Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa
File:                     0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa (raw, json)
Hash identifier:          FkDMr7ELSp8hovwXRN2srvEmX1aYdYGncRC8qsrnEJY=
Subject key identifier:   9D:61:23:82:4F:A5:00:D2:51:7E:7E:41:64:82:7C:B0:53:FA:9B:BF
Certificate issuer:       /CN=a99940f3-ed95-444a-a18b-6d4d902f65bd
Certificate serial:       010D0C9F4328584B88154F7DC4CA9DE0F67110A0
Authority key identifier: 7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa
Signing time:             Wed 15 Oct 2025 16:20:34 +0000
ROA not before:           Wed 15 Oct 2025 16:20:34 +0000
ROA not after:            Tue 13 Jan 2026 17:20:34 +0000
asID:                     33602
IP address blocks:        132.214.0.0/16 maxlen: 16
                          132.214.0.0/17 maxlen: 17
                          132.214.128.0/18 maxlen: 18
                          132.214.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:88:15:4f:7d:c4:ca:9d:e0:f6:71:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a99940f3-ed95-444a-a18b-6d4d902f65bd
        Validity
            Not Before: Oct 15 16:20:34 2025 GMT
            Not After : Jan 13 17:20:34 2026 GMT
        Subject: CN=798425cf-05ee-4133-b197-7ab932c5b20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:24:3d:5d:6c:c5:5e:34:6b:9e:8f:9a:9c:31:
                    2e:3d:37:89:6b:5b:23:22:58:cc:82:0e:4a:b4:0b:
                    db:f3:77:88:93:fe:d6:63:64:1e:c5:e8:2f:fb:92:
                    59:1e:43:12:84:b4:fa:77:4b:2e:e1:0b:89:5a:56:
                    c9:e1:c2:54:3c:d9:6b:38:a9:6a:1b:ff:99:b7:09:
                    5c:37:5d:e1:a8:64:d5:c3:d8:af:53:d2:b8:6c:32:
                    6a:9d:a6:62:46:c9:63:7e:cb:e7:5a:77:80:23:a5:
                    4e:89:e9:94:58:c9:ec:5c:11:20:42:cf:bf:b8:44:
                    2b:03:4e:94:d1:c7:d1:78:41:9c:c3:c9:46:e0:0f:
                    70:fe:83:78:c4:54:6b:6c:49:a9:7a:66:d5:75:9d:
                    45:3c:4d:8c:2d:11:97:ed:bc:1c:aa:e9:57:2c:83:
                    58:88:e9:07:73:b1:d3:1a:8d:3d:1a:7a:fd:8e:eb:
                    19:73:23:d2:d0:6e:85:4e:19:e3:d8:a2:43:f4:8c:
                    ed:ca:67:fe:3c:af:4c:9a:ac:c9:87:59:ac:85:a6:
                    1c:31:2e:54:88:19:bf:e1:d0:aa:6b:82:60:97:51:
                    ad:f1:37:8f:e7:c9:a9:fe:80:41:d6:62:5e:24:db:
                    d8:e0:02:fb:3c:f6:b8:a9:a2:46:5b:5e:27:f5:2f:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:61:23:82:4F:A5:00:D2:51:7E:7E:41:64:82:7C:B0:53:FA:9B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/0ef92f58-c6e6-3660-bea0-c5112bf2babf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd/a99940f3-ed95-444a-a18b-6d4d902f65bd.crl

            X509v3 Authority Key Identifier:
