Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
File:                     b08285ee-0972-329c-81d0-7964b995c67b.roa (raw, json)
Hash identifier:          yEUOWLEwQCF6i1pDrB/0gk02Gi/CcSnj/rNocDEsqkY=
Subject key identifier:   3F:95:8E:AA:0B:B0:13:1F:54:6D:F3:E5:24:11:94:A7:12:0D:0C:B5
Certificate issuer:       /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Certificate serial:       010D0C9F4328584AE1968BD23CB531DEBE81AE00
Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     376
IP address blocks:        206.167.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:8b:d2:3c:b5:31:de:be:81:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=55ef8514-d66a-42fb-9370-8aac336889ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:0a:4a:46:75:6e:b4:9f:bd:1a:7b:a0:88:
                    f3:03:7b:a0:e2:7f:ff:b6:6f:2b:95:d7:55:60:c1:
                    ee:cf:82:5b:e8:df:f3:30:01:bf:06:cf:8c:59:81:
                    59:89:34:3b:5f:c8:e4:31:54:b8:9e:31:9f:d1:07:
                    5b:1f:bb:de:bb:9f:bc:66:f4:43:b4:72:3f:95:2f:
                    a0:ab:2a:4c:ae:f5:ae:97:db:2e:0b:8b:1f:24:f9:
                    a8:31:c4:89:80:c5:13:8a:35:19:9f:19:b2:25:67:
                    f3:52:4c:d5:50:90:1a:ce:a1:97:08:d8:b4:af:da:
                    0c:68:b4:3c:ad:aa:8d:48:5d:b0:0e:5d:5b:70:88:
                    82:50:36:96:4e:69:b2:22:65:ec:0e:55:40:cf:72:
                    b8:63:ec:f8:dd:3b:a3:73:f4:8a:43:4a:48:be:96:
                    cb:c9:9c:ec:b8:63:d2:99:62:91:a4:55:df:45:9d:
                    c5:ae:39:d6:42:90:cf:44:f8:10:f3:3c:35:ff:63:
                    3f:e3:93:0e:f8:5b:67:89:e4:a4:eb:d0:4f:b5:bb:
                    58:ff:c7:47:68:3d:37:56:93:d1:b2:24:26:42:30:
                    25:73:f7:7c:da:85:20:ad:69:37:fe:10:d4:51:23:
                    15:72:6a:f7:95:0e:1e:6a:45:5d:b4:2c:44:68:92:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:95:8E:AA:0B:B0:13:1F:54:6D:F3:E5:24:11:94:A7:12:0D:0C:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ee:50:73:f2:d6:95:6a:4b:0f:47:58:f9:1f:3a:89:ef:41:
         46:4a:96:be:3a:ef:e1:52:20:36:f0:26:ae:53:fe:a2:d7:86:
         e4:eb:81:6f:52:cb:e7:49:e1:1f:f9:be:b6:fb:bc:19:aa:63:
         94:06:74:27:3b:18:db:7b:be:db:76:45:c6:ac:39:bf:d3:bb:
         09:59:b0:c1:9a:14:78:d0:28:0c:d2:05:e4:25:6a:29:61:6d:
         c6:e6:17:5a:79:cd:cf:54:16:12:53:ae:ac:c1:6f:89:dc:77:
         18:35:ca:c9:1a:ae:b6:6c:83:f8:a2:38:ec:39:75:2f:ec:36:
         52:98:e7:57:a7:ce:18:2a:7d:8e:4a:85:ac:81:bb:2d:b0:0c:
         77:52:4f:6e:5a:ff:a0:f6:f7:c2:c5:7f:e3:9a:28:d1:d5:db:
         52:c2:79:ff:9d:b4:5a:b1:6c:de:29:9e:fe:34:4d:99:61:00:
         6a:63:6e:8a:37:cb:8a:4f:f4:35:b4:91:88:84:fe:c2:eb:ad:
         e8:32:f6:c6:36:52:df:23:ff:38:41:8a:50:aa:8b:64:c7:e3:
         fb:26:e9:29:d7:09:4e:ae:1a:b2:29:d7:1b:3d:b2:54:ac:36:
         ec:dc:63:70:18:3a:6b:2d:e4:18:d5:06:69:65:8d:78:06:95:
         f2:76:28:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlovSPLUx3r6BrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjViMmFhMDMtZGU1YS00N2E5LWEzODEtY2MyYjI3NDUx
YzI4MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
NTVlZjg1MTQtZDY2YS00MmZiLTkzNzAtOGFhYzMzNjg4OWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCYKSkZ1brSfvRp7oIjzA3ug4n//tm8rlddV
YMHuz4Jb6N/zMAG/Bs+MWYFZiTQ7X8jkMVS4njGf0QdbH7veu5+8ZvRDtHI/lS+g
qypMrvWul9suC4sfJPmoMcSJgMUTijUZnxmyJWfzUkzVUJAazqGXCNi0r9oMaLQ8
raqNSF2wDl1bcIiCUDaWTmmyImXsDlVAz3K4Y+z43Tujc/SKQ0pIvpbLyZzsuGPS
mWKRpFXfRZ3FrjnWQpDPRPgQ8zw1/2M/45MO+FtnieSk69BPtbtY/8dHaD03VpPR
siQmQjAlc/d82oUgrWk3/hDUUSMVcmr3lQ4eakVdtCxEaJLCVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+VjqoLsBMfVG3z5SQRlKcSDQy1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIy
YWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJiMjc0NTFjMjgvYjA4Mjg1ZWUtMDk3Mi0z
MjljLTgxZDAtNzk2NGI5OTVjNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjViMmFhMDMtZGU1YS00N2E5LWEz
ODEtY2MyYjI3NDUxYzI4LzI1YjJhYTAzLWRlNWEtNDdhOS1hMzgxLWNjMmIyNzQ1
MWMyOC5jcmwwHwYDVR0jBBgwFoAUWwvbffpjXBHQ2Dq7nfM1nr6lKw4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIyYWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJi
Mjc0NTFjMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfuUHPy1pVqSw9HWPkfOonvQUZKlr467+FSIDbwJq5T/qLXhuTrgW9S
y+dJ4R/5vrb7vBmqY5QGdCc7GNt7vtt2RcasOb/TuwlZsMGaFHjQKAzSBeQlailh
bcbmF1p5zc9UFhJTrqzBb4ncdxg1yskarrZsg/iiOOw5dS/sNlKY51enzhgqfY5K
hayBuy2wDHdST25a/6D298LFf+OaKNHV21LCef+dtFqxbN4pnv40TZlhAGpjboo3
y4pP9DW0kYiE/sLrregy9sY2Ut8j/zhBilCqi2TH4/sm6SnXCU6uGrIp1xs9slSs
NuzcY3AYOmst5BjVBmlljXgGlfJ2KAs=
-----END CERTIFICATE-----
Generated at Mon Aug 25 06:18:52 2025 by rpki-client