Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/459e59ae-5fe6-3307-999e-cf3a6085b1c8.roa
File:                     459e59ae-5fe6-3307-999e-cf3a6085b1c8.roa (raw, json)
Hash identifier:          9zrOD5k8z1zOo8h9sPfxtQx3VarIIKRb15Bjjkv1oLc=
Subject key identifier:   DE:CD:ED:C8:B8:89:CC:AE:09:14:D1:B6:2D:48:4D:F5:80:B4:65:6F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD43963CA78054442034C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/459e59ae-5fe6-3307-999e-cf3a6085b1c8.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:43:96:3c:a7:80:54:44:20:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2a3f01a7-38b2-4f2e-b516-fc75f502d226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:2b:43:f7:cf:80:5f:8f:08:40:52:a6:7e:
                    59:53:c7:d5:f7:b7:fb:4b:c7:52:2d:1f:db:b2:b0:
                    ea:17:b0:7c:75:0f:cc:17:e7:9f:24:ac:fa:64:0a:
                    b0:98:f6:fd:5e:dd:63:cb:f3:48:8f:34:23:c9:93:
                    a0:fb:75:ab:e1:91:8c:3d:43:4a:82:1c:c3:eb:fc:
                    79:9c:ff:c6:c3:f4:76:03:fa:f2:6c:5b:bf:3d:51:
                    13:85:35:8e:70:39:d8:ab:6d:70:d7:6d:aa:fa:f1:
                    31:2c:23:24:7a:2e:29:77:ea:d7:0c:56:f7:99:19:
                    e2:a0:f3:61:d5:9a:34:6d:25:02:28:7b:21:42:10:
                    76:87:96:9b:d0:0f:30:5d:e9:a9:0d:a5:ee:eb:9a:
                    6e:8d:4a:5f:12:bb:08:a3:ff:38:6a:36:e7:4f:b3:
                    90:4a:6d:55:41:d1:28:b7:68:77:bf:37:19:6c:39:
                    74:f5:ff:67:23:60:97:43:9b:52:04:6d:8b:b1:ff:
                    a5:be:32:09:fc:51:d8:f1:db:f0:d4:9f:cb:1d:dd:
                    7a:26:3b:a1:90:76:59:8b:50:8f:13:14:72:8e:3f:
                    76:5c:b1:6a:df:61:9f:ad:2d:ae:19:4a:ec:10:12:
                    94:e2:07:85:75:a6:cb:93:90:77:f8:e4:4f:7f:c4:
                    45:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CD:ED:C8:B8:89:CC:AE:09:14:D1:B6:2D:48:4D:F5:80:B4:65:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/459e59ae-5fe6-3307-999e-cf3a6085b1c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:6c:2b:9a:14:54:ec:f6:03:ef:56:ba:9b:9f:fa:fc:bc:8e:
         d9:90:96:09:a3:c6:50:72:23:60:ad:9b:f0:fd:38:1c:85:b6:
         b1:7c:7d:97:59:6b:73:f4:ef:3a:20:ab:31:07:e5:dc:bd:ab:
         57:17:f1:2c:da:b6:b6:d3:3b:41:c5:8e:41:d0:0a:99:71:01:
         a9:ed:66:1d:72:45:ba:87:e0:97:a4:46:af:e3:cf:88:b1:17:
         0b:5a:82:dd:72:88:95:ce:c4:19:57:a8:89:ea:15:2d:1f:d8:
         53:52:68:93:9e:53:28:bd:24:51:cf:f5:b3:e7:12:ad:e6:39:
         3c:13:ec:68:75:17:0f:9e:bf:5e:e1:ba:62:3e:39:d3:c1:d6:
         bc:71:17:2e:dd:e1:1c:1b:41:c0:99:67:74:ea:96:dc:3c:f5:
         d7:2b:c3:15:c0:e8:ec:cc:69:4e:8a:57:8a:39:e5:05:32:13:
         00:c9:cb:d7:bc:de:73:8f:ae:22:c1:ad:22:7a:47:74:4e:3c:
         b5:34:2b:62:3e:79:74:85:19:7e:0e:06:23:3a:22:8b:8b:e9:
         a7:9b:58:7f:bc:c4:75:2d:3a:d7:cc:a1:aa:0c:eb:89:44:e6:
         73:4c:82:83:8a:07:4f:30:e9:4c:7a:df:6a:c0:55:5c:6d:c9:
         00:eb:9f:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzUOWPKeAVEQgNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MmEzZjAxYTctMzhiMi00ZjJlLWI1MTYtZmM3NWY1MDJkMjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutYrQ/fPgF+PCEBSpn5ZU8fV97f7S8dSLR/b
srDqF7B8dQ/MF+efJKz6ZAqwmPb9Xt1jy/NIjzQjyZOg+3Wr4ZGMPUNKghzD6/x5
nP/Gw/R2A/rybFu/PVEThTWOcDnYq21w122q+vExLCMkei4pd+rXDFb3mRnioPNh
1Zo0bSUCKHshQhB2h5ab0A8wXempDaXu65pujUpfErsIo/84ajbnT7OQSm1VQdEo
t2h3vzcZbDl09f9nI2CXQ5tSBG2Lsf+lvjIJ/FHY8dvw1J/LHd16JjuhkHZZi1CP
ExRyjj92XLFq32GfrS2uGUrsEBKU4geFdabLk5B3+ORPf8RF3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN7N7ci4icyuCRTRti1ITfWAtGVvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDU5ZTU5YWUtNWZlNi0z
MzA3LTk5OWUtY2YzYTYwODViMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD9rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMpsK5oUVOz2A+9Wupuf+vy8jtmQlgmjxlByI2Ctm/D9OByFtrF8fZdZ
a3P07zogqzEH5dy9q1cX8SzatrbTO0HFjkHQCplxAantZh1yRbqH4JekRq/jz4ix
Fwtagt1yiJXOxBlXqInqFS0f2FNSaJOeUyi9JFHP9bPnEq3mOTwT7Gh1Fw+ev17h
umI+OdPB1rxxFy7d4RwbQcCZZ3Tqltw89dcrwxXA6OzMaU6KV4o55QUyEwDJy9e8
3nOPriLBrSJ6R3ROPLU0K2I+eXSFGX4OBiM6IouL6aebWH+8xHUtOtfMoaoM64lE
5nNMgoOKB08w6Ux632rAVVxtyQDrnyU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:20:42 2025 by rpki-client