:a7:fe:e1:fe:f8:37:d8:ad:71:3c:25:c6:
                    4a:ab:e0:cb:ce:7c:56:68:62:43:90:ee:2a:08:fc:
                    5d:25:f1:70:1d:74:f1:4c:60:06:4a:aa:53:03:48:
                    75:a3:71:23:cc:04:6f:49:df:21:30:a8:ad:54:9e:
                    8f:c1:3d:ec:95:8a:e9:8a:33:ee:f8:b7:76:27:d6:
                    9d:d6:47:32:fc:bd:70:4c:7b:61:2f:cd:dd:39:cf:
                    69:8c:75:99:30:b0:bd:17:c2:8d:d4:ef:93:49:7d:
                    b5:0f:40:e8:62:9e:e4:66:f1:45:11:c7:0e:7e:3f:
                    79:8f:b7:bb:d5:da:af:91:78:20:8d:7b:ea:2d:dc:
                    3e:f6:13:fa:74:2e:3c:5f:5d:8b:31:3e:7e:ab:d7:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:31:BA:03:7B:03:C4:DD:09:3F:9D:32:B6:9F:B7:36:60:34:8A:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.253.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:47:20:ce:45:ea:2f:4f:ea:82:7c:f7:88:8e:9f:6c:db:46:
         6c:34:d9:e4:28:b5:20:6c:35:bc:5a:75:a1:ea:7a:24:f1:a8:
         35:64:ec:49:b7:30:f5:71:46:6a:d8:9c:fb:02:a0:f4:cc:d5:
         df:2e:1c:4c:7a:f0:cc:54:1e:18:da:e7:7c:40:ce:87:88:cf:
         f1:a5:be:14:c0:e8:a3:33:f2:11:45:5c:15:05:5f:23:27:e7:
         86:73:dd:02:fd:ee:0b:04:f9:22:5f:a5:6a:23:36:1f:3a:5d:
         1d:ff:09:24:29:a3:00:70:62:26:92:61:9a:e6:d8:86:15:cb:
         15:4f:07:78:36:75:56:6d:1c:cd:fd:37:66:df:3c:39:28:3d:
         f1:d5:02:d9:25:8b:7d:ae:12:2d:ee:82:4b:9e:22:b6:af:73:
         20:d7:15:23:67:92:5a:ca:fb:8e:94:f9:8d:91:ec:76:0e:57:
         25:f3:dd:19:33:88:1c:63:5f:de:7a:5c:55:2e:be:da:9b:97:
         9f:53:5a:9f:df:b9:86:0c:07:71:82:f7:11:b0:f6:f8:6b:2d:
         cc:1d:13:85:b9:dd:5d:de:3f:ef:be:22:1e:f7:1f:25:5f:1c:
         a0:1d:06:6e:93:0e:da:f7:04:10:5c:0b:a5:84:16:91:d3:bd:
         a5:8d:22:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSn3qVpxy25i0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
NmFmZjE1MzUtNWIyMy00MDRkLWFkNjktNDUxMTYyNjQ2ZjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1svPiDHqYzkXZV52ytoxjPucOBBYb6tLNC69
/suzmqL7IEC+BiDlh05JkrYWyrQutkIQASdH4ueUdSDwejHMHaJ4zSqtbZ42lMCq
BOnJF4rfcuOGx812C+7lXuFZ3qs34VwBKWAiJuxeFoWn/uH++DfYrXE8JcZKq+DL
znxWaGJDkO4qCPxdJfFwHXTxTGAGSqpTA0h1o3EjzARvSd8hMKitVJ6PwT3slYrp
ijPu+Ld2J9ad1kcy/L1wTHthL83dOc9pjHWZMLC9F8KN1O+TSX21D0DoYp7kZvFF
EccOfj95j7e71dqvkXggjXvqLdw+9hP6dC48X12LMT5+q9e2HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQxugN7A8TdCT+dMraftzZgNIoPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWRhOWZkMGUtMjU1Mi0z
YTBlLWJhMjgtYTEyNDY2ZDYxZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRHIM5F6i9P6oJ894iOn2zbRmw02eQotSBsNbxadaHqeiTxqDVk7Em3
MPVxRmrYnPsCoPTM1d8uHEx68MxUHhja53xAzoeIz/GlvhTA6KMz8hFFXBUFXyMn
54Zz3QL97gsE+SJfpWojNh86XR3/CSQpowBwYiaSYZrm2IYVyxVPB3g2dVZtHM39
N2bfPDkoPfHVAtkli32uEi3ugkueIravcyDXFSNnklrK+46U+Y2R7HYOVyXz3Rkz
iBxjX956XFUuvtqbl59TWp/fuYYMB3GC9xGw9vhrLcwdE4W53V3eP+++Ih73HyVf
HKAdBm6TDtr3BBBcC6WEFpHTvaWNIlY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:56:36 2025 by rpki-client