Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa
File:                     1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa (raw, json)
Hash identifier:          0MbzWIuANmd6/8V+jhx9z6wPDgu30si4EAgQskW8QGY=
Subject key identifier:   F5:0E:25:19:EE:DC:04:6C:BD:90:22:41:2C:13:E4:3F:4F:49:80:36
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDECB522ED752CE6D98B60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:ec:b5:22:ed:75:2c:e6:d9:8b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=66d45595-6ced-4a38-b2cb-31a52c2eb0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:70:60:72:d8:6a:24:d2:8c:cd:2d:74:1b:cb:
                    e1:15:cc:34:72:66:39:98:cf:4a:9d:4f:f1:1e:44:
                    89:92:43:bf:1a:06:32:17:60:13:23:62:fc:ec:69:
                    a5:c9:00:5f:0c:b6:0c:97:f3:13:45:06:54:b6:63:
                    34:ac:d4:b4:97:0f:af:f1:a5:86:00:ec:a0:90:eb:
                    e6:9e:d8:29:a6:06:26:53:ae:e6:a6:a9:e9:2c:e7:
                    a9:95:0a:a6:44:11:05:e5:7e:1d:3e:c6:e3:85:1f:
                    29:a6:49:cc:68:d2:f8:2d:a7:34:15:ef:17:da:68:
                    76:fd:97:ba:f0:9c:61:59:1c:aa:61:f8:be:e4:26:
                    43:e7:68:f7:5c:98:f5:00:d5:52:ae:1e:9d:51:e8:
                    cf:b4:3e:f3:d2:f5:d4:b8:80:5b:5b:48:06:00:84:
                    67:40:9e:67:78:fd:1e:9a:e1:ea:95:7a:71:ab:dd:
                    73:7c:bb:56:25:83:93:c5:c9:33:f7:54:47:b6:99:
                    7a:cf:0f:62:d5:3a:6c:e7:2f:42:7e:0f:f5:5d:2c:
                    49:88:cc:fa:de:88:de:8a:a7:02:f1:68:27:f4:33:
                    aa:d2:17:c3:17:e4:78:d5:6e:dd:f3:fd:f5:cd:a4:
                    e4:e6:6f:d0:8b:3b:bf:95:40:a5:af:c0:10:3a:b8:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0E:25:19:EE:DC:04:6C:BD:90:22:41:2C:13:E4:3F:4F:49:80:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c18b732-22d7-3432-8bf0-1e9d4566bf40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ac:5b:3d:fc:fc:ba:4f:38:51:50:97:8d:79:49:ad:30:11:
         97:6f:75:c2:a5:84:49:76:86:9f:a0:8b:e2:f9:26:12:46:a8:
         b7:68:ac:84:6e:0c:d8:82:f6:f3:1e:66:f6:98:f0:a3:8f:3e:
         51:7e:77:b8:1a:1f:f9:7b:5c:df:82:97:87:07:96:af:42:db:
         dd:2a:dd:bc:37:86:a5:ed:6a:36:72:8c:3f:cf:b5:62:2b:1b:
         47:00:21:83:72:01:56:d8:89:17:54:9f:ad:96:72:33:6d:d5:
         62:b2:ae:bc:df:47:9c:bc:1f:4f:17:13:f6:ff:f5:a9:57:e8:
         c5:0a:2f:4b:61:52:82:78:80:b1:ce:9b:8f:15:c0:98:9a:4b:
         2f:35:aa:53:af:e5:ce:c1:64:a0:27:37:e9:69:96:ac:74:f4:
         ce:d6:3d:f4:fa:6c:ef:db:73:50:c7:ad:1e:c9:43:7e:2e:c8:
         97:28:54:5a:aa:3b:23:10:32:f5:8e:c8:5f:e4:44:63:4d:8b:
         29:f4:c9:f3:62:31:10:15:15:39:b7:3e:1a:6d:64:f8:c6:f4:
         ba:06:91:57:49:70:de:85:e5:25:d6:3b:ba:6e:a7:44:42:7e:
         49:dd:e8:62:21:15:d6:01:50:9b:90:a5:78:1e:94:f7:8d:d5:
         00:9a:05:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzey1Iu11LObZi2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NjZkNDU1OTUtNmNlZC00YTM4LWIyY2ItMzFhNTJjMmViMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXBgcthqJNKMzS10G8vhFcw0cmY5mM9KnU/x
HkSJkkO/GgYyF2ATI2L87GmlyQBfDLYMl/MTRQZUtmM0rNS0lw+v8aWGAOygkOvm
ntgppgYmU67mpqnpLOeplQqmRBEF5X4dPsbjhR8ppknMaNL4Lac0Fe8X2mh2/Ze6
8JxhWRyqYfi+5CZD52j3XJj1ANVSrh6dUejPtD7z0vXUuIBbW0gGAIRnQJ5neP0e
muHqlXpxq91zfLtWJYOTxckz91RHtpl6zw9i1Tps5y9Cfg/1XSxJiMz63ojeiqcC
8Wgn9DOq0hfDF+R41W7d8/31zaTk5m/Qizu/lUClr8AQOrijEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUOJRnu3ARsvZAiQSwT5D9PSYA2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWMxOGI3MzItMjJkNy0z
NDMyLThiZjAtMWU5ZDQ1NjZiZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGysWz38/LpPOFFQl415Sa0wEZdvdcKlhEl2hp+gi+L5JhJGqLdorIRu
DNiC9vMeZvaY8KOPPlF+d7gaH/l7XN+Cl4cHlq9C290q3bw3hqXtajZyjD/PtWIr
G0cAIYNyAVbYiRdUn62WcjNt1WKyrrzfR5y8H08XE/b/9alX6MUKL0thUoJ4gLHO
m48VwJiaSy81qlOv5c7BZKAnN+lplqx09M7WPfT6bO/bc1DHrR7JQ34uyJcoVFqq
OyMQMvWOyF/kRGNNiyn0yfNiMRAVFTm3PhptZPjG9LoGkVdJcN6F5SXWO7pup0RC
fknd6GIhFdYBUJuQpXgelPeN1QCaBYQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:33:28 2025 by rpki-client