Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed3a47e6-585d-31e5-b3ea-38c87ff07f25.roa
File:                     ed3a47e6-585d-31e5-b3ea-38c87ff07f25.roa (raw, json)
Hash identifier:          c7lVCQugFK4EKD43V7RP2mu8pyWPYfZDasi2cWGHvJ8=
Subject key identifier:   84:BD:FB:61:70:B3:A2:81:AD:74:93:65:DC:42:D1:D7:92:BE:46:83
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD41C971399852349C2D40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed3a47e6-585d-31e5-b3ea-38c87ff07f25.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:41:c9:71:39:98:52:34:9c:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=3348b03e-be60-4c2e-84b3-47bddf7c0187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:04:13:0a:62:e1:ae:c4:24:29:fd:5d:90:
                    96:e9:04:67:0d:36:38:ac:08:b0:14:be:2d:37:cf:
                    2d:16:5d:b7:e5:d8:a6:3b:fa:8c:e9:0c:26:8a:c5:
                    fe:fd:93:ca:65:d4:26:85:68:76:12:29:e9:1f:b8:
                    3a:56:ad:8c:35:e7:ef:0b:cf:29:51:68:d1:33:54:
                    9c:78:c1:9d:21:25:20:f7:f0:5d:fe:61:41:48:43:
                    59:fc:5e:65:99:35:c1:7c:81:f4:b0:0c:41:88:e8:
                    aa:76:9d:cc:91:52:ed:13:e9:5f:43:6c:83:84:71:
                    8c:83:50:03:4c:85:d7:1c:da:90:29:59:4b:35:9a:
                    13:fa:5c:df:f4:63:d6:62:2b:91:af:f4:a5:49:94:
                    69:46:6f:60:e2:82:1f:e1:df:e8:7e:13:00:0f:e3:
                    5c:15:03:dc:77:0b:1f:ac:5a:ce:78:f3:5f:ab:9a:
                    11:25:7b:9c:87:04:00:fb:1f:81:a5:6f:2d:7f:02:
                    b2:15:1e:a9:c7:e6:b2:b9:36:bb:e3:3c:09:3e:fe:
                    01:03:bb:e6:41:ed:96:47:c1:55:56:e2:51:e5:ac:
                    7f:64:53:a5:1f:70:cb:8f:ee:5a:8f:9d:77:fe:14:
                    26:c8:ef:29:17:0c:30:e8:d8:0b:0a:a8:0e:7b:b3:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BD:FB:61:70:B3:A2:81:AD:74:93:65:DC:42:D1:D7:92:BE:46:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed3a47e6-585d-31e5-b3ea-38c87ff07f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0e:97:6f:69:f3:01:69:87:ae:8e:c3:7d:e7:c9:00:b9:12:
         d7:e9:db:aa:51:89:45:7e:77:f6:a4:11:c3:57:68:26:2f:80:
         9e:eb:ae:43:aa:63:08:37:83:89:71:cb:eb:2e:fe:a6:ec:c5:
         77:83:3e:69:e9:1c:b6:9f:6b:18:de:22:ac:91:15:4a:33:b1:
         20:0f:5a:22:b9:a1:fc:a1:df:52:c1:5a:c2:76:c7:c3:e3:93:
         b9:39:c5:af:61:9f:a6:a9:9e:85:01:73:09:b3:9f:f7:32:1c:
         15:7e:f7:9e:5c:fe:a6:62:67:6f:09:a1:44:2e:34:39:24:f0:
         d0:cc:59:19:48:03:8a:a5:9a:e6:71:b5:a8:5d:12:1d:ec:d1:
         ba:fb:eb:d9:2b:72:16:cb:c2:d7:ae:c9:8b:53:58:9f:b8:c6:
         13:d6:52:f9:71:26:28:f3:72:81:5c:4d:63:8a:93:4a:a8:28:
         4e:cd:3d:34:6f:3a:98:d2:09:57:33:ab:e1:7f:ae:9e:df:4f:
         13:3b:b0:d4:e4:04:51:f4:37:6f:9b:24:48:05:6e:cc:88:fc:
         cc:ae:bc:e3:d1:37:fd:6f:02:89:6b:f8:1d:08:3a:b9:69:ca:
         3e:e6:90:4b:af:3f:82:14:87:50:04:08:7e:7b:fb:e8:0b:d8:
         c2:e5:6c:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzUHJcTmYUjScLUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MzM0OGIwM2UtYmU2MC00YzJlLTg0YjMtNDdiZGRmN2MwMTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKEEEwpi4a7EJCn9XZCW6QRnDTY4rAiwFL4t
N88tFl235dimO/qM6QwmisX+/ZPKZdQmhWh2EinpH7g6Vq2MNefvC88pUWjRM1Sc
eMGdISUg9/Bd/mFBSENZ/F5lmTXBfIH0sAxBiOiqdp3MkVLtE+lfQ2yDhHGMg1AD
TIXXHNqQKVlLNZoT+lzf9GPWYiuRr/SlSZRpRm9g4oIf4d/ofhMAD+NcFQPcdwsf
rFrOePNfq5oRJXuchwQA+x+BpW8tfwKyFR6px+ayuTa74zwJPv4BA7vmQe2WR8FV
VuJR5ax/ZFOlH3DLj+5aj513/hQmyO8pFwww6NgLCqgOe7MvXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIS9+2Fws6KBrXSTZdxC0deSvkaDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWQzYTQ3ZTYtNTg1ZC0z
MWU1LWIzZWEtMzhjODdmZjA3ZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD8bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEOl29p8wFph66Ow33nyQC5Etfp26pRiUV+d/akEcNXaCYvgJ7rrkOq
Ywg3g4lxy+su/qbsxXeDPmnpHLafaxjeIqyRFUozsSAPWiK5ofyh31LBWsJ2x8Pj
k7k5xa9hn6apnoUBcwmzn/cyHBV+955c/qZiZ28JoUQuNDkk8NDMWRlIA4qlmuZx
tahdEh3s0br769krchbLwteuyYtTWJ+4xhPWUvlxJijzcoFcTWOKk0qoKE7NPTRv
OpjSCVczq+F/rp7fTxM7sNTkBFH0N2+bJEgFbsyI/MyuvOPRN/1vAolr+B0IOrlp
yj7mkEuvP4IUh1AECH57++gL2MLlbL8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:41 2025 by rpki-client