Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/de0ff785-dd97-30be-81b9-8447796afc11.roa
File:                     de0ff785-dd97-30be-81b9-8447796afc11.roa (raw, json)
Hash identifier:          vPN+U9ThyNZFATWiE/ieyJiWa71Re++YmeCV3FQ8uiI=
Subject key identifier:   6D:D4:C6:FC:9A:AC:3E:05:36:6B:77:2C:10:DC:55:87:4C:9D:DA:7F
Certificate issuer:       /CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
Certificate serial:       010D0C9F4328584BB45D1121F3C1CEFCD4316700
Authority key identifier: A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/de0ff785-dd97-30be-81b9-8447796afc11.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     25956
IP address blocks:        136.175.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:11:21:f3:c1:ce:fc:d4:31:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=18ede096-2df5-4cf9-ae4b-56e76401c71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:ef:05:92:02:d8:95:e4:9a:d0:5c:64:9c:
                    9b:72:c6:be:13:d6:b3:51:94:57:04:9b:fe:aa:0c:
                    a2:fd:a7:19:e7:80:61:a0:1f:0a:ef:8e:ad:e0:1a:
                    b5:dc:ae:79:a0:28:7e:1b:b5:ef:b7:62:f1:73:3a:
                    40:bb:fb:9c:22:c6:9c:ae:11:56:66:d5:f4:ad:ee:
                    d6:17:19:41:4a:99:6e:70:29:c3:bf:5d:44:e3:9b:
                    24:26:45:ad:04:70:72:26:24:ef:79:ab:43:eb:29:
                    bc:e8:19:b6:06:6e:28:82:05:55:5f:10:48:dc:49:
                    39:95:9b:93:9c:ab:39:e1:0e:de:40:2d:41:83:7d:
                    20:f9:00:92:3b:97:07:68:ef:2b:f9:5a:51:58:72:
                    a2:53:f2:0c:43:3d:77:c9:0a:3f:24:c8:b0:57:42:
                    e6:d3:18:34:2e:39:4e:d4:90:a2:bc:ff:c8:81:61:
                    69:0c:0e:4b:02:ae:6f:3b:47:3d:45:1d:8c:e3:47:
                    14:8f:80:4d:c7:95:b1:3d:50:00:f0:94:94:6b:7f:
                    77:4a:3d:dd:0f:6d:96:8a:ed:86:c6:4e:38:6c:59:
                    ff:69:b6:c5:d0:48:74:cf:81:70:cb:92:9d:92:2c:
                    6a:0c:20:fb:c6:3e:2d:92:33:29:eb:02:1d:c9:8a:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D4:C6:FC:9A:AC:3E:05:36:6B:77:2C:10:DC:55:87:4C:9D:DA:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/de0ff785-dd97-30be-81b9-8447796afc11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.crl

            X509v3 Authority Key Identifier:
                keyid:A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:93:d4:bf:af:cd:48:65:98:ef:bc:81:b6:2d:d9:ca:61:30:
         91:1f:65:a1:c4:d8:10:8a:46:3c:cf:57:0e:ad:47:02:82:73:
         ea:2f:a1:c1:36:cf:9d:bb:4e:b6:3e:1a:d4:77:4b:f4:ef:2f:
         97:22:79:dd:44:5b:e3:bb:e5:0a:f3:8f:6d:ad:aa:b6:e1:32:
         99:e8:8c:d2:c4:c0:04:57:c6:71:28:19:91:e4:87:71:e8:32:
         d0:0e:71:47:50:95:55:0a:61:0d:b7:a1:a2:28:62:66:5b:85:
         66:48:74:d0:15:3d:0a:2d:87:7d:20:b8:b2:b8:5b:67:ae:e3:
         17:8b:c0:b8:22:9f:28:be:5e:c1:eb:3f:59:a0:36:43:ea:ca:
         68:58:d3:e4:b1:23:e2:54:55:e7:30:db:b0:e1:74:63:76:c3:
         f0:1f:95:8d:91:7d:8f:eb:5d:bb:78:94:3e:b7:bb:15:01:54:
         62:e7:04:d5:fa:d7:02:0a:dc:2c:31:6f:ba:da:6c:90:57:71:
         a3:70:cc:48:9a:e6:ea:9a:f1:ee:74:f6:1a:f6:51:5f:94:ab:
         5a:74:09:4b:8f:c3:f9:56:9f:fd:cb:33:92:65:31:3b:f8:de:
         1f:e1:5c:ed:27:27:41:c8:43:97:41:ed:e6:84:9a:8e:05:5a:
         17:a4:9f:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XREh88HO/NQxZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODFlYWYwNDEtYzlmOS00ZDY3LTgwYzItNDNiZDUxYWY2
Yjg0MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
MThlZGUwOTYtMmRmNS00Y2Y5LWFlNGItNTZlNzY0MDFjNzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQLvBZIC2JXkmtBcZJybcsa+E9azUZRXBJv+
qgyi/acZ54BhoB8K746t4Bq13K55oCh+G7Xvt2LxczpAu/ucIsacrhFWZtX0re7W
FxlBSplucCnDv11E45skJkWtBHByJiTveatD6ym86Bm2Bm4oggVVXxBI3Ek5lZuT
nKs54Q7eQC1Bg30g+QCSO5cHaO8r+VpRWHKiU/IMQz13yQo/JMiwV0Lm0xg0LjlO
1JCivP/IgWFpDA5LAq5vO0c9RR2M40cUj4BNx5WxPVAA8JSUa393Sj3dD22Wiu2G
xk44bFn/abbF0Eh0z4Fwy5KdkixqDCD7xj4tkjMp6wIdyYqrXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3UxvyarD4FNmt3LBDcVYdMndp/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MWVh
ZjA0MS1jOWY5LTRkNjctODBjMi00M2JkNTFhZjZiODQvZGUwZmY3ODUtZGQ5Ny0z
MGJlLTgxYjktODQ0Nzc5NmFmYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODFlYWYwNDEtYzlmOS00ZDY3LTgw
YzItNDNiZDUxYWY2Yjg0LzgxZWFmMDQxLWM5ZjktNGQ2Ny04MGMyLTQzYmQ1MWFm
NmI4NC5jcmwwHwYDVR0jBBgwFoAUodwp4zDCL36n2KBlxEhPWcVXBkQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84MWVhZjA0MS1jOWY5LTRkNjctODBjMi00M2Jk
NTFhZjZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK+NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCT1L+vzUhlmO+8gbYt2cphMJEfZaHE2BCKRjzPVw6tRwKCc+ovocE2
z527TrY+GtR3S/TvL5cied1EW+O75Qrzj22tqrbhMpnojNLEwARXxnEoGZHkh3Ho
MtAOcUdQlVUKYQ23oaIoYmZbhWZIdNAVPQoth30guLK4W2eu4xeLwLginyi+XsHr
P1mgNkPqymhY0+SxI+JUVecw27DhdGN2w/AflY2RfY/rXbt4lD63uxUBVGLnBNX6
1wIK3Cwxb7rabJBXcaNwzEia5uqa8e509hr2UV+Uq1p0CUuPw/lWn/3LM5JlMTv4
3h/hXO0nJ0HIQ5dB7eaEmo4FWhekn9g=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:15:08 2025 by rpki-client