Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8ed845ef-4627-3c5a-ae5c-d8d97298d49d.roa
File:                     8ed845ef-4627-3c5a-ae5c-d8d97298d49d.roa (raw, json)
Hash identifier:          r92ZOaUGLXUq+cNuC33IO6CLXMlqJ2qU5QkYX2ufUj4=
Subject key identifier:   94:C7:6A:11:B3:4B:0B:C4:7A:7E:6A:86:08:08:E6:2B:3C:DD:2E:09
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F4328584BA7CCEBBD4BB46D2819636800
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8ed845ef-4627-3c5a-ae5c-d8d97298d49d.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     5744
IP address blocks:        151.207.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:eb:bd:4b:b4:6d:28:19:63:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=6468211b-582c-4e13-bdf7-0b7ef51fedb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:39:13:42:21:48:3c:ea:e5:c6:15:18:34:
                    1d:90:29:b8:01:a1:9d:2f:0c:35:d0:54:11:21:25:
                    97:c1:49:b1:90:09:9a:fc:b7:a5:2c:1e:48:ab:66:
                    40:5a:9b:e9:ad:83:5e:a3:1d:de:cf:73:33:92:81:
                    80:40:81:d3:14:07:57:75:64:14:f5:22:2f:92:a2:
                    35:c6:93:cd:c2:01:29:97:82:80:38:4d:0a:26:c7:
                    1c:7b:43:03:d5:dd:82:cc:24:7b:1d:a7:f2:73:21:
                    8c:5c:4a:7a:19:6f:fe:28:c3:23:7c:03:e0:92:1e:
                    5c:b6:ab:07:6a:86:39:46:80:25:e9:f6:ef:e4:b9:
                    62:48:f0:6c:84:5b:df:81:84:d7:0e:2c:a4:6a:55:
                    7e:e8:00:ef:28:e8:a8:d7:b7:1c:7c:c1:09:94:0a:
                    40:97:33:1e:f2:03:2a:86:b4:f7:31:d7:ef:85:d8:
                    83:68:58:31:72:b5:97:df:8f:d2:a5:09:c8:10:e2:
                    b0:9d:f2:5d:99:7f:40:56:11:61:d7:8d:90:7f:86:
                    26:4a:38:91:02:e1:18:89:b9:0e:0b:d3:52:50:27:
                    66:87:1a:18:36:cc:96:20:be:5e:94:88:90:9f:15:
                    d7:2f:41:f3:71:f9:ae:4c:92:c5:fd:c0:2d:6b:9c:
                    6a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:6A:11:B3:4B:0B:C4:7A:7E:6A:86:08:08:E6:2B:3C:DD:2E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8ed845ef-4627-3c5a-ae5c-d8d97298d49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:1c:46:55:c8:d3:c7:49:b0:29:f3:70:de:8b:2e:a3:2a:bf:
         08:1f:16:df:ae:f3:18:7c:f9:e1:56:8c:84:51:d1:08:27:d7:
         df:7a:0e:4e:5d:eb:39:a2:e4:72:5f:c3:f7:af:a4:be:9d:2b:
         0b:40:9f:fd:33:7e:a2:79:38:fa:b8:6f:ab:29:71:d0:2f:9c:
         2a:a7:cf:34:cf:c0:89:35:1c:3d:c4:ac:2e:6f:bf:46:82:d2:
         97:41:47:54:61:bb:d6:d3:80:59:7b:a2:c6:f3:17:b1:ab:05:
         d8:9f:6a:5a:36:5e:d1:01:99:f5:be:6b:f2:7c:b3:ef:60:a8:
         71:3c:77:19:5a:b3:76:98:d4:76:2b:37:3a:15:02:4b:e6:65:
         99:e0:47:0e:9d:8a:fc:da:0c:5f:80:13:32:6d:30:7a:24:7e:
         65:8d:8d:91:ea:4d:fc:a9:cf:27:57:39:d5:d4:db:dc:0d:5e:
         cf:28:9b:c5:44:62:01:f7:6c:3d:bf:b4:54:b0:f7:46:dd:27:
         dd:f5:8e:f1:62:cc:04:01:21:7c:6f:82:a2:74:a7:7a:1d:72:
         f1:1a:cb:ef:a2:a1:e1:39:6d:da:b1:01:37:4a:aa:4b:ae:13:
         a6:49:c2:bf:8c:01:7f:01:c5:22:4b:4e:b2:b6:0f:52:72:20:
         cc:e4:0c:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOu9S7RtKBljaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5
Y2I1MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
NjQ2ODIxMWItNTgyYy00ZTEzLWJkZjctMGI3ZWY1MWZlZGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkk5E0IhSDzq5cYVGDQdkCm4AaGdLww10FQR
ISWXwUmxkAma/LelLB5Iq2ZAWpvprYNeox3ez3MzkoGAQIHTFAdXdWQU9SIvkqI1
xpPNwgEpl4KAOE0KJscce0MD1d2CzCR7HafycyGMXEp6GW/+KMMjfAPgkh5ctqsH
aoY5RoAl6fbv5LliSPBshFvfgYTXDiykalV+6ADvKOio17ccfMEJlApAlzMe8gMq
hrT3MdfvhdiDaFgxcrWX34/SpQnIEOKwnfJdmX9AVhFh142Qf4YmSjiRAuEYibkO
C9NSUCdmhxoYNsyWIL5elIiQnxXXL0HzcfmuTJLF/cAta5xqJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTHahGzSwvEen5qhggI5is83S4JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl
NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvOGVkODQ1ZWYtNDYyNy0z
YzVhLWFlNWMtZDhkOTcyOThkNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2
ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi
OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl
YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl8/wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGocRlXI08dJsCnzcN6LLqMqvwgfFt+u8xh8+eFWjIRR0Qgn1996Dk5d
6zmi5HJfw/evpL6dKwtAn/0zfqJ5OPq4b6spcdAvnCqnzzTPwIk1HD3ErC5vv0aC
0pdBR1Rhu9bTgFl7osbzF7GrBdifalo2XtEBmfW+a/J8s+9gqHE8dxlas3aY1HYr
NzoVAkvmZZngRw6divzaDF+AEzJtMHokfmWNjZHqTfypzydXOdXU29wNXs8om8VE
YgH3bD2/tFSw90bdJ931jvFizAQBIXxvgqJ0p3odcvEay++ioeE5bdqxATdKqkuu
E6ZJwr+MAX8BxSJLTrK2D1JyIMzkDOM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:33:32 2025 by rpki-client