                keyid:7F:9E:C8:8D:B1:5F:32:57:D1:3F:F1:02:1A:28:DA:D6:86:3C:54:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a99940f3-ed95-444a-a18b-6d4d902f65bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.214.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:98:5e:7d:8e:b8:20:ed:e2:cc:37:e2:5a:e5:68:a3:26:
         2e:58:49:b8:a6:08:a5:c0:a0:d4:57:9d:72:cd:0b:f7:04:0a:
         34:df:38:3b:89:64:d8:30:a9:34:dc:9d:78:a6:84:00:8a:57:
         0a:65:12:dd:86:47:ef:ee:58:1e:b2:eb:00:f1:2a:70:51:c3:
         bc:24:46:d2:45:f9:ec:5e:39:83:b0:6a:d3:b0:b4:f7:cb:af:
         bb:27:b6:37:c2:66:bd:f2:ca:0a:a8:2b:81:d1:c3:9d:dc:0e:
         a3:35:55:c4:3e:3a:b7:81:19:04:ba:53:88:c2:f5:d5:5e:72:
         44:e6:37:9a:ad:c3:01:ac:96:2b:93:cb:89:a8:07:79:f3:4d:
         c9:43:b1:8d:4c:66:31:ea:35:bf:51:b6:b8:da:23:d9:a5:52:
         3d:65:13:d4:7c:b0:a8:76:ed:a5:6b:08:e8:ab:a3:78:99:2b:
         ed:11:00:5c:8d:68:e8:fa:45:e3:7d:ee:9d:1d:d6:60:1c:22:
         41:db:0e:f7:93:d0:63:8a:52:e8:66:11:a0:6c:d7:b0:cf:1e:
         22:66:6c:67:2b:b5:d6:5a:5e:8b:20:64:39:26:f9:94:ce:5f:
         13:8b:e4:66:63:db:8c:d9:a9:0e:e0:23:2a:fb:c6:c1:f6:de:
         8c:9d:81:ba
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuIFU99xMqd4PZxEKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTk5OTQwZjMtZWQ5NS00NDRhLWExOGItNmQ0ZDkwMmY2
NWJkMB4XDTI1MTAxNTE2MjAzNFoXDTI2MDExMzE3MjAzNFowLzEtMCsGA1UEAxMk
Nzk4NDI1Y2YtMDVlZS00MTMzLWIxOTctN2FiOTMyYzViMjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiQ9XWzFXjRrno+anDEuPTeJa1sjIljMgg5K
tAvb83eIk/7WY2Qexegv+5JZHkMShLT6d0su4QuJWlbJ4cJUPNlrOKlqG/+Ztwlc
N13hqGTVw9ivU9K4bDJqnaZiRsljfsvnWneAI6VOiemUWMnsXBEgQs+/uEQrA06U
0cfReEGcw8lG4A9w/oN4xFRrbEmpembVdZ1FPE2MLRGX7bwcqulXLINYiOkHc7HT
Go09Gnr9jusZcyPS0G6FThnj2KJD9Iztymf+PK9MmqzJh1mshaYcMS5UiBm/4dCq
a4Jgl1Gt8TeP58mp/oBB1mJeJNvY4AL7PPa4qaJGW14n9S+05QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ1hI4JPpQDSUX5+QWSCfLBT+pu/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTk5
NDBmMy1lZDk1LTQ0NGEtYTE4Yi02ZDRkOTAyZjY1YmQvMGVmOTJmNTgtYzZlNi0z
NjYwLWJlYTAtYzUxMTJiZjJiYWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTk5OTQwZjMtZWQ5NS00NDRhLWEx
OGItNmQ0ZDkwMmY2NWJkL2E5OTk0MGYzLWVkOTUtNDQ0YS1hMThiLTZkNGQ5MDJm
NjViZC5jcmwwHwYDVR0jBBgwFoAUf57IjbFfMlfRP/ECGija1oY8VDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTk5NDBmMy1lZDk1LTQ0NGEtYTE4Yi02ZDRk
OTAyZjY1YmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGoSYXn2OuCDt4sw34lrlaKMmLlhJuKYIpcCg1Fedcs0L9wQKNN84O4lk
2DCpNNydeKaEAIpXCmUS3YZH7+5YHrLrAPEqcFHDvCRG0kX57F45g7Bq07C098uv
uye2N8JmvfLKCqgrgdHDndwOozVVxD46t4EZBLpTiML11V5yROY3mq3DAayWK5PL
iagHefNNyUOxjUxmMeo1v1G2uNoj2aVSPWUT1HywqHbtpWsI6KujeJkr7REAXI1o
6PpF433unR3WYBwiQdsO95PQY4pS6GYRoGzXsM8eImZsZyu11lpeiyBkOSb5lM5f
E4vkZmPbjNmpDuAjKvvGwfbejJ2Bug==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:03:30 2025 by rpki-client