Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa
File:                     1eef2e2c-6325-3083-a2ca-8378929a914b.roa (raw, json)
Hash identifier:          CQW6A5nTC6TMKUwvh6jtvNYlEOpmeYc2VfI0gsKdqcs=
Subject key identifier:   15:85:DF:A2:D2:6A:95:21:11:A1:F3:E4:EF:DE:FF:A2:D7:78:78:8A
Certificate issuer:       /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial:       010D0C9F4328584AAB265ECEEA619A0791BCDE00
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     26512
IP address blocks:        162.221.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5e:ce:ea:61:9a:07:91:bc:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=aeb5d485-6ba4-40cb-9c35-2f1d8956741e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:00:fd:c2:3a:6f:5b:5e:03:cb:81:8b:4e:
                    49:ae:cd:12:16:a6:db:cf:cd:75:d8:ac:bd:90:a5:
                    02:a7:b0:22:92:3b:cc:55:96:23:99:f3:55:8c:0f:
                    4f:11:5c:99:a1:61:a7:0c:2d:de:65:62:91:df:65:
                    da:87:f8:a4:e3:a3:c2:5e:11:58:08:84:26:e4:a1:
                    18:8d:f5:a8:a7:d9:d5:67:b4:3b:1b:f8:a3:af:ef:
                    52:a9:c7:54:bb:c5:71:cf:90:aa:37:fd:ec:a8:21:
                    d8:df:74:63:c7:51:28:32:60:08:6b:2c:65:42:17:
                    a7:cf:b7:8b:d7:15:b4:64:02:15:84:dd:6e:08:99:
                    28:74:96:b0:a5:f1:66:1d:e0:fb:55:9b:f4:1c:b1:
                    da:4e:ee:01:82:16:b3:57:a4:51:ed:1a:cf:bd:fd:
                    26:e2:63:a3:e3:20:eb:dd:0d:c6:35:39:0b:ff:9f:
                    7f:8f:c2:80:84:06:44:78:41:7e:64:5f:72:68:7e:
                    ac:ad:27:24:67:26:3e:50:5c:9e:e4:3e:ca:81:28:
                    5f:6c:0c:47:40:9d:67:ec:ae:a0:86:bb:b5:bf:c1:
                    e7:e1:b5:d6:d4:15:23:5d:ac:5b:df:55:b2:ee:11:
                    7b:39:cb:f4:3d:d4:82:a2:38:a8:48:33:c2:b8:27:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:85:DF:A2:D2:6A:95:21:11:A1:F3:E4:EF:DE:FF:A2:D7:78:78:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:16:21:9b:f3:69:fb:ec:95:e9:62:12:d7:7f:8e:ba:e2:73:
         7c:66:22:7f:95:8d:fe:0d:47:6f:49:f7:6d:f5:cb:61:51:88:
         4c:d7:5b:82:50:0a:c6:d8:eb:da:3d:ca:00:35:a3:fe:1d:53:
         c5:00:73:e9:5b:43:10:3d:d6:6f:ca:6f:a6:b8:d2:34:4a:b8:
         69:62:cf:8b:4d:a4:b0:4a:b5:51:ea:a9:cf:e1:db:a3:2b:f0:
         7c:ff:b5:96:56:94:c6:11:31:4e:75:d6:8c:f3:d1:b8:62:d6:
         92:41:78:51:9e:76:01:11:70:a3:5d:1a:a6:31:1e:47:61:87:
         8d:69:33:17:2c:2a:79:9a:9a:14:40:09:0a:23:f3:da:d5:c2:
         fb:0c:05:64:0a:49:87:be:7d:91:65:78:8d:db:b6:38:b7:7b:
         31:25:29:67:77:28:9e:21:2e:4c:ba:c8:ca:22:cf:72:41:26:
         f9:3f:b5:c9:a0:64:e7:3c:e1:c2:07:23:c8:54:02:75:61:60:
         a7:f4:ac:11:c7:e0:bf:ef:43:de:bd:52:26:2a:cc:32:4d:b4:
         96:a6:ad:1d:7c:8c:08:3b:e0:f0:e2:5d:d6:89:41:e8:e6:d5:
         ab:b5:86:bc:17:31:68:0b:5d:f7:62:c6:98:68:d0:af:14:27:
         68:36:50:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJl7O6mGaB5G83gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3
YTZkMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
YWViNWQ0ODUtNmJhNC00MGNiLTljMzUtMmYxZDg5NTY3NDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm84A/cI6b1teA8uBi05Jrs0SFqbbz8112Ky9
kKUCp7AikjvMVZYjmfNVjA9PEVyZoWGnDC3eZWKR32Xah/ik46PCXhFYCIQm5KEY
jfWop9nVZ7Q7G/ijr+9SqcdUu8Vxz5CqN/3sqCHY33Rjx1EoMmAIayxlQhenz7eL
1xW0ZAIVhN1uCJkodJawpfFmHeD7VZv0HLHaTu4BghazV6RR7RrPvf0m4mOj4yDr
3Q3GNTkL/59/j8KAhAZEeEF+ZF9yaH6srSckZyY+UFye5D7KgShfbAxHQJ1n7K6g
hru1v8Hn4bXW1BUjXaxb31Wy7hF7Ocv0PdSCojioSDPCuCem3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWF36LSapUhEaHz5O/e/6LXeHiKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy
YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvMWVlZjJlMmMtNjMyNS0z
MDgzLWEyY2EtODM3ODkyOWE5MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3
MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh
N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy
MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot0ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGEWIZvzafvsleliEtd/jrric3xmIn+Vjf4NR29J9231y2FRiEzXW4JQ
CsbY69o9ygA1o/4dU8UAc+lbQxA91m/Kb6a40jRKuGliz4tNpLBKtVHqqc/h26Mr
8Hz/tZZWlMYRMU511ozz0bhi1pJBeFGedgERcKNdGqYxHkdhh41pMxcsKnmamhRA
CQoj89rVwvsMBWQKSYe+fZFleI3btji3ezElKWd3KJ4hLky6yMoiz3JBJvk/tcmg
ZOc84cIHI8hUAnVhYKf0rBHH4L/vQ969UiYqzDJNtJamrR18jAg74PDiXdaJQejm
1au1hrwXMWgLXfdixpho0K8UJ2g2UHA=
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:25:55 2025 by rpki-client