Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fa1dd27-05ba-3ce5-9800-24e264fda965.roa
File:                     0fa1dd27-05ba-3ce5-9800-24e264fda965.roa (raw, json)
Hash identifier:          BGz0jbCR/fF3kb49UF61CuMR/c8YAjqLKlxRO6PEj48=
Subject key identifier:   31:66:F9:7E:AA:1A:49:77:96:20:8E:52:DA:43:CB:9F:C6:CB:C8:EE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDF191D3904BD6787D5C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fa1dd27-05ba-3ce5-9800-24e264fda965.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.21.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:f1:91:d3:90:4b:d6:78:7d:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f139ec60-ab2d-4106-9b3f-c326d20c8231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:7e:69:7d:67:08:3c:d1:1c:58:db:6d:dc:
                    7a:81:f9:2b:bc:47:75:ee:b9:1c:cc:96:10:c7:ea:
                    09:74:ef:46:f1:9d:79:bb:bc:bf:fa:ff:94:3e:94:
                    d4:35:31:ea:fd:9c:ef:0b:0a:36:4d:b7:ec:fb:e9:
                    35:3f:b9:44:bb:05:9a:70:3d:13:3a:74:18:4e:7b:
                    b7:8a:5c:65:b7:9f:b8:ba:f0:c2:b9:f4:bc:1a:4e:
                    4e:71:76:a8:26:7d:2e:82:86:cf:c1:5d:18:df:6e:
                    be:37:45:0d:4a:e2:4c:10:3b:9d:4c:16:cc:80:03:
                    8d:5d:2c:c8:7e:d6:a6:a9:91:4f:0e:21:eb:cc:39:
                    c7:2b:84:1f:a1:7b:d6:f7:b5:67:31:ad:7b:c9:d8:
                    2a:e9:f7:28:25:0d:fe:5e:91:05:11:97:34:e2:f6:
                    f2:9f:23:f1:25:cc:2f:77:ce:01:29:3b:4b:65:92:
                    13:ca:16:e4:1b:b1:51:2b:71:5e:43:27:3c:3a:98:
                    be:2c:a0:93:25:4d:d8:ed:61:3e:c3:98:16:60:f3:
                    d6:3e:de:6b:28:ee:01:d4:ab:41:22:9f:b9:0b:aa:
                    a9:af:e9:dc:da:6d:5c:04:52:c7:40:75:45:92:1f:
                    54:16:29:c9:74:e9:df:63:65:3d:98:85:25:1d:e5:
                    fa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:66:F9:7E:AA:1A:49:77:96:20:8E:52:DA:43:CB:9F:C6:CB:C8:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fa1dd27-05ba-3ce5-9800-24e264fda965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b7:d6:a6:ef:4a:36:ee:56:df:b2:da:83:62:52:0e:17:9c:
         02:4b:02:b6:de:20:59:6e:01:d5:a7:da:2e:90:f3:08:7c:49:
         5f:46:a0:89:59:59:1b:85:2d:4d:c0:61:d4:f9:2c:05:a0:aa:
         f4:8c:51:4f:01:99:79:8f:83:7d:ed:ca:20:64:b5:b8:20:ed:
         84:74:5f:0c:ea:39:34:7e:04:31:e1:5d:f2:68:2c:df:3e:25:
         f8:fa:33:81:b5:27:77:7e:17:cc:75:90:79:1a:db:dd:f6:44:
         6a:fe:79:34:22:a4:2b:5f:e9:9a:ba:2c:e8:49:f6:b1:51:53:
         e9:c7:6e:77:04:8b:74:83:71:6d:19:e8:f3:6f:4c:33:59:2b:
         0c:e7:64:f1:ae:1c:bf:e7:8c:19:06:62:c9:4c:f3:42:ed:ad:
         43:82:aa:ee:97:d5:18:29:a1:0a:b4:c5:d1:7d:b7:9a:56:e4:
         a3:ca:c4:94:91:e0:43:ca:7a:e4:17:c8:37:22:2c:6e:62:5a:
         aa:66:c3:96:94:29:0c:ca:33:22:66:6a:bf:8c:22:65:c5:07:
         9a:03:e5:56:4a:5e:bb:ff:4a:3b:0a:5e:59:da:b3:f3:2b:57:
         9e:57:41:33:8a:1d:30:c8:94:97:0b:9f:99:d4:49:f6:01:b4:
         4c:7c:ec:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzfGR05BL1nh9XAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZjEzOWVjNjAtYWIyZC00MTA2LTliM2YtYzMyNmQyMGM4MjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt89+aX1nCDzRHFjbbdx6gfkrvEd17rkczJYQ
x+oJdO9G8Z15u7y/+v+UPpTUNTHq/ZzvCwo2Tbfs++k1P7lEuwWacD0TOnQYTnu3
ilxlt5+4uvDCufS8Gk5OcXaoJn0ugobPwV0Y326+N0UNSuJMEDudTBbMgAONXSzI
ftamqZFPDiHrzDnHK4QfoXvW97VnMa17ydgq6fcoJQ3+XpEFEZc04vbynyPxJcwv
d84BKTtLZZITyhbkG7FRK3FeQyc8Opi+LKCTJU3Y7WE+w5gWYPPWPt5rKO4B1KtB
Ip+5C6qpr+nc2m1cBFLHQHVFkh9UFinJdOnfY2U9mIUlHeX6iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDFm+X6qGkl3liCOUtpDy5/Gy8juMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGZhMWRkMjctMDViYS0z
Y2U1LTk4MDAtMjRlMjY0ZmRhOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJO31qbvSjbuVt+y2oNiUg4XnAJLArbeIFluAdWn2i6Q8wh8SV9GoIlZ
WRuFLU3AYdT5LAWgqvSMUU8BmXmPg33tyiBktbgg7YR0XwzqOTR+BDHhXfJoLN8+
Jfj6M4G1J3d+F8x1kHka2932RGr+eTQipCtf6Zq6LOhJ9rFRU+nHbncEi3SDcW0Z
6PNvTDNZKwznZPGuHL/njBkGYslM80LtrUOCqu6X1RgpoQq0xdF9t5pW5KPKxJSR
4EPKeuQXyDciLG5iWqpmw5aUKQzKMyJmar+MImXFB5oD5VZKXrv/SjsKXlnas/Mr
V55XQTOKHTDIlJcLn5nUSfYBtEx87Lc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:43:43 2025 by rpki-client