Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2ef6ff0-ffdc-3e01-a69c-c21c16aa9409.roa
File:                     f2ef6ff0-ffdc-3e01-a69c-c21c16aa9409.roa (raw, json)
Hash identifier:          b/wL9HJhBfW4gTLDWY2o7YEnLHj05dBRlZqgM4szVFg=
Subject key identifier:   8B:79:1B:FC:F5:B9:51:AE:33:0F:9E:68:E5:31:AC:12:D9:E2:38:ED
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE029A7760966E25B69300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2ef6ff0-ffdc-3e01-a69c-c21c16aa9409.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:02:9a:77:60:96:6e:25:b6:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=3f6573b8-71cc-4860-a198-7c1c25e76a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:f4:ed:19:e2:27:b1:8c:91:90:d8:f9:7e:
                    ce:ec:27:27:2d:ea:01:12:ee:ef:48:d0:61:6f:17:
                    98:34:5c:4b:81:ea:90:a9:c6:ba:05:86:94:66:bd:
                    b8:e4:de:29:cc:50:db:19:d5:0a:6d:ec:4a:f2:69:
                    70:72:7d:a3:4f:1e:3a:06:a4:c0:15:9b:73:15:fe:
                    df:8f:f1:2a:c6:85:13:55:eb:18:b1:bc:c6:01:51:
                    c0:9c:7c:84:99:69:6b:37:47:6b:79:6b:33:19:c5:
                    2c:f0:65:c0:1b:68:57:fc:7f:87:7c:5e:8c:e7:8b:
                    68:a3:e9:ef:1d:70:11:c0:3b:7e:81:8b:70:19:0e:
                    75:b0:62:29:77:65:88:69:b9:a4:e9:15:f5:75:83:
                    92:22:1c:69:ce:35:e7:cb:f7:65:43:72:b1:98:7f:
                    b7:93:d6:2b:3f:50:12:1c:6b:a8:b7:71:45:23:16:
                    7d:e5:0c:b9:d8:40:2f:c7:ec:8b:37:9c:1a:4b:b0:
                    af:1f:fc:75:f0:64:18:96:67:a5:db:b1:9b:9c:07:
                    9c:71:61:d9:0d:60:1d:21:92:bb:05:a2:a2:3c:51:
                    91:ad:b0:f4:3e:1c:a7:8f:0e:c1:93:f7:69:7e:f9:
                    20:be:d9:3a:e4:a9:66:b8:31:ba:97:cf:4c:f9:03:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:79:1B:FC:F5:B9:51:AE:33:0F:9E:68:E5:31:AC:12:D9:E2:38:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2ef6ff0-ffdc-3e01-a69c-c21c16aa9409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a4:cc:75:31:88:d0:e3:87:7d:ad:c9:34:10:e9:94:b2:f8:
         01:c1:3a:f8:0a:cb:22:50:23:3d:79:fb:3b:17:0c:05:46:8d:
         bf:54:d4:76:aa:4d:1b:50:7f:91:5a:54:db:7f:1f:4e:4b:20:
         37:2a:6f:8c:90:d8:42:b8:82:56:30:39:26:dc:a3:b5:63:9d:
         40:bc:de:5a:c7:9b:e7:57:c0:35:57:e6:10:bc:5f:35:75:b2:
         45:c9:63:ba:d6:fb:c5:75:9d:51:3e:4e:03:f7:85:12:0b:18:
         b0:04:5d:b8:71:f1:9b:fb:fa:99:47:13:5a:75:f1:19:68:17:
         bd:89:23:b8:85:65:1e:82:82:fb:a9:cc:d3:7f:3f:1c:8b:48:
         8c:54:ee:8b:32:fa:67:de:3d:e6:51:5b:2e:b9:ae:ea:d0:d2:
         1e:4f:72:68:d7:f7:23:95:4b:5f:99:87:9e:6c:94:36:76:b0:
         a7:08:db:82:a9:7c:9b:91:f7:56:69:25:42:21:f7:eb:5c:6f:
         f8:65:26:40:63:96:b2:b5:6c:cc:bc:8d:61:ea:6d:0d:42:4b:
         98:c1:11:0c:90:1a:d3:e5:6a:34:05:64:08:5b:ac:c1:2e:1f:
         6e:c8:40:45:89:ea:e0:a3:41:37:65:57:07:4c:38:03:d2:06:
         eb:cb:95:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgKad2CWbiW2kwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
M2Y2NTczYjgtNzFjYy00ODYwLWExOTgtN2MxYzI1ZTc2YTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1j07RniJ7GMkZDY+X7O7CcnLeoBEu7vSNBh
bxeYNFxLgeqQqca6BYaUZr245N4pzFDbGdUKbexK8mlwcn2jTx46BqTAFZtzFf7f
j/EqxoUTVesYsbzGAVHAnHyEmWlrN0dreWszGcUs8GXAG2hX/H+HfF6M54too+nv
HXARwDt+gYtwGQ51sGIpd2WIabmk6RX1dYOSIhxpzjXny/dlQ3KxmH+3k9YrP1AS
HGuot3FFIxZ95Qy52EAvx+yLN5waS7CvH/x18GQYlmel27GbnAeccWHZDWAdIZK7
BaKiPFGRrbD0Phynjw7Bk/dpfvkgvtk65KlmuDG6l89M+QN2LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIt5G/z1uVGuMw+eaOUxrBLZ4jjtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjJlZjZmZjAtZmZkYy0z
ZTAxLWE2OWMtYzIxYzE2YWE5NDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD/JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqkzHUxiNDjh32tyTQQ6ZSy+AHBOvgKyyJQIz15+zsXDAVGjb9U1Haq
TRtQf5FaVNt/H05LIDcqb4yQ2EK4glYwOSbco7VjnUC83lrHm+dXwDVX5hC8XzV1
skXJY7rW+8V1nVE+TgP3hRILGLAEXbhx8Zv7+plHE1p18RloF72JI7iFZR6Cgvup
zNN/PxyLSIxU7osy+mfePeZRWy65rurQ0h5PcmjX9yOVS1+Zh55slDZ2sKcI24Kp
fJuR91ZpJUIh9+tcb/hlJkBjlrK1bMy8jWHqbQ1CS5jBEQyQGtPlajQFZAhbrMEu
H27IQEWJ6uCjQTdlVwdMOAPSBuvLlVA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:48:43 2025 by rpki-client