Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d0d0296-716f-31d6-b0b9-e4b43615bfe5.roa
File:                     7d0d0296-716f-31d6-b0b9-e4b43615bfe5.roa (raw, json)
Hash identifier:          3v95Cpe9TtLMCxdshF3xhHPQ8B4+fZ4fWxx8vdO71aA=
Subject key identifier:   28:11:94:62:96:2D:4E:D3:8C:B3:B6:C7:1F:05:51:48:F6:67:91:C9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE02A923402AD30B76A500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d0d0296-716f-31d6-b0b9-e4b43615bfe5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:02:a9:23:40:2a:d3:0b:76:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=848da23d-be0b-4076-98bc-2a97736d7f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:23:ab:30:8c:18:eb:65:ec:b8:ea:4c:bd:05:
                    34:2a:11:28:7b:cd:9d:d9:60:d4:e4:26:7d:af:f9:
                    51:40:eb:86:f0:50:9f:a4:91:e6:4d:3e:21:38:92:
                    fb:83:ba:d9:eb:db:d2:96:82:27:c1:82:66:28:b4:
                    04:f1:7f:77:56:d7:17:f1:93:a3:07:a4:09:3f:fa:
                    7b:3d:f0:44:38:dc:a6:8d:9a:fe:28:e6:82:1d:14:
                    aa:53:74:74:0b:f1:9f:2c:59:bc:bc:62:3f:86:60:
                    e6:67:e3:41:dd:0d:5f:44:2c:15:06:79:2a:f9:b9:
                    c6:ca:54:33:0d:c8:39:5b:9f:31:52:cd:a6:17:70:
                    a8:7e:28:46:2b:ac:74:91:63:94:13:a9:94:70:bb:
                    41:25:56:90:e0:3e:fc:5f:eb:d8:26:ce:53:77:63:
                    e9:5d:c2:03:d2:ce:1f:b6:95:20:43:5d:b8:a4:ce:
                    6b:8d:e2:dc:dd:f5:b2:86:38:1c:50:e7:be:6d:e2:
                    be:cb:b4:f1:3d:4b:72:06:0d:b7:da:e4:ab:bd:f7:
                    9e:c0:39:7c:73:86:e0:61:fe:34:33:90:53:dd:94:
                    c6:83:f2:10:9c:33:2e:a9:0b:e6:f0:96:7a:6d:be:
                    73:b7:8b:f3:bf:69:1a:ae:92:f6:07:53:b4:75:e0:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:11:94:62:96:2D:4E:D3:8C:B3:B6:C7:1F:05:51:48:F6:67:91:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7d0d0296-716f-31d6-b0b9-e4b43615bfe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:b5:a7:43:6b:2d:36:e4:e7:1d:f6:3e:6e:64:ef:dc:3e:
         cd:2f:04:06:5b:0c:23:31:a1:32:9f:2d:d5:4e:b9:35:d6:c8:
         40:31:12:f0:da:45:36:16:33:81:a0:00:a4:77:a1:86:48:9e:
         02:3c:55:74:b9:7e:1c:7f:3d:81:84:9d:b4:00:10:ae:4c:97:
         40:24:35:50:b6:b4:ca:c8:45:00:b5:9d:e2:f2:48:a8:23:9b:
         35:0e:a2:a6:e1:82:60:52:dd:49:c1:17:8b:f4:6a:30:04:c9:
         fd:59:38:80:58:f6:ca:5d:b3:2b:d0:7a:c0:77:42:23:52:4a:
         24:0d:0b:a2:c2:3f:0c:14:cb:f3:85:68:e9:70:a0:9f:67:c1:
         c2:5b:8f:c5:6a:a6:29:1f:49:43:78:3d:f2:70:e3:17:52:46:
         1c:53:29:98:32:e2:a6:b5:96:81:4d:8e:0e:00:77:da:0c:fe:
         64:f2:c2:7e:27:d8:a5:3c:bd:00:81:10:ee:ec:58:bc:b2:18:
         33:f0:ec:16:e1:9b:cc:00:c5:ea:25:21:98:3a:0e:b8:9c:2a:
         4e:13:2e:eb:9a:42:26:a8:33:0a:dc:a6:22:a8:9f:47:7c:f8:
         3d:cd:a8:81:53:4a:11:45:16:e7:59:1b:10:17:45:05:93:f7:
         4c:a7:29:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgKpI0Aq0wt2pQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ODQ4ZGEyM2QtYmUwYi00MDc2LTk4YmMtMmE5NzczNmQ3ZjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCOrMIwY62XsuOpMvQU0KhEoe82d2WDU5CZ9
r/lRQOuG8FCfpJHmTT4hOJL7g7rZ69vSloInwYJmKLQE8X93VtcX8ZOjB6QJP/p7
PfBEONymjZr+KOaCHRSqU3R0C/GfLFm8vGI/hmDmZ+NB3Q1fRCwVBnkq+bnGylQz
Dcg5W58xUs2mF3CofihGK6x0kWOUE6mUcLtBJVaQ4D78X+vYJs5Td2PpXcID0s4f
tpUgQ124pM5rjeLc3fWyhjgcUOe+beK+y7TxPUtyBg232uSrvfeewDl8c4bgYf40
M5BT3ZTGg/IQnDMuqQvm8JZ6bb5zt4vzv2karpL2B1O0deBnMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgRlGKWLU7TjLO2xx8FUUj2Z5HJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2QwZDAyOTYtNzE2Zi0z
MWQ2LWIwYjktZTRiNDM2MTViZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD/KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAu3tadDay025Ocd9j5uZO/cPs0vBAZbDCMxoTKfLdVOuTXWyEAxEvDa
RTYWM4GgAKR3oYZIngI8VXS5fhx/PYGEnbQAEK5Ml0AkNVC2tMrIRQC1neLySKgj
mzUOoqbhgmBS3UnBF4v0ajAEyf1ZOIBY9spdsyvQesB3QiNSSiQNC6LCPwwUy/OF
aOlwoJ9nwcJbj8VqpikfSUN4PfJw4xdSRhxTKZgy4qa1loFNjg4Ad9oM/mTywn4n
2KU8vQCBEO7sWLyyGDPw7Bbhm8wAxeolIZg6DricKk4TLuuaQiaoMwrcpiKon0d8
+D3NqIFTShFFFudZGxAXRQWT90ynKQw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:39:49 2025 by rpki-client