Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa
File:                     8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa (raw, json)
Hash identifier:          YaV1LNrMIgO4Q8nnnb27KvEKaESLA+2NZ8jHa4D1JyQ=
Subject key identifier:   D8:74:F3:EA:E6:F3:D4:F6:82:55:75:53:D8:AF:AE:68:D2:2B:0A:2B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD1CDA22A67A6C36EEC440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:1c:da:22:a6:7a:6c:36:ee:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=379700f6-8e3e-4c4c-a940-36fcc4488655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:f2:a4:e3:75:10:72:24:9f:7c:d3:28:0c:
                    8c:28:51:ef:bf:60:38:49:9d:b9:ba:65:d1:7b:48:
                    74:e4:27:62:3d:f6:64:8a:2d:bf:80:88:d9:87:a2:
                    e9:f0:42:32:08:c0:ea:fb:a6:ce:ac:c2:34:db:0c:
                    f5:49:24:ff:17:83:74:23:dc:57:26:f0:50:dd:44:
                    28:61:da:b6:c9:aa:82:be:3b:00:98:b7:93:db:d5:
                    36:e6:7d:80:b4:56:88:99:6a:04:21:f2:aa:e6:81:
                    72:ff:ab:20:8e:55:34:c7:76:96:ca:f2:14:b0:05:
                    bb:64:4e:da:c1:78:49:ef:99:6e:4d:f5:8b:93:92:
                    00:f5:3f:b2:00:29:73:4c:f2:d6:f8:ef:5b:a8:da:
                    92:a1:08:d7:66:63:52:42:33:ad:2e:73:35:ff:8d:
                    b4:eb:b7:e8:7b:94:d9:a5:24:5e:bc:ab:70:86:f8:
                    ef:77:a9:5f:e0:27:49:56:f4:c1:47:64:9c:83:a0:
                    83:31:30:14:56:6d:54:d2:f1:5e:d1:8e:55:a6:28:
                    de:fb:96:73:eb:a3:1c:fa:42:4e:86:b6:27:59:9b:
                    20:3c:7e:b7:47:d6:b3:06:ae:55:02:6d:41:8a:f5:
                    02:bf:de:59:90:20:d7:63:b6:ce:60:51:a9:c2:1d:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:74:F3:EA:E6:F3:D4:F6:82:55:75:53:D8:AF:AE:68:D2:2B:0A:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:24:24:63:b4:7e:36:df:64:10:a1:18:3b:16:00:c8:37:fe:
         ae:02:f8:ab:1c:a9:11:67:e9:b1:2f:89:db:a3:30:95:cc:bb:
         4b:3c:30:eb:f7:60:a5:3b:1e:52:55:92:6b:27:94:dd:1f:f6:
         69:ea:ce:f7:2d:2f:4a:ca:da:02:91:8e:5d:df:f2:fa:44:20:
         7e:8d:b5:6d:60:55:9e:2d:32:aa:87:41:e3:ed:86:71:ec:8e:
         28:5b:6c:64:cc:54:8c:75:59:e6:76:58:4b:df:85:03:11:a9:
         21:f7:7f:9a:46:db:ee:36:94:9b:78:5e:c0:16:66:bb:3d:04:
         25:ad:b0:20:44:7b:bb:e6:a7:0b:d8:dd:30:bc:68:0a:10:53:
         53:3e:ad:68:9b:da:95:df:07:ef:60:c3:4b:0c:22:88:47:17:
         70:32:1a:40:45:ab:34:cd:7c:39:3c:60:1c:da:e8:66:07:5b:
         f9:25:5b:4b:59:64:92:2d:74:57:c9:84:3b:50:78:82:ac:f8:
         38:31:8d:af:d7:74:46:33:43:85:2f:1a:6f:4a:66:96:f9:a7:
         b1:7b:f6:69:e6:87:d0:27:1b:b1:c7:f3:65:4d:d3:01:3f:fc:
         36:12:7a:c9:75:45:88:67:89:ed:6c:12:6e:3f:13:f0:a9:be:
         cb:88:46:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRzaIqZ6bDbuxEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
Mzc5NzAwZjYtOGUzZS00YzRjLWE5NDAtMzZmY2M0NDg4NjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDnypON1EHIkn3zTKAyMKFHvv2A4SZ25umXR
e0h05CdiPfZkii2/gIjZh6Lp8EIyCMDq+6bOrMI02wz1SST/F4N0I9xXJvBQ3UQo
Ydq2yaqCvjsAmLeT29U25n2AtFaImWoEIfKq5oFy/6sgjlU0x3aWyvIUsAW7ZE7a
wXhJ75luTfWLk5IA9T+yAClzTPLW+O9bqNqSoQjXZmNSQjOtLnM1/42067foe5TZ
pSRevKtwhvjvd6lf4CdJVvTBR2Scg6CDMTAUVm1U0vFe0Y5Vpije+5Zz66Mc+kJO
hrYnWZsgPH63R9azBq5VAm1BivUCv95ZkCDXY7bOYFGpwh2LYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNh08+rm89T2glV1U9ivrmjSKworMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGNkMDMxNGYtYjk4Mi0z
OGY2LWFkYmMtNmNmNjYzMWRlMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYkJGO0fjbfZBChGDsWAMg3/q4C+KscqRFn6bEvidujMJXMu0s8MOv3
YKU7HlJVkmsnlN0f9mnqzvctL0rK2gKRjl3f8vpEIH6NtW1gVZ4tMqqHQePthnHs
jihbbGTMVIx1WeZ2WEvfhQMRqSH3f5pG2+42lJt4XsAWZrs9BCWtsCBEe7vmpwvY
3TC8aAoQU1M+rWib2pXfB+9gw0sMIohHF3AyGkBFqzTNfDk8YBza6GYHW/klW0tZ
ZJItdFfJhDtQeIKs+Dgxja/XdEYzQ4UvGm9KZpb5p7F79mnmh9AnG7HH82VN0wE/
/DYSesl1RYhnie1sEm4/E/CpvsuIRi0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:23:53 2025 by rpki-client