Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8d55b4b6-f526-3509-a882-1b4697078d59.roa
File:                     8d55b4b6-f526-3509-a882-1b4697078d59.roa (raw, json)
Hash identifier:          s/WFB23e3ufsNiJN+QqjaxHmGEq2BH5CCUwR7hSJ4dQ=
Subject key identifier:   AC:46:0E:63:4E:13:64:B9:BB:F5:AF:1B:C7:07:F4:73:83:58:55:3C
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584B398709713C3ECAFCE98E5200
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8d55b4b6-f526-3509-a882-1b4697078d59.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     32592
IP address blocks:        204.14.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:09:71:3c:3e:ca:fc:e9:8e:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=c81f7a18-4e86-40c1-b76c-2b92b48f57d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c7:b8:3e:cb:10:b1:78:f6:58:ed:e9:5a:e7:
                    19:40:95:f5:46:82:0e:0c:6e:50:a4:3c:7a:1b:4d:
                    24:8e:31:ee:88:50:5e:d0:5c:e9:4d:74:1b:3f:3b:
                    ea:00:4c:c0:5c:9a:18:ec:0e:8c:0b:48:e2:4a:a2:
                    65:dc:17:6c:93:1c:38:dd:ba:1d:02:8e:fc:04:28:
                    8a:66:6f:97:e8:bb:cd:76:0d:4c:2a:72:35:a5:10:
                    28:78:24:83:41:e5:a6:53:18:2e:eb:e9:14:ec:e6:
                    3d:eb:8c:f2:5b:cd:f1:fa:d8:a1:e6:7a:a5:a5:da:
                    86:c9:b0:c9:5e:e3:6f:7f:e5:23:c5:89:d8:6c:38:
                    9b:3d:c8:13:45:aa:c0:29:b3:61:c1:68:fa:3d:23:
                    e4:a7:85:f9:bf:8f:1c:f8:8a:88:7c:75:36:99:7d:
                    8b:01:ef:e2:b3:0a:b0:21:c2:26:1e:bc:b2:78:c4:
                    c6:28:34:7d:b9:26:19:f9:88:d0:07:b0:f5:c3:ce:
                    90:78:ae:96:32:5b:f9:60:73:b0:7e:70:54:cb:11:
                    d4:3b:fa:5f:81:8b:f6:cb:18:c6:7b:9d:43:04:be:
                    a3:67:7f:03:63:70:1a:8d:53:89:1f:01:e4:03:90:
                    47:c4:20:28:5c:66:09:bb:5f:bc:5a:52:7c:a1:1b:
                    3f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:46:0E:63:4E:13:64:B9:BB:F5:AF:1B:C7:07:F4:73:83:58:55:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8d55b4b6-f526-3509-a882-1b4697078d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:ac:fd:72:2f:e1:cb:c8:a4:cf:7f:74:84:3c:cb:79:46:
         bb:32:2c:d3:6b:63:fa:e0:15:fc:d1:05:fb:3a:ba:af:cf:96:
         c1:7f:d6:ec:e1:d6:6c:14:a5:e5:3b:73:af:8d:2c:c4:ed:65:
         79:cc:dc:36:0a:00:55:31:db:81:6b:10:f0:07:1a:11:c6:c1:
         22:c5:78:85:df:69:28:9c:33:89:26:f8:e1:0c:1d:9c:1a:2e:
         ef:4f:7e:a9:cf:48:5d:8a:68:3d:40:d5:ca:9d:1b:dd:a1:9c:
         6e:5d:d6:c9:e0:1b:7b:a5:76:16:6e:48:2c:c3:43:94:74:de:
         a7:25:c9:56:76:9a:ae:ee:df:8f:76:5b:38:ea:d3:73:17:1e:
         a7:45:21:fb:9e:2a:99:88:38:6a:21:4f:86:d7:a1:6e:d8:28:
         64:98:97:c5:3e:30:b5:84:6f:f5:a0:60:aa:19:63:97:b8:3f:
         f6:11:09:57:ad:81:ee:67:db:91:7a:50:ba:3b:98:2d:6a:9a:
         e9:f8:ce:80:01:de:08:65:38:3c:91:1f:1b:33:6a:d1:be:b3:
         ec:09:8a:f1:4b:f1:7a:63:cd:ea:17:7f:3a:12:64:59:cb:c1:
         68:97:28:e6:c8:18:9e:e4:1d:d1:1f:33:36:81:67:1c:ec:dc:
         f3:b8:1c:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwlxPD7K/OmOUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm
MzQyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk
YzgxZjdhMTgtNGU4Ni00MGMxLWI3NmMtMmI5MmI0OGY1N2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8e4PssQsXj2WO3pWucZQJX1RoIODG5QpDx6
G00kjjHuiFBe0FzpTXQbPzvqAEzAXJoY7A6MC0jiSqJl3Bdskxw43bodAo78BCiK
Zm+X6LvNdg1MKnI1pRAoeCSDQeWmUxgu6+kU7OY964zyW83x+tih5nqlpdqGybDJ
XuNvf+UjxYnYbDibPcgTRarAKbNhwWj6PSPkp4X5v48c+IqIfHU2mX2LAe/iswqw
IcImHryyeMTGKDR9uSYZ+YjQB7D1w86QeK6WMlv5YHOwfnBUyxHUO/pfgYv2yxjG
e51DBL6jZ38DY3AajVOJHwHkA5BHxCAoXGYJu1+8WlJ8oRs/xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKxGDmNOE2S5u/WvG8cH9HODWFU8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0
MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvOGQ1NWI0YjYtZjUyNi0z
NTA5LWE4ODItMWI0Njk3MDc4ZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi
MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy
ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz
YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFO2rP1yL+HLyKTPf3SEPMt5RrsyLNNrY/rgFfzRBfs6uq/PlsF/1uzh
1mwUpeU7c6+NLMTtZXnM3DYKAFUx24FrEPAHGhHGwSLFeIXfaSicM4km+OEMHZwa
Lu9PfqnPSF2KaD1A1cqdG92hnG5d1sngG3uldhZuSCzDQ5R03qclyVZ2mq7u3492
Wzjq03MXHqdFIfueKpmIOGohT4bXoW7YKGSYl8U+MLWEb/WgYKoZY5e4P/YRCVet
ge5n25F6ULo7mC1qmun4zoAB3ghlODyRHxszatG+s+wJivFL8XpjzeoXfzoSZFnL
wWiXKObIGJ7kHdEfMzaBZxzs3PO4HOk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:21:57 2025 by rpki-client