Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/94ada8a2-d242-3e77-b6bf-30253dfb6125.roa
File:                     94ada8a2-d242-3e77-b6bf-30253dfb6125.roa (raw, json)
Hash identifier:          7W6CHc1jAXxsV2GfeXwnySLj2Z1QBmC1WPxHzXp3OKs=
Subject key identifier:   87:A0:EF:76:86:E7:19:77:42:5F:AD:7D:6E:8A:94:0D:F7:8F:32:B5
Certificate issuer:       /CN=c1543a00-25db-43b0-8b17-26161baf1539
Certificate serial:       010D0C9F4328584AA42B7FC904A9FFCC641994C0
Authority key identifier: 31:B9:83:72:F2:5B:11:99:03:9E:EA:08:BE:5F:DD:55:CD:9D:21:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/94ada8a2-d242-3e77-b6bf-30253dfb6125.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     54815
IP address blocks:        216.230.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/c1543a00-25db-43b0-8b17-26161baf1539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/c1543a00-25db-43b0-8b17-26161baf1539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7f:c9:04:a9:ff:cc:64:19:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1543a00-25db-43b0-8b17-26161baf1539
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=27e44454-b0d1-40b3-a480-5b70d0973cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:08:d8:11:c0:32:9f:3d:1f:c9:c4:ea:d5:
                    b6:81:19:cb:cd:22:f3:e1:f0:5d:26:1d:cd:e4:28:
                    a8:17:41:09:bf:db:7f:bb:a6:51:ed:c7:71:df:d0:
                    32:24:0b:81:d8:20:35:ed:c3:68:1b:d2:be:0a:d9:
                    dc:38:a4:bc:bd:aa:cf:7d:30:fe:21:57:1c:69:22:
                    aa:73:2b:a1:b4:ae:58:0e:48:1f:e9:e5:42:d5:50:
                    7a:1a:88:6a:6e:84:c1:87:62:4a:45:5c:51:c9:19:
                    78:5d:9b:20:8f:90:6f:30:d4:a6:7e:47:7b:46:19:
                    3c:c5:48:65:13:66:34:82:35:c8:94:61:d9:51:2e:
                    c6:c2:ff:92:7b:54:9d:74:1d:05:8d:6f:90:78:91:
                    01:1b:11:ef:23:94:cd:8f:ad:0a:bb:4c:55:92:64:
                    a4:43:2e:f9:7a:39:4d:22:16:9f:3c:a2:34:99:b5:
                    72:44:31:50:b6:b8:49:3e:c3:da:09:02:95:8b:7f:
                    cb:b3:cd:e3:9f:8f:85:e5:d5:91:8f:f5:40:41:13:
                    43:2a:67:81:ac:06:ff:8a:57:5d:35:cc:e1:10:16:
                    b7:39:d1:e4:7a:0a:0e:23:36:92:6a:11:6d:99:89:
                    2a:63:63:ff:c1:db:bc:ea:f4:5d:f7:15:e9:e2:54:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A0:EF:76:86:E7:19:77:42:5F:AD:7D:6E:8A:94:0D:F7:8F:32:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/94ada8a2-d242-3e77-b6bf-30253dfb6125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/c1543a00-25db-43b0-8b17-26161baf1539.crl

            X509v3 Authority Key Identifier:
