Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf096800-8644-3e1e-bb9a-0078c6f86ccc.roa
File:                     cf096800-8644-3e1e-bb9a-0078c6f86ccc.roa (raw, json)
Hash identifier:          Dkq5vvVFkOXQGivsZy03G6x3ZL/5DVg5DI2yO+Tz+oc=
Subject key identifier:   9F:24:23:56:DA:38:43:2E:4D:E3:45:37:40:1F:0D:A1:14:CF:22:0B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE0637D859D1FFD3015B40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf096800-8644-3e1e-bb9a-0078c6f86ccc.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        198.45.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:06:37:d8:59:d1:ff:d3:01:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=4494392b-dd5e-4cae-8a80-151a14bff946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:aa:d3:81:34:9e:a7:d1:b1:66:64:67:e4:
                    e7:07:5d:07:c6:f2:48:8f:e9:1c:2d:eb:22:76:ed:
                    b9:96:25:d8:a3:fa:3f:b2:c4:9a:62:9c:fd:66:3a:
                    e3:2e:ed:b2:6f:20:60:4c:45:d2:2f:8a:02:88:1e:
                    87:9c:af:5f:59:2c:5c:a6:4a:5c:36:99:4e:e5:85:
                    fb:11:61:2a:dc:16:1a:6e:20:65:fe:d8:0b:e4:d4:
                    2a:18:17:be:b4:13:08:12:74:ba:c7:06:3f:70:36:
                    28:db:01:cc:d2:f6:ff:b5:4b:4c:1e:d2:8f:3a:b6:
                    07:9e:9d:d7:b8:0e:7f:56:14:59:03:bb:3e:57:46:
                    88:81:f6:2d:97:cd:79:18:a1:90:aa:40:c3:00:4b:
                    e8:be:88:2a:12:a3:6c:a3:26:c2:81:0e:5b:c5:f4:
                    d8:7a:12:5b:3c:ed:af:d6:24:cc:33:4a:cc:25:f1:
                    e4:3b:53:8a:6d:9f:56:31:93:f2:96:2e:25:ad:ee:
                    0d:e7:5c:4e:dc:a8:f6:84:c7:d7:49:2e:f2:08:a9:
                    b1:1b:f9:98:92:60:1e:df:63:ea:76:0e:7a:50:96:
                    94:1d:2b:ef:5f:b1:24:0f:60:df:3c:19:5a:8b:08:
                    eb:09:40:03:f9:fc:36:b6:3a:c9:14:04:3a:ed:60:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:24:23:56:DA:38:43:2E:4D:E3:45:37:40:1F:0D:A1:14:CF:22:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf096800-8644-3e1e-bb9a-0078c6f86ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:cb:c2:f0:f8:4b:a0:a1:21:ee:5e:14:40:a9:bf:48:ca:aa:
         c3:e6:a2:60:19:c7:6c:80:b8:9b:3d:c7:34:11:ee:49:26:25:
         0e:6f:b5:55:03:da:51:96:24:58:9f:ee:e2:5e:7a:6c:54:d1:
         9b:78:9b:d4:3d:54:e1:03:ca:26:3f:5c:a0:de:61:6a:a4:8d:
         7e:a9:9e:c1:52:31:96:4c:f0:23:4b:a8:f2:63:3d:49:ce:4f:
         a5:5b:de:8a:17:04:23:4c:07:a8:9d:26:e7:ce:13:04:0e:7f:
         73:8b:25:ad:16:87:af:af:e7:2e:aa:2b:6d:18:36:58:1c:96:
         b1:be:37:89:54:2d:9d:85:b3:47:61:c5:a2:53:ba:30:69:87:
         d9:fb:aa:1f:ee:5a:a6:c7:29:56:41:b9:c3:82:70:7a:f3:95:
         54:4c:3f:6f:d1:b5:09:6d:25:04:79:b9:0f:8d:a0:d8:87:d8:
         6a:1d:52:e0:be:ad:af:02:e9:30:15:84:87:a5:d3:c7:d5:9a:
         a0:1b:19:05:08:b7:65:cf:49:ee:06:2b:99:02:53:ad:8c:cf:
         54:46:b4:30:78:5f:6a:d4:c9:87:c3:a6:43:6a:6d:2c:d2:2c:
         c6:76:96:8d:8b:ac:a7:fd:4a:ac:82:8e:3a:17:ed:4f:33:28:
         ea:db:5b:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgY32FnR/9MBW0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NDQ5NDM5MmItZGQ1ZS00Y2FlLThhODAtMTUxYTE0YmZmOTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/6q04E0nqfRsWZkZ+TnB10HxvJIj+kcLesi
du25liXYo/o/ssSaYpz9ZjrjLu2ybyBgTEXSL4oCiB6HnK9fWSxcpkpcNplO5YX7
EWEq3BYabiBl/tgL5NQqGBe+tBMIEnS6xwY/cDYo2wHM0vb/tUtMHtKPOrYHnp3X
uA5/VhRZA7s+V0aIgfYtl815GKGQqkDDAEvovogqEqNsoybCgQ5bxfTYehJbPO2v
1iTMM0rMJfHkO1OKbZ9WMZPyli4lre4N51xO3Kj2hMfXSS7yCKmxG/mYkmAe32Pq
dg56UJaUHSvvX7EkD2DfPBlaiwjrCUAD+fw2tjrJFAQ67WAjBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8kI1baOEMuTeNFN0AfDaEUzyILMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2YwOTY4MDAtODY0NC0z
ZTFlLWJiOWEtMDA3OGM2Zjg2Y2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi27MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvLwvD4S6ChIe5eFECpv0jKqsPmomAZx2yAuJs9xzQR7kkmJQ5vtVUD
2lGWJFif7uJeemxU0Zt4m9Q9VOEDyiY/XKDeYWqkjX6pnsFSMZZM8CNLqPJjPUnO
T6Vb3ooXBCNMB6idJufOEwQOf3OLJa0Wh6+v5y6qK20YNlgclrG+N4lULZ2Fs0dh
xaJTujBph9n7qh/uWqbHKVZBucOCcHrzlVRMP2/RtQltJQR5uQ+NoNiH2GodUuC+
ra8C6TAVhIel08fVmqAbGQUIt2XPSe4GK5kCU62Mz1RGtDB4X2rUyYfDpkNqbSzS
LMZ2lo2LrKf9SqyCjjoX7U8zKOrbW3E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:22 2025 by rpki-client