Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa
File:                     2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa (raw, json)
Hash identifier:          Fof7uztFR1YUTY13uyhFlUXuNINoo235hjBtwPbjhl0=
Subject key identifier:   AC:A8:97:8C:6D:DE:CC:13:25:B9:5B:4E:C0:78:F8:BE:EF:5B:B2:5E
Certificate issuer:       /CN=261c40d7-8712-472b-8c28-a09b3f549365
Certificate serial:       010D0C9F4328584AE461270B06DE25CC14545D40
Authority key identifier: FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     32564
IP address blocks:        142.216.174.0/24 maxlen: 24
                          205.210.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:27:0b:06:de:25:cc:14:54:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261c40d7-8712-472b-8c28-a09b3f549365
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=01f48daf-2be5-48a0-9bca-e2c0381319db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:74:60:32:7b:f5:06:3b:f7:21:db:49:33:b7:
                    ed:a5:2e:f5:ed:8f:5b:c8:e7:ec:49:cb:cf:1f:38:
                    b3:fa:ad:36:99:77:63:5c:7d:d7:fa:b0:4f:50:bf:
                    a9:30:d9:ac:d7:73:a3:da:47:bd:54:3f:e9:5a:be:
                    4f:8a:7d:e5:b9:a0:70:a4:3f:9d:25:20:fd:40:c4:
                    a8:c9:9f:e3:ba:14:18:9f:96:f9:94:91:5f:19:6a:
                    9f:b4:3d:e1:c6:39:36:d4:fa:60:ac:bb:ae:e5:2c:
                    f6:2b:7e:f8:3a:3c:8b:98:5b:6e:f9:65:75:92:26:
                    d9:b8:6e:97:20:8c:5c:93:c7:da:f0:d3:ad:68:b0:
                    8d:9e:a9:11:23:b0:21:cb:42:25:d5:43:eb:e0:08:
                    86:5b:a2:fa:af:14:2a:4a:d0:92:15:e8:ea:c3:7b:
                    3e:c4:c2:99:0b:1a:3d:e1:e8:10:bc:da:c6:e2:a9:
                    e4:8c:7e:f4:e2:f6:46:64:45:e8:fd:98:59:0b:79:
                    13:98:f1:bd:2f:6d:0d:b7:04:0f:ca:b0:9d:19:57:
                    af:e2:76:9d:cf:b5:a2:7c:3a:25:e3:ec:5f:18:a4:
                    06:68:54:1f:c3:ed:a4:b4:1c:4f:b3:89:2a:2b:2f:
                    ab:f1:1d:d8:8e:11:c7:d5:27:09:e2:7f:4f:75:88:
                    53:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A8:97:8C:6D:DE:CC:13:25:B9:5B:4E:C0:78:F8:BE:EF:5B:B2:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.216.174.0/24
                  205.210.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e8:ab:94:5e:0d:b2:6c:92:a6:f7:d5:ed:16:2a:83:53:65:
         c3:dd:ce:14:e9:fb:1c:fd:e6:d4:83:69:46:b5:4a:20:db:93:
         b1:6e:89:3f:60:93:0f:cc:29:02:b3:2f:ff:9c:18:3b:aa:d5:
         15:67:87:97:8c:7b:cf:6a:85:19:4a:ff:77:6a:a4:78:d5:a7:
         19:94:5c:3a:73:4a:e2:f5:0f:5a:53:c8:52:cd:74:16:70:f8:
         d3:ea:e6:69:3c:23:48:4c:f3:f9:49:73:05:6e:d3:5c:7e:49:
         35:cd:ca:61:6e:75:29:76:9d:6d:e1:7c:9e:92:da:38:4d:63:
         41:75:9b:d1:92:45:20:24:60:45:e4:26:97:9c:bc:5c:20:c0:
         00:39:b9:ff:8b:91:38:1e:f8:35:3d:e6:8b:aa:03:9b:59:48:
         fc:a2:6f:32:63:00:42:6a:c8:4e:dc:a7:6d:02:52:8c:09:ee:
         90:ef:f3:6a:e0:4a:e7:16:b2:27:aa:75:d6:5c:24:d6:b3:a1:
         7d:43:c1:7a:65:0f:e4:04:44:7a:bf:a5:95:01:71:54:b3:8b:
         4e:00:4d:dc:56:cf:ca:98:74:3a:42:6d:62:80:24:e8:7a:4d:
         f7:93:80:e4:1f:2b:6c:52:5c:d6:de:88:e0:6f:a6:8a:c7:8e:
         8b:00:73:b6
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErkYScLBt4lzBRUXUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjYxYzQwZDctODcxMi00NzJiLThjMjgtYTA5YjNmNTQ5
MzY1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
MDFmNDhkYWYtMmJlNS00OGEwLTliY2EtZTJjMDM4MTMxOWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnRgMnv1Bjv3IdtJM7ftpS717Y9byOfsScvP
Hziz+q02mXdjXH3X+rBPUL+pMNms13Oj2ke9VD/pWr5Pin3luaBwpD+dJSD9QMSo
yZ/juhQYn5b5lJFfGWqftD3hxjk21PpgrLuu5Sz2K374OjyLmFtu+WV1kibZuG6X
IIxck8fa8NOtaLCNnqkRI7Ahy0Il1UPr4AiGW6L6rxQqStCSFejqw3s+xMKZCxo9
4egQvNrG4qnkjH704vZGZEXo/ZhZC3kTmPG9L20NtwQPyrCdGVev4nadz7WifDol
4+xfGKQGaFQfw+2ktBxPs4kqKy+r8R3YjhHH1ScJ4n9PdYhTxQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKyol4xt3swTJblbTsB4+L7vW7JeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yNjFj
NDBkNy04NzEyLTQ3MmItOGMyOC1hMDliM2Y1NDkzNjUvMmU3MjFlNTEtMjQ5Yy0z
NmY0LWE4Y2MtNGVjNGE0NWUxNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjYxYzQwZDctODcxMi00NzJiLThj
MjgtYTA5YjNmNTQ5MzY1LzI2MWM0MGQ3LTg3MTItNDcyYi04YzI4LWEwOWIzZjU0
OTM2NS5jcmwwHwYDVR0jBBgwFoAU+vjLJrCwWo/bv0LaajAA250b7igwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yNjFjNDBkNy04NzEyLTQ3MmItOGMyOC1hMDli
M2Y1NDkzNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjtiuAwQB
zdKEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACvoq5ReDbJskqb31e0WKoNTZcPdzhTp+xz95tSDaUa1SiDb
k7FuiT9gkw/MKQKzL/+cGDuq1RVnh5eMe89qhRlK/3dqpHjVpxmUXDpzSuL1D1pT
yFLNdBZw+NPq5mk8I0hM8/lJcwVu01x+STXNymFudSl2nW3hfJ6S2jhNY0F1m9GS
RSAkYEXkJpecvFwgwAA5uf+LkTge+DU95ouqA5tZSPyibzJjAEJqyE7cp20CUowJ
7pDv82rgSucWsieqddZcJNazoX1DwXplD+QERHq/pZUBcVSzi04ATdxWz8qYdDpC
bWKAJOh6TfeTgOQfK2xSXNbeiOBvporHjosAc7Y=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:52:24 2025 by rpki-client