Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8122e1-4a7a-3021-ae49-af2fa28a8089.roa
File:                     df8122e1-4a7a-3021-ae49-af2fa28a8089.roa (raw, json)
Hash identifier:          100BNAoU7CTlkLrj57Smr8wFp9NzAd6sFpWt2CmtzT4=
Subject key identifier:   EA:E8:26:CC:F2:AE:60:65:BA:69:40:4A:97:37:10:D4:86:62:E6:4C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCCCB9913F41B42C086180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8122e1-4a7a-3021-ae49-af2fa28a8089.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        70.41.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:cc:b9:91:3f:41:b4:2c:08:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0cae65b0-e28a-4097-bb2f-f25b103031c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:20:24:46:05:b6:1f:27:f2:53:94:13:f7:
                    53:03:11:3c:f3:61:fd:c2:db:12:46:2b:57:a0:03:
                    62:24:d6:db:c5:1b:12:50:f3:96:24:e8:95:61:89:
                    42:0b:9e:07:dc:a3:f4:fd:ba:ab:61:a9:0d:c0:8c:
                    b6:53:1a:8c:ce:d1:39:4e:6e:bf:85:a7:dc:3b:34:
                    74:eb:07:b2:11:52:6d:1e:af:64:82:c4:93:21:37:
                    b1:3a:b1:fa:c1:8c:1b:66:f3:9e:b6:bc:cc:56:90:
                    0c:19:42:4a:b3:46:66:32:ad:71:c9:8c:33:31:e9:
                    a5:d7:47:d5:e2:d0:89:28:7a:63:1b:b2:59:db:e1:
                    4a:33:8f:7f:d2:08:5e:ec:91:fd:21:c6:30:d3:3c:
                    16:45:0b:d2:ff:4d:a7:a5:64:ca:00:94:5e:be:ab:
                    ab:39:0a:c6:81:c5:2d:8d:dd:45:ba:4f:cb:3b:00:
                    57:cc:e8:55:63:c8:84:cd:33:2a:62:04:9f:d5:ff:
                    8b:80:1c:dc:57:1a:bc:82:0d:1e:88:e9:3f:7d:c6:
                    d4:5c:5f:15:2b:b2:1f:5c:cb:ea:1a:99:5d:c0:67:
                    f3:81:18:20:23:cd:20:e8:e1:b7:23:c7:39:04:c0:
                    8f:d3:96:42:97:e4:7e:ad:0f:1f:ce:96:ad:3d:d0:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E8:26:CC:F2:AE:60:65:BA:69:40:4A:97:37:10:D4:86:62:E6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8122e1-4a7a-3021-ae49-af2fa28a8089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:4f:09:a8:89:5e:dd:0a:e4:28:14:96:4c:fc:fa:50:34:bc:
         eb:8a:7f:fb:4f:28:35:9e:7b:d1:d0:50:20:04:f4:f7:cb:ed:
         bf:78:38:bf:a8:d8:b0:d9:9c:b3:74:fa:d3:b8:2b:78:d1:89:
         47:39:5a:45:12:c6:42:1c:76:d8:6d:b1:01:c2:23:34:9e:75:
         95:30:9d:a9:5b:31:03:75:c4:05:7b:07:a4:09:5b:06:7d:a2:
         e8:2b:f0:d8:18:f5:60:1c:83:d3:2f:a2:38:54:08:56:5f:ce:
         0f:4e:70:5a:1b:ca:22:d5:82:98:85:38:57:f1:d7:34:45:66:
         bd:24:00:d1:2b:47:75:ad:a2:02:8a:e8:82:42:97:27:17:54:
         56:ba:7c:b6:1e:c4:9b:3f:6e:dd:19:02:97:6c:0e:84:79:87:
         54:5a:35:22:82:12:93:89:50:df:74:83:b9:0b:54:9f:9e:1f:
         19:a0:30:e6:d6:70:75:9d:23:76:35:13:99:70:71:c4:25:c7:
         1c:15:a7:42:25:32:90:be:68:27:8f:24:6e:f7:c1:68:f9:6b:
         8e:68:2c:6b:a4:3c:7c:a7:32:7e:a2:5e:5f:3b:af:97:48:5d:
         f1:62:f4:f3:ff:b9:00:c9:41:c5:e4:72:e8:38:91:cc:4b:e6:
         31:12:f5:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzMy5kT9BtCwIYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MGNhZTY1YjAtZTI4YS00MDk3LWJiMmYtZjI1YjEwMzAzMWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx4gJEYFth8n8lOUE/dTAxE882H9wtsSRitX
oANiJNbbxRsSUPOWJOiVYYlCC54H3KP0/bqrYakNwIy2UxqMztE5Tm6/hafcOzR0
6weyEVJtHq9kgsSTITexOrH6wYwbZvOetrzMVpAMGUJKs0ZmMq1xyYwzMeml10fV
4tCJKHpjG7JZ2+FKM49/0ghe7JH9IcYw0zwWRQvS/02npWTKAJRevqurOQrGgcUt
jd1Fuk/LOwBXzOhVY8iEzTMqYgSf1f+LgBzcVxq8gg0eiOk/fcbUXF8VK7IfXMvq
GpldwGfzgRggI80g6OG3I8c5BMCP05ZCl+R+rQ8fzpatPdC7tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOroJszyrmBlumlASpc3ENSGYuZMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGY4MTIyZTEtNGE3YS0z
MDIxLWFlNDktYWYyZmEyOGE4MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJRPCaiJXt0K5CgUlkz8+lA0vOuKf/tPKDWee9HQUCAE9PfL7b94OL+o
2LDZnLN0+tO4K3jRiUc5WkUSxkIcdthtsQHCIzSedZUwnalbMQN1xAV7B6QJWwZ9
ougr8NgY9WAcg9MvojhUCFZfzg9OcFobyiLVgpiFOFfx1zRFZr0kANErR3WtogKK
6IJClycXVFa6fLYexJs/bt0ZApdsDoR5h1RaNSKCEpOJUN90g7kLVJ+eHxmgMObW
cHWdI3Y1E5lwccQlxxwVp0IlMpC+aCePJG73wWj5a45oLGukPHynMn6iXl87r5dI
XfFi9PP/uQDJQcXkcug4kcxL5jES9VQ=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:52 2025 by rpki-client