Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/bfad3b88-3220-3c11-abe6-986866e4db67.roa
File:                     bfad3b88-3220-3c11-abe6-986866e4db67.roa (raw, json)
Hash identifier:          p1uC21FJZ7BS7LbchntxIItub2rbl2EDtdxlO7OH3fo=
Subject key identifier:   68:03:BC:0B:1E:C5:36:14:32:85:E8:96:65:06:8B:CA:89:ED:68:D0
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F4328584AC01654E86266CD867677BF40
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/bfad3b88-3220-3c11-abe6-986866e4db67.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     14434
IP address blocks:        162.247.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:54:e8:62:66:cd:86:76:77:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=7a92d46a-7a5a-484e-8d85-301b35f975d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:d7:ae:37:fe:f5:b2:8b:bd:cf:c1:17:0b:
                    bf:59:0b:3e:b8:f0:dd:33:04:51:f7:a2:f0:f5:40:
                    bd:bd:df:6b:36:6e:2a:52:1f:97:dd:b9:d5:49:0c:
                    b3:32:f2:34:65:81:48:dc:11:33:73:c2:42:3b:f0:
                    72:9f:66:12:82:a8:92:13:93:d7:95:9c:9e:c8:1d:
                    69:ea:c1:30:9f:6d:d6:6c:34:09:cf:6a:42:73:bc:
                    e0:e9:50:87:e9:d9:d6:be:e0:c4:ec:13:22:96:63:
                    2b:b9:6d:cc:7d:90:69:17:cd:98:82:9b:66:c3:72:
                    40:d9:87:b3:d4:8d:86:38:0e:ff:a5:76:15:4b:04:
                    df:12:05:34:b0:08:dd:55:1b:f3:87:f0:14:06:f3:
                    e7:e7:68:28:1a:a8:db:3c:47:d5:5f:65:87:b4:ad:
                    f7:6b:27:90:f3:84:12:a9:9a:7f:ea:c4:d3:71:d7:
                    5e:c1:ac:2a:de:6d:bc:5b:a2:79:17:bd:61:64:82:
                    61:e1:87:42:9c:cb:c5:4a:13:07:67:df:3b:64:4d:
                    52:47:cf:27:87:81:a1:7c:d0:f1:8f:7e:ff:0e:e8:
                    86:74:f2:81:ab:bc:60:11:d4:a5:77:2a:71:09:ef:
                    9a:ee:32:bc:7d:8b:bb:b9:71:4e:82:9c:81:b7:15:
                    07:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:03:BC:0B:1E:C5:36:14:32:85:E8:96:65:06:8B:CA:89:ED:68:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/bfad3b88-3220-3c11-abe6-986866e4db67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f4:07:21:1c:d4:cc:24:90:02:3d:26:ad:27:fe:91:74:d4:
         b1:7a:7e:35:71:ab:6d:0e:13:31:e9:58:4e:19:f9:2e:71:18:
         2a:a1:7c:1b:8a:dd:0a:d5:f9:60:a1:6c:55:a4:42:f3:c9:d6:
         ee:04:55:52:21:a3:53:97:07:ef:04:78:e4:19:fc:49:22:30:
         f8:55:93:6a:04:1d:ce:06:df:46:51:cb:38:55:cd:b5:19:dd:
         6d:8d:b5:79:bd:e0:dd:06:95:08:e1:75:6b:c6:4e:0d:20:fa:
         bb:3c:8e:16:dc:31:a7:cb:83:2a:49:1e:29:49:42:0e:34:4d:
         4f:eb:4e:31:7d:69:29:20:6f:e1:6c:0c:9a:22:22:6c:1b:61:
         37:c3:67:6a:15:c2:c1:03:a1:8e:ae:7d:f8:0e:5d:c0:b1:1b:
         51:e0:3f:fe:a2:ef:bf:26:aa:27:a0:52:fa:51:f1:f0:62:25:
         81:92:9f:bf:17:75:ec:f6:87:12:3b:19:66:66:f4:bb:00:df:
         1c:94:a2:7e:65:e1:df:e6:ed:57:ac:96:e1:d1:50:4c:49:fb:
         38:77:01:59:ad:ae:64:4d:f8:e7:2b:e4:2a:7d:11:b6:2a:dd:
         5c:7e:71:24:78:6b:b5:25:f1:52:ac:59:9f:bf:e7:03:8a:d3:
         2a:05:82:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFlToYmbNhnZ3v0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM4ZGFjZjMtMjgzZi00ODg4LTgyMTctZWUzMGM2ZTU4
YzQ0MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
N2E5MmQ0NmEtN2E1YS00ODRlLThkODUtMzAxYjM1Zjk3NWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlbXrjf+9bKLvc/BFwu/WQs+uPDdMwRR96Lw
9UC9vd9rNm4qUh+X3bnVSQyzMvI0ZYFI3BEzc8JCO/Byn2YSgqiSE5PXlZyeyB1p
6sEwn23WbDQJz2pCc7zg6VCH6dnWvuDE7BMilmMruW3MfZBpF82Ygptmw3JA2Yez
1I2GOA7/pXYVSwTfEgU0sAjdVRvzh/AUBvPn52goGqjbPEfVX2WHtK33ayeQ84QS
qZp/6sTTcddewawq3m28W6J5F71hZIJh4YdCnMvFShMHZ987ZE1SR88nh4GhfNDx
j37/DuiGdPKBq7xgEdSldypxCe+a7jK8fYu7uXFOgpyBtxUHfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgDvAsexTYUMoXolmUGi8qJ7WjQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhk
YWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZlNThjNDQvYmZhZDNiODgtMzIyMC0z
YzExLWFiZTYtOTg2ODY2ZTRkYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGM4ZGFjZjMtMjgzZi00ODg4LTgy
MTctZWUzMGM2ZTU4YzQ0L2RjOGRhY2YzLTI4M2YtNDg4OC04MjE3LWVlMzBjNmU1
OGM0NC5jcmwwHwYDVR0jBBgwFoAUvHiIigzEJtx03FOhX/A7+ErXURMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMw
YzZlNThjNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovcYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADf0ByEc1MwkkAI9Jq0n/pF01LF6fjVxq20OEzHpWE4Z+S5xGCqhfBuK
3QrV+WChbFWkQvPJ1u4EVVIho1OXB+8EeOQZ/EkiMPhVk2oEHc4G30ZRyzhVzbUZ
3W2NtXm94N0GlQjhdWvGTg0g+rs8jhbcMafLgypJHilJQg40TU/rTjF9aSkgb+Fs
DJoiImwbYTfDZ2oVwsEDoY6uffgOXcCxG1HgP/6i778mqiegUvpR8fBiJYGSn78X
dez2hxI7GWZm9LsA3xyUon5l4d/m7VesluHRUExJ+zh3AVmtrmRN+Ocr5Cp9EbYq
3Vx+cSR4a7Ul8VKsWZ+/5wOK0yoFgpQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:41:41 2025 by rpki-client