Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1dd7f3d6-f2f3-3a8a-b381-e978afc8d6d9.roa
File:                     1dd7f3d6-f2f3-3a8a-b381-e978afc8d6d9.roa (raw, json)
Hash identifier:          HV4FLzjC8Q5UDnrO+pkkmp1DIKZ4F9eKEAzHV5pdO1s=
Subject key identifier:   90:92:75:29:6F:E3:EF:1D:76:49:0D:B5:1E:0D:EA:27:56:7B:4C:CE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD3DAEDFE5671476D51F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1dd7f3d6-f2f3-3a8a-b381-e978afc8d6d9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.62.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:3d:ae:df:e5:67:14:76:d5:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=468238b4-0941-4faa-b6f6-2e3397cb0084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:42:75:a0:60:40:ba:73:fd:33:f3:a3:43:
                    14:c6:5c:ce:fe:b5:32:d3:a0:64:6c:3e:64:0a:33:
                    5b:d8:1e:a7:d6:c4:d0:f3:ea:ae:9d:75:e0:10:2a:
                    de:39:7a:7a:2f:1a:d0:4d:0e:ee:4c:39:99:20:2f:
                    53:7c:d1:e7:4f:c9:be:f0:4b:19:d5:f4:78:92:0b:
                    c9:53:9e:1a:85:74:c4:58:17:da:45:7b:0f:25:a1:
                    d4:00:09:c4:77:66:63:84:39:c6:53:40:14:6d:82:
                    c5:23:b4:ee:95:1c:24:1d:9d:0e:8e:34:1b:9a:75:
                    4b:1d:4a:ca:3c:34:07:44:5a:a5:58:59:eb:5b:a7:
                    20:90:b0:ce:df:03:28:93:43:a7:26:f3:6f:9b:51:
                    43:b7:76:27:40:89:a0:8f:c4:9e:e1:53:e9:82:b0:
                    57:0e:25:80:dc:f5:25:1d:1e:5e:0a:86:6a:93:29:
                    05:57:19:a3:f5:fd:73:61:50:ff:68:31:f4:f3:fa:
                    38:09:68:bf:4b:3c:27:7c:b8:71:8a:ad:e9:a8:69:
                    b5:71:15:09:98:c3:25:46:e4:ad:af:59:37:c7:c5:
                    68:84:52:4f:43:9f:97:ae:fb:79:aa:11:e7:94:cd:
                    3c:26:08:a1:48:cf:f8:50:4d:91:0c:da:fb:02:09:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:92:75:29:6F:E3:EF:1D:76:49:0D:B5:1E:0D:EA:27:56:7B:4C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1dd7f3d6-f2f3-3a8a-b381-e978afc8d6d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f7:7f:6c:e3:69:f2:2a:d9:81:e2:0b:94:72:da:f3:11:a8:
         99:02:14:4a:c4:6e:c5:0b:59:3d:7a:45:ae:0e:d3:c3:30:19:
         4f:46:4d:d5:6a:52:18:e8:68:b6:ba:60:5b:3f:8a:b7:e4:6d:
         f8:a6:10:53:af:54:6d:84:8b:26:72:91:c7:02:cb:cf:5a:7a:
         d7:30:ab:02:63:dd:99:d8:4d:49:f2:64:ed:c4:8b:6e:d9:b5:
         51:ef:1f:c3:0a:dc:38:53:65:44:3d:db:5f:52:c3:be:90:81:
         03:91:c3:e6:20:ce:99:62:20:50:7f:1f:a1:29:db:0e:b7:e7:
         cf:84:bb:2c:bd:e9:fc:58:c0:90:9f:97:38:46:ae:e7:9e:30:
         ce:31:78:cf:94:8d:55:db:da:27:2c:86:ce:cf:6b:08:eb:e0:
         bd:1a:be:4d:60:51:d3:f1:c6:4b:43:e3:21:14:65:da:c7:75:
         73:b6:57:90:6b:4b:ef:8c:46:64:e0:68:93:04:8b:7f:87:b2:
         be:16:f2:2f:1f:42:67:ec:42:eb:a6:32:2f:20:5d:0b:ef:ab:
         3d:73:45:b8:7d:9d:02:f5:e2:d1:98:75:b4:15:e5:75:c9:1d:
         ae:4a:61:b5:4f:53:46:77:b5:c0:77:fe:4c:01:49:a9:bc:19:
         2f:b7:ba:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzT2u3+VnFHbVHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NDY4MjM4YjQtMDk0MS00ZmFhLWI2ZjYtMmUzMzk3Y2IwMDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgJCdaBgQLpz/TPzo0MUxlzO/rUy06BkbD5k
CjNb2B6n1sTQ8+qunXXgECreOXp6LxrQTQ7uTDmZIC9TfNHnT8m+8EsZ1fR4kgvJ
U54ahXTEWBfaRXsPJaHUAAnEd2ZjhDnGU0AUbYLFI7TulRwkHZ0OjjQbmnVLHUrK
PDQHRFqlWFnrW6cgkLDO3wMok0OnJvNvm1FDt3YnQImgj8Se4VPpgrBXDiWA3PUl
HR5eCoZqkykFVxmj9f1zYVD/aDH08/o4CWi/SzwnfLhxiq3pqGm1cRUJmMMlRuSt
r1k3x8VohFJPQ5+Xrvt5qhHnlM08JgihSM/4UE2RDNr7Agl6RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJCSdSlv4+8ddkkNtR4N6idWe0zOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWRkN2YzZDYtZjJmMy0z
YThhLWIzODEtZTk3OGFmYzhkNmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD6kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAn3f2zjafIq2YHiC5Ry2vMRqJkCFErEbsULWT16Ra4O08MwGU9GTdVq
UhjoaLa6YFs/irfkbfimEFOvVG2EiyZykccCy89aetcwqwJj3ZnYTUnyZO3Ei27Z
tVHvH8MK3DhTZUQ9219Sw76QgQORw+YgzpliIFB/H6Ep2w6358+Euyy96fxYwJCf
lzhGrueeMM4xeM+UjVXb2icshs7Pawjr4L0avk1gUdPxxktD4yEUZdrHdXO2V5Br
S++MRmTgaJMEi3+Hsr4W8i8fQmfsQuumMi8gXQvvqz1zRbh9nQL14tGYdbQV5XXJ
Ha5KYbVPU0Z3tcB3/kwBSam8GS+3unc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:08 2025 by rpki-client