Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e25d4144-6b60-358f-b27f-52ffa413754a.roa
File:                     e25d4144-6b60-358f-b27f-52ffa413754a.roa (raw, json)
Hash identifier:          Wh2wD4v0veAXXcBcdNappF/ZcU14U9Qt7+MNxE+aOns=
Subject key identifier:   70:CB:D7:31:5B:EF:26:96:D8:62:D1:89:CB:BA:75:2A:39:A0:9C:6A
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB0037D4D48BC6CEDDDCA00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e25d4144-6b60-358f-b27f-52ffa413754a.roa
Signing time:             Sun 03 Aug 2025 02:35:46 +0000
ROA not before:           Sun 03 Aug 2025 02:35:46 +0000
ROA not after:            Sat 01 Nov 2025 02:35:46 +0000
asID:                     53813
IP address blocks:        165.225.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:03:7d:4d:48:bc:6c:ed:dd:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:46 2025 GMT
            Not After : Nov  1 02:35:46 2025 GMT
        Subject: CN=4d3d59c4-ee83-4a43-bbd4-c4f921c37304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:69:1d:5a:a4:e4:25:06:bc:a3:a4:32:48:fe:
                    61:57:b1:de:59:f5:62:92:54:ef:88:f9:ef:df:1a:
                    28:d1:7e:b9:3d:c4:9d:d0:4c:49:5c:05:4c:51:26:
                    91:4a:ed:47:bc:d4:30:dd:72:d7:c3:0e:4f:cb:e5:
                    20:f9:b5:85:8f:ee:b5:1f:39:2a:4e:1f:dc:db:dd:
                    91:e7:3e:bc:c3:17:3a:b0:e1:28:c0:82:d6:59:6a:
                    22:bf:4d:97:b0:48:c3:cb:f6:80:56:51:51:f7:40:
                    c9:66:09:22:fe:0c:a1:3d:43:0a:b6:65:60:77:5c:
                    e5:14:8c:83:9a:38:f5:aa:84:b3:2c:20:16:2c:70:
                    55:57:4e:9f:e8:ca:33:89:0f:16:4e:be:b6:3a:88:
                    b0:d3:ad:b1:ca:8a:8b:95:22:ce:14:b1:6f:10:3f:
                    96:68:40:a2:9a:1c:db:42:5a:d4:04:33:51:fc:d6:
                    b7:00:30:1c:be:96:1b:14:55:f1:72:76:77:a0:12:
                    54:83:d9:7f:46:39:42:4b:1c:ad:61:0b:14:f7:f9:
                    ee:32:21:e0:0e:88:57:59:0a:1f:ec:82:c9:da:d0:
                    5b:1a:a5:1c:e5:90:ef:8e:c0:53:c8:28:2b:bb:17:
                    85:f4:01:41:0f:e7:96:03:f7:90:f8:c3:cf:2e:9b:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CB:D7:31:5B:EF:26:96:D8:62:D1:89:CB:BA:75:2A:39:A0:9C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e25d4144-6b60-358f-b27f-52ffa413754a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f1:3b:32:2f:65:f9:02:dc:5b:f7:6a:6b:c0:b8:d3:90:11:
         22:a1:c3:47:de:97:8b:44:11:73:11:6d:09:e8:45:35:db:83:
         62:ec:44:63:c0:ab:1d:36:10:e6:d5:35:04:eb:73:db:06:45:
         75:78:d7:3a:23:45:a8:1f:81:89:c1:1f:c1:71:91:07:9d:a3:
         d8:15:32:f8:25:d5:32:b2:a4:c8:d3:60:71:30:26:75:7e:c9:
         83:bb:eb:0a:44:b5:2f:ac:3c:db:5b:76:f3:7d:a5:72:1b:01:
         10:83:c3:35:1b:5f:00:93:77:f6:76:c2:e9:48:5e:15:2e:e3:
         6a:9e:8a:f8:4d:62:da:4e:94:1e:1c:05:c5:96:ab:a1:a2:00:
         65:bb:8a:73:96:7f:cd:33:fb:c6:c2:9c:d8:28:25:dd:00:d3:
         b7:7b:7a:c0:39:96:d6:c8:bf:8c:7e:fc:75:73:5f:5f:37:e0:
         1c:52:84:70:ab:ef:97:8f:aa:a5:79:53:10:bf:e2:09:e5:8b:
         9c:09:46:68:bd:9f:16:7b:36:48:d8:e6:35:cf:c2:fd:95:fd:
         4f:3f:f2:21:93:52:fc:aa:c4:37:da:f1:1f:d0:37:20:80:76:
         76:4f:cc:96:35:12:fc:6e:81:3d:82:14:51:ff:53:98:57:cd:
         2b:50:01:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6sAN9TUi8bO3dygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDgwMzAyMzU0NloXDTI1MTEwMTAyMzU0NlowLzEtMCsGA1UEAxMk
NGQzZDU5YzQtZWU4My00YTQzLWJiZDQtYzRmOTIxYzM3MzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGkdWqTkJQa8o6QySP5hV7HeWfViklTviPnv
3xoo0X65PcSd0ExJXAVMUSaRSu1HvNQw3XLXww5Py+Ug+bWFj+61HzkqTh/c292R
5z68wxc6sOEowILWWWoiv02XsEjDy/aAVlFR90DJZgki/gyhPUMKtmVgd1zlFIyD
mjj1qoSzLCAWLHBVV06f6MoziQ8WTr62Ooiw062xyoqLlSLOFLFvED+WaECimhzb
QlrUBDNR/Na3ADAcvpYbFFXxcnZ3oBJUg9l/RjlCSxytYQsU9/nuMiHgDohXWQof
7ILJ2tBbGqUc5ZDvjsBTyCgruxeF9AFBD+eWA/eQ+MPPLpvyhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHDL1zFb7yaW2GLRicu6dSo5oJxqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTI1ZDQxNDQtNmI2MC0z
NThmLWIyN2YtNTJmZmE0MTM3NTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeFoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHxOzIvZfkC3Fv3amvAuNOQESKhw0fel4tEEXMRbQnoRTXbg2LsRGPA
qx02EObVNQTrc9sGRXV41zojRagfgYnBH8FxkQedo9gVMvgl1TKypMjTYHEwJnV+
yYO76wpEtS+sPNtbdvN9pXIbARCDwzUbXwCTd/Z2wulIXhUu42qeivhNYtpOlB4c
BcWWq6GiAGW7inOWf80z+8bCnNgoJd0A07d7esA5ltbIv4x+/HVzX1834BxShHCr
75ePqqV5UxC/4gnli5wJRmi9nxZ7NkjY5jXPwv2V/U8/8iGTUvyqxDfa8R/QNyCA
dnZPzJY1EvxugT2CFFH/U5hXzStQAVc=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:44 2025 by rpki-client