Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1115f618-5fd1-3d7d-a6b7-a424bd4e5fa4.roa
File:                     1115f618-5fd1-3d7d-a6b7-a424bd4e5fa4.roa (raw, json)
Hash identifier:          B54MYOOSqrJOOw2K621mD5yy7jOgXxDljM6+aQ6L5cM=
Subject key identifier:   AD:1D:5A:C0:BB:D9:E4:DB:32:8A:DA:33:18:9F:09:B8:6B:A6:F2:95
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD7F891E93358141DDEFC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1115f618-5fd1-3d7d-a6b7-a424bd4e5fa4.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        67.54.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:7f:89:1e:93:35:81:41:dd:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=64b4a33c-61f6-4e08-8aa4-df5ec1e09672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:99:a2:81:0d:be:c6:90:14:53:5e:03:9b:08:
                    cd:37:28:64:df:e4:80:ad:84:ba:eb:48:89:13:4e:
                    8e:a6:3c:59:b3:b4:0d:09:aa:00:e3:16:dd:7c:36:
                    67:90:10:dd:1d:e7:85:2a:9a:90:a0:5c:a4:f7:67:
                    f0:93:89:75:93:71:2a:cd:82:0a:97:ab:46:c0:6d:
                    9e:52:60:94:eb:9f:ec:ca:24:9e:d2:eb:98:01:8c:
                    d9:12:eb:6f:7f:d4:c6:2f:7b:5d:df:73:73:21:d0:
                    92:45:f5:33:8e:36:73:a9:6c:a1:e3:5a:01:5b:08:
                    f7:08:68:af:50:f6:b5:6f:4a:bd:48:33:a6:dd:12:
                    57:ad:88:3a:0a:fa:13:ed:9d:86:e1:ca:c2:71:84:
                    9c:a1:6c:f6:df:af:97:b4:78:e4:c5:b6:7d:72:a2:
                    88:c6:65:54:55:f6:83:74:6a:22:a9:af:cf:e8:aa:
                    73:c5:e2:57:3e:81:32:37:a5:e6:63:14:98:f4:d0:
                    d2:1f:13:86:97:d9:fe:12:68:43:8e:be:cd:8c:06:
                    23:2b:23:fa:b6:4c:8b:bf:db:24:10:3a:a8:44:db:
                    e6:9a:1b:47:e4:a2:05:fa:9b:47:d2:ae:99:9b:55:
                    c7:8f:af:d0:12:fe:6e:0f:67:2c:dd:93:8f:7e:8c:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1D:5A:C0:BB:D9:E4:DB:32:8A:DA:33:18:9F:09:B8:6B:A6:F2:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1115f618-5fd1-3d7d-a6b7-a424bd4e5fa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:47:30:11:57:45:4a:47:27:93:dc:28:f1:d0:3a:17:e5:28:
         2c:01:af:df:23:d7:69:39:95:8d:2b:86:b2:79:cc:57:c5:fd:
         4e:16:ba:c8:da:a9:46:e0:20:2f:f8:76:90:5f:b4:d5:35:10:
         f9:22:eb:b2:7f:f0:dd:81:b9:e9:90:55:81:9f:08:7b:00:dd:
         ae:8f:01:10:e5:6b:1d:ac:c0:f6:49:5e:27:fc:ca:6d:a4:34:
         21:3c:dd:02:40:f9:91:f8:ed:3c:c4:f5:3b:51:55:8f:ce:d1:
         de:5e:0d:8e:49:e7:fb:85:d2:9d:7e:00:5e:81:22:48:98:f4:
         3f:a2:0f:d3:0c:f2:1c:ce:e3:c2:d2:34:18:49:ee:bc:91:05:
         e2:09:62:c2:9d:8e:96:55:d5:4d:ff:17:f3:ba:5e:81:17:9b:
         4a:d6:1d:92:0d:a7:19:4d:8c:cb:21:9c:5e:26:38:3e:04:7c:
         c6:dd:23:e0:3e:a5:b3:c7:c4:b4:23:f0:81:3f:8f:5c:4d:b3:
         0e:b9:d0:74:b6:00:23:0a:86:43:a1:94:9f:b0:ae:b5:cb:9f:
         3f:ca:79:e0:6b:9a:21:2f:24:59:70:9f:37:a5:2d:53:f4:a5:
         b5:cb:4b:f8:6b:eb:c7:2e:d7:2b:42:e0:e4:ef:e3:a1:eb:c0:
         aa:93:6f:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzX+JHpM1gUHd78AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NjRiNGEzM2MtNjFmNi00ZTA4LThhYTQtZGY1ZWMxZTA5NjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZmigQ2+xpAUU14DmwjNNyhk3+SArYS660iJ
E06OpjxZs7QNCaoA4xbdfDZnkBDdHeeFKpqQoFyk92fwk4l1k3EqzYIKl6tGwG2e
UmCU65/syiSe0uuYAYzZEutvf9TGL3td33NzIdCSRfUzjjZzqWyh41oBWwj3CGiv
UPa1b0q9SDOm3RJXrYg6CvoT7Z2G4crCcYScoWz236+XtHjkxbZ9cqKIxmVUVfaD
dGoiqa/P6KpzxeJXPoEyN6XmYxSY9NDSHxOGl9n+EmhDjr7NjAYjKyP6tkyLv9sk
EDqoRNvmmhtH5KIF+ptH0q6Zm1XHj6/QEv5uD2cs3ZOPfozncQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0dWsC72eTbMoraMxifCbhrpvKVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTExNWY2MTgtNWZkMS0z
ZDdkLWE2YjctYTQyNGJkNGU1ZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQza1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVHMBFXRUpHJ5PcKPHQOhflKCwBr98j12k5lY0rhrJ5zFfF/U4Wusja
qUbgIC/4dpBftNU1EPki67J/8N2BuemQVYGfCHsA3a6PARDlax2swPZJXif8ym2k
NCE83QJA+ZH47TzE9TtRVY/O0d5eDY5J5/uF0p1+AF6BIkiY9D+iD9MM8hzO48LS
NBhJ7ryRBeIJYsKdjpZV1U3/F/O6XoEXm0rWHZINpxlNjMshnF4mOD4EfMbdI+A+
pbPHxLQj8IE/j1xNsw650HS2ACMKhkOhlJ+wrrXLnz/KeeBrmiEvJFlwnzelLVP0
pbXLS/hr68cu1ytC4OTv46HrwKqTbxs=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:39 2025 by rpki-client