Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa
File:                     1f9591b0-4083-39f8-8942-3519df96e89a.roa (raw, json)
Hash identifier:          PZoCYoQggtUJXWGOKJIgiWhadCX+MFmuc/gDn1s0JJs=
Subject key identifier:   BB:DC:FC:A6:7D:77:0D:5D:AB:6C:84:D1:32:9C:44:F5:4B:35:63:29
Certificate issuer:       /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial:       010D0C9F4328584B434CA9AFEAA9B1EFDB990380
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     30058
IP address blocks:        217.149.96.0/22 maxlen: 24
                          2602:fb1b:60::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:a9:af:ea:a9:b1:ef:db:99:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=217ff08d-8901-4674-8c98-b0908481c452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:50:e2:12:dc:cc:ba:0c:df:e7:82:8a:35:
                    76:69:f7:81:d2:27:d8:4e:ba:87:9b:18:22:ef:76:
                    ea:67:7a:b6:e8:4d:1c:ac:db:e6:26:8b:2d:2e:4c:
                    f8:7c:fa:6b:34:3f:e4:03:94:88:37:9c:50:52:97:
                    47:b4:ba:ad:c5:1b:e8:90:d2:df:35:38:42:72:2c:
                    d6:ad:d1:cd:d4:a0:1c:53:0b:58:44:c0:8b:5f:ac:
                    54:ab:c2:2e:1e:a4:12:c0:b2:84:1b:55:12:a3:15:
                    ae:55:0a:91:35:01:d4:57:d7:12:2e:31:fd:7f:11:
                    fb:4c:29:f1:2a:7a:bb:1a:67:fa:f1:23:94:ad:28:
                    79:ac:a2:f1:ff:d5:f8:94:8a:7e:32:47:a2:01:07:
                    6a:6a:65:33:e6:81:a0:b3:7d:04:85:38:c7:a6:01:
                    a6:65:b9:74:78:a2:18:4e:cc:bb:3b:aa:22:0d:28:
                    a2:bd:18:8a:86:d5:45:10:2d:42:dd:b6:a4:0a:7a:
                    3d:8e:fa:b9:d3:f6:e0:fa:b9:8d:a8:c4:c9:21:24:
                    34:fd:5d:f8:dd:9e:b4:70:68:51:a4:c9:89:8d:91:
                    06:c3:5a:f6:63:ef:a6:c4:34:68:11:56:04:d0:f5:
                    d3:89:be:ca:a8:98:81:f9:af:d1:be:38:f0:7f:16:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DC:FC:A6:7D:77:0D:5D:AB:6C:84:D1:32:9C:44:F5:4B:35:63:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/1f9591b0-4083-39f8-8942-3519df96e89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.149.96.0/22
                IPv6:
                  2602:fb1b:60::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e9:06:62:fa:84:d0:e2:a0:fe:83:61:00:1b:b8:b1:81:d3:
         90:ad:a6:77:10:6b:28:5b:55:c4:2e:07:1d:98:71:6e:4a:3f:
         1e:86:17:47:df:a0:50:1b:47:cb:aa:80:2d:31:a9:30:a5:c9:
         70:5f:b5:c7:08:1c:54:b1:a7:de:47:27:fe:31:c1:9c:aa:30:
         94:cd:d4:93:8e:fe:cd:ea:ec:d3:4b:da:a0:a1:b7:68:0f:54:
         d6:ae:f5:d3:e3:64:df:28:19:06:b8:74:cc:ce:1b:82:e5:9e:
         ef:8e:aa:94:5a:8c:be:00:2a:f9:ae:54:86:be:01:be:a6:22:
         ca:ac:f4:4b:68:9a:4d:c0:05:5e:40:37:97:92:39:98:eb:75:
         4e:da:c4:62:45:5e:f4:de:f5:71:b8:31:f5:be:1b:15:ab:42:
         9e:33:c5:9b:04:c4:22:ea:38:2d:75:38:66:bc:15:2f:65:d3:
         2e:26:61:bc:45:64:89:a8:27:ba:cb:d4:78:2d:ac:af:18:35:
         04:63:4d:f7:fd:5a:ca:af:fa:79:5d:48:8a:62:ac:d4:ec:b5:
         1d:6c:4f:fd:43:a3:aa:7f:9b:c3:4f:90:c6:b5:55:95:a3:7e:
         8b:27:48:d3:90:ba:be:ed:3b:f0:32:27:e9:2b:7c:91:e5:83:
         36:f9:7f:78
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtDTKmv6qmx79uZA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh
ZjYzMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
MjE3ZmYwOGQtODkwMS00Njc0LThjOTgtYjA5MDg0ODFjNDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWdQ4hLczLoM3+eCijV2afeB0ifYTrqHmxgi
73bqZ3q26E0crNvmJostLkz4fPprND/kA5SIN5xQUpdHtLqtxRvokNLfNThCcizW
rdHN1KAcUwtYRMCLX6xUq8IuHqQSwLKEG1USoxWuVQqRNQHUV9cSLjH9fxH7TCnx
Knq7Gmf68SOUrSh5rKLx/9X4lIp+MkeiAQdqamUz5oGgs30EhTjHpgGmZbl0eKIY
Tsy7O6oiDSiivRiKhtVFEC1C3bakCno9jvq50/bg+rmNqMTJISQ0/V343Z60cGhR
pMmJjZEGw1r2Y++mxDRoEVYE0PXTib7KqJiB+a/RvjjwfxZHbQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFLvc/KZ9dw1dq2yE0TKcRPVLNWMpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi
ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvMWY5NTkxYjAtNDA4My0z
OWY4LTg5NDItMzUxOWRmOTZlODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm
YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx
YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj
MjI0MWFmNjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC2ZVgMA8E
AgACMAkDBwImAvsbAGAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfekGYvqE0OKg/oNhABu4sYHTkK2mdxBr
KFtVxC4HHZhxbko/HoYXR9+gUBtHy6qALTGpMKXJcF+1xwgcVLGn3kcn/jHBnKow
lM3Uk47+zers00vaoKG3aA9U1q710+Nk3ygZBrh0zM4bguWe746qlFqMvgAq+a5U
hr4BvqYiyqz0S2iaTcAFXkA3l5I5mOt1TtrEYkVe9N71cbgx9b4bFatCnjPFmwTE
Iuo4LXU4ZrwVL2XTLiZhvEVkiagnusvUeC2srxg1BGNN9/1ayq/6eV1IimKs1Oy1
HWxP/UOjqn+bw0+QxrVVlaN+iydI05C6vu078DIn6St8keWDNvl/eA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:52 2025 by rpki-client