Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9093e5ab-dbb1-3494-abea-f7ebc4c69303.roa
File:                     9093e5ab-dbb1-3494-abea-f7ebc4c69303.roa (raw, json)
Hash identifier:          GfYsGmy2eRwyP5BHrB9zhoiLABwXmi5A8vIzflBCNcw=
Subject key identifier:   93:CF:C6:F4:68:36:17:64:18:E6:38:CE:1D:77:8D:92:37:A0:3A:F9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD2F16BC297894DDABF780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9093e5ab-dbb1-3494-abea-f7ebc4c69303.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.21.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:2f:16:bc:29:78:94:dd:ab:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c6e2cc7a-f2a5-41e6-a99f-d8601473a75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:a0:fc:f2:62:44:b1:17:f2:c0:3e:0f:61:
                    44:57:01:81:78:25:96:cd:7b:16:f1:67:41:ca:82:
                    64:ef:0c:06:a5:dc:d9:ef:13:80:d8:3c:a5:50:72:
                    95:a8:01:de:be:98:2e:c4:8c:6c:2a:4b:17:5a:ec:
                    b3:a6:78:17:22:9b:8c:ab:cf:51:d7:09:91:1e:03:
                    ef:a9:85:d4:7f:5e:aa:8c:96:db:60:17:68:64:9c:
                    67:5d:d3:f2:8c:92:ca:8f:c1:92:d9:b0:3f:74:0c:
                    53:29:9e:29:49:d7:c5:98:73:2e:6e:91:94:c1:bb:
                    f8:60:eb:4b:f2:bc:32:58:58:f1:b3:93:29:ee:76:
                    27:4d:a9:17:98:44:47:48:43:e9:e0:0e:e6:81:59:
                    d5:bd:7e:21:40:03:a6:da:52:de:66:c6:5f:57:ea:
                    6c:5d:bf:56:11:69:c9:ff:03:37:86:5b:c7:e9:97:
                    ad:81:e3:f3:79:da:51:c0:3c:f3:70:ba:e9:1a:8d:
                    e1:ff:a9:08:a7:1d:82:ca:38:7a:de:cd:41:c4:84:
                    c5:7b:b9:d3:a4:ce:4c:30:90:bf:a1:66:09:47:13:
                    ea:46:e8:ae:6f:09:b6:18:9a:db:05:0e:ef:ba:52:
                    e7:83:a2:b2:2e:d5:43:56:7c:e0:aa:48:ca:d2:52:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CF:C6:F4:68:36:17:64:18:E6:38:CE:1D:77:8D:92:37:A0:3A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9093e5ab-dbb1-3494-abea-f7ebc4c69303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:97:5c:1c:6e:ee:30:12:d8:4d:58:c5:30:97:ec:8f:f7:18:
         0a:a3:9f:9a:1f:39:ff:e9:c7:36:fe:14:31:01:89:57:0d:25:
         57:04:07:2d:ae:5f:d2:a2:9c:28:53:5a:b1:ee:3c:f7:03:fa:
         5c:59:a5:2f:6a:a0:37:d1:91:3f:5d:2d:37:1f:23:21:f9:f3:
         13:a5:a4:c3:53:4e:97:ce:e8:db:a3:82:de:da:b8:b5:76:01:
         b8:28:0f:ae:0a:5e:0c:6a:f6:c5:93:e2:ad:9a:dc:53:c4:b4:
         95:cb:bb:35:1f:f9:f7:fc:9c:6b:a9:39:56:97:ce:01:7d:14:
         17:4e:a1:c6:cf:dc:e3:cb:c7:04:27:dc:b4:58:de:e5:6f:05:
         df:7e:7c:97:83:b0:c9:4c:72:2d:34:a1:4c:1c:ea:31:2a:30:
         ba:59:dc:e4:43:3a:3d:e9:26:5b:e5:c1:f0:53:b7:9f:5f:e4:
         64:84:67:61:85:dd:d9:0b:49:20:af:29:d0:f4:c0:8c:c6:e6:
         1e:f3:12:08:c7:7c:86:8c:35:09:aa:ca:58:ff:e8:3b:dd:a4:
         01:97:58:67:3e:51:c9:71:70:f3:ed:b2:79:e1:a9:38:2f:e3:
         7a:ad:e8:9d:b8:23:c7:01:10:e2:3c:98:98:3c:d0:3e:0b:8f:
         0b:d0:a8:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzS8WvCl4lN2r94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
YzZlMmNjN2EtZjJhNS00MWU2LWE5OWYtZDg2MDE0NzNhNzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1Gg/PJiRLEX8sA+D2FEVwGBeCWWzXsW8WdB
yoJk7wwGpdzZ7xOA2DylUHKVqAHevpguxIxsKksXWuyzpngXIpuMq89R1wmRHgPv
qYXUf16qjJbbYBdoZJxnXdPyjJLKj8GS2bA/dAxTKZ4pSdfFmHMubpGUwbv4YOtL
8rwyWFjxs5Mp7nYnTakXmERHSEPp4A7mgVnVvX4hQAOm2lLeZsZfV+psXb9WEWnJ
/wM3hlvH6ZetgePzedpRwDzzcLrpGo3h/6kIpx2Cyjh63s1BxITFe7nTpM5MMJC/
oWYJRxPqRuiubwm2GJrbBQ7vulLng6KyLtVDVnzgqkjK0lISfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPPxvRoNhdkGOY4zh13jZI3oDr5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTA5M2U1YWItZGJiMS0z
NDk0LWFiZWEtZjdlYmM0YzY5MzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBUFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaXXBxu7jAS2E1YxTCX7I/3GAqjn5ofOf/pxzb+FDEBiVcNJVcEBy2u
X9KinChTWrHuPPcD+lxZpS9qoDfRkT9dLTcfIyH58xOlpMNTTpfO6Nujgt7auLV2
AbgoD64KXgxq9sWT4q2a3FPEtJXLuzUf+ff8nGupOVaXzgF9FBdOocbP3OPLxwQn
3LRY3uVvBd9+fJeDsMlMci00oUwc6jEqMLpZ3ORDOj3pJlvlwfBTt59f5GSEZ2GF
3dkLSSCvKdD0wIzG5h7zEgjHfIaMNQmqylj/6DvdpAGXWGc+UclxcPPtsnnhqTgv
43qt6J24I8cBEOI8mJg80D4LjwvQqIM=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:51 2025 by rpki-client