Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa
File:                     f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa (raw, json)
Hash identifier:          PC59k+sWCrYbFj2Nx68tShUAdoNMsscWMemdAr3imGU=
Subject key identifier:   31:C8:47:C7:2B:E8:2E:5B:F5:2F:9E:82:96:9A:08:7E:2D:F4:8A:F6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCD9834E3CF62CB140C720
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        72.173.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:d9:83:4e:3c:f6:2c:b1:40:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6654ba68-6b81-49b6-8490-04ea9d612613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6e:ca:ea:ed:18:e0:d4:00:33:08:d1:ca:32:
                    0c:90:bd:cd:16:b8:c2:63:85:10:0d:32:f4:ea:0b:
                    49:ac:77:c1:8e:4a:71:b7:5c:c7:d4:da:32:34:2e:
                    53:8c:f7:8f:a4:ab:2b:90:c2:0e:7d:14:ee:1d:aa:
                    6d:52:a9:23:76:89:09:ee:c7:a2:83:fa:9d:b3:dd:
                    8c:29:82:e6:3f:c1:3f:23:44:21:f0:75:a3:bb:b7:
                    c3:7f:17:b3:7d:70:7c:dc:6c:85:ee:8e:fa:ff:66:
                    78:a3:2e:d8:7c:ea:69:35:c4:55:d8:2e:9a:cc:3e:
                    39:9a:5a:1c:d1:6a:e2:f1:88:82:3a:4c:af:e3:79:
                    e6:dd:54:df:7c:eb:05:8e:11:ed:2f:bd:76:7d:93:
                    a8:3c:75:87:da:36:2a:cb:ec:6d:28:64:f4:92:df:
                    a2:77:6e:50:95:bb:df:89:bd:48:fe:3a:65:4e:95:
                    7a:f9:b7:83:ef:e2:41:11:df:66:7d:11:87:fb:4e:
                    de:ce:ec:5b:e8:ef:36:16:73:7b:80:71:a8:14:ce:
                    aa:87:29:46:00:97:6b:e8:59:7a:68:7a:66:9f:a7:
                    3e:ff:ae:e8:0c:1b:3b:71:4a:a2:9b:83:f7:8a:83:
                    98:b1:fb:ba:2d:a5:84:23:f9:b7:24:b5:88:8b:c4:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C8:47:C7:2B:E8:2E:5B:F5:2F:9E:82:96:9A:08:7E:2D:F4:8A:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.173.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:62:3d:41:4a:f5:2b:7a:af:52:cf:f6:db:40:bb:ed:6d:f0:
         ba:fe:13:ae:6b:2f:92:be:b9:1f:2a:82:90:b6:85:df:1c:6d:
         93:02:b2:bb:cc:d0:3d:80:91:a3:13:c0:68:44:a6:7b:ec:e2:
         bd:e4:c0:dc:a5:98:23:93:a6:c2:5c:b0:35:7b:06:5e:88:8a:
         3e:12:9c:a7:92:b1:d0:ad:e5:1f:61:db:02:35:74:ac:47:6c:
         12:af:2d:d7:de:54:e7:58:5a:00:d3:29:21:92:6f:cd:0e:56:
         6c:3e:38:98:8d:ac:2f:c3:52:a5:f1:7f:3d:65:9a:4e:c4:d3:
         b6:0d:c2:4a:e3:7a:de:6d:9b:bb:b2:b7:06:87:7e:02:13:76:
         96:e0:84:40:17:83:e7:fa:5a:76:b0:80:0a:a9:a2:30:e8:94:
         da:a6:9f:83:2f:95:74:92:36:19:93:f6:2b:52:98:ae:4d:d9:
         e8:e9:e1:1b:fd:3b:f4:80:41:47:0d:aa:5a:be:eb:69:72:25:
         36:e3:49:d9:bf:0d:c3:be:5f:a0:33:2d:25:21:39:bc:d0:7d:
         09:5b:67:6f:ce:95:cc:3e:b5:64:a6:9b:5b:8f:2f:45:96:93:
         77:70:4c:c7:d9:b4:2d:69:f8:57:5a:92:c6:4a:2d:ef:3f:c0:
         a6:81:05:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNmDTjz2LLFAxyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NjY1NGJhNjgtNmI4MS00OWI2LTg0OTAtMDRlYTlkNjEyNjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm7K6u0Y4NQAMwjRyjIMkL3NFrjCY4UQDTL0
6gtJrHfBjkpxt1zH1NoyNC5TjPePpKsrkMIOfRTuHaptUqkjdokJ7seig/qds92M
KYLmP8E/I0Qh8HWju7fDfxezfXB83GyF7o76/2Z4oy7YfOppNcRV2C6azD45mloc
0Wri8YiCOkyv43nm3VTffOsFjhHtL712fZOoPHWH2jYqy+xtKGT0kt+id25Qlbvf
ib1I/jplTpV6+beD7+JBEd9mfRGH+07ezuxb6O82FnN7gHGoFM6qhylGAJdr6Fl6
aHpmn6c+/67oDBs7cUqim4P3ioOYsfu6LaWEI/m3JLWIi8RWKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHIR8cr6C5b9S+egpaaCH4t9Ir2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjZlZDQ0MzctMmMwNy0z
ZjVkLWIwN2QtNWVjZjI4ZmRjNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENiPUFK9St6r1LP9ttAu+1t8Lr+E65rL5K+uR8qgpC2hd8cbZMCsrvM
0D2AkaMTwGhEpnvs4r3kwNylmCOTpsJcsDV7Bl6Iij4SnKeSsdCt5R9h2wI1dKxH
bBKvLdfeVOdYWgDTKSGSb80OVmw+OJiNrC/DUqXxfz1lmk7E07YNwkrjet5tm7uy
twaHfgITdpbghEAXg+f6WnawgAqpojDolNqmn4MvlXSSNhmT9itSmK5N2ejp4Rv9
O/SAQUcNqlq+62lyJTbjSdm/DcO+X6AzLSUhObzQfQlbZ2/Olcw+tWSmm1uPL0WW
k3dwTMfZtC1p+FdaksZKLe8/wKaBBR8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:05 2025 by rpki-client