Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1858fb-e0e8-3f63-9581-3cf3764d00a7.roa
File:                     bd1858fb-e0e8-3f63-9581-3cf3764d00a7.roa (raw, json)
Hash identifier:          DKDaPyQwUFsFxfY4nqQfg+gKv+ZCmg9WNrWaQhl/Bzo=
Subject key identifier:   7C:F6:71:3E:BD:C5:8D:7E:D5:C6:BC:88:30:F8:DF:04:81:39:B3:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE03136FFB3EF4950ABF75580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1858fb-e0e8-3f63-9581-3cf3764d00a7.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        24.99.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:36:ff:b3:ef:49:50:ab:f7:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=71f0834a-a05a-4e25-afc2-121bc25b69d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:53:9a:73:96:5e:a5:af:d6:35:b1:c9:de:
                    b0:f2:26:ca:01:29:d5:e1:39:5a:29:52:cd:03:c3:
                    7b:29:96:43:ff:90:9c:08:73:67:84:e9:e2:96:ca:
                    82:42:9c:ab:7e:16:42:90:dd:7f:8b:98:f8:e0:07:
                    9f:c8:c4:ae:2a:40:fc:84:59:6c:3b:52:43:42:36:
                    87:21:79:85:fa:79:af:5c:d7:0b:fd:98:31:a7:8b:
                    b5:ab:52:65:e1:59:64:00:6f:e6:05:e1:50:dd:d1:
                    3c:10:7f:92:ea:a9:bb:0c:4c:a9:84:c1:6e:48:bb:
                    a3:9b:c2:cd:33:a8:30:a2:e1:9c:f4:db:12:8a:32:
                    ab:39:b8:77:79:93:1c:7a:80:ac:4a:4b:0c:e5:9d:
                    f1:1e:39:05:09:05:fd:27:ce:8d:cf:7f:14:4f:3d:
                    f0:f5:a2:ba:a1:cb:b6:42:41:fe:7f:9d:3e:58:57:
                    fb:be:55:a6:b4:22:d1:41:07:3c:21:a4:99:50:0b:
                    85:df:b0:a0:16:4c:b0:fd:6e:20:9d:a0:4f:8a:39:
                    2a:cd:af:d3:9b:2d:c2:ad:2a:99:52:4b:e5:df:35:
                    ee:c8:fe:da:40:dc:ef:da:81:79:85:a2:37:55:8c:
                    fb:2b:88:81:d9:af:b0:cd:70:38:37:8b:d5:03:1b:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F6:71:3E:BD:C5:8D:7E:D5:C6:BC:88:30:F8:DF:04:81:39:B3:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1858fb-e0e8-3f63-9581-3cf3764d00a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:07:7c:79:88:bd:e1:07:fc:c7:8a:3d:17:c3:16:17:f2:1e:
         2a:f1:66:5d:d1:25:49:46:cf:c4:e5:86:43:19:44:c2:85:96:
         9c:b4:00:ff:7c:8e:58:d2:0a:aa:44:de:aa:a2:9f:4a:27:4f:
         01:07:63:95:14:eb:a3:09:82:49:1c:56:59:f8:34:40:b7:30:
         28:d8:3c:4b:b1:04:d7:ad:16:7b:03:62:6e:4f:24:aa:63:af:
         03:41:06:34:ba:db:a3:4d:c2:74:87:74:3b:f6:d1:e0:29:59:
         e5:2a:34:c0:b4:a4:02:a7:a7:73:67:ca:b1:3e:10:cd:0c:4b:
         68:33:09:d4:0c:e2:04:30:db:b5:09:1e:c0:a6:8e:76:53:f4:
         d4:6c:62:ec:9a:f0:ad:cf:4a:f1:4b:70:df:04:6a:07:2b:3e:
         79:ad:a5:8f:f1:31:77:fa:9d:b9:1c:f8:d5:d6:33:57:d8:ac:
         36:26:e8:6b:d2:8f:6e:f1:08:7a:06:5f:f0:93:a0:c8:6f:ae:
         35:34:57:e0:b5:0f:8c:d5:9b:3f:0a:af:4a:a8:bb:35:47:1a:
         19:af:c4:a8:e2:ce:84:e6:68:83:a7:ed:98:72:90:3c:b7:75:
         12:ee:ed:25:28:76:f9:58:d7:f2:55:9d:e6:46:17:6a:f8:4c:
         44:b4:7d:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMTb/s+9JUKv3VYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
NzFmMDgzNGEtYTA1YS00ZTI1LWFmYzItMTIxYmMyNWI2OWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq9TmnOWXqWv1jWxyd6w8ibKASnV4TlaKVLN
A8N7KZZD/5CcCHNnhOnilsqCQpyrfhZCkN1/i5j44AefyMSuKkD8hFlsO1JDQjaH
IXmF+nmvXNcL/Zgxp4u1q1Jl4VlkAG/mBeFQ3dE8EH+S6qm7DEyphMFuSLujm8LN
M6gwouGc9NsSijKrObh3eZMceoCsSksM5Z3xHjkFCQX9J86Nz38UTz3w9aK6ocu2
QkH+f50+WFf7vlWmtCLRQQc8IaSZUAuF37CgFkyw/W4gnaBPijkqza/Tmy3CrSqZ
Ukvl3zXuyP7aQNzv2oF5haI3VYz7K4iB2a+wzXA4N4vVAxudMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHz2cT69xY1+1ca8iDD43wSBObMxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQxODU4ZmItZTBlOC0z
ZjYzLTk1ODEtM2NmMzc2NGQwMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGP0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMEHfHmIveEH/MeKPRfDFhfyHirxZl3RJUlGz8TlhkMZRMKFlpy0AP98
jljSCqpE3qqin0onTwEHY5UU66MJgkkcVln4NEC3MCjYPEuxBNetFnsDYm5PJKpj
rwNBBjS626NNwnSHdDv20eApWeUqNMC0pAKnp3NnyrE+EM0MS2gzCdQM4gQw27UJ
HsCmjnZT9NRsYuya8K3PSvFLcN8EagcrPnmtpY/xMXf6nbkc+NXWM1fYrDYm6GvS
j27xCHoGX/CToMhvrjU0V+C1D4zVmz8Kr0qouzVHGhmvxKjizoTmaIOn7ZhykDy3
dRLu7SUodvlY1/JVneZGF2r4TES0fc8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:55:55 2025 by rpki-client