Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3ee605-132f-3191-9d2a-d90cc9badb1c.roa
File:                     3a3ee605-132f-3191-9d2a-d90cc9badb1c.roa (raw, json)
Hash identifier:          WBw90mqPVbu5RnR7kkoCcgzksQqyFzFVbVZaiyS1UaQ=
Subject key identifier:   7C:60:D0:46:EE:36:EE:06:BE:33:BD:AD:E2:3F:1B:28:51:8B:D2:1F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD7FF501769BCD3DD9B0C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3ee605-132f-3191-9d2a-d90cc9badb1c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        67.54.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:7f:f5:01:76:9b:cd:3d:d9:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=218fc8a3-8fe9-4ccf-a053-7ef13f0f0d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:de:ca:74:2c:bc:05:1b:3c:52:5b:60:3d:
                    cd:7a:b1:86:2b:22:e1:aa:15:35:fb:08:dc:4c:35:
                    94:72:6e:12:89:73:46:f6:91:f4:f9:12:bc:64:a4:
                    8c:d2:93:30:1a:27:20:cc:44:86:a7:2d:8e:c7:ee:
                    28:f2:dd:8a:e1:1a:33:c7:3d:91:91:03:b6:23:55:
                    10:14:5f:8d:f2:b8:3a:5d:6f:32:84:56:d0:16:b1:
                    8f:04:5b:75:bf:65:de:14:93:29:51:28:72:04:a9:
                    25:1e:aa:40:9d:67:33:45:65:7e:be:5d:89:93:1e:
                    77:f4:b6:36:90:87:50:35:d0:34:3d:41:64:b2:c6:
                    45:52:2d:40:51:69:09:88:c8:89:d7:6e:9d:11:26:
                    45:63:b9:1d:ee:48:4b:7a:5a:31:73:5e:7d:13:93:
                    d4:3e:e3:b4:0b:bc:1c:57:d9:b4:28:26:ee:4a:ee:
                    ef:79:3c:b1:7d:34:e8:7c:32:e3:67:b4:6e:db:26:
                    ab:4a:1e:ae:47:8f:73:7b:95:6b:1f:05:2c:c5:3a:
                    e6:bc:ec:8f:ec:25:d6:58:cb:3b:ad:68:ef:53:09:
                    b6:c6:03:e0:db:eb:f5:ce:01:4e:f9:46:37:22:19:
                    17:aa:c0:f8:63:41:d2:e9:41:c0:24:07:4d:d5:45:
                    06:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:60:D0:46:EE:36:EE:06:BE:33:BD:AD:E2:3F:1B:28:51:8B:D2:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3ee605-132f-3191-9d2a-d90cc9badb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:07:8a:7a:ec:51:e1:ad:50:fc:58:df:d2:5b:75:4a:d7:18:
         16:2f:29:97:34:cb:91:33:13:85:6c:56:27:a2:db:cf:51:c8:
         f0:aa:8b:45:6d:92:6e:fb:7e:d7:5b:57:99:2f:cb:c8:fb:1d:
         4e:5e:5a:71:ed:cd:b8:ae:89:66:15:a5:52:af:bf:cc:94:6a:
         c3:d9:5a:e5:54:2e:33:69:a7:c9:d5:9a:95:e6:0f:83:16:f8:
         00:3e:f7:77:ae:52:e2:48:0c:6c:14:99:b7:26:17:84:24:98:
         ec:4e:e2:3f:ce:4c:79:b5:cc:89:3f:aa:17:f2:ce:cf:93:30:
         49:b1:9f:a3:8d:86:f5:1e:39:f5:a5:35:f7:0b:d4:f3:34:bb:
         ae:1d:07:74:8a:d2:30:0e:b8:69:23:48:12:f1:d3:3f:94:3c:
         8b:fa:70:a2:7c:19:15:f5:ef:3d:77:af:b8:87:a4:3a:65:88:
         b5:94:ab:d0:27:75:81:61:ab:6d:60:35:f4:e8:92:08:db:e5:
         88:0b:32:37:be:02:eb:5d:00:fc:4b:3b:a7:6d:10:93:f3:6f:
         b5:10:3e:f5:49:44:4a:26:f1:c7:0a:ee:43:a6:91:d6:e6:a0:
         5a:ca:2e:a2:53:1c:45:ad:88:c6:ca:52:53:a6:b5:85:16:41:
         1b:3a:5a:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzX/1AXabzT3ZsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MjE4ZmM4YTMtOGZlOS00Y2NmLWEwNTMtN2VmMTNmMGYwZDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4beynQsvAUbPFJbYD3NerGGKyLhqhU1+wjc
TDWUcm4SiXNG9pH0+RK8ZKSM0pMwGicgzESGpy2Ox+4o8t2K4Rozxz2RkQO2I1UQ
FF+N8rg6XW8yhFbQFrGPBFt1v2XeFJMpUShyBKklHqpAnWczRWV+vl2Jkx539LY2
kIdQNdA0PUFkssZFUi1AUWkJiMiJ126dESZFY7kd7khLeloxc159E5PUPuO0C7wc
V9m0KCbuSu7veTyxfTTofDLjZ7Ru2yarSh6uR49ze5VrHwUsxTrmvOyP7CXWWMs7
rWjvUwm2xgPg2+v1zgFO+UY3IhkXqsD4Y0HS6UHAJAdN1UUGIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHxg0EbuNu4GvjO9reI/GyhRi9IfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2EzZWU2MDUtMTMyZi0z
MTkxLTlkMmEtZDkwY2M5YmFkYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwHinrsUeGtUPxY39JbdUrXGBYvKZc0y5EzE4VsViei289RyPCqi0Vt
km77ftdbV5kvy8j7HU5eWnHtzbiuiWYVpVKvv8yUasPZWuVULjNpp8nVmpXmD4MW
+AA+93euUuJIDGwUmbcmF4QkmOxO4j/OTHm1zIk/qhfyzs+TMEmxn6ONhvUeOfWl
NfcL1PM0u64dB3SK0jAOuGkjSBLx0z+UPIv6cKJ8GRX17z13r7iHpDpliLWUq9An
dYFhq21gNfTokgjb5YgLMje+AutdAPxLO6dtEJPzb7UQPvVJREom8ccK7kOmkdbm
oFrKLqJTHEWtiMbKUlOmtYUWQRs6Wt8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:29 2025 by rpki-client