Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa
File:                     a6654227-7e4a-384e-aaf7-165cd7a07f42.roa (raw, json)
Hash identifier:          OMfGi1JHVOTGg8kAYVIzuWirQnuGIlaB7z+Gm8+MJ80=
Subject key identifier:   EA:FB:5F:DD:65:3F:5C:76:2E:29:F5:11:E9:67:CC:A2:AB:28:48:79
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584B8EACF357025FDCA79D83F200
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     8014
IP address blocks:        204.236.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:f3:57:02:5f:dc:a7:9d:83:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=5fc181c3-bd52-46c5-a64c-a11962c737fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c7:cf:a2:c8:2c:40:01:87:65:5d:13:ed:96:
                    f0:57:bc:4b:4c:c2:60:23:8d:f7:46:58:a8:bb:d8:
                    2b:cc:eb:6f:60:ba:11:20:dc:33:70:dd:ed:53:ef:
                    1a:53:02:a9:24:85:cb:04:c1:22:17:ca:b7:a8:fc:
                    5c:41:fe:75:77:35:7c:11:a8:e8:7b:d4:74:54:fa:
                    03:7a:23:d3:2f:bd:0a:e5:24:07:31:f7:a9:da:23:
                    fa:d0:67:7a:63:9f:c3:dd:c1:41:2f:47:45:d6:6b:
                    dd:1f:f0:4a:8f:77:7b:73:d6:73:aa:d8:b3:cf:5b:
                    33:b0:84:7c:bc:cb:09:c4:75:f1:9e:c2:70:d3:34:
                    e5:e4:76:09:31:bb:58:12:6c:30:ea:8b:7e:67:f6:
                    61:b1:88:e8:bb:53:aa:dc:87:9c:b2:f4:f0:5c:a0:
                    7d:b4:a2:60:cb:07:c4:53:8f:b1:28:0f:46:31:81:
                    6a:ab:f9:39:04:03:ad:ff:ed:e0:d4:82:38:21:35:
                    e3:c8:a7:28:be:db:dd:36:ce:0d:d5:e0:d4:80:24:
                    20:fd:0d:31:7b:58:87:96:d7:9d:41:5f:4e:c1:3d:
                    5f:bf:40:d9:37:ec:27:94:10:cc:71:6d:96:9d:26:
                    1d:3a:6d:9e:4d:4c:e1:d9:b9:01:d3:5d:21:d1:66:
                    4e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FB:5F:DD:65:3F:5C:76:2E:29:F5:11:E9:67:CC:A2:AB:28:48:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2d:84:eb:6d:84:be:df:25:50:49:24:5c:fa:92:17:e0:5a:
         97:bc:a2:1f:9b:a5:40:45:68:3a:21:24:d2:a9:55:93:23:6d:
         22:d4:17:e7:99:3e:4b:8b:4d:28:a8:2e:27:7e:45:8a:04:4a:
         37:c1:56:3d:45:bb:ef:76:fa:8e:9a:24:54:b0:de:b6:e8:21:
         6f:5d:7e:da:38:e3:3c:85:44:d1:7e:c4:7c:8e:16:9c:9d:9e:
         53:6f:c3:6c:2f:60:63:b0:c6:00:19:98:b0:48:57:27:2b:32:
         f9:49:09:59:ca:de:d2:0f:88:18:d3:d6:6c:90:17:bf:97:f0:
         86:3f:7c:b4:6d:b4:5c:c2:48:b5:58:c8:f3:b9:44:d5:c1:84:
         e3:2f:81:42:9e:cb:5f:ee:f9:79:47:4b:fd:ad:8a:29:3e:ba:
         22:ac:0f:2d:25:57:29:3b:69:8d:42:91:09:66:fc:b5:29:b2:
         8f:5a:23:b9:d6:8f:52:3f:da:c4:ef:9d:80:86:71:02:6e:07:
         ba:2e:89:f3:bc:36:82:59:bb:07:01:6d:7c:cd:9f:f3:50:a1:
         9b:30:b1:e2:84:b7:0a:55:81:6e:08:58:1c:73:de:cc:e9:1b:
         d9:6d:87:7a:88:09:34:2d:ff:3c:72:31:00:f4:41:7f:5c:9d:
         53:dd:ea:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPNXAl/cp52D8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz
Zjc1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
NWZjMTgxYzMtYmQ1Mi00NmM1LWE2NGMtYTExOTYyYzczN2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsfPosgsQAGHZV0T7ZbwV7xLTMJgI433Rlio
u9grzOtvYLoRINwzcN3tU+8aUwKpJIXLBMEiF8q3qPxcQf51dzV8Eajoe9R0VPoD
eiPTL70K5SQHMfep2iP60Gd6Y5/D3cFBL0dF1mvdH/BKj3d7c9Zzqtizz1szsIR8
vMsJxHXxnsJw0zTl5HYJMbtYEmww6ot+Z/ZhsYjou1Oq3IecsvTwXKB9tKJgywfE
U4+xKA9GMYFqq/k5BAOt/+3g1II4ITXjyKcovtvdNs4N1eDUgCQg/Q0xe1iHlted
QV9OwT1fv0DZN+wnlBDMcW2WnSYdOm2eTUzh2bkB010h0WZOVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOr7X91lP1x2Lin1EelnzKKrKEh5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk
MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvYTY2NTQyMjctN2U0YS0z
ODRlLWFhZjctMTY1Y2Q3YTA3ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj
NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5
M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm
Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAthOtthL7fJVBJJFz6khfgWpe8oh+bpUBFaDohJNKpVZMjbSLUF+eZ
PkuLTSioLid+RYoESjfBVj1Fu+92+o6aJFSw3rboIW9dfto44zyFRNF+xHyOFpyd
nlNvw2wvYGOwxgAZmLBIVycrMvlJCVnK3tIPiBjT1myQF7+X8IY/fLRttFzCSLVY
yPO5RNXBhOMvgUKey1/u+XlHS/2tiik+uiKsDy0lVyk7aY1CkQlm/LUpso9aI7nW
j1I/2sTvnYCGcQJuB7ouifO8NoJZuwcBbXzNn/NQoZswseKEtwpVgW4IWBxz3szp
G9lth3qICTQt/zxyMQD0QX9cnVPd6mg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:22 2025 by rpki-client