                keyid:31:B9:83:72:F2:5B:11:99:03:9E:EA:08:BE:5F:DD:55:CD:9D:21:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:5c:b9:13:7f:06:a8:59:7d:c7:e0:76:a1:84:44:ff:e4:37:
         a4:2b:cf:ee:3f:ba:88:17:1d:6f:19:19:3d:75:65:0c:36:19:
         f6:4b:85:c5:00:9a:ab:25:c3:5d:91:1c:7f:7a:03:80:84:d0:
         85:58:f9:a1:63:e6:93:5f:10:83:4a:0d:87:35:4b:4c:6d:be:
         f0:0b:ca:8d:2c:51:c2:dc:6d:33:67:5e:b0:d5:e9:ef:a6:11:
         91:b4:4a:4b:ba:13:19:ef:29:2f:ca:56:24:62:9e:cc:19:8f:
         d9:47:37:4f:29:e3:7e:95:5e:ea:9b:12:66:9d:d6:81:23:81:
         0e:4e:3a:2d:50:de:fe:11:1f:10:f8:a2:4e:02:f6:ea:8d:98:
         53:5a:5e:23:40:24:b8:6f:72:57:d2:ac:92:6c:c1:ff:aa:70:
         6c:c3:36:92:24:89:6c:57:5c:39:8f:34:c7:9c:05:4b:9e:07:
         d6:7a:b1:d4:38:bd:ec:26:d6:61:b0:47:bb:77:b3:42:67:42:
         6c:97:56:ef:c0:9b:48:19:a1:5e:ca:c9:9c:ec:08:8f:c6:17:
         8b:8a:ce:13:48:fd:97:94:f2:b2:bb:4d:9d:4d:e4:d6:16:98:
         22:60:0c:ba:9d:9c:7a:07:c2:55:fb:dd:32:66:16:c8:67:eb:
         b1:d2:39:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3/JBKn/zGQZlMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzE1NDNhMDAtMjVkYi00M2IwLThiMTctMjYxNjFiYWYx
NTM5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
MjdlNDQ0NTQtYjBkMS00MGIzLWE0ODAtNWI3MGQwOTczY2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxQI2BHAMp89H8nE6tW2gRnLzSLz4fBdJh3N
5CioF0EJv9t/u6ZR7cdx39AyJAuB2CA17cNoG9K+CtncOKS8varPfTD+IVccaSKq
cyuhtK5YDkgf6eVC1VB6GohqboTBh2JKRVxRyRl4XZsgj5BvMNSmfkd7Rhk8xUhl
E2Y0gjXIlGHZUS7Gwv+Se1SddB0FjW+QeJEBGxHvI5TNj60Ku0xVkmSkQy75ejlN
IhafPKI0mbVyRDFQtrhJPsPaCQKVi3/Ls83jn4+F5dWRj/VAQRNDKmeBrAb/ildd
NczhEBa3OdHkegoOIzaSahFtmYkqY2P/wdu86vRd9xXp4lQtdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIeg73aG5xl3Ql+tfW6KlA33jzK1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMTU0
M2EwMC0yNWRiLTQzYjAtOGIxNy0yNjE2MWJhZjE1MzkvOTRhZGE4YTItZDI0Mi0z
ZTc3LWI2YmYtMzAyNTNkZmI2MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzE1NDNhMDAtMjVkYi00M2IwLThi
MTctMjYxNjFiYWYxNTM5L2MxNTQzYTAwLTI1ZGItNDNiMC04YjE3LTI2MTYxYmFm
MTUzOS5jcmwwHwYDVR0jBBgwFoAUMbmDcvJbEZkDnuoIvl/dVc2dId8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMTU0M2EwMC0yNWRiLTQzYjAtOGIxNy0yNjE2
MWJhZjE1MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5cuRN/BqhZfcfgdqGERP/kN6Qrz+4/uogXHW8ZGT11ZQw2GfZLhcUA
mqslw12RHH96A4CE0IVY+aFj5pNfEINKDYc1S0xtvvALyo0sUcLcbTNnXrDV6e+m
EZG0Sku6ExnvKS/KViRinswZj9lHN08p436VXuqbEmad1oEjgQ5OOi1Q3v4RHxD4
ok4C9uqNmFNaXiNAJLhvclfSrJJswf+qcGzDNpIkiWxXXDmPNMecBUueB9Z6sdQ4
vewm1mGwR7t3s0JnQmyXVu/Am0gZoV7KyZzsCI/GF4uKzhNI/ZeU8rK7TZ1N5NYW
mCJgDLqdnHoHwlX73TJmFshn67HSOVc=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:14 2025 by rpki-client