Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48cca1f9-60c4-3fb3-9e2d-f8ff80dd05f4.roa
File:                     48cca1f9-60c4-3fb3-9e2d-f8ff80dd05f4.roa (raw, json)
Hash identifier:          yrq2c4wAbStx99D5KUsxu3/VDPEFRZSRljeQWPkiyrg=
Subject key identifier:   5F:CC:2D:4A:F5:5E:09:9F:9E:92:D2:31:C3:1E:B3:EF:27:67:4C:2F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDEE82801919568DB98A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48cca1f9-60c4-3fb3-9e2d-f8ff80dd05f4.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.21.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:ee:82:80:19:19:56:8d:b9:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=712e921b-5775-4ac2-b877-c52261694a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:3d:af:e6:66:82:ed:fc:1b:c4:17:64:b5:
                    ed:55:29:79:fc:9e:6f:66:25:79:30:a0:08:2d:51:
                    61:72:92:8b:b5:54:c7:56:15:bc:dc:e0:72:e2:23:
                    d2:7c:fb:f4:63:ec:31:94:f7:94:5d:fc:e7:9f:10:
                    29:a6:79:ec:86:3f:30:e3:a0:34:06:55:e7:d2:e4:
                    51:40:a1:99:4a:a3:2f:ee:e9:61:2b:6e:bc:f6:40:
                    e5:ec:ce:97:fb:95:f4:9f:61:c3:1a:a0:74:55:7d:
                    e2:48:b6:1d:ff:24:0d:f4:c2:da:8b:1c:93:c2:98:
                    f9:f6:c7:ee:26:56:69:9b:80:7c:d1:5d:59:d7:08:
                    92:1e:b7:3d:46:a9:50:e6:42:1d:e0:4d:4f:6b:24:
                    41:4f:31:5d:fa:bd:10:71:cf:5c:95:68:ef:d8:bf:
                    53:df:d2:20:5b:75:f9:dc:0e:eb:d3:4d:3a:9c:e0:
                    cd:17:97:e4:1b:27:dd:55:91:01:34:e4:65:d2:9e:
                    f5:7d:66:b5:27:eb:d3:0e:89:ed:9d:3a:9e:b9:bb:
                    b6:42:77:c6:41:15:20:96:b3:a2:41:48:70:e1:92:
                    e7:55:4a:94:37:87:a8:4e:3a:12:23:96:a3:7e:6b:
                    64:ae:97:cc:b3:17:33:5f:e4:4a:f0:54:61:d1:e1:
                    0e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CC:2D:4A:F5:5E:09:9F:9E:92:D2:31:C3:1E:B3:EF:27:67:4C:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48cca1f9-60c4-3fb3-9e2d-f8ff80dd05f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:06:85:96:08:89:85:9d:7a:e0:db:7e:60:c5:ec:63:98:5c:
         73:61:6d:68:32:72:28:6e:02:09:50:b3:bb:cd:44:8f:ec:55:
         26:3c:b6:1b:b7:f3:7a:cb:aa:4b:9c:3b:3a:c6:cb:65:4f:6f:
         28:49:9e:bb:34:79:4e:65:c8:a4:47:4d:b9:13:7a:04:d1:9c:
         68:af:84:f7:c9:24:80:50:7d:35:54:01:80:b2:49:07:2c:ab:
         5d:a6:d1:3e:fe:be:29:8e:48:50:da:1c:0c:58:bb:0a:2c:cb:
         9d:00:70:fe:89:13:bd:c1:5a:2b:7d:16:0a:4a:e5:64:60:a3:
         35:7f:f5:2b:71:cf:74:1a:4f:04:ba:6c:f4:ab:e0:bd:20:27:
         85:8e:3a:ab:88:df:d0:d5:b7:32:91:ae:9b:af:6a:da:bf:8d:
         5a:db:b1:c6:95:af:90:35:1a:98:28:b3:32:68:29:c5:a7:cf:
         9b:da:eb:da:63:1c:7f:8c:48:94:51:cb:94:12:f9:98:05:3c:
         34:2c:ee:55:73:7e:9c:9a:22:77:28:94:ea:b7:db:84:45:18:
         67:b4:01:f9:cf:07:ef:62:d9:d5:25:6a:a4:4d:33:84:66:ce:
         3d:21:7e:a0:8f:e2:af:65:2d:b9:98:87:29:b6:85:7e:a6:a5:
         0d:b3:ab:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkze6CgBkZVo25igAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NzEyZTkyMWItNTc3NS00YWMyLWI4NzctYzUyMjYxNjk0YTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpM9r+Zmgu38G8QXZLXtVSl5/J5vZiV5MKAI
LVFhcpKLtVTHVhW83OBy4iPSfPv0Y+wxlPeUXfznnxAppnnshj8w46A0BlXn0uRR
QKGZSqMv7ulhK2689kDl7M6X+5X0n2HDGqB0VX3iSLYd/yQN9MLaixyTwpj59sfu
JlZpm4B80V1Z1wiSHrc9RqlQ5kId4E1PayRBTzFd+r0Qcc9clWjv2L9T39IgW3X5
3A7r0006nODNF5fkGyfdVZEBNORl0p71fWa1J+vTDontnTqeubu2QnfGQRUglrOi
QUhw4ZLnVUqUN4eoTjoSI5ajfmtkrpfMsxczX+RK8FRh0eEOqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF/MLUr1XgmfnpLSMcMes+8nZ0wvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDhjY2ExZjktNjBjNC0z
ZmIzLTllMmQtZjhmZjgwZGQwNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAGhZYIiYWdeuDbfmDF7GOYXHNhbWgycihuAglQs7vNRI/sVSY8thu3
83rLqkucOzrGy2VPbyhJnrs0eU5lyKRHTbkTegTRnGivhPfJJIBQfTVUAYCySQcs
q12m0T7+vimOSFDaHAxYuwosy50AcP6JE73BWit9FgpK5WRgozV/9Stxz3QaTwS6
bPSr4L0gJ4WOOquI39DVtzKRrpuvatq/jVrbscaVr5A1GpgoszJoKcWnz5va69pj
HH+MSJRRy5QS+ZgFPDQs7lVzfpyaIncolOq324RFGGe0AfnPB+9i2dUlaqRNM4Rm
zj0hfqCP4q9lLbmYhym2hX6mpQ2zq1o=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:02 2025 by rpki-client