Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41af6d99-9225-3ad6-9547-1b4352413597.roa
File:                     41af6d99-9225-3ad6-9547-1b4352413597.roa (raw, json)
Hash identifier:          lwRpGEEp6MQ6yFgBrjyq5rdzCN8wA/+ZRQHQtaLsQew=
Subject key identifier:   0D:C9:EC:54:E1:E0:94:1E:2D:E4:16:43:1D:3D:B7:C3:A5:F8:E7:6A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD1646E377D159DB016AE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41af6d99-9225-3ad6-9547-1b4352413597.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:16:46:e3:77:d1:59:db:01:6a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=19045d87-1b5e-4e5c-a1f4-95a7811e554d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6b:6f:97:01:59:22:f3:ed:e3:46:25:69:cc:
                    2d:1b:85:90:51:b6:b7:63:a6:60:c7:25:f3:ce:fd:
                    e3:26:78:68:0d:00:6f:4b:bd:23:65:8b:d3:2f:ad:
                    f1:69:f8:fb:9d:be:1d:9d:54:a6:fb:06:1e:7a:5e:
                    58:fe:13:04:a8:62:ed:6d:88:0c:9c:4f:92:84:45:
                    87:01:40:57:be:b4:2d:46:67:2e:e7:ca:ce:8d:6d:
                    c6:c8:c9:20:c8:4f:79:85:bc:b0:d0:c5:97:41:2a:
                    c9:ae:75:44:32:fb:10:63:0e:0c:d6:64:c8:14:6d:
                    c0:50:46:fa:f6:5f:75:96:f5:54:50:48:3c:0c:f9:
                    b0:5b:1a:c2:76:0a:bf:49:1e:a7:06:66:e8:de:2d:
                    c6:7f:a2:2b:5a:47:83:31:58:c4:97:66:7f:11:66:
                    f8:a0:33:09:61:30:15:3d:1a:19:43:0e:64:36:23:
                    bc:26:27:05:4d:3b:69:eb:94:0a:17:a1:30:3a:6d:
                    be:f6:b8:d6:8b:c7:a2:db:64:24:99:31:20:d8:87:
                    7d:b0:57:e7:28:41:5f:72:f2:83:01:70:0a:af:89:
                    b3:79:38:a2:d3:5d:d0:a2:93:7c:00:70:4f:7f:e7:
                    4e:7a:4e:dc:b1:c1:e0:4b:3e:af:a6:13:96:f2:cd:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C9:EC:54:E1:E0:94:1E:2D:E4:16:43:1D:3D:B7:C3:A5:F8:E7:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41af6d99-9225-3ad6-9547-1b4352413597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:0a:34:9c:13:8c:77:ac:d2:9d:1f:b9:7e:55:da:8a:7c:f9:
         2f:b6:47:dd:a2:b9:17:98:7f:b1:7b:f4:8e:24:5b:1a:54:ca:
         5f:73:fc:19:70:b9:fc:1b:7b:78:af:3f:ba:26:f1:0f:80:d7:
         49:2c:ea:ec:53:24:42:86:66:2b:97:75:82:ce:e1:15:48:17:
         b0:6e:11:38:a0:ee:0e:7e:50:74:4f:cf:34:ef:68:40:3b:95:
         a7:bf:b7:f7:4e:d0:86:f4:02:49:9e:57:d0:b4:1d:1b:c6:be:
         10:13:c1:e9:50:e7:9a:25:5d:cd:89:44:2e:76:7e:b0:08:7b:
         cf:f9:45:b5:8d:34:d9:ff:d9:fe:8d:cb:bd:d8:25:63:0e:a4:
         bb:5d:25:b7:cf:a2:4c:81:8e:82:85:ae:c8:3f:f8:e4:b4:24:
         1d:15:d3:07:e1:0a:cd:73:d9:23:3a:83:88:70:3c:e4:5f:c3:
         0a:dd:70:f3:54:1d:69:d7:25:03:0a:09:2d:f8:c6:9a:20:66:
         e6:b9:41:ed:f5:4c:51:65:1a:b3:01:a8:8b:f9:d7:67:7e:a5:
         67:78:0f:45:41:1b:e1:9b:12:b8:76:5e:10:42:dd:93:62:fe:
         b3:16:60:71:73:ea:cf:ba:22:65:f0:8a:1b:de:72:61:29:03:
         46:3b:36:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRZG43fRWdsBauAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MTkwNDVkODctMWI1ZS00ZTVjLWExZjQtOTVhNzgxMWU1NTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmtvlwFZIvPt40YlacwtG4WQUba3Y6ZgxyXz
zv3jJnhoDQBvS70jZYvTL63xafj7nb4dnVSm+wYeel5Y/hMEqGLtbYgMnE+ShEWH
AUBXvrQtRmcu58rOjW3GyMkgyE95hbyw0MWXQSrJrnVEMvsQYw4M1mTIFG3AUEb6
9l91lvVUUEg8DPmwWxrCdgq/SR6nBmbo3i3Gf6IrWkeDMVjEl2Z/EWb4oDMJYTAV
PRoZQw5kNiO8JicFTTtp65QKF6EwOm2+9rjWi8ei22QkmTEg2Id9sFfnKEFfcvKD
AXAKr4mzeTii013QopN8AHBPf+dOek7cscHgSz6vphOW8s3ZZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3J7FTh4JQeLeQWQx09t8Ol+OdqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDFhZjZkOTktOTIyNS0z
YWQ2LTk1NDctMWI0MzUyNDEzNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKAKNJwTjHes0p0fuX5V2op8+S+2R92iuReYf7F79I4kWxpUyl9z/Blw
ufwbe3ivP7om8Q+A10ks6uxTJEKGZiuXdYLO4RVIF7BuETig7g5+UHRPzzTvaEA7
lae/t/dO0Ib0AkmeV9C0HRvGvhATwelQ55olXc2JRC52frAIe8/5RbWNNNn/2f6N
y73YJWMOpLtdJbfPokyBjoKFrsg/+OS0JB0V0wfhCs1z2SM6g4hwPORfwwrdcPNU
HWnXJQMKCS34xpogZua5Qe31TFFlGrMBqIv512d+pWd4D0VBG+GbErh2XhBC3ZNi
/rMWYHFz6s+6ImXwihvecmEpA0Y7Nkc=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:06 2025 by rpki